last executing test programs: 4.300947135s ago: executing program 0 (id=2145): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='jbd2_handle_stats\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r2, &(0x7f0000000980), 0x45000) 4.299932337s ago: executing program 4 (id=2146): socketpair(0x0, 0x1, 0x0, &(0x7f00000001c0)) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) timerfd_create(0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5450, 0x0) r0 = mq_open(&(0x7f0000000000)='#:\x00', 0x40, 0x29, &(0x7f0000000080)={0x0, 0x6, 0x1, 0x1000}) timerfd_create(0x0, 0x0) pipe2(0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r1 = inotify_init1(0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0x5450, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0x5450, 0x0) 3.950965542s ago: executing program 0 (id=2149): r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) mlockall(0x1) getpgid(0x0) 3.880044422s ago: executing program 4 (id=2150): mount$fuse(0x20100000, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd']) 3.681683539s ago: executing program 4 (id=2152): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1514, &(0x7f00000002c0)="$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") 3.15879522s ago: executing program 4 (id=2154): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/unix\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f00000004c0)=ANY=[], 0xfffffcdd) sendfile(r2, r1, 0x0, 0xfee) 2.955996991s ago: executing program 1 (id=2156): msgctl$IPC_RMID(0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x0, 0x0, 0x0) 2.704388364s ago: executing program 1 (id=2157): pipe2$9p(0x0, 0x0) shmget(0x2, 0x3000, 0x8fb4d065518ff21, &(0x7f0000ffd000/0x3000)=nil) 2.616479724s ago: executing program 1 (id=2158): r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mlockall(0x1) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) 2.3551674s ago: executing program 0 (id=2159): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) memfd_create(&(0x7f0000000300)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00]\xd8\xebD\x82S\x17?\xd6As\xc2\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xcb\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xce\x83\xab\x05\x19-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6\xff\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94', 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$FUSE_ATTR(r2, &(0x7f0000000240)={0x78, 0xfffffffffffffffe}, 0x78) write$cgroup_devices(r2, &(0x7f0000000380)=ANY=[], 0x8) close(r2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000015c0)={0xa, 0x0, 0x0, @empty}, 0x1c) write$P9_ROPEN(r3, 0x0, 0x0) rt_sigreturn() poll(0x0, 0x0, 0x64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'ipvlan0\x00', 0x2}) preadv2(r4, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x0, 0x0) 2.353655692s ago: executing program 2 (id=2160): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) poll(0x0, 0x0, 0x401) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x3) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x2) 2.023997911s ago: executing program 2 (id=2161): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) preadv(r1, &(0x7f00000024c0)=[{&(0x7f0000000140)=""/178, 0xb2}], 0x1, 0x2, 0x0) 1.890600497s ago: executing program 2 (id=2162): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = dup(r1) write$FUSE_WRITE(r2, &(0x7f0000000100)={0xfffffeec}, 0xffffffd1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) mlockall(0x1) ioctl$PIO_FONTX(r3, 0x4b6c, 0x0) 1.695668543s ago: executing program 4 (id=2163): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = accept4$packet(r0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x2, @remote}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 1.390318141s ago: executing program 4 (id=2165): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x5522, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000004ec0)=ANY=[@ANYBLOB="1800000000000000000000000000000895"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='contention_begin\x00', r6}, 0x10) ioctl$USBDEVFS_DISCSIGNAL(r5, 0x8010550e, &(0x7f0000000540)={0x80, &(0x7f0000000440)="63038050de6f5cf77e5ff9321eb3f355fe00ee0f06ba6efe220ad521b95bbdfc23c9fa94bcf993c9a64ec92bebde4ac30a4b503abc627a2d282d274734bbc4c68046b3cc5edb8b76edfbd645668104e70852d87d2d9c82191f62946db7724f19f01b7b095b30a746d566764b581f5b84b739608b176cb049968b0a77337115cb5e534ae803e71246f423229019cd0a4c30767456f86dba221625a099049e4b3b794f467613cbf14916367d1769f7308b573ebb93d67ab2fbf196aea78464cb1578dbd1c3629eaf09736f6bc1cc12a1f26db97783"}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80045510, &(0x7f0000000000)) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1}, 0x90) socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(&(0x7f0000000380)=[{r0, 0x62a8}, {r0, 0x3401}, {r3, 0x42a2}, {r5, 0x1200}, {r3}], 0x5, 0xca) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x1b) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) 1.334506251s ago: executing program 3 (id=2166): r0 = memfd_create(&(0x7f0000000000), 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x5450, 0x0) 1.256083598s ago: executing program 0 (id=2167): epoll_create1(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002400)='fdinfo/3\x00') write$FUSE_INTERRUPT(r0, 0x0, 0x0) 1.165766844s ago: executing program 3 (id=2168): r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000340)={0x1}) fcntl$lock(r1, 0x7, &(0x7f0000000000)) rt_sigreturn() r2 = semget$private(0x0, 0x4, 0x0) semop(r2, &(0x7f00000000c0)=[{0x0, 0x5}, {}], 0x2) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mlockall(0x1) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, 0x0) 1.108711588s ago: executing program 1 (id=2169): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000001c0)={[{@utf8}, {@utf8}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@uni_xlateno}, {@shortname_win95}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@uni_xlate}, {@utf8no}, {@shortname_mixed}, {@shortname_lower}, {@shortname_lower}]}, 0x1, 0x2ad, &(0x7f0000000580)="$eJzs3c9qY1UYAPDvpmly1UWycCWKF3ThapjOE6RIBwazUrJQFyrODMgkCDNQ8A/GWQmu3Lj0CQRhdr6EG9/ABxDc2UXhyE3ubZKapL3QtP75/TY9Ped893znntuWLu6XD1+ePLpfxMOnX/4WeZ5FaxCDOMmiH62ofR0rBt8FAPBvdpJS/JHmmsRlEZHvLi0AYIca//1/tvOUAIAde+fd9946HA6P3i6KPO5Ovjkelf/Zl1/n44cP45MYx4O4Hb04jUhn5u27KaVpuyj14/XJ9HhURk4++KW6/uHvEbP4g+hFf9a1Gn9veHRQzC3FT8s8nq/WH5Txd6IXL65Z/97w6M6a+Bh14o3XlvK/Fb349eP4NMZxf5bEIv6rg6J4M33/5xfvl+mV8dn0eNSdzVtIe9d8NAAAAAAAAAAAAAAAAAAAAAAA/IfdqmrndGNWv6fsqurv7J2W3+xHUeuv1ueZx2f1hc7VB5qm+KGur3O7KIpUTVzEt+OldrRvZtcAAAAAAAAAAAAAAAAAAADwz/Lks88ffTQeP3h8JY26GkD9Wn/z6zybRQ2Wel6N7VHdxVqtqrllidir52QRW/MpN3FFt+WixnObcv7xp6YXzC+es1+ulW+aUx5hw0Xr417qibonW38Pu2eT8/oh+bnuSSmlTlxy9c6modTo8eusHeo1PsrOC7PGdMucyDYl9u0ri5/Laig7v4vOyn1eaexXjdh0gnmj5/nvvysy1ToAAAAAAAAAAAAAAAAAAGCnFi/9rhl8ujW0lbo7SwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArtXi8/8bNKZV8CUmd+LxkxveIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8DfwUAAP//o0VbPQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6b143, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)) 911.976978ms ago: executing program 0 (id=2170): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = eventfd(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$FUSE_ATTR(r3, &(0x7f0000000240)={0x78, 0xfffffffffffffffe, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) write$cgroup_devices(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="01202a3a8a"], 0x8) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) close(r3) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/address_bits', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r5, &(0x7f0000000100)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0xab, 0x0}, 0x0) close(r6) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() ioctl$FS_IOC_MEASURE_VERITY(r4, 0x5451, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 791.788073ms ago: executing program 1 (id=2171): poll(0x0, 0x0, 0x6c) rt_sigreturn() futex(&(0x7f0000004580)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() r0 = memfd_create(&(0x7f0000000500)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xcef\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad#\xd8b\x90\xeb\x05\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdem\xe3+q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\x99[\xff\x1f\x94\xc2\xdb\xbaG\xa6UD\x88Y6\x11Y\xd4\xd1\xde\x9a{]\xe2\x98W\xb9\x13\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x15\x7f\xd5WS\xfbN\xec)B\xe7R\xa5\xd7O\x83\x80}\xcc5\x99\xdb\xd6\xbd\x9c\x05l\xfc.\xf4\xbbeF\xa3\xea}\xf1\x86z\xca\xad\x82\xd9IRV5\xa77\'\x1a\x1c\x89\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c!@JRY\xa3|Pjk\xdc\xa5d\xc2\xecn\xc9X\xfc\xd4D\x13\"\xb2\x06\xbd&\xf86\xddXv\xc9\x1322L\xd6\x99\xf6\t\x9d\xbeZ\x02\xc0\xa41\xf9sNG\x02\x83\xe6Bl\xd2\x02\xfb[\x82\xc0I\xb7\xf6\xe5Z\xa1}\xee}\x8b\x89\x04\x8a\'\xc7J\xca\xdf:\x8ft\xe0\xf8\a', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x800000b) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$int_out(r1, 0x8933, &(0x7f0000000000)) 758.939405ms ago: executing program 3 (id=2172): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f00000024c0)=[{&(0x7f0000000140)=""/178, 0xb2}], 0x1, 0x2, 0x0) 527.482393ms ago: executing program 3 (id=2173): futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000480)="fbbf0b5044e308cb7bd572aa2b42e9678bcf30eff9f3aed14dc94a114bd2b45956aebe2b108a87e865501a5f9e0383611afdd3f8bac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a4f2105f44b8fd9b33041270ae01f1a405e3f650fc3b0926d481c364fca00000000000000006d3a3ede9fc738b8d86209c060161d5ddb5fcf3d09001117cdb9d055aa2d89fe3458720724853a876448d4a1fe9ef0569ad98a05ab5df763923b4e2c576e00000000000000000000000000000000002090666159e3075f7244cf4ec3d7814c0c934f44e200219e6dd7bc23397d5f2f2c76a5baddd0fd8c340362691ef226f7a0ac51b74b6be5ed6737948514cd466943d08eeb3895b80499da2b209da4f3ec5e3744ce3e863b0e04d0ec2f39edf50b6e08c4b47e448a35414763d687fbe3792ee15c5b9791310a346472723c100bf77a310b0ced8004b5ac6d48c40439f512e8ef34a53d65f55563f68136a577736ca5f6f66e01ef4ec2cdc8db34f6de50713adaa3f70189958263fddc1314f8a28ccdef6e1390c5fbaeadc3035d019f0dc75de307de6c0d010000000000000027083d1d5b4b013c503b863b560688d94de886b6dc73d5da2dfeff4bed1a49a975a6c8dbb480e4415ddca5657a5a8e3b111015499e952bb5e8d8f60de3d688df7802c6e8b27b31fac4e199038b79a3999920e634a5af162a9581b0e6647e410700246548234acacf9cb43ab332a37bbc926c39897395c974fda31536be523bf4260300730ae6136fecae5f0fa6ab2df8d98128b24589e3bbe5230e07dc5e0d65cc397e3f8204d48e59e8e294a6d7008ba8fba28cd5009fe1a7c569ce740078bf1c7389a6ba0f89257f0eac417aac0d2d89b05ee5dafa2f1d936c87264d077b2c0d5abdbc64ce943f895dd4c2e9dd7393543d89b00dc6b3a25045d4ec932366c67dfad087fa8dc104644828440bdf67dd97ebccb3bd", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000010080)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() syz_read_part_table(0x4019, &(0x7f0000000000)="$eJzszzEOAUEAheE3G1FwA5fQqInSUbbRSTQaV1E5hkTjIC7gBBqSJRNBu99XzUtm/mTG1+MySZlu1u02L5rOedEkJcnssUv65/3Pl2R+SjL6JTLsjvZWvTP4WNjta6lvPdurw+T8z3sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLMDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQwAAACAMH/rPNoPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALwUAAD//xe4ClM=") recvmmsg(r0, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000005180)=[{&(0x7f00000051c0)=""/4097, 0x1001}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8904, 0x0) ioctl$KDSETKEYCODE(r1, 0x541b, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0) 527.225016ms ago: executing program 0 (id=2174): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'macvtap0\x00', 0x2}) preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) rt_sigreturn() poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) close(0xffffffffffffffff) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r3 = dup(r1) write$P9_RMKNOD(r3, 0x0, 0x0) 512.437675ms ago: executing program 2 (id=2175): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) poll(0x0, 0x0, 0x401) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) lsetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0, 0x0, 0x2) 471.245741ms ago: executing program 1 (id=2176): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADDIR(r0, &(0x7f0000010100), 0x10029) 248.068609ms ago: executing program 2 (id=2177): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = accept$inet(r1, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, 0x0, 0x0) 240.533233ms ago: executing program 3 (id=2178): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/address_bits', 0x0, 0x0) r2 = socket(0x1, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000200)={'#! ', '', [{0x20, '#!2'}, {0x20, '#! '}, {0x20, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}, {}], 0xa, "8855d1bef46f70e481dbdabbfc3bcc3f005c1079e7344e4392717247b88b05708cd1663511237737ac00004c03fa9d00005380"}, 0xfffffe59) sendmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)='c', 0x1}], 0x1}, 0x0) close(r3) rt_sigreturn() poll(0x0, 0x0, 0x64) recvmsg$inet_nvme(r2, &(0x7f00000014c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x23, 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) close(r4) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$KDGETLED(r0, 0x5451, 0x0) 49.78557ms ago: executing program 3 (id=2179): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'ipvlan0\x00', 0x2}) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) rt_sigreturn() gettid() timer_create(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup(0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) poll(0x0, 0x0, 0x401) poll(0x0, 0x0, 0x6c) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r2 = eventfd2(0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5421, 0x0) 0s ago: executing program 2 (id=2180): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000002000000000000000085000000170000009500000000000000"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @val=@tcx}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x0, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): 807][T12486] loop1: detected capacity change from 0 to 40427 [ 651.313287][T12486] F2FS-fs (loop1): invalid crc value [ 651.313323][T12471] BTRFS info (device loop2): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 651.397205][T12486] F2FS-fs (loop1): Found nat_bits in checkpoint [ 651.509221][ T5108] Bluetooth: hci3: command tx timeout [ 651.600573][ T8514] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 651.633708][T12486] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 652.499144][ T2890] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 652.894014][ T8115] bio_check_eod: 14 callbacks suppressed [ 652.894039][ T8115] syz-executor: attempt to access beyond end of device [ 652.894039][ T8115] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 652.920137][ T8115] syz-executor: attempt to access beyond end of device [ 652.920137][ T8115] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 652.934699][ T5152] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 652.975990][ T8115] syz-executor: attempt to access beyond end of device [ 652.975990][ T8115] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 653.000104][ T8115] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 653.149832][ T5152] usb 3-1: Using ep0 maxpacket: 32 [ 653.178689][ T5152] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 653.211012][ T5152] usb 3-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 653.230725][ T5152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.282908][ T5152] usb 3-1: config 0 descriptor?? [ 653.318641][ T2890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.362812][ T2890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.368399][T12543] kAFS: No cell specified [ 653.412033][ T2890] bond0 (unregistering): Released all slaves [ 653.553356][ T5152] usb 3-1: USB disconnect, device number 23 [ 653.590315][ T5108] Bluetooth: hci3: command tx timeout [ 653.763152][ T2890] bond1 (unregistering): Released all slaves [ 653.802311][ T2890] bond2 (unregistering): Released all slaves [ 653.855504][ T2890] bond3 (unregistering): Released all slaves [ 653.875344][ T2890] bond4 (unregistering): Released all slaves [ 653.903412][ T2890] bond5 (unregistering): Released all slaves [ 654.978188][ T25] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 655.082873][T12558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.147972][T12476] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.155371][T12476] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.164418][T12476] bridge_slave_0: entered allmulticast mode [ 655.176570][T12476] bridge_slave_0: entered promiscuous mode [ 655.227625][T12476] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.235298][T12476] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.252714][ T25] usb 5-1: config 0 has an invalid interface number: 195 but max is 0 [ 655.284044][ T25] usb 5-1: config 0 has no interface number 0 [ 655.316475][T12557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.327427][T12476] bridge_slave_1: entered allmulticast mode [ 655.341175][ T25] usb 5-1: New USB device found, idVendor=041e, idProduct=400a, bcdDevice=9e.b6 [ 655.364126][T12476] bridge_slave_1: entered promiscuous mode [ 655.377731][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.393946][ T25] usb 5-1: Product: syz [ 655.405146][ T25] usb 5-1: Manufacturer: syz [ 655.410813][ T25] usb 5-1: SerialNumber: syz [ 655.418984][ T25] usb 5-1: config 0 descriptor?? [ 655.435137][ T25] gspca_main: spca500-2.14.0 probing 041e:400a [ 655.448476][ T2890] hsr_slave_0: left promiscuous mode [ 655.484360][ T2890] hsr_slave_1: left promiscuous mode [ 655.506378][ T2890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.536895][ T2890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.586024][ T2890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.668240][ T5108] Bluetooth: hci3: command tx timeout [ 655.673892][ T2890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.699831][ T25] usb 5-1: USB disconnect, device number 20 [ 655.791836][ T2890] veth1_macvtap: left promiscuous mode [ 655.825541][ T2890] veth0_macvtap: left promiscuous mode [ 655.840374][ T2890] veth1_vlan: left promiscuous mode [ 655.875223][ T2890] veth0_vlan: left promiscuous mode [ 655.954105][ T5115] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 655.969706][ T5115] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 655.983243][ T5115] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 656.021432][ T5115] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 656.059774][ T5115] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 656.071057][ T5115] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 656.455917][T12583] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 657.332202][T12595] loop2: detected capacity change from 0 to 64 [ 657.448163][T12595] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 657.695750][T12595] loop2: detected capacity change from 64 to 0 [ 657.704366][T12596] syz.2.1779: attempt to access beyond end of device [ 657.704366][T12596] loop2: rw=0, sector=7, nr_sectors = 1 limit=0 [ 657.757701][ T5108] Bluetooth: hci3: command tx timeout [ 657.812796][ T8514] syz-executor: attempt to access beyond end of device [ 657.812796][ T8514] loop2: rw=0, sector=7, nr_sectors = 1 limit=0 [ 657.832284][ T2890] team0 (unregistering): Port device team_slave_1 removed [ 657.885061][ T2831] kworker/u8:9: attempt to access beyond end of device [ 657.885061][ T2831] loop2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 657.904100][ T2831] BFS-fs: find_inode(): Unable to read inode loop2:00000001 [ 657.915432][ T2831] kworker/u8:9: attempt to access beyond end of device [ 657.915432][ T2831] loop2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 657.930381][ T2831] BFS-fs: find_inode(): Unable to read inode loop2:00000000 [ 657.940198][ T2890] team0 (unregistering): Port device team_slave_0 removed [ 658.148375][ T5108] Bluetooth: hci4: command tx timeout [ 658.189182][T12599] fuseblk: Bad value for 'user_id' [ 659.147451][T12606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 659.157994][T12607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 659.180536][T12476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.243573][T12476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.406517][T12610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 659.464596][T12610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 659.551346][T12476] team0: Port device team_slave_0 added [ 659.597927][T12476] team0: Port device team_slave_1 added [ 659.755815][T12476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.773392][T12476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.799777][T12476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.813038][T12476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.820518][T12476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.847015][T12476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.042363][T12617] loop3: detected capacity change from 0 to 512 [ 660.159427][T12617] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 660.216954][T12476] hsr_slave_0: entered promiscuous mode [ 660.227662][ T5108] Bluetooth: hci4: command tx timeout [ 660.228393][T12617] EXT4-fs (loop3): 1 truncate cleaned up [ 660.241078][T12617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 660.278037][T12476] hsr_slave_1: entered promiscuous mode [ 660.285971][T12476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 660.305397][T12476] Cannot create hsr debugfs directory [ 660.447819][T12617] loop3: detected capacity change from 512 to 0 [ 660.480542][T12632] syz.3.1788: attempt to access beyond end of device [ 660.480542][T12632] loop3: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 660.514103][T12572] chnl_net:caif_netlink_parms(): no params data found [ 660.540555][T12632] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz.3.1788: error -5 reading directory block [ 660.562050][T12632] syz.3.1788: attempt to access beyond end of device [ 660.562050][T12632] loop3: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 660.600144][T12632] syz.3.1788: attempt to access beyond end of device [ 660.600144][T12632] loop3: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 660.648556][T12632] syz.3.1788: attempt to access beyond end of device [ 660.648556][T12632] loop3: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 660.689431][T12632] syz.3.1788: attempt to access beyond end of device [ 660.689431][T12632] loop3: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 660.698917][ T5115] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 660.724865][T12632] syz.3.1788: attempt to access beyond end of device [ 660.724865][T12632] loop3: rw=12288, sector=10, nr_sectors = 2 limit=0 [ 660.739315][ T5115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 660.755742][ T5115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 660.769439][ T5115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 660.780164][ T5115] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 660.787911][T12632] EXT4-fs error (device loop3): ext4_get_inode_loc:4569: inode #2: block 5: comm syz.3.1788: unable to read itable block [ 660.788198][ T5115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 660.886056][T12632] syz.3.1788: attempt to access beyond end of device [ 660.886056][T12632] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 660.900663][T12632] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 660.935373][T12632] EXT4-fs (loop3): I/O error while writing superblock [ 660.955147][T12632] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5805: IO failure [ 660.965989][T12632] syz.3.1788: attempt to access beyond end of device [ 660.965989][T12632] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 661.007763][T12632] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 661.028197][T12632] EXT4-fs (loop3): I/O error while writing superblock [ 661.035073][T12632] EXT4-fs error (device loop3): ext4_dirty_inode:6009: inode #2: comm syz.3.1788: mark_inode_dirty error [ 661.064146][ T2890] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.068210][T12632] syz.3.1788: attempt to access beyond end of device [ 661.068210][T12632] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 661.105448][T12632] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 661.127708][T12632] EXT4-fs (loop3): I/O error while writing superblock [ 661.168319][T10819] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 661.222550][ T2841] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4554: inode #2: block 5: comm kworker/u8:10: unable to read itable block [ 661.263494][ T2841] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 661.273079][ T2841] EXT4-fs (loop3): I/O error while writing superblock [ 661.290181][T10819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.314132][T10819] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 661.330534][T10819] EXT4-fs (loop3): I/O error while writing superblock [ 661.396794][ T2890] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.418971][T12572] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.426431][T12572] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.434595][T12572] bridge_slave_0: entered allmulticast mode [ 661.442817][T12572] bridge_slave_0: entered promiscuous mode [ 661.523169][T12572] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.532612][T12572] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.541502][T12572] bridge_slave_1: entered allmulticast mode [ 661.550326][T12572] bridge_slave_1: entered promiscuous mode [ 661.640228][ T2890] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.717295][T12572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.770895][T12572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.871990][ T2890] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.131286][T12572] team0: Port device team_slave_0 added [ 662.161181][T12572] team0: Port device team_slave_1 added [ 662.310182][ T5108] Bluetooth: hci4: command tx timeout [ 662.711795][T12572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.733424][T12572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.796052][T12572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.809926][ T5115] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 662.840843][ T5115] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 662.852948][ T5115] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 662.861538][ T5115] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 662.868107][ T5107] Bluetooth: hci1: command tx timeout [ 662.877905][ T5107] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 662.886941][ T5107] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 662.908673][T12572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.924454][T12572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.955489][T12572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.554477][ T2890] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.629670][T12572] hsr_slave_0: entered promiscuous mode [ 663.646070][T12572] hsr_slave_1: entered promiscuous mode [ 663.653977][T12572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 663.671908][T12572] Cannot create hsr debugfs directory [ 663.761032][T12675] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 663.831775][ T2890] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.066743][ T2890] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.244787][T12678] overlayfs: failed to resolve './file0': -2 [ 664.316827][ T2890] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.338769][T12636] chnl_net:caif_netlink_parms(): no params data found [ 664.388065][ T5107] Bluetooth: hci4: command tx timeout [ 664.556595][T12476] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 664.627268][T12476] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 664.692284][T12476] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 664.705516][T12476] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 664.949807][ T5107] Bluetooth: hci2: command tx timeout [ 664.955995][ T5108] Bluetooth: hci1: command tx timeout [ 664.978924][T12701] fuseblk: Bad value for 'user_id' [ 665.152954][T12636] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.160635][T12636] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.171226][T12636] bridge_slave_0: entered allmulticast mode [ 665.179347][T12636] bridge_slave_0: entered promiscuous mode [ 665.258285][T12636] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.265594][T12636] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.283591][T12636] bridge_slave_1: entered allmulticast mode [ 665.292529][T12636] bridge_slave_1: entered promiscuous mode [ 665.400500][T12636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.412308][ T2890] bridge_slave_1: left allmulticast mode [ 665.420243][ T2890] bridge_slave_1: left promiscuous mode [ 665.426251][ T2890] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.449680][ T2890] bridge_slave_0: left allmulticast mode [ 665.455496][ T2890] bridge_slave_0: left promiscuous mode [ 665.477902][ T2890] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.490882][ T2890] bridge_slave_1: left allmulticast mode [ 665.500627][ T2890] bridge_slave_1: left promiscuous mode [ 665.506525][ T2890] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.517274][ T2890] bridge_slave_0: left allmulticast mode [ 665.531917][ T2890] bridge_slave_0: left promiscuous mode [ 665.540223][ T2890] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.756460][ T2890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.788097][ T2890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.816835][ T2890] bond0 (unregistering): Released all slaves [ 666.844844][ T2890] bond1 (unregistering): Released all slaves [ 666.863593][ T2890] bond2 (unregistering): Released all slaves [ 667.027742][ T5108] Bluetooth: hci1: command tx timeout [ 667.042937][ T5108] Bluetooth: hci2: command tx timeout [ 667.143645][ T2890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.159794][ T2890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.172058][ T2890] bond0 (unregistering): Released all slaves [ 667.192966][ T2890] bond1 (unregistering): Released all slaves [ 667.290245][T12636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.325819][T12659] chnl_net:caif_netlink_parms(): no params data found [ 667.748738][T12636] team0: Port device team_slave_0 added [ 667.761887][T12636] team0: Port device team_slave_1 added [ 668.016183][T12636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.025666][T12636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.056301][T12636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.073743][T12636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.094259][T12636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.147818][T12636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.188979][T12728] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 668.553860][T12659] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.574440][T12659] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.585999][T12659] bridge_slave_0: entered allmulticast mode [ 668.599487][T12659] bridge_slave_0: entered promiscuous mode [ 668.764721][T12659] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.776696][T12659] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.792319][T12659] bridge_slave_1: entered allmulticast mode [ 668.801359][T12659] bridge_slave_1: entered promiscuous mode [ 668.943339][T12476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.041799][ T5154] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 669.095409][T12636] hsr_slave_0: entered promiscuous mode [ 669.111099][T12636] hsr_slave_1: entered promiscuous mode [ 669.118999][ T5107] Bluetooth: hci1: command tx timeout [ 669.124595][ T5108] Bluetooth: hci2: command tx timeout [ 669.148292][T12636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 669.156155][T12636] Cannot create hsr debugfs directory [ 669.242201][T12476] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.254318][ T5154] usb 5-1: config 0 has an invalid interface number: 195 but max is 0 [ 669.264146][ T5154] usb 5-1: config 0 has no interface number 0 [ 669.274722][ T5154] usb 5-1: New USB device found, idVendor=041e, idProduct=400a, bcdDevice=9e.b6 [ 669.284294][ T5154] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.292530][ T5154] usb 5-1: Product: syz [ 669.296858][ T5154] usb 5-1: Manufacturer: syz [ 669.301680][ T5154] usb 5-1: SerialNumber: syz [ 669.309119][ T5154] usb 5-1: config 0 descriptor?? [ 669.326201][ T5154] gspca_main: spca500-2.14.0 probing 041e:400a [ 669.377139][T12659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.416828][ T2890] hsr_slave_0: left promiscuous mode [ 669.426541][ T2890] hsr_slave_1: left promiscuous mode [ 669.451194][ T2890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.467048][ T2890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.476318][ T2890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.484729][ T2890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.497061][ T2890] hsr_slave_0: left promiscuous mode [ 669.541755][ T2890] hsr_slave_1: left promiscuous mode [ 669.553317][ T2890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.565756][ T2890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.585680][ T2890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.587367][ T5154] usb 5-1: USB disconnect, device number 21 [ 669.604805][ T2890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.663469][ T2890] veth1_macvtap: left promiscuous mode [ 669.670599][ T2890] veth0_macvtap: left promiscuous mode [ 669.676328][ T2890] veth1_vlan: left promiscuous mode [ 669.683144][ T2890] veth0_vlan: left promiscuous mode [ 669.694485][ T2890] veth1_macvtap: left promiscuous mode [ 669.700273][ T2890] veth0_macvtap: left promiscuous mode [ 669.705981][ T2890] veth1_vlan: left promiscuous mode [ 669.712587][ T2890] veth0_vlan: left promiscuous mode [ 670.538562][ T2890] team0 (unregistering): Port device team_slave_1 removed [ 670.607270][ T2890] team0 (unregistering): Port device team_slave_0 removed [ 671.202369][ T5108] Bluetooth: hci2: command tx timeout [ 671.897079][ T2890] team0 (unregistering): Port device team_slave_1 removed [ 671.955207][ T2890] team0 (unregistering): Port device team_slave_0 removed [ 672.725047][T12659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.902365][T12572] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 672.937345][T12572] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 673.099607][T12744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.114670][T12659] team0: Port device team_slave_0 added [ 673.116696][T12744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.136120][T12744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.149301][T12744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.172399][T12572] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 673.187964][T12659] team0: Port device team_slave_1 added [ 673.218656][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.225857][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.405593][T12572] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 673.433555][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.440951][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.487401][T12659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.494755][T12659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.523362][T12659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.552113][T12659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.567969][T12659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.608797][T12659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.785670][T12755] fuseblk: Bad value for 'fd' [ 673.794233][T12659] hsr_slave_0: entered promiscuous mode [ 673.805380][T12659] hsr_slave_1: entered promiscuous mode [ 673.890154][T12757] loop4: detected capacity change from 0 to 512 [ 673.934342][T12757] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 673.978115][T12757] EXT4-fs (loop4): 1 truncate cleaned up [ 673.991873][T12757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.089815][T12757] loop4: detected capacity change from 512 to 0 [ 674.173663][T12757] bio_check_eod: 8 callbacks suppressed [ 674.173691][T12757] syz.4.1806: attempt to access beyond end of device [ 674.173691][T12757] loop4: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 674.193730][T12757] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz.4.1806: error -5 reading directory block [ 674.213083][T12757] syz.4.1806: attempt to access beyond end of device [ 674.213083][T12757] loop4: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 674.246750][T12757] syz.4.1806: attempt to access beyond end of device [ 674.246750][T12757] loop4: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 674.288081][T12757] syz.4.1806: attempt to access beyond end of device [ 674.288081][T12757] loop4: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 674.309156][T12757] syz.4.1806: attempt to access beyond end of device [ 674.309156][T12757] loop4: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 674.336083][T12757] syz.4.1806: attempt to access beyond end of device [ 674.336083][T12757] loop4: rw=12288, sector=10, nr_sectors = 2 limit=0 [ 674.354943][T12757] EXT4-fs error (device loop4): ext4_get_inode_loc:4569: inode #2: block 5: comm syz.4.1806: unable to read itable block [ 674.368302][T12757] syz.4.1806: attempt to access beyond end of device [ 674.368302][T12757] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 674.392445][T12757] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 674.412560][T12476] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 674.428797][T12757] EXT4-fs (loop4): I/O error while writing superblock [ 674.435889][T12757] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5805: IO failure [ 674.458338][T12757] syz.4.1806: attempt to access beyond end of device [ 674.458338][T12757] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 674.493638][T12757] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 674.506257][T12757] EXT4-fs (loop4): I/O error while writing superblock [ 674.547430][T12757] EXT4-fs error (device loop4): ext4_dirty_inode:6009: inode #2: comm syz.4.1806: mark_inode_dirty error [ 674.598676][T12757] syz.4.1806: attempt to access beyond end of device [ 674.598676][T12757] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 674.637704][T12757] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 674.646065][T12757] EXT4-fs (loop4): I/O error while writing superblock [ 674.846020][T11971] syz-executor: attempt to access beyond end of device [ 674.846020][T11971] loop4: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 674.877713][T11971] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 674.948183][ T2841] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4554: inode #2: block 5: comm kworker/u8:10: unable to read itable block [ 674.997932][ T2841] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 675.006389][ T2841] EXT4-fs (loop4): I/O error while writing superblock [ 675.042382][T11971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.070147][T12636] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 675.073713][T11971] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 675.107464][T11971] EXT4-fs (loop4): I/O error while writing superblock [ 675.136600][T12572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.279127][T12659] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.308577][T12636] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 675.405865][T12636] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 675.484777][T12659] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.509424][T12636] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 675.595823][T12659] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.633607][T12572] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.689072][T12476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.721271][ T5210] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.728610][ T5210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.847087][T12659] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.937417][ T4878] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.944772][ T4878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.111448][ T2890] bridge_slave_1: left allmulticast mode [ 676.117267][ T2890] bridge_slave_1: left promiscuous mode [ 676.131601][ T2890] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.155646][ T2890] bridge_slave_0: left allmulticast mode [ 676.174304][ T2890] bridge_slave_0: left promiscuous mode [ 676.188223][ T2890] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.485403][ T5107] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 676.500622][ T5107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 676.533416][ T5107] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 676.550315][ T5107] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 676.558545][ T5107] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 676.566172][ T5107] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 677.101184][ T2890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 677.115479][ T2890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 677.128842][ T2890] bond0 (unregistering): Released all slaves [ 677.175662][T12572] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 677.187432][T12572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 677.498111][T12476] veth0_vlan: entered promiscuous mode [ 677.578034][T12659] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 677.604545][T12659] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 677.620029][T12659] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 677.731773][T12659] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 677.787174][T12636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.846978][T12476] veth1_vlan: entered promiscuous mode [ 677.965487][T12572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.026870][ T2890] hsr_slave_0: left promiscuous mode [ 678.033540][ T2890] hsr_slave_1: left promiscuous mode [ 678.042307][ T2890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 678.051759][ T2890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 678.060551][ T2890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 678.068928][ T2890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 678.104837][ T2890] veth1_macvtap: left promiscuous mode [ 678.118229][ T2890] veth0_macvtap: left promiscuous mode [ 678.123996][ T2890] veth1_vlan: left promiscuous mode [ 678.132745][ T2890] veth0_vlan: left promiscuous mode [ 678.637674][ T5107] Bluetooth: hci0: command tx timeout [ 679.016573][ T2890] team0 (unregistering): Port device team_slave_1 removed [ 679.095997][ T2890] team0 (unregistering): Port device team_slave_0 removed [ 679.866820][T12636] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.944136][T12787] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.951560][T12787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.110045][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.117472][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.142959][T12476] veth0_macvtap: entered promiscuous mode [ 680.181396][T12796] chnl_net:caif_netlink_parms(): no params data found [ 680.200022][T12572] veth0_vlan: entered promiscuous mode [ 680.258743][T12476] veth1_macvtap: entered promiscuous mode [ 680.401519][T12796] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.414098][T12796] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.421984][T12796] bridge_slave_0: entered allmulticast mode [ 680.429295][T12796] bridge_slave_0: entered promiscuous mode [ 680.451300][T12572] veth1_vlan: entered promiscuous mode [ 680.462131][T12796] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.469616][T12796] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.477269][T12796] bridge_slave_1: entered allmulticast mode [ 680.485040][T12796] bridge_slave_1: entered promiscuous mode [ 680.514481][T12476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.525252][T12476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.539744][T12476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.565632][T12659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.593682][T12796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.607043][T12796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.633505][T12476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 680.645879][T12476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.657967][T12476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 680.691101][T12636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 680.712712][ T5107] Bluetooth: hci0: command tx timeout [ 680.738173][T12476] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.746939][T12476] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.759564][T12476] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.768467][T12476] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.810479][T12796] team0: Port device team_slave_0 added [ 680.820992][T12796] team0: Port device team_slave_1 added [ 680.911254][T12659] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.937415][T12572] veth0_macvtap: entered promiscuous mode [ 680.984381][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.991625][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.042595][T12572] veth1_macvtap: entered promiscuous mode [ 681.055882][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.063155][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.099030][T12796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.106235][T12796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.136076][T12796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.221157][T12796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.235438][T12796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.262021][T12796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.319917][ T2890] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.393043][T12572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.404181][T12572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.414785][T12572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.426095][T12572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.441149][T12572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.459465][T12572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.470068][T12572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.480107][T12572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.490828][T12572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.503146][T12572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.538353][ T2890] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.617018][ T2890] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.637797][T10701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.645688][T10701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.683862][T12796] hsr_slave_0: entered promiscuous mode [ 681.695273][T12796] hsr_slave_1: entered promiscuous mode [ 681.702699][T12796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 681.711477][T12796] Cannot create hsr debugfs directory [ 681.726746][T12572] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.736868][T12572] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.745763][T12572] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.755127][T12572] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.809827][ T2890] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.024214][T12636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 682.036480][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.073921][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.389388][ T2890] bridge_slave_1: left allmulticast mode [ 682.395111][ T2890] bridge_slave_1: left promiscuous mode [ 682.403773][ T2890] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.415650][ T2890] bridge_slave_0: left allmulticast mode [ 682.425228][ T2890] bridge_slave_0: left promiscuous mode [ 682.440441][ T2890] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.798008][ T5107] Bluetooth: hci0: command tx timeout [ 683.099331][T12876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.138205][T12876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.154519][T12876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.167269][T12876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.265491][ T2890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 683.283945][ T2890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.296304][ T2890] bond0 (unregistering): Released all slaves [ 683.311261][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.327115][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.513306][T12659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.521473][ T2841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.535387][ T2841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.581286][T12636] veth0_vlan: entered promiscuous mode [ 683.632557][T12636] veth1_vlan: entered promiscuous mode [ 683.855415][T12878] fuseblk: Bad value for 'fd' [ 684.124324][ T2890] hsr_slave_0: left promiscuous mode [ 684.140276][ T2890] hsr_slave_1: left promiscuous mode [ 684.181728][ T2890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 684.191616][ T2890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 684.215446][ T2890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 684.243741][ T2890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 684.357711][ T2890] veth1_macvtap: left promiscuous mode [ 684.372080][ T2890] veth0_macvtap: left promiscuous mode [ 684.386527][ T2890] veth1_vlan: left promiscuous mode [ 684.403580][ T2890] veth0_vlan: left promiscuous mode [ 684.480764][ T5107] Bluetooth: hci3: unknown advertising packet type: 0x65 [ 684.480868][ T5107] Bluetooth: hci3: unknown advertising packet type: 0x09 [ 684.488997][ T5107] Bluetooth: hci3: unknown advertising packet type: 0x05 [ 684.496194][ T5107] Bluetooth: hci3: Dropping invalid advertising data [ 684.511391][ T5107] Bluetooth: hci3: Malformed LE Event: 0x02 [ 684.879726][ T5107] Bluetooth: hci0: command tx timeout [ 685.576874][ T2890] team0 (unregistering): Port device team_slave_1 removed [ 685.654220][ T2890] team0 (unregistering): Port device team_slave_0 removed [ 686.311460][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.318067][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.622992][T12659] veth0_vlan: entered promiscuous mode [ 686.784050][T12636] veth0_macvtap: entered promiscuous mode [ 686.820324][T12636] veth1_macvtap: entered promiscuous mode [ 687.010684][T12636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.037874][T12636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.057252][T12636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.069430][T12636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.099592][T12636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.378387][T12659] veth1_vlan: entered promiscuous mode [ 687.399755][T12636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.427737][T12636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.443784][T12636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.456542][T12636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.489848][T12636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 687.566415][T12796] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 687.587335][T12636] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.640505][T12636] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.659481][T12636] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.681209][T12636] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.711112][T12796] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 687.739660][T12796] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 687.842105][T12796] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 687.938898][T12919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 688.016918][T12659] veth0_macvtap: entered promiscuous mode [ 688.032262][T12919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 688.095038][T12659] veth1_macvtap: entered promiscuous mode [ 688.102598][T12919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 688.253777][T12919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 688.328443][T12659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.348725][T12659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.360993][T12659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.372644][T12659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.384402][T12659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.395929][T12659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.416068][T12659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.434806][ T2841] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.474085][ T2841] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.607458][T12659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.625241][T12659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.636560][T12659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.656134][T12659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.674536][T12659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.686264][T12659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.711838][T12659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.786545][T12659] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.805426][T12659] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.852120][T12659] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.887860][T12659] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.949279][ T2890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.968642][T12935] fuseblk: Bad value for 'fd' [ 688.993629][ T2890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.008959][T12796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.128769][T12796] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.240533][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.247838][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.300784][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.308355][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.552946][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.576241][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.610577][ T2841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.644661][ T2841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.885074][T12958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 692.323932][T12958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 694.700541][T12966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 694.787071][T12796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.968564][T12977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 694.988835][T12978] fuseblk: Bad value for 'fd' [ 695.043207][T12977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 695.070303][T12977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 695.090800][T12977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 695.297840][ T5154] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 695.454554][T12796] veth0_vlan: entered promiscuous mode [ 695.482380][T12796] veth1_vlan: entered promiscuous mode [ 695.497930][ T5154] usb 4-1: Using ep0 maxpacket: 32 [ 695.529913][ T5154] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=82.28 [ 695.567754][ T5154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.576151][ T5154] usb 4-1: Product: syz [ 695.590497][ T5154] usb 4-1: Manufacturer: syz [ 695.595926][ T5154] usb 4-1: SerialNumber: syz [ 695.596429][T12796] veth0_macvtap: entered promiscuous mode [ 695.610370][ T5154] usb 4-1: config 0 descriptor?? [ 695.647103][T12796] veth1_macvtap: entered promiscuous mode [ 695.737454][T12796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.801032][T12796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.811475][T12796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.845134][T12796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.865672][T12796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.924147][T12796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.956317][T12796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.217579][T12796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.023159][T12971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.050414][T12796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.072206][T12971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.217748][T12796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.232351][ T8] usb 4-1: USB disconnect, device number 18 [ 697.242943][T12796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.280636][T12796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.321643][T12796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.354774][T12796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.386414][T12796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.452977][T12796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.489107][T12796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.554711][T12796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.658903][T12796] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.710048][T12796] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.752852][T12796] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.780276][T12796] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.206585][T12989] loop1: detected capacity change from 0 to 32768 [ 698.412391][ T2841] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.420905][ T2841] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.455238][T13014] loop3: detected capacity change from 0 to 2048 [ 698.464253][T12989] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 698.497645][T12989] workqueue: Failed to create a rescuer kthread for wq "xfs-cil/loop1": -EINTR [ 698.541177][T12989] XFS (loop1): log mount failed [ 698.542124][T13014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 698.617191][ T2841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.625617][ T2841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.135115][T12659] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.157059][T13032] kAFS: No cell specified [ 699.253290][T13031] pim6reg1: entered allmulticast mode [ 707.297231][ T5108] Bluetooth: unknown link type 197 [ 707.304106][ T5108] Bluetooth: hci3: connection err: -111 [ 707.404322][T13078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1851'. [ 707.564326][T13081] kAFS: No cell specified [ 707.614960][ T5108] Bluetooth: hci4: Malformed Event: 0x02 [ 709.537891][ T5108] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 709.775678][T13074] loop3: detected capacity change from 0 to 32768 [ 709.826306][T13074] XFS: noikeep mount option is deprecated. [ 709.856268][T13074] XFS: noikeep mount option is deprecated. [ 709.935932][T13074] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 710.338036][T13074] XFS (loop3): Ending clean mount [ 710.453832][T13074] XFS (loop3): Quotacheck needed: Please wait. [ 710.754044][T13074] XFS (loop3): Quotacheck: Done. [ 711.226113][T13112] loop4: detected capacity change from 0 to 32768 [ 711.244485][T13112] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1864 (13112) [ 711.693387][T12659] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 712.439790][T13121] loop1: detected capacity change from 0 to 32768 [ 712.779116][T13121] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1866 (13121) [ 712.803174][T13112] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 712.845356][T13112] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 712.854678][T13121] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 712.854693][T13112] BTRFS info (device loop4): using free-space-tree [ 712.981414][T13112] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 712.982091][T13112] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 713.064889][T13112] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 713.106650][T13121] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 713.272717][T13112] BTRFS error (device loop4): open_ctree failed [ 713.276905][T13121] BTRFS info (device loop1): using free-space-tree [ 713.476234][T13121] BTRFS info (device loop1): rebuilding free space tree [ 713.628940][T13162] kAFS: No cell specified [ 714.047769][T13173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 714.119930][T12572] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 714.169602][T13174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 714.419622][T13174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 714.442552][ T5108] Bluetooth: hci1: Malformed Event: 0x02 [ 714.585721][T13173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 715.435739][ T5108] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 715.823775][T13195] loop0: detected capacity change from 0 to 512 [ 715.833078][T13195] ext4: Unknown parameter 'context' [ 717.169071][T13185] loop4: detected capacity change from 0 to 32768 [ 717.183262][T13185] XFS: noikeep mount option is deprecated. [ 717.198831][T13185] XFS: noikeep mount option is deprecated. [ 717.271636][T13185] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 717.555021][T13185] XFS (loop4): Ending clean mount [ 717.584397][T13185] XFS (loop4): Quotacheck needed: Please wait. [ 717.690718][T13185] XFS (loop4): Quotacheck: Done. [ 717.865523][T12796] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 718.030654][T13233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 718.267224][T13233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 718.334775][T13237] loop0: detected capacity change from 0 to 512 [ 718.342991][T13237] ext4: Unknown parameter 'context' [ 719.278040][T13243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.353767][T13208] loop3: detected capacity change from 0 to 32768 [ 719.387091][T13208] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1882 (13208) [ 719.436314][T13208] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 719.448828][T13233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.469321][T13208] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 719.484715][T13208] BTRFS info (device loop3): using free-space-tree [ 719.550758][ T5108] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 719.826923][T13208] BTRFS info (device loop3): rebuilding free space tree [ 719.983608][T13267] kAFS: No cell specified [ 719.992088][T12659] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 722.266658][T13294] loop2: detected capacity change from 0 to 512 [ 722.275215][T13294] ext4: Unknown parameter 'context' [ 724.140277][T13305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.172796][T13286] loop3: detected capacity change from 0 to 32768 [ 724.202134][T13305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.218859][T13286] XFS: noikeep mount option is deprecated. [ 724.224867][T13286] XFS: noikeep mount option is deprecated. [ 724.390928][T13305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.429923][T13286] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 724.431512][T13305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.672286][T13286] XFS (loop3): Ending clean mount [ 724.683565][T13286] XFS (loop3): Quotacheck needed: Please wait. [ 724.803069][T13286] XFS (loop3): Quotacheck: Done. [ 725.004938][T13301] loop1: detected capacity change from 0 to 32768 [ 725.032058][T13301] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1903 (13301) [ 725.115328][T12659] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 725.210095][T13301] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 725.234526][T13321] loop0: detected capacity change from 0 to 256 [ 725.914202][T13301] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 725.928347][T13301] BTRFS info (device loop1): using free-space-tree [ 725.994467][ T5107] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 726.214215][T13301] BTRFS info (device loop1): rebuilding free space tree [ 726.603368][T12572] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 726.685790][T13355] loop4: detected capacity change from 0 to 512 [ 726.694113][T13355] ext4: Unknown parameter 'context' [ 727.670064][ T5107] Bluetooth: hci3: command tx timeout [ 727.956015][ T5107] Bluetooth: hci2: Malformed Event: 0x02 [ 728.320647][T13370] fuse: Bad value for 'user_id' [ 728.882350][ T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 728.930865][ T5107] Bluetooth: hci0: Malformed Event: 0x02 [ 729.118284][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 729.143399][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 729.709650][ T5107] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 729.719657][ T5107] Bluetooth: hci3: Injecting HCI hardware error event [ 729.747563][ T5107] Bluetooth: hci3: hardware error 0x00 [ 729.968256][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 729.978354][ T8] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 729.989535][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.003838][ T8] usb 2-1: config 0 descriptor?? [ 730.645947][T13400] loop0: detected capacity change from 0 to 512 [ 730.655395][T13400] ext4: Unknown parameter 'context' [ 731.571607][T13376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.596803][T13376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.058627][ T5108] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 732.093665][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 732.147737][ T5107] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 732.151659][ T8] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 732.244335][ T8] usb 2-1: USB disconnect, device number 15 [ 732.513671][T13413] fuse: Bad value for 'fd' [ 732.695762][T13393] loop3: detected capacity change from 0 to 32768 [ 732.713096][T13393] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1923 (13393) [ 733.462847][T13393] BTRFS error (device loop3): open_ctree failed [ 734.448121][T13439] loop0: detected capacity change from 0 to 512 [ 734.468574][T13439] ext4: Unknown parameter 'context' [ 735.376561][T13451] fuse: Bad value for 'fd' [ 735.737320][T13457] loop4: detected capacity change from 0 to 2048 [ 735.795340][T13457] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 735.842433][T13460] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 736.112041][T13457] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 736.127134][T13457] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 736.152279][T13457] Remounting filesystem read-only [ 736.163998][T13457] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 736.182519][T13457] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 736.242876][T13457] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 736.254356][T13457] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 736.274730][T13457] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 736.290137][T13457] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 736.304826][T13457] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 736.316746][T13457] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 736.328929][T13457] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 736.340845][T13457] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 736.353303][T13443] loop2: detected capacity change from 0 to 32768 [ 736.373152][T13443] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1937 (13443) [ 736.389627][T13457] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 736.404936][T13457] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 736.429730][T13443] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 736.440836][T13457] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 736.456230][T13443] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 736.465599][T13457] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 736.482923][T13443] BTRFS info (device loop2): using free-space-tree [ 736.543556][T13457] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 736.589171][T13457] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 736.601682][T13457] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 736.647654][T13457] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 736.659719][T13457] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 736.671031][T13457] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 736.684187][T13457] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 736.772165][T13457] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 737.421366][ T29] audit: type=1804 audit(1719860796.736:222): pid=13479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1937" name="/root/syzkaller.8EP9ju/27/file0/bus" dev="loop2" ino=263 res=1 errno=0 [ 737.435652][T13441] loop1: detected capacity change from 0 to 32768 [ 737.451520][T13457] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 737.545791][T13457] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 737.560427][T13443] BTRFS info (device loop2): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 737.672431][T13457] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 737.708794][T13441] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 737.747921][T13457] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 737.757928][T13441] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 737.795746][T12636] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 737.825629][T13457] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 737.846562][T13457] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 737.862492][T13457] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 737.880201][T13457] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 737.888783][T13441] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 737.943777][ T29] audit: type=1800 audit(1719860797.246:223): pid=13457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1941" name="file3" dev="loop4" ino=16 res=0 errno=0 [ 738.002096][T12733] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 738.011230][T12733] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 738.135283][T13457] syz.4.1941 (13457) used greatest stack depth: 17616 bytes left [ 738.212129][T12733] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 200ms [ 738.261637][T12733] gfs2: fsid=syz:syz.0: jid=0: Done [ 738.282354][T13441] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 740.127659][ T5152] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 740.364464][ T5107] Bluetooth: hci0: Malformed Event: 0x02 [ 740.367586][ T5152] usb 3-1: Using ep0 maxpacket: 16 [ 740.430779][ T5152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 740.455312][T13512] fuse: Bad value for 'fd' [ 740.488338][ T5152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 740.502795][ T5152] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 740.581803][ T5152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.632056][ T5152] usb 3-1: config 0 descriptor?? [ 740.760282][ T5107] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 740.996505][T13521] kAFS: No cell specified [ 741.172069][T13502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.222404][T13502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.602623][ T5152] usbhid 3-1:0.0: can't add hid device: -71 [ 741.624460][ T5152] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 741.680305][ T5152] usb 3-1: USB disconnect, device number 24 [ 741.968258][ T5107] Bluetooth: hci4: Malformed Event: 0x02 [ 742.432264][ T4878] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 742.797601][ T4878] usb 4-1: Using ep0 maxpacket: 32 [ 743.547703][ T4878] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=82.28 [ 743.607956][ T4878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.718417][ T4878] usb 4-1: Product: syz [ 743.738852][ T4878] usb 4-1: Manufacturer: syz [ 743.743705][ T4878] usb 4-1: SerialNumber: syz [ 743.783071][ T4878] usb 4-1: config 0 descriptor?? [ 744.146082][T13554] fuse: Bad value for 'fd' [ 744.222784][T13539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.277138][T13539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.494712][ T5152] usb 4-1: USB disconnect, device number 19 [ 744.514425][ T5107] Bluetooth: hci1: Malformed Event: 0x02 [ 745.108479][T13572] kAFS: No cell specified [ 745.120590][ T5107] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 745.831123][T13553] loop1: detected capacity change from 0 to 32768 [ 746.219029][T13553] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1962 (13553) [ 746.455675][T13588] syz.4.1972: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 746.473967][T13588] CPU: 1 UID: 0 PID: 13588 Comm: syz.4.1972 Not tainted 6.10.0-rc6-next-20240701-syzkaller #0 [ 746.484391][T13588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 746.494682][T13588] Call Trace: [ 746.498155][T13588] [ 746.501123][T13588] dump_stack_lvl+0x241/0x360 [ 746.505865][T13588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 746.511110][T13588] ? __pfx__printk+0x10/0x10 [ 746.515754][T13588] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 746.522221][T13588] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 746.528766][T13588] warn_alloc+0x278/0x410 [ 746.533159][T13588] ? stack_depot_save_flags+0x29/0x830 [ 746.538662][T13588] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 746.544766][T13588] ? __pfx_warn_alloc+0x10/0x10 [ 746.549662][T13588] ? kasan_save_track+0x3f/0x80 [ 746.554544][T13588] ? __kasan_kmalloc+0x98/0xb0 [ 746.559345][T13588] ? xsk_setsockopt+0x598/0x950 [ 746.564237][T13588] ? do_sock_setsockopt+0x3af/0x720 [ 746.569471][T13588] ? __sys_setsockopt+0x1ae/0x250 [ 746.574531][T13588] ? __x64_sys_setsockopt+0xb5/0xd0 [ 746.579769][T13588] ? do_syscall_64+0xf3/0x230 [ 746.584483][T13588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.590598][T13588] __vmalloc_node_range_noprof+0x130/0x1460 [ 746.596563][T13588] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 746.602939][T13588] ? __kasan_kmalloc+0x98/0xb0 [ 746.607745][T13588] ? xskq_create+0x54/0x170 [ 746.612304][T13588] vmalloc_user_noprof+0x74/0x80 [ 746.617552][T13588] ? xskq_create+0xb6/0x170 [ 746.622107][T13588] xskq_create+0xb6/0x170 [ 746.626492][T13588] xsk_init_queue+0xa1/0x100 [ 746.631145][T13588] xsk_setsockopt+0x598/0x950 [ 746.635875][T13588] ? __pfx_xsk_setsockopt+0x10/0x10 [ 746.641122][T13588] ? __pfx_lock_acquire+0x10/0x10 [ 746.646293][T13588] ? aa_sock_opt_perm+0x79/0x120 [ 746.651284][T13588] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 746.656881][T13588] ? security_socket_setsockopt+0x87/0xb0 [ 746.662664][T13588] ? __pfx_xsk_setsockopt+0x10/0x10 [ 746.667913][T13588] do_sock_setsockopt+0x3af/0x720 [ 746.672989][T13588] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 746.678577][T13588] ? __fget_files+0x29/0x470 [ 746.683211][T13588] ? __fget_files+0x3f6/0x470 [ 746.687946][T13588] __sys_setsockopt+0x1ae/0x250 [ 746.692849][T13588] __x64_sys_setsockopt+0xb5/0xd0 [ 746.697959][T13588] do_syscall_64+0xf3/0x230 [ 746.702512][T13588] ? clear_bhb_loop+0x35/0x90 [ 746.707230][T13588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.713172][T13588] RIP: 0033:0x7f1762375b99 [ 746.717637][T13588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 746.737448][T13588] RSP: 002b:00007f1761dbd048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 746.745901][T13588] RAX: ffffffffffffffda RBX: 00007f1762504150 RCX: 00007f1762375b99 [ 746.753918][T13588] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 746.762042][T13588] RBP: 00007f17623f677e R08: 0000000000000020 R09: 0000000000000000 [ 746.770057][T13588] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 746.778039][T13588] R13: 000000000000006e R14: 00007f1762504150 R15: 00007ffebffcd318 [ 746.786060][T13588] [ 746.867728][T13588] Mem-Info: [ 746.887650][T13588] active_anon:8559 inactive_anon:0 isolated_anon:0 [ 746.887650][T13588] active_file:4061 inactive_file:49041 isolated_file:0 [ 746.887650][T13588] unevictable:768 dirty:112 writeback:0 [ 746.887650][T13588] slab_reclaimable:9938 slab_unreclaimable:98617 [ 746.887650][T13588] mapped:14075 shmem:5360 pagetables:707 [ 746.887650][T13588] sec_pagetables:3 bounce:0 [ 746.887650][T13588] kernel_misc_reclaimable:0 [ 746.887650][T13588] free:1387512 free_pcp:714 free_cma:0 [ 746.946256][T13553] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 747.007716][T13553] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 747.007961][T13588] Node 0 active_anon:34336kB inactive_anon:0kB active_file:16244kB inactive_file:196096kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56400kB dirty:444kB writeback:0kB shmem:19904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9860kB pagetables:2928kB sec_pagetables:12kB all_unreclaimable? no [ 747.016525][T13553] BTRFS info (device loop1): using free-space-tree [ 747.123634][T13588] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 747.205582][T13553] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 747.206494][T13553] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 747.228081][T13588] Node 0 [ 747.250752][T13600] fuse: Bad value for 'fd' [ 747.251757][T13553] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 747.266548][T13588] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 747.281366][T13553] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 747.368971][T13553] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 747.388068][T13588] lowmem_reserve[]: [ 747.438558][T13553] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 747.439467][T13588] 0 [ 747.472739][T13553] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 747.476175][T13553] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 747.489204][T13609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.508543][T13588] 2569 2569 0 0 [ 747.511582][T13553] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 747.513406][T13588] Node 0 DMA32 free:1582404kB boost:0kB min:35096kB low:43868kB high:52640kB reserved_highatomic:0KB active_anon:34460kB inactive_anon:0kB active_file:16244kB inactive_file:196000kB unevictable:1536kB writepending:460kB present:3129332kB managed:2657776kB mlocked:0kB bounce:0kB free_pcp:1708kB local_pcp:452kB free_cma:0kB [ 747.536700][T13553] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 747.643256][T13588] lowmem_reserve[]: [ 747.652820][T13553] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 747.657620][T13588] 0 [ 747.668784][T13553] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 747.677113][T13615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.691422][T13588] 0 [ 747.700878][T13609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.709336][T13588] 0 0 0 [ 747.717000][T13553] BTRFS error (device loop1): open_ctree failed [ 747.794885][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.803294][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.897709][T13588] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:96kB unevictable:0kB writepending:0kB present:1048576kB managed:104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 747.991900][T13588] lowmem_reserve[]: 0 0 0 0 0 [ 747.996748][T13588] Node 1 Normal free:3953204kB boost:0kB min:54808kB low:68508kB high:82208kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 748.001436][T13609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 748.076882][T13588] lowmem_reserve[]: 0 0 0 0 0 [ 748.082629][T13588] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 748.125478][T13588] Node 0 DMA32: 1766*4kB (UME) 731*8kB (UME) 635*16kB (UME) 471*32kB (UME) 409*64kB (UME) 259*128kB (UME) 76*256kB (UME) 32*512kB (UME) 27*1024kB (UME) 7*2048kB (UM) 344*4096kB (UM) = 1584320kB [ 748.146954][T13609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 748.210621][T13588] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 748.242090][T13588] Node 1 Normal: 3*4kB (UM) 5*8kB (UM) 10*16kB (UM) 13*32kB (UM) 5*64kB (U) 7*128kB (U) 5*256kB (UM) 3*512kB (UM) 4*1024kB (U) 2*2048kB (U) 962*4096kB (M) = 3953204kB [ 748.280874][T13588] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 748.347698][T13588] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 748.372218][T13588] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 748.417896][T13588] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 748.439046][T13588] 54295 total pagecache pages [ 748.443903][T13588] 0 pages in swap cache [ 748.464297][T13588] Free swap = 124440kB [ 748.471356][ T5107] Bluetooth: hci4: Malformed Event: 0x02 [ 748.489770][T13588] Total swap = 124996kB [ 748.507658][T13588] 2097051 pages RAM [ 748.544640][T13588] 0 pages HighMem/MovableOnly [ 748.562030][T13588] 401461 pages reserved [ 748.590776][T13588] 0 pages cma reserved [ 750.517739][ T8] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 750.719052][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 750.742705][ T8] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=82.28 [ 750.767309][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.815230][ T8] usb 2-1: Product: syz [ 750.843851][ T8] usb 2-1: Manufacturer: syz [ 750.855474][ T8] usb 2-1: SerialNumber: syz [ 750.899319][ T8] usb 2-1: config 0 descriptor?? [ 751.068866][T13626] loop4: detected capacity change from 0 to 32768 [ 751.102532][T13626] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1980 (13626) [ 751.188065][T13626] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 751.216547][T13626] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 751.267783][T13626] BTRFS info (device loop4): using free-space-tree [ 751.284682][T13656] fuse: Bad value for 'fd' [ 751.438647][T13631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.469943][T13631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.528648][T13626] BTRFS info (device loop4): rebuilding free space tree [ 751.690383][ T8] usb 2-1: USB disconnect, device number 16 [ 751.896827][T12796] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 755.314409][T13707] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 755.337211][T13707] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 755.485397][T13709] IPv4: Oversized IP packet from 172.20.20.24 [ 755.491991][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 755.498480][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 755.797593][T12733] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 756.047586][T12733] usb 2-1: Using ep0 maxpacket: 16 [ 756.091793][T12733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 756.111054][T13711] fuse: Invalid rootmode [ 756.148534][T12733] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 756.190459][T12733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.225982][T12733] usb 2-1: config 0 descriptor?? [ 756.719646][T13709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.731148][T13709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.779435][T12733] hid (null): nested delimiters [ 756.784924][T12733] hid (null): report_id 24797 is invalid [ 756.835463][T12733] hid (null): report_id 2838798905 is invalid [ 756.843880][T12733] hid (null): unknown global tag 0xc [ 756.891803][T12733] hid (null): unknown global tag 0xa5 [ 756.905720][T12733] hid (null): unknown global tag 0xd [ 756.958520][T12733] hid (null): unknown global tag 0xc [ 757.147007][T12733] hid-generic 0003:0158:0100.0014: unknown main item tag 0x1 [ 757.308141][T12733] hid-generic 0003:0158:0100.0014: unexpected long global item [ 757.339512][T12733] hid-generic 0003:0158:0100.0014: probe with driver hid-generic failed with error -22 [ 757.748604][T12733] usb 2-1: USB disconnect, device number 17 [ 759.011613][ T5107] Bluetooth: hci0: link tx timeout [ 759.018915][ T5107] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 761.161407][ T5107] Bluetooth: hci0: command 0x0406 tx timeout [ 762.819537][T13751] loop4: detected capacity change from 0 to 512 [ 762.833536][T13751] ext4: Unknown parameter 'context' [ 764.137774][T12733] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 765.988014][T13755] fuse: Invalid rootmode [ 766.845785][T13767] IPv4: Oversized IP packet from 172.20.20.24 [ 766.852674][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 766.859326][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 767.022076][ T5108] Bluetooth: unknown link type 197 [ 767.027378][ T5108] Bluetooth: hci4: connection err: -111 [ 768.176058][ T5154] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 768.214899][T13774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2014'. [ 768.377605][ T5154] usb 3-1: Using ep0 maxpacket: 16 [ 768.404268][ T5154] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 768.437968][ T5154] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 768.485151][ T5154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.539866][ T5154] usb 3-1: config 0 descriptor?? [ 769.015454][T13767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.028253][T13767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.054619][ T5108] Bluetooth: unknown link type 197 [ 769.060903][ T5108] Bluetooth: hci0: connection err: -111 [ 769.079540][ T5154] hid (null): nested delimiters [ 769.087624][ T5154] hid (null): report_id 24797 is invalid [ 769.101028][ T5154] hid (null): report_id 2838798905 is invalid [ 769.107169][ T5154] hid (null): unknown global tag 0xc [ 769.113317][ T5154] hid (null): unknown global tag 0xa5 [ 769.119136][ T5154] hid (null): unknown global tag 0xd [ 769.125288][ T5154] hid (null): unknown global tag 0xc [ 769.164239][ T5154] hid-generic 0003:0158:0100.0015: unknown main item tag 0x1 [ 769.172745][ T5154] hid-generic 0003:0158:0100.0015: unexpected long global item [ 769.204465][ T5154] hid-generic 0003:0158:0100.0015: probe with driver hid-generic failed with error -22 [ 769.232602][ T5108] Bluetooth: hci4: link tx timeout [ 769.239835][ T5108] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 769.287525][ T5154] usb 3-1: USB disconnect, device number 25 [ 769.480681][T13793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2021'. [ 769.930384][T13797] loop1: detected capacity change from 0 to 512 [ 769.939357][T13797] ext4: Unknown parameter 'context' [ 771.017992][T13804] fuse: Invalid rootmode [ 771.305571][ T5108] Bluetooth: hci4: command 0x0406 tx timeout [ 773.883831][T13837] IPv4: Oversized IP packet from 172.20.20.24 [ 773.891795][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 773.898254][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 773.922788][T13807] loop3: detected capacity change from 0 to 32768 [ 773.949072][T13807] XFS: noikeep mount option is deprecated. [ 774.010215][T13807] XFS: noikeep mount option is deprecated. [ 774.050307][T13807] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop3": -EINTR [ 774.287675][ T8] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 774.537742][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 774.549455][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 774.622072][T13832] loop1: detected capacity change from 0 to 32768 [ 774.677740][T13832] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2033 (13832) [ 774.780528][T13832] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 774.805308][ T8] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 774.851025][T13832] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 774.884673][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.906269][T13832] BTRFS info (device loop1): using free-space-tree [ 774.934332][ T8] usb 3-1: config 0 descriptor?? [ 775.448517][T13837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.460267][T13832] BTRFS info (device loop1): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 775.486376][T13837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.544647][ T8] hid (null): nested delimiters [ 775.564027][ T8] hid (null): report_id 24797 is invalid [ 775.580520][ T29] audit: type=1804 audit(2000000002.570:224): pid=13832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2033" name="/root/syzkaller.4ur3yT/46/file0/bus" dev="loop1" ino=263 res=1 errno=0 [ 775.610377][ T8] hid (null): report_id 2838798905 is invalid [ 775.643714][ T8] hid (null): unknown global tag 0xc [ 775.664191][ T8] hid (null): unknown global tag 0xa5 [ 775.677639][ T8] hid (null): unknown global tag 0xd [ 775.701109][ T8] hid (null): unknown global tag 0xc [ 775.727960][ T8] hid-generic 0003:0158:0100.0016: unknown main item tag 0x1 [ 775.768310][ T8] hid-generic 0003:0158:0100.0016: unexpected long global item [ 775.808356][ T8] hid-generic 0003:0158:0100.0016: probe with driver hid-generic failed with error -22 [ 775.848080][ T8] usb 3-1: USB disconnect, device number 26 [ 775.902880][T12572] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 776.494139][T13866] fuse: Bad value for 'rootmode' [ 777.613667][ T5107] Bluetooth: unknown link type 197 [ 777.619854][ T5107] Bluetooth: hci4: connection err: -111 [ 777.797224][T13877] loop2: detected capacity change from 0 to 512 [ 777.848768][T13877] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 777.945860][T13877] EXT4-fs (loop2): 1 truncate cleaned up [ 778.013327][T13877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 778.066344][T13873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2038'. [ 778.085327][T13877] EXT4-fs warning (device loop2): __ext4fs_dirhash:270: inode #2: comm syz.2.2042: Siphash requires key [ 778.216995][T12636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.607902][T13898] loop3: detected capacity change from 0 to 512 [ 778.678544][T13901] IPv4: Oversized IP packet from 172.20.20.24 [ 778.685394][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 778.691939][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 778.713646][ T8] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 778.747168][T13898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.851617][T13898] ext4 filesystem being mounted at /root/syzkaller.7N9qR5/37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 778.907808][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 778.920581][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 779.090340][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 779.115878][T13898] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 779.135134][ T8] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 779.147993][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.161818][T13898] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 779.266841][ T8] usb 5-1: config 0 descriptor?? [ 779.291023][T13898] EXT4-fs (loop3): This should not happen!! Data will be lost [ 779.291023][T13898] [ 779.828306][ T4878] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 779.862407][ T5154] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 779.896393][T13898] EXT4-fs (loop3): Total free blocks count 0 [ 779.917974][T13898] EXT4-fs (loop3): Free/Dirty block details [ 779.945629][ T29] audit: type=1804 audit(2000000006.930:225): pid=13912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2048" name="/root/syzkaller.7N9qR5/37/file0/file1" dev="loop3" ino=15 res=1 errno=0 [ 779.945718][T13898] EXT4-fs (loop3): free_blocks=65280 [ 779.993059][T13898] EXT4-fs (loop3): dirty_blocks=1 [ 780.012621][T13898] EXT4-fs (loop3): Block reservation details [ 780.019321][T13898] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 780.046736][T13912] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 780.100421][ T4878] usb 3-1: config 0 has an invalid interface number: 195 but max is 0 [ 780.117844][ T5154] usb 1-1: Using ep0 maxpacket: 16 [ 780.127124][ T5154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 780.129095][ T4878] usb 3-1: config 0 has no interface number 0 [ 780.156777][ T4878] usb 3-1: New USB device found, idVendor=041e, idProduct=400a, bcdDevice=9e.b6 [ 780.161348][ T5154] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 780.167615][ T4878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.186128][ T4878] usb 3-1: Product: syz [ 780.188319][ T5154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.191284][ T4878] usb 3-1: Manufacturer: syz [ 780.203554][ T4878] usb 3-1: SerialNumber: syz [ 780.239131][ T4878] usb 3-1: config 0 descriptor?? [ 780.264465][ T5154] usb 1-1: config 0 descriptor?? [ 780.267001][T13893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.293444][ T4878] gspca_main: spca500-2.14.0 probing 041e:400a [ 780.302244][T13893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.328172][ T8] hid-generic 0003:0158:0100.0017: unknown main item tag 0x1 [ 780.336312][ T8] hid-generic 0003:0158:0100.0017: unexpected long global item [ 780.349626][ T8] hid-generic 0003:0158:0100.0017: probe with driver hid-generic failed with error -22 [ 780.651797][T13917] fuse: Bad value for 'rootmode' [ 780.682433][T13901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.710945][ T5152] usb 5-1: USB disconnect, device number 22 [ 780.741170][T13901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.809079][ T5154] hid (null): nested delimiters [ 780.841454][ T5154] hid (null): report_id 24797 is invalid [ 780.887042][ T5154] hid (null): report_id 2838798905 is invalid [ 780.919063][ T5154] hid (null): unknown global tag 0xc [ 780.933594][ T5154] hid (null): unknown global tag 0xa5 [ 780.979380][ T5154] hid (null): unknown global tag 0xd [ 780.985046][ T5154] hid (null): unknown global tag 0xc [ 781.040868][ T5154] hid-generic 0003:0158:0100.0018: unknown main item tag 0x1 [ 781.102340][ T5154] hid-generic 0003:0158:0100.0018: unexpected long global item [ 781.137275][ T5154] hid-generic 0003:0158:0100.0018: probe with driver hid-generic failed with error -22 [ 781.207952][ T5154] usb 1-1: USB disconnect, device number 16 [ 781.824263][ T8] usb 3-1: USB disconnect, device number 27 [ 781.894835][T13925] loop4: detected capacity change from 0 to 512 [ 781.913239][T13925] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 782.120566][T13925] EXT4-fs (loop4): 1 truncate cleaned up [ 782.127407][T13925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 782.239077][T13925] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #2: comm syz.4.2055: Siphash requires key [ 782.355920][ T35] nci: nci_rx_work: unknown MT 0x7 [ 782.369977][T12796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.861652][T13945] loop1: detected capacity change from 0 to 512 [ 782.920748][T13945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 782.938596][T13945] ext4 filesystem being mounted at /root/syzkaller.4ur3yT/51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 783.041908][T13950] fuse: Bad value for 'rootmode' [ 783.075349][ T29] audit: type=1804 audit(2000000010.060:226): pid=13951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2062" name="/root/syzkaller.4ur3yT/51/file0/file1" dev="loop1" ino=15 res=1 errno=0 [ 783.221015][T12572] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.338334][T13954] IPv4: Oversized IP packet from 172.20.20.24 [ 783.345173][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 783.351654][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 783.410542][ T5107] Bluetooth: unknown link type 197 [ 783.416027][ T5107] Bluetooth: hci0: connection err: -111 [ 783.651289][T13958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2064'. [ 783.697682][ T8] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 783.977734][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 784.013181][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 784.044135][T13968] loop3: detected capacity change from 0 to 512 [ 784.093488][T13968] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 784.093500][ T8] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 784.093532][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.177980][ T8] usb 1-1: config 0 descriptor?? [ 784.179582][T13968] EXT4-fs (loop3): 1 truncate cleaned up [ 784.251622][T13968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 784.418506][ T29] audit: type=1804 audit(2000000011.400:227): pid=13968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2068" name="/root/syzkaller.7N9qR5/40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop3" ino=18 res=1 errno=0 [ 784.431990][T13968] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #2: comm syz.3.2068: Siphash requires key [ 784.463368][ C0] vkms_vblank_simulate: vblank timer overrun [ 784.602835][T13954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.658015][T13954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.686269][T13965] Bluetooth: unknown link type 197 [ 784.691810][T13965] Bluetooth: hci4: connection err: -111 [ 784.703966][ T8] hid (null): nested delimiters [ 784.741359][T12659] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.753015][ T8] hid (null): report_id 24797 is invalid [ 784.795255][ T8] hid (null): report_id 2838798905 is invalid [ 784.809216][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2069'. [ 784.849825][ T8] hid (null): unknown global tag 0xc [ 784.855574][ T8] hid (null): unknown global tag 0xa5 [ 784.866654][ T8] hid (null): unknown global tag 0xd [ 784.881523][ T8] hid (null): unknown global tag 0xc [ 784.925234][ T8] hid-generic 0003:0158:0100.0019: unknown main item tag 0x1 [ 784.976497][ T8] hid-generic 0003:0158:0100.0019: unexpected long global item [ 784.999407][ T29] audit: type=1800 audit(2000000011.980:228): pid=13980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2070" name="/" dev="fuse" ino=1 res=0 errno=0 [ 785.061476][ T8] hid-generic 0003:0158:0100.0019: probe with driver hid-generic failed with error -22 [ 785.104902][ T8] usb 1-1: USB disconnect, device number 17 [ 785.681901][T13965] Bluetooth: hci1: command 0x0406 tx timeout [ 785.691227][ T5115] Bluetooth: hci2: command 0x0406 tx timeout [ 785.873955][T13993] loop1: detected capacity change from 0 to 512 [ 785.925067][T13993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 786.025508][T13993] ext4 filesystem being mounted at /root/syzkaller.4ur3yT/54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 786.202663][ T29] audit: type=1804 audit(2000000013.190:229): pid=13993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2076" name="/root/syzkaller.4ur3yT/54/file0/file1" dev="loop1" ino=15 res=1 errno=0 [ 786.328232][T12572] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.858309][T14021] IPv4: Oversized IP packet from 172.20.20.24 [ 787.865401][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 787.871981][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 788.192726][T14032] loop2: detected capacity change from 0 to 512 [ 788.207662][ T5152] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 788.253543][T14032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 788.277784][T14032] ext4 filesystem being mounted at /root/syzkaller.8EP9ju/55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 788.308554][T14015] loop1: detected capacity change from 0 to 32768 [ 788.339850][T14042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 788.340308][T14015] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2081 (14015) [ 788.376401][T14032] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 788.411852][T14032] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 788.422383][T14015] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 788.429954][T14032] EXT4-fs (loop2): This should not happen!! Data will be lost [ 788.429954][T14032] [ 788.446249][ T5152] usb 1-1: Using ep0 maxpacket: 16 [ 788.453803][T14032] EXT4-fs (loop2): Total free blocks count 0 [ 788.462790][ T5152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 788.463373][T14042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 788.474363][ T5152] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 788.514541][ T29] audit: type=1804 audit(2000000015.500:230): pid=14044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2088" name="/root/syzkaller.8EP9ju/55/file0/file1" dev="loop2" ino=15 res=1 errno=0 [ 788.516393][T14045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 788.557243][T14032] EXT4-fs (loop2): Free/Dirty block details [ 788.557689][ T5152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.577651][T14015] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 788.586999][T14032] EXT4-fs (loop2): free_blocks=65280 [ 788.621564][ T5152] usb 1-1: config 0 descriptor?? [ 788.629190][T14015] BTRFS info (device loop1): using free-space-tree [ 788.650978][T14032] EXT4-fs (loop2): dirty_blocks=1 [ 788.656368][T14032] EXT4-fs (loop2): Block reservation details [ 788.684556][T14032] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 788.748821][T14044] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 788.829010][T14042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 788.872998][T14042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 788.998664][T14015] BTRFS info (device loop1): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 789.056007][T14021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.086032][T14021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.149453][ T5152] hid (null): nested delimiters [ 789.173300][ T5152] hid (null): report_id 24797 is invalid [ 789.199634][ T5152] hid (null): report_id 2838798905 is invalid [ 789.227537][ T5152] hid (null): unknown global tag 0xc [ 789.253234][ T5152] hid (null): unknown global tag 0xa5 [ 789.296649][ T5152] hid (null): unknown global tag 0xd [ 789.308580][ T5152] hid (null): unknown global tag 0xc [ 789.359009][ T5152] hid-generic 0003:0158:0100.001A: unknown main item tag 0x1 [ 789.387956][ T5152] hid-generic 0003:0158:0100.001A: unexpected long global item [ 789.420788][ T5152] hid-generic 0003:0158:0100.001A: probe with driver hid-generic failed with error -22 [ 789.438823][T14072] fuse: Bad value for 'fd' [ 789.485000][ T5152] usb 1-1: USB disconnect, device number 18 [ 789.529583][T12572] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 789.960571][ T29] audit: type=1800 audit(2000000016.950:231): pid=14083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2097" name="/" dev="fuse" ino=1 res=0 errno=0 [ 790.052447][ T29] audit: type=1326 audit(2000000017.040:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14081 comm="syz.2.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe662775b99 code=0x7ffc0000 [ 790.095657][ T29] audit: type=1326 audit(2000000017.060:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14081 comm="syz.2.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe662775b99 code=0x7ffc0000 [ 790.207714][ T29] audit: type=1326 audit(2000000017.080:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14081 comm="syz.2.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe662775b99 code=0x7ffc0000 [ 790.349813][ T29] audit: type=1326 audit(2000000017.080:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14081 comm="syz.2.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe662775b99 code=0x7ffc0000 [ 790.443782][ T29] audit: type=1326 audit(2000000017.080:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14081 comm="syz.2.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe662775b99 code=0x7ffc0000 [ 790.457701][T12787] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 790.531182][ T29] audit: type=1326 audit(2000000017.080:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14081 comm="syz.2.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fe662775b99 code=0x7ffc0000 [ 790.612507][ T29] audit: type=1326 audit(2000000017.080:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14081 comm="syz.2.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe662775b99 code=0x7ffc0000 [ 790.667332][ T29] audit: type=1326 audit(2000000017.080:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14081 comm="syz.2.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe662775b99 code=0x7ffc0000 [ 790.747620][T12787] usb 3-1: Using ep0 maxpacket: 16 [ 790.771182][T12787] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 790.792291][ T2793] nci: nci_rx_work: unknown MT 0x7 [ 790.802366][T12787] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 790.812570][T12787] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 790.826522][T12787] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 790.836622][T12787] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 790.848776][T12787] usb 3-1: config 1 interface 0 has no altsetting 0 [ 790.855857][T12787] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 790.868170][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 790.876263][T12787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.921576][T12787] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 791.067587][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 791.079951][ T9] usb 1-1: config 0 has no interfaces? [ 791.094373][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 791.121310][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.147179][ T9] usb 1-1: Product: syz [ 791.162970][ T9] usb 1-1: Manufacturer: syz [ 791.174244][ T9] usb 1-1: SerialNumber: syz [ 791.189096][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 791.197696][ T9] r8152-cfgselector 1-1: config 0 descriptor?? [ 791.309071][T12787] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 791.333863][T12787] usb 3-1: USB disconnect, device number 28 [ 791.608399][T14104] loop3: detected capacity change from 0 to 512 [ 791.638985][T14104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 791.724596][T14104] ext4 filesystem being mounted at /root/syzkaller.7N9qR5/53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 791.825486][T14104] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 791.845809][T14104] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 791.858491][T14104] EXT4-fs (loop3): This should not happen!! Data will be lost [ 791.858491][T14104] [ 791.868706][T14104] EXT4-fs (loop3): Total free blocks count 0 [ 791.874852][T14104] EXT4-fs (loop3): Free/Dirty block details [ 791.881102][T14104] EXT4-fs (loop3): free_blocks=65280 [ 791.887935][T14104] EXT4-fs (loop3): dirty_blocks=1 [ 791.893157][T14104] EXT4-fs (loop3): Block reservation details [ 791.899498][T14104] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 791.907697][T14108] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 792.188268][ T8] r8152-cfgselector 1-1: USB disconnect, device number 19 [ 793.304885][T14124] fuse: Bad value for 'fd' [ 793.655345][T14131] IPv4: Oversized IP packet from 172.20.20.24 [ 793.663968][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 793.670885][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 793.809091][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 793.809111][ T29] audit: type=1326 audit(2000000020.800:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14136 comm="syz.2.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe662775b99 code=0x7ffc0000 [ 793.909811][ T29] audit: type=1326 audit(2000000020.830:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14136 comm="syz.2.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7fe662775b99 code=0x7ffc0000 [ 793.936960][T14141] loop1: detected capacity change from 0 to 512 [ 793.953140][ T29] audit: type=1326 audit(2000000020.830:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14136 comm="syz.2.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe662775b99 code=0x7ffc0000 [ 793.997634][ T5152] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 794.015735][ T29] audit: type=1326 audit(2000000020.830:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14136 comm="syz.2.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe662775b99 code=0x7ffc0000 [ 794.076447][ T29] audit: type=1326 audit(2000000020.830:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14136 comm="syz.2.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe662775b99 code=0x7ffc0000 [ 794.147985][T12733] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 794.190417][T14141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 794.207588][ T5152] usb 5-1: Using ep0 maxpacket: 16 [ 794.214622][ T5152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 794.236385][ T5152] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 794.249286][ T5152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.273174][ T5152] usb 5-1: config 0 descriptor?? [ 794.308003][T14141] ext4 filesystem being mounted at /root/syzkaller.4ur3yT/58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 794.333903][ T29] audit: type=1326 audit(2000000020.840:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14136 comm="syz.2.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe662775b99 code=0x7ffc0000 [ 794.407849][T12733] usb 3-1: Using ep0 maxpacket: 16 [ 794.434946][ T29] audit: type=1326 audit(2000000020.840:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14136 comm="syz.2.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe662775b99 code=0x7ffc0000 [ 794.488121][T12733] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 794.507575][T12733] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 794.517861][T12733] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 794.539534][T12733] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 794.558194][T14147] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 794.629257][T12733] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 794.649087][T12733] usb 3-1: config 1 interface 0 has no altsetting 0 [ 794.656348][T12733] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 794.666301][T12733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.704486][ T29] audit: type=1326 audit(2000000020.840:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14136 comm="syz.2.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe662775b99 code=0x7ffc0000 [ 794.757311][T14131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.787284][T12733] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 794.803639][T14131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.839309][ T29] audit: type=1326 audit(2000000020.840:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14136 comm="syz.2.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe662775b99 code=0x7ffc0000 [ 794.860410][ T5152] hid (null): nested delimiters [ 794.875698][ T5152] hid (null): report_id 24797 is invalid [ 794.904416][T12572] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.916976][ T29] audit: type=1326 audit(2000000020.840:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14136 comm="syz.2.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe662775b99 code=0x7ffc0000 [ 794.916981][ T5152] hid (null): report_id 2838798905 is invalid [ 796.070344][ T5152] hid (null): unknown global tag 0xc [ 796.075901][ T5152] hid (null): unknown global tag 0xa5 [ 796.076033][T14157] netlink: 'syz.1.2116': attribute type 1 has an invalid length. [ 796.134348][ T5152] hid (null): unknown global tag 0xd [ 796.153611][ T5152] hid (null): unknown global tag 0xc [ 796.208899][T14161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2116'. [ 796.228218][ T5152] hid-generic 0003:0158:0100.001B: unknown main item tag 0x1 [ 796.263014][ T5152] hid-generic 0003:0158:0100.001B: unexpected long global item [ 796.308773][ T5152] hid-generic 0003:0158:0100.001B: probe with driver hid-generic failed with error -22 [ 796.366677][ T5152] usb 5-1: USB disconnect, device number 23 [ 796.375125][T14157] bond1: (slave gretap1): making interface the new active one [ 796.413118][T12733] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 796.442206][T14157] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 796.498875][T12733] usb 3-1: USB disconnect, device number 29 [ 797.601001][T12733] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 797.817661][T12733] usb 5-1: Using ep0 maxpacket: 16 [ 797.828284][T12733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 797.858938][T12733] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 797.871736][T14185] loop3: detected capacity change from 0 to 512 [ 797.879743][T12733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.894393][T12733] usb 5-1: config 0 descriptor?? [ 797.930754][T14185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 797.945155][T14185] ext4 filesystem being mounted at /root/syzkaller.7N9qR5/59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 797.976431][T14185] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 797.994021][T14185] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 798.009289][T14185] EXT4-fs (loop3): This should not happen!! Data will be lost [ 798.009289][T14185] [ 798.019655][T14185] EXT4-fs (loop3): Total free blocks count 0 [ 798.028392][T14185] EXT4-fs (loop3): Free/Dirty block details [ 798.035399][T14185] EXT4-fs (loop3): free_blocks=65280 [ 798.042013][T14185] EXT4-fs (loop3): dirty_blocks=1 [ 798.047218][T14185] EXT4-fs (loop3): Block reservation details [ 798.053674][T14185] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 798.060626][T14189] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 798.284009][T14192] netlink: 'syz.1.2128': attribute type 1 has an invalid length. [ 798.312180][T14166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.351733][T14166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.388683][T14196] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2128'. [ 798.423282][T12733] hid (null): nested delimiters [ 798.451584][T12733] hid (null): report_id 24797 is invalid [ 798.492840][T12733] hid (null): report_id 2838798905 is invalid [ 798.512079][T14182] loop2: detected capacity change from 0 to 32768 [ 798.513052][T12733] hid (null): unknown global tag 0xc [ 798.523169][T14182] btrfs: Deprecated parameter 'usebackuproot' [ 798.539534][T14182] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 798.550658][T12733] hid (null): unknown global tag 0xa5 [ 798.560937][T12733] hid (null): unknown global tag 0xd [ 798.567062][T12733] hid (null): unknown global tag 0xc [ 798.578727][T14182] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2124 (14182) [ 798.621807][T14182] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 798.647791][T12733] hid-generic 0003:0158:0100.001C: unknown main item tag 0x1 [ 798.668055][T12733] hid-generic 0003:0158:0100.001C: unexpected long global item [ 798.676223][T14182] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 798.687342][T12733] hid-generic 0003:0158:0100.001C: probe with driver hid-generic failed with error -22 [ 798.727313][T12733] usb 5-1: USB disconnect, device number 24 [ 798.733393][T14182] BTRFS info (device loop2): disk space caching is enabled [ 798.973684][T14182] BTRFS info (device loop2): rebuilding free space tree [ 798.996951][T14220] loop3: detected capacity change from 0 to 16 [ 799.026042][T14182] BTRFS info (device loop2): disabling free space tree [ 799.043428][T14182] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 799.062513][T14220] erofs: (device loop3): mounted with root inode @ nid 36. [ 799.065497][T14182] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 799.572174][T14229] loop3: detected capacity change from 0 to 8 [ 799.611426][T14229] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 800.006458][T12636] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 800.124792][T14219] loop1: detected capacity change from 0 to 32768 [ 800.361727][T14219] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 800.574616][T14227] loop4: detected capacity change from 0 to 32768 [ 800.602462][T14219] XFS (loop1): Ending clean mount [ 800.614674][T14243] loop2: detected capacity change from 0 to 512 [ 800.637987][T14219] XFS (loop1): Quotacheck needed: Please wait. [ 800.741532][T14227] ERROR: (device loop4): diRead: i_ino != di_number [ 800.741532][T14227] [ 800.777202][T14243] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 800.781686][T14247] loop0: detected capacity change from 0 to 256 [ 800.827872][T14247] exFAT-fs (loop0): Invalid exboot-signature(sector = 8): 0x00000700 [ 800.878150][T14243] ext4 filesystem being mounted at /root/syzkaller.8EP9ju/65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 800.907405][T14247] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x5119ab2d) [ 800.935974][T14219] XFS (loop1): Quotacheck: Done. [ 800.953928][T14247] exFAT-fs (loop0): invalid boot region [ 800.988033][T14247] exFAT-fs (loop0): failed to recognize exfat type [ 801.137678][T12572] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 801.179106][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 801.179130][ T29] audit: type=1804 audit(2000000028.170:333): pid=14243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2137" name="/root/syzkaller.8EP9ju/65/file0/file1" dev="loop2" ino=15 res=1 errno=0 [ 801.321721][T14250] netlink: 'syz.4.2140': attribute type 1 has an invalid length. [ 801.386547][T12636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.553460][T14254] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2140'. [ 801.654967][T14233] loop3: detected capacity change from 0 to 40427 [ 801.697273][T14255] bond1: (slave gretap1): making interface the new active one [ 801.727516][T14233] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 801.754061][T14255] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 801.773394][T14259] Driver unsupported XDP return value 0 on prog (id 456) dev N/A, expect packet loss! [ 801.787905][T14233] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 801.827501][T14257] veth1_macvtap: left promiscuous mode [ 801.925217][T14233] F2FS-fs (loop3): invalid crc value [ 802.002951][T14233] F2FS-fs (loop3): Found nat_bits in checkpoint [ 802.275349][T14233] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 802.333709][T14233] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 802.710522][T14287] loop4: detected capacity change from 0 to 256 [ 802.822997][T14287] exFAT-fs (loop4): Invalid exboot-signature(sector = 8): 0x00000700 [ 802.867317][T14287] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x5119ab2d) [ 802.888028][T14287] exFAT-fs (loop4): invalid boot region [ 802.893918][T14287] exFAT-fs (loop4): failed to recognize exfat type [ 802.949622][T14289] loop2: detected capacity change from 0 to 512 [ 803.091824][T14262] syz.1.2141 (14262): drop_caches: 2 [ 803.125791][T14289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 803.183533][T14289] ext4 filesystem being mounted at /root/syzkaller.8EP9ju/70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 803.310587][T14289] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 803.377635][T14289] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 803.419834][ T29] audit: type=1804 audit(2000000030.410:334): pid=14300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2153" name="/root/syzkaller.8EP9ju/70/file0/file1" dev="loop2" ino=15 res=1 errno=0 [ 803.427551][T14289] EXT4-fs (loop2): This should not happen!! Data will be lost [ 803.427551][T14289] [ 803.508402][T14289] EXT4-fs (loop2): Total free blocks count 0 [ 803.547754][T14289] EXT4-fs (loop2): Free/Dirty block details [ 803.657846][T14289] EXT4-fs (loop2): free_blocks=65280 [ 803.664882][T14289] EXT4-fs (loop2): dirty_blocks=1 [ 803.714671][T14289] EXT4-fs (loop2): Block reservation details [ 803.737590][T14289] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 803.753764][T14300] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 804.735062][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 805.261954][T14339] loop1: detected capacity change from 0 to 256 [ 805.828623][T14344] No such timeout policy "syz0" [ 806.093135][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 806.271818][T14371] Oops: stack segment: 0000 [#1] PREEMPT SMP KASAN PTI [ 806.271858][T14371] CPU: 0 UID: 0 PID: 14371 Comm: syz.2.2180 Not tainted 6.10.0-rc6-next-20240701-syzkaller #0 [ 806.271885][T14371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 806.271901][T14371] RIP: 0010:bpf_xdp_redirect+0x59/0x1a0 [ 806.272070][T14371] Code: 81 c3 00 18 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 c5 6c 90 f8 48 8b 1b 4c 8d 63 38 4c 89 e5 48 c1 ed 03 <42> 0f b6 44 2d 00 84 c0 0f 85 d0 00 00 00 45 8b 34 24 44 89 f6 83 [ 806.272091][T14371] RSP: 0018:ffffc9000325f6f8 EFLAGS: 00010202 [ 806.272114][T14371] RAX: 1ffff1100559f300 RBX: 0000000000000000 RCX: 0000000000040000 [ 806.272132][T14371] RDX: ffffc90003561000 RSI: 0000000000001a87 RDI: 0000000000001a88 [ 806.272148][T14371] RBP: 0000000000000007 R08: ffffffff895fac60 R09: 1ffff11017288930 [ 806.272166][T14371] R10: dffffc0000000000 R11: ffffed1017288931 R12: 0000000000000038 [ 806.272183][T14371] R13: dffffc0000000000 R14: 1ffff9200064bf21 R15: 0000000002000000 [ 806.272200][T14371] FS: 00007fe6635ea6c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 806.272222][T14371] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 806.272238][T14371] CR2: 0000000020010000 CR3: 000000007ceba000 CR4: 00000000003506f0 [ 806.272259][T14371] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 806.272274][T14371] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 806.272290][T14371] Call Trace: [ 806.272301][T14371] [ 806.272312][T14371] ? __die_body+0x88/0xe0 [ 806.272350][T14371] ? die+0xcf/0x110 [ 806.272395][T14371] ? do_trap+0x15a/0x3a0 [ 806.272434][T14371] ? do_error_trap+0x1dc/0x2c0 [ 806.272471][T14371] ? __pfx_do_error_trap+0x10/0x10 [ 806.272505][T14371] ? rcu_is_watching+0x15/0xb0 [ 806.272545][T14371] ? exc_stack_segment+0x38/0x50 [ 806.272582][T14371] ? asm_exc_stack_segment+0x26/0x30 [ 806.272610][T14371] ? bpf_prog_run_generic_xdp+0x5f0/0x14c0 [ 806.272641][T14371] ? bpf_xdp_redirect+0x59/0x1a0 [ 806.272684][T14371] ? bpf_xdp_redirect+0x25/0x1a0 [ 806.272717][T14371] bpf_prog_56e821181540367a+0x1d/0x1f [ 806.272742][T14371] bpf_prog_run_generic_xdp+0x679/0x14c0 [ 806.272794][T14371] do_xdp_generic+0x673/0xb90 [ 806.272831][T14371] ? __pfx_do_xdp_generic+0x10/0x10 [ 806.272860][T14371] ? tun_get_user+0x26c8/0x4560 [ 806.272908][T14371] ? tun_get_user+0x26c8/0x4560 [ 806.272944][T14371] tun_get_user+0x2805/0x4560 [ 806.272996][T14371] ? __pfx_tun_get_user+0x10/0x10 [ 806.273039][T14371] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 806.273080][T14371] ? tun_get+0x1e/0x2f0 [ 806.273128][T14371] ? tun_get+0x1e/0x2f0 [ 806.273162][T14371] ? tun_get+0x27d/0x2f0 [ 806.273199][T14371] tun_chr_write_iter+0x113/0x1f0 [ 806.273240][T14371] vfs_write+0xa72/0xc90 [ 806.273267][T14371] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 806.273305][T14371] ? __pfx_vfs_write+0x10/0x10 [ 806.273326][T14371] ? do_futex+0x33b/0x560 [ 806.273371][T14371] ksys_write+0x1a0/0x2c0 [ 806.273400][T14371] ? __pfx_ksys_write+0x10/0x10 [ 806.273424][T14371] ? do_syscall_64+0x100/0x230 [ 806.273460][T14371] ? do_syscall_64+0xb6/0x230 [ 806.273495][T14371] do_syscall_64+0xf3/0x230 [ 806.273528][T14371] ? clear_bhb_loop+0x35/0x90 [ 806.273556][T14371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.273581][T14371] RIP: 0033:0x7fe66277471f [ 806.273602][T14371] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 806.273623][T14371] RSP: 002b:00007fe6635ea010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 806.273650][T14371] RAX: ffffffffffffffda RBX: 00007fe662903fa0 RCX: 00007fe66277471f [ 806.273677][T14371] RDX: 000000000000fdef RSI: 0000000020000340 RDI: 00000000000000c8 [ 806.273694][T14371] RBP: 00007fe6627f677e R08: 0000000000000000 R09: 0000000000000000 [ 806.273711][T14371] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 806.273726][T14371] R13: 000000000000000b R14: 00007fe662903fa0 R15: 00007ffcfd71d2e8 [ 806.273754][T14371] [ 806.273775][T14371] Modules linked in: [ 806.273832][T14371] ---[ end trace 0000000000000000 ]--- [ 806.705135][T14371] RIP: 0010:bpf_xdp_redirect+0x59/0x1a0 [ 806.710789][T14371] Code: 81 c3 00 18 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 c5 6c 90 f8 48 8b 1b 4c 8d 63 38 4c 89 e5 48 c1 ed 03 <42> 0f b6 44 2d 00 84 c0 0f 85 d0 00 00 00 45 8b 34 24 44 89 f6 83 [ 806.733092][T14371] RSP: 0018:ffffc9000325f6f8 EFLAGS: 00010202 [ 806.739836][T14371] RAX: 1ffff1100559f300 RBX: 0000000000000000 RCX: 0000000000040000 [ 806.748959][T14371] RDX: ffffc90003561000 RSI: 0000000000001a87 RDI: 0000000000001a88 [ 806.759175][T14371] RBP: 0000000000000007 R08: ffffffff895fac60 R09: 1ffff11017288930 [ 806.768219][T14371] R10: dffffc0000000000 R11: ffffed1017288931 R12: 0000000000000038 [ 806.776431][T14371] R13: dffffc0000000000 R14: 1ffff9200064bf21 R15: 0000000002000000 [ 806.784788][T14371] FS: 00007fe6635ea6c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 806.793873][T14371] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 806.800570][T14371] CR2: 0000000020010000 CR3: 000000007ceba000 CR4: 00000000003506f0 [ 806.808655][T14371] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 806.816913][T14371] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 806.825383][T14371] Kernel panic - not syncing: Fatal exception in interrupt [ 806.833858][T14371] Kernel Offset: disabled [ 806.838650][T14371] Rebooting in 86400 seconds..