last executing test programs: 44.319874471s ago: executing program 3 (id=5471): syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800"], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 42.924189824s ago: executing program 3 (id=5472): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x20108c0, &(0x7f0000002ac0)=ANY=[@ANYRES8=0x0], 0xfe, 0x61e6, &(0x7f0000002b00)="$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") socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 39.594266807s ago: executing program 3 (id=5473): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x2c8) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000030900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800b00010072656a6563740000140002800800014000000002080001400000000114000000110001"], 0xd8}}, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400010023bd7000fcdbdf25021f0000", @ANYRES32=r3, @ANYBLOB="08000a000000000008000200e000000208000100ac1e0001080001007f00000108000100ac14140b0800090003010000"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x8010) 30.795857685s ago: executing program 3 (id=5485): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="150000004effff000000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) chdir(&(0x7f0000000200)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 29.225537763s ago: executing program 3 (id=5490): syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800"], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 28.202335991s ago: executing program 3 (id=5492): r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', 0x4c, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e39352c726f6469722c757466383d312c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c00117e9a6bae7e4a53f24b35a03ae1b23111c9bfb2565752883487dcce6ec8d299157ce3b3555eb28e4598a7f1dee2736a66441b4c387e2669be3ae6ea8ce0f971001a61edbcf2e962b6f8753be291a7ca79e41945e83c279c7dfa"], 0x0, 0x2a8, &(0x7f0000000d00)="$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") open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYRES32=r0, @ANYRES8, @ANYRES32, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="e152983f6490911719266b83cb9b5456bf53f9aa4c7ca47a78b5cfff2b675b5e8cb999373741388460ec4ead2e6535ca883ba401684157ed551c6c726909b2e9378e146b7485e51172e8bd4288f8dd97262cf4acc890fbfff44969944ac4847f4459e94fb79a7ef3536372cb557800b8c9c8d8e768c2b69d7bbf162fe6d37f74476e4a9ed982e7233f41f0aa865ada2e560b0c4345593778aea314c6cc5cefee007cec38bae54afe27ffb9646c45a5b8653be106702873089d3964e1935c2225ea03f1bd9fdbff92f665176b8a5ece62d7fccdeaa9516ad361", @ANYRESOCT=r1, @ANYRESHEX, @ANYRESOCT=r3], 0x128}, 0x40001) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRES32=0x0], 0x11, 0x6a0, &(0x7f0000004200)="$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") r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000140)='./file0/file0\x00', r6, &(0x7f00000002c0)='./file1\x00', 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) sync() ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x8004550f, 0xffffffffffffffff) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x1008801, &(0x7f0000005ac0)=ANY=[], 0x2, 0x1e1, &(0x7f0000000400)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r11, 0xc020660b, &(0x7f0000000200)={0xf0000, 0x2000000}) socket$alg(0x26, 0x5, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 18.701915312s ago: executing program 1 (id=5512): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x810001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x5ad8d27b}], 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES64=r3, @ANYRESDEC=0x0, @ANYRES32=r4, @ANYBLOB="6cd3c14be1c76abf2648644caeeb1598cbd067ba48ce6cb371fc23816265a46ee25897d3dffca40540dcc41aab48e707f416c006b29a152537e4c1d47cb03a96765e0eb72cf31f709e91ccb5fadb76e21956d3e5d9775b75485230b7527d59d3f148185f9930495c2754", @ANYRES32=r4, @ANYBLOB, @ANYRES16=r4], 0x30}}, 0x2000c050) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="ba", 0x1}, {&(0x7f00000005c0)='0', 0xcea40}], 0x2}}], 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000045c0)={0x14, 0x2, 0x7, 0x101}, 0x14}}, 0x0) getgroups(0x0, 0x0) setregid(0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) bind(r7, &(0x7f0000000e00)=@nl=@proc={0x10, 0x0, 0x0, 0x10000}, 0x80) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10010, r8, 0x0) socket$can_raw(0x1d, 0x3, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12.748143444s ago: executing program 1 (id=5520): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x20108c0, &(0x7f0000002ac0)=ANY=[@ANYRES8=0x0], 0xfe, 0x61e6, &(0x7f0000002b00)="$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") socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 8.748954672s ago: executing program 1 (id=5526): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x2c8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000030900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800b00010072656a6563740000140002800800014000000002080001400000000114000000110001"], 0xd8}}, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x8010) 8.470763013s ago: executing program 2 (id=5527): syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8.442290755s ago: executing program 4 (id=5528): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000001c0)={0x0, 0x4d, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT, @CTA_TIMEOUT_ICMPV6_TIMEOUT, @CTA_TIMEOUT_ICMPV6_TIMEOUT, @CTA_TIMEOUT_ICMPV6_TIMEOUT, @CTA_TIMEOUT_ICMPV6_TIMEOUT, @CTA_TIMEOUT_ICMPV6_TIMEOUT, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x38}]}]}, 0x30}}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_RETRIES(r2, 0x701, 0xfffffffffffffbff) ioprio_set$pid(0x2, 0x0, 0x0) read(r0, 0x0, 0x0) 7.974712035s ago: executing program 4 (id=5529): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x20108c0, &(0x7f0000002ac0)=ANY=[@ANYRES8=0x0], 0xfe, 0x61e6, &(0x7f0000002b00)="$eJzs3c9vHGf9B/DP7C//yLep1UPVb4SQm5YfpTSJkxICBdoe4MClB5QrSuS6VUQKKAkorSziykLiwIm/AITEESGOiAN/QA9cuXHiRCQbCdQTg8Z+nni82e06tb2z9rxekjPzmWd2/YzfO/sjM7NPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADx3e98b6WIiBs/TQuWIv4vuhGdiIWqXo6IheWlvH4vIp6LneZ4NiL6cxHV7Xf+eTri1Yj46GzE1vb6arX48gH78e0//O233z/z1l9/37/4nz/e6742br3793/57z89ONw2AwAAQNuUZVkW6WP+ufT5vtN0pwCAqciv/2WSl5/6+lf/eOvPs9QftVqtVqunUNeVoz2oFxGxUb9N9Z7B4XgAOGE24uOmu0CD5N9qvYg403QngJlWNN0BjsXW9vpqkfIt6q8Hy7vt+VyQfflvFI+u7xg3nWT4HJNpPb42oxvPjOnPwpT6MEty/p3h/G/stg/Sesed/7SMy3+we+lT6+T8u8P5Dzk9+XdG5t9WOf/eE+XflT8AAAAAAMyw/P//Sw0f/507/KYcyCcd/12eUh8AAAAAAAAA4Kgddvy/R4z/BwAAADOr+qxe+fXZvWXjvoutWn69iHhqaH2gZdLFMotN9wMAAAAAAAAAAAAA2qS3ew7v9SKiHxFPLS6WZVn91A3XT+qwtz/p2r790GZNP8kDAMCuj87ma/n7uwuKiPmIuJ6+66+/uLhYlvMLi+ViuTCX388O5ubLhdrn2jytls0NDvCGuDcoqzubr92ubtLn5Untw/dX/a5B2T1Ax45I+mPGmOYGAweA9AIVseUV6ZQpy6fHvfmAfez/p9BSLDX9uGL2Nf0wBQAAAI5fWZZlkb7O+1w65t9pulMAwFTk1//h4wKHqjtj2iOO5v7VarVarVZ/qrquHO1BvYiIjfptqvcMhuMHgBNmIz5uugs0SP6t1ouI55ruBDDTiqY7wLHY2l5fLVK+Rf31II3vns8F2Zf/RrFzu3z7UdNJhs8xmdbjazO68cyY/jw7pT7Mkpx/Zzj/G7vtg7Tecec/LePyH+xcMtc+Of/ucP5DTk/+nZH5t1XOv/dE+XflDwAAAAAAMyz///+S4795kwEAAAAAAADgxNnaXl/N173m4/+fGbGe6z9Pp5x/8aT5L6R5+Z9oOf/OUP5fHFqvW5t/+Obe/v+v7fXV39375//n6UHzn8szRXpkFekRUaTfVPTS9DBb97jNfndQ/aZ+0en20jk/Zf+duBW3Yy0u7Vu3k/4ee+0r+9qrnvb3tV/e1957rP3KvvZ++t6BciG3X4jV+FHcjrd32qu2uQnbPz+hvZzQnvPvev5vpZx/r/ZT5b+Y2ouhaeXhh53H9vv6dNTveePWZ39x6fg3Z6LN6D7atrpq+8430J+dv8mZQfzk7tqdC/dv3rt3ZyXSZN/Sy5EmRyzn39/5mdt7/n9htz0/79f314cfDp44/1mxGb2x+b9Qm6+296Up960JOf9B+sn5v53aR+//Jzn/8fv/yw30BwAAAAAAAAAAAAAAAD5JWZY7l4i+ERFX0/U/TV2bCQBMV379L5O8XK1Wq9Vq9emr68rRXq8XEfGX+m2q9ww/G3VnAMAs+29E/L3pTtAY+bdY/r6/avpi050Bpuru+x/84Obt22t37jbdEwAAAAAAAADg08rjfy7Xxn9+MSKWhtbbN/7rm7F82PE/e3nm0QCjRzzQ9xibnUG3Uxtu/PnYGZ/7wrjxv8/H4+N/5zFxu/XtGKM/oX0woX1uQvv8yKV7aY280KMm5/98bbzzKv9zQ8Ovt2H81+Ex79sg53++9niu8v/C0Hr1/MvfzFz+GwddcTM6+/K/eO+9H1+8+/4Hr9x67+a7a++u/fDKysqlK1evXrt27eI7t26vXdr993h6PQNy/nnsa+eBtkvOP2cu/3bJ+X8u1fJvl5z/51Mt/3bJ+ef3e/Jvl5x//uwj/3bJ+b+Uavm3S87/S6mWf7tsba/PVfm/nGr5t0ve/7+cavm3S87/lVTLv11y/hdSLf92yflfTPUB8vf18KdIzj8f4bL/t0vOfyXV8m+XnP/lVMu/XXL+V1It/3bJ+b+aavm3S87/K6mWf7vk/K+mWv7tkvP/aqrl3y45/2upln+75Py/lmr5t0vO/+upln+75PxfS7X82yXn/41Uy79dcv7fTLX82yXn/61Uy79dcv6vp1r+7bL3/f9mzMzCzM+P9g67MSPbddJmmn5mAgAAAAAAAAAAAACGTeN04qa3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1Eaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwd28xct31HcDP7M1rhxADITipgbVjjHGW7PoSX2hdTLg2QLklFHrBdr1rs+AbXrsEimTTQImEUVEFavrQFhBqI1UVVsUDrSjNQ9XLU2kf6EtFVQmpURWigIrUVjRbzZz//++Z2dmZXXu8nj3/z0eyf7szZ+acOXNmdr9rf/cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECzLW+c/VytKIr6n8ZfG4viBfWP109sbFz2ulu9hQAAAMCN+r/G38/dkS44vIwbNS3zd6/4x28uLCwsFB8Y/vLolxYW0hUTRTG6riga10VX//2DteZlgseK8dpQ0+dDPVY/3OP6kR7Xj/a4fqzH9et6XD/e4/pFO2CR9eXPYxp3tq3x4cZylxZ3FqON67Z1uNVjtXVDQ/FnOQ21xm0WRk8Uc8WpYraYblm+XLbWWP7bW+rrelsR1zXUtK7N9SPkR586HrehFvbxtpZ1XbvP6IdvKCZ+/KNPHf/jC8/c3Wn23A0t91du546t9e38TLik3NZasS7tk7idQ03bubnDczLcsp21xu3qH7dv53PL3M7ha5u5qtqf8/FiqPHxdxv7aaT5x3ppP20Ol/33vUVRXL622e3LLFpXMVRsaLlk6NrzM14ekfX7qB9KLy5GVnScblnGcVqfM9taj9P210R8/reE240ssQ3NT9MPPz226Hlf6XEa1R/1Uq+V9mOw36+VQTkG43Hx3caDfrzjMbgtPP5PbV/6GOx47HQ4BtPjbjoGt/Y6BofGhhvbnJ6EWuM2147BXS3LDzfWVGvMp7d3PwanLpw+NzX/iU++du70sZOzJ2fP7Nm1a3rPvn0HDhyYOjF3ana6/Ps69/bg21AMpdfA1rDv4mvg1W3LNh+qC1/t3+twvMvrcGPbsv1+HY60P7ja6rwgFx/T5Wvj4fpOH78yVCzxGms8Pztv/HWYHnfT63Ck6XXY8WtKh9fhyDJeh/Vlzu1c3vcsI01/Om3DzfpasLHpGGz/fqT9GOz39yODcgyOh+PiX3cu/bVgc9jexydX+v3I8KJjMD3c8N5TvyR9vz9+oDE6HZf31K+4bay4OD97/v5Hj124cH5XEcaqeEnTsdJ+vG5oekzFouN1aMXH6+G5Vzx+T4fLN4Z9Nf7a+l/jSz5X9WX23t/9uWp8deu8P1su3V2E0WervT87fTWv78+UJbvsz/oyn5m68e/FUy5tev8dXeL9N+b+58v1pbt6bHh0pHz9Dqe9M9ryftz6VI003rtqjXU/N7W89+PR8Ge134/v7PJ+vKlt2X6/H4+2P7j4flzr9dOOG9P+fI6H4+TUdPf34/oym3av9Jgc6fp+fG+YtbD/XxOSQspFTcfOUsdtWtfIyGh4XCNxDa3H6Z6W5UdDNquv68nd13ec7ri3vK/h9OiuWa3jdKJt2X4fp+n9aqnjtNbrp2/Xp/35HA/HxZ17uh+n9WWe2nvj753r44dN751jvY7B0eGx+jaPpoOwfL9fWB+PwfuL48XZ4lQx07h2rHE81RrrmnxgecfgWPiz2u+Vm7ocgzvalu33MZi+ji117NVGFj/4Pmh/PsfDcfHEA92Pwfoyb9rf3+9dd4RL0jJN37u2/3xtqZ953dO2m27mz7zq2/k3+7v/bLa+zKkDK82Z3ffTfeGS2zrsp/bX71KvqZlidfbTprCdzxxYej/Vt6e+zJcOLvN4OlwUxaWPPdj4eW/495U/v/i9b7b8u0unf9O59LEHn739xN+uZPsBWPueL8eG8mtd079MLeff/wEAAIA1Ieb+oTAT+R8AAAAqI+b++L/CE/kfAAAAKiPm/pEwk0zy/6Y3PTP3/KUiNfMXgnh92g0PlcvFjut0+Hxi4Zr65Q9+ffYnf3lpeeseKoripw/9ZsflNz0Ut6s0Ebbz6ptbL198w0vLWv/RR64t19xf/0q4//h4lnsYdKrgThdF8e07vtBYz8QHrzTmUw8dbcz3Xn78sfoyzx0sP4+3f/ol5fJ/EMq/h08ca7n902E//CDM6bd33h/xdt+48prN+99/bX3xdrWtL2w87Cc+VN5v/D05X3ysXD7u56W2/68+/+Q36ss/+qrO239pqPP2Pxnu9+th/s/Ly+Wbn4P65/F2nw3bH9cXb3f/177Tcfuvfq5c/txbyuWOhhnXvyN8vu0tz8w1769Ha8daHlfx1nK5uP7p7/1O4/p4f/H+27d//MiVlv3Rfnw89c/l/Uy1LR8vj+uJ/qJt/fX7aT4+4/qf/O2jLfu51/qvvvfpl9fvt33997UtN9x2+/bf2PSHn/1Cx/XF7Tn8Z+daHs/h94TXcVj/Ex8Kx2O4/n+vfqFlvdHR97S+/8Tlv7LxUsvjid7243L9V19/sjH/Y+Inv3/bC25/4eVX1vddUXz3feX99Vr/yT8627L9X71rZ+P5iNfHjn77+pcS13/+45Nnzs5fnJtp2quN353zjnJ71o2v31Df3jvCe2v750fOXvjw7PmJ6Ynpopio7q/Qu25fC/PZclxe6e13PhKez3t+79sbtv/T5+Pl//JwefmVt5dft14dlvtiuHxj+fwt1G5w/U9suavx+q49VX7e0mPvg83b/vPAshYMj7/9+4J4vJ976Ycb+6F+XePrRnxd3+D2f3+mvJ9vhf26EH4z89a7rq2vefn4uxGuvK98vd/w/gtvc/F5/ZPwfL/zB+X9x+2Kj/f74fuY72xqfb+Lx8e3Lg2133/jt3hcDu8nxeXy+rhU3N9Xnrur4+bF30NSXL678fnvpvu5e0UPcynzn5ifOjV35uKjUxdm5y9MzX/ik0dOn7145sKRxu/yPPKRXre/9v60ofH+NDO7b28xvb4oirPF9Cq8Yd2c7a9/tLztP/fI8Zn909tnZk8cu3jiwiPnZs+fPD4/f3x2Zn77sRMnZj/e6/ZzM4d27T64Z//uyZNzM4cOHDy45+Dk3Jmz9c0oN6qHfdMfnTxz/kjjJvOH9h7c9cADe6cnT5+dmT20f3p68mKv2ze+Nk3Wb/0bk+dnTx27MHd6dnJ+7pOzh3Yd3Ldvd8/fBnj63In5ianzF89MXZyfPT9VPpaJC42L61/7et2eapr/t/L72Xa18hfxFe+6b1/6/ax1X//0kndVLtL2C0SfCb+L5h9edO7Acj6PuX80zCST/A8AAAA5iLl/LMxE/gcAAIDKiLl/XZiJ/A8AAACVEXP/eJhJJvlf/1//f3n9//J6/f+8+v/nPlb2Std6/z/25/X/83CL+/83vH79f/3/6vX/l9+fX+vbr/+v/89ig9b/j7l/fVFkmf8BAAAgBzH3bwgzkf8BAACgMmLuvy3MRP4HAACAyoi5/wVhJpnk/xz6/+/usNgK+/+7exWuqt//XzPn/19f6P/r/zf3/+OTo/+fjRX379//cMun+v+B/r/+v/6//r/+PzdsdMlrblX/P+b+28NMMsn/AAAAkIOY+18YZiL/AwAAQGXE3H9HmIn8DwAAAJURc//GMJNM8n8O/f9OnP+/sv1/5//X/+/v+f+bNkb/f21w/v/uOvf/x25bdJH+/wr7/+P6/2ux/z/a3+0f7P5/z83X/+emGLTz/8fc/6Iwk0zyPwAAAOQg5v4Xh5nI/wAAAFAZMfe/JMxE/gcAAIDKiLn/zjCTTPK//r/+v/6//r/+f+f19z7/f/mR/v9g0f/vzvn/e3D+/7z6/33e/sHu//f7/P+jb26/vf4/nQxa/z/m/peGmWSS/wEAACAHMfffFWYi/wMAAEBlxNz/sjAT+R8AAAAqI+b+TWEmmeR//X/9f/1//X/9/87r793/L+n/Dxb9/+70/3vQ/9f/1/9fXv+/wze/+v90Mmj9/5j77w4zyST/AwAAQA5i7r8nzET+BwAAgMqIuf9nwkzkfwAAAKiMmPs3h5lkkv/1//X/9f/z6v/fN6b/r/9fbfr/3en/96D/r/+v/7/M8/8vtpL+/7ped0ZlDFr/P+b+l4eZZJL/AQAAIAcx978izET+BwAAgMqIuf+VYSbyPwAAAFRGzP0TYSaZ5H/9/2r1///0r594ZaH/r//fY/0V7f/Hw0D/P3P6/93p//eg/6//r/+/Kv1/8jFo/f+Y+7eEmWSS/wEAACAHMfdvDTOR/wEAAKAyYu6/N8xE/gcAAIDKiLl/W5hJJvlf/79a/f9I/1//v9v6K9r/T/T/86b/30HTi1T/vwf9f/3/7Pv/8btf/X/6Y9D6/zH3vyrMJJP8DwAAADmIuX97mIn8DwAAAJURc/+rw0zkfwAAAKiMmPt3hJlkkv/1//X/9f/1//X/O69f/39t0v/vbqX9/zH9f/1//f/M+v/O/09/DVr/P+b+14SZZJL/AQAAIAcx9+8MM5H/AQAAoDLi/98s/9+r/A8AAABVFHP/ZJhJJvlf/1//P6f+f03/X/9f/7/y9P+7c/7/HvT/9f/1//X/6atB6//H3P/aMJNM8j8AAADkIOb++8NM5H8AAACojJj7p8JM5H8AAACojJj7p8NMMsn/+v/6/zn1/53/X/9f/7/69P+70//vQf9f/79q/f+i0P/nlhq0/n/M/bvCTDLJ/wAAAJCDmPt3h5nI/wAAAFAZMffvCTOR/wEAAKAyYu7fG2aSSf7X/9f/1//X/9f/77x+/f+1qVv//svLuL3+f6D/r/+v/1+N/r/z/3OLDVr/P+b+B8JMMsn/AAAAkIOY+/eFmcj/AAAAUBkx9+8PMwn5v9P/6wYAAADWlpj7D4SZZPLv//r/Fen//9bft6xb/1//v9v6+9P/X6//H6b+/2Cp6Pn/218W121t9v+fT49f/1//f5C3X/9f/5/FBq3/H3P/wTCTTPI/AAAA5CDm/teFmcj/AAAAUBkx9/9smIn8DwAAAJURc//PhZlkkv/1/yvS/2+j/6//3239zv+v/19lFe3/983a7P8vcf7/If1//f/B2n79/+X0/9f1uhsq5ub3/+NHy+v/x9x/KMwkk/wPAAAAOYi5/+fDTOR/AAAAqIyY+18fZiL/AwAAQGXE3H84zCST/K//r/+v/6//f3P6/68v2g1i/79+8Oj/V4v+f3eV6v87/7/+/4Btv/6/8/+z2KCd/z/m/jeEmWSS/wEAACAHMfc/GGYi/wMAAEBlxNz/xjAT+R8AAAAqI+b+N4WZZJL/9f/1//X/9f+d/7/z+vX/1yb9/+70/3vQ/9f/1//X/6evbl3/f13H62Puf3OYSSb5HwAAAHIQc/9bwkzkfwAAAKiMmPvfGmYi/wMAAEBlxNz/tjCTTPK//r/+v/6//r/+f+f16/+vTfr/3en/96D/r/+v/6//T18N2vn/Y+7/hTCTTPI/AAAA5CDm/ofCTOR/AAAAqIyY+98eZiL/AwAAQGXE3P+OMJNM8r/+v/6//r/+v/5/5/Xr/69N+v/d6f/3oP+v/6//r/9PXw1a/z/m/neGmWSS/wEAACAHMff/YpiJ/A8AAACVEXP/u8JM5H8AAACojJj73x1mkkn+1//X/x+s/v/Cpebb6f/r/xf96v/Xb6T/nwX9/+70/3vo0P9fp/+v/6//r//PdRu0/n/M/e8JM8kk/wMAAEAOYu5/b5iJ/A8AAACVEXP/+8JM5H8AAACojJj7Hw4zyST/6/9n2f9PD3nw+v/O/6//7/z/+v83Rv+/O/3/Hpz/X/9/Tfb/R8P86GT82qT/z6AYtP5/zP2PhJlkkv8BAAAgBzH3vz/MRP4HAACAyoi5/5fCTOR/AAAAqIyY+z8QZpJJ/tf/z7L/P8Dn/69a/3+k5fjIqf8/3vR8puNS/1//fxXo/3en/9+D/r/+/yD3/8PRvH6J2zv/P4No0Pr/Mfd/MMwkk/wPAAAAOYi5/5fDTOR/AAAAqIyY+38lzET+BwAAgMqIuf9Xw0wyyf/6//r/+v/O/+/8/53Xr/+/Nun/d6f/34P+fz79/5H+b/+tO/9/Sf+fQTRo/f+Y+38tzGTJ4Pfsfy3jYQIAAAADJOb+D4WZZPLv/wAAAJCDmPuPhJnI/wAAAFAZMfcfDTPJJP/r/7f3/+MZVfX/9f/1//X/9f/Xov71/192e1Ho/+v/6/9Xtv9/E7Zf/1//n8UGrf8fc/+xMJNM8j8AAADkIOb+Xw8zkf8BAACgMmLuPx5mIv8DAABAZcTcPxNmkkn+X+3+f1Ovd3Qw+//O/3+9/f+f6v/r/wf6/53p/68O5//vTv+/B/1//X/9f/1/+mrQ+v8x98+GmWSS/wEAAKDC0o+DY+4/EWYi/wMAAEBlxNx/MsxE/gcAAIDKiLn/w2EmmeR/5//X/3f+/1vR/x9pWV7/v6T/r//fD/r/3en/96D/r/+v/6//T18NWv8/5v65MJNM8j8AAADkIOb+j4SZyP8AAABQGTH3fzTMRP4HAACAyoi5/1SYSSb5X/9f/z/3/n+tKC47/7/+f6f16/+vTfr/3en/96D/r/+v/6//T18NWv8/5v7TYSaZ5H8AAAD+n737aLLrqvo4fLGVegQfgTEjhmZkD/gATJlRxZhscrBNzmCiyWDA5JyzyTnnbHKOJhhDVVNur7Wk1r19jqQ+6nvO3s8zWa9UFn2FG7v+r+pXmx7k7r9v3GL/AwAAQDNy998vbrH/AQAAoBm5++8ft3Sy//X/+v/e+//VVt7/3//Xt9//3/53SP+v/z8Ka/39sc1/3UFR+IH9/10vu/Je+n/9v/5/kP5f/6//52xz6/9z9z8gbulk/wMAAEAPcvc/MG6x/wEAAKAZufsfFLfY/wAAANCM3P1Xxi2d7H/9v/5f/6//39f/3+j9f/3/snn/f9gy+v/Ldnd39f+b6P/n/fn1//p/1s2t/8/d/+C4pZP9DwAAAD3I3f+QuMX+BwAAgGbk7n9o3GL/AwAAQDNy9z8sbulk/+v/9f/6/6X0/ycW/P5/fD/o//X/R0D/P2wZ/b/3//X/y/z8+n/9P+vOv/8/8B/bk/T/ufsfHrd0sv8BAACgB7n7HxG32P8AAADQjNz9j4xb7H8AAABoRu7+R8Utnex//b/+X/+/lP7/iN7/1//r/xfu+tXpfybo/9fp/0eM9P+rlf5/yDn385t/e8v5/AfQ/+v/WXf+/f+B/1GT9P+5+x8dt1yxWp240N8kAAAAMCu5+x8Tt3Ty5/8AAADQg9z9V8Ut9j8AAAA0I3f/1XFLJ/tf/6//1//r//X/m7++/n+ZvP8/7PD9/13udJ9799v/e/9/mPf/p+7/b/vOaLL/l1l3ZG79f+7+a+KWTvY/AAAA9CB3/2PjFvsfAAAAmpG7/3Fxi/0PAAAAzcjd//i4pZP9r/9vrf+/dN+vO6P/36td9P9L7//vrv/X/+v/R+j/h3n/f8TeP+Z26of6f/2/9/+9/8/hzK3/z93/hLilk/0PAAAAPcjd/8S4xf4HAACAZuTuf1LcYv8DAABAM3L3Pzlu6WT/6/9b6//3/zrv/7fW/3v/f6X/1/+P0P8P0/+PaOX9/wv8rtl2P39Y2/78+n/9P+vm1v/n7n9K3NLJ/gcAAIAe5O5/atxi/wMAAEAzcvc/LW6x/wEAAKAZufufHrd0sv/1//r/ZfT/+RX0//r/i9//J/3/Mun/h+n/R7TS/1+gbffzS//8+n/9P+vm1v/n7n9G3NLJ/gcAAIAe5O5/Ztxi/wMAAEAzcvc/K26x/wEAAKAZufufHbd0sv/1//r/ZfT/3v/X/3v/X/9/bvT/w/T/I/T/+n/9v/6fSc2t/8/df23c0sn+BwAAgB7k7n9O3GL/AwAAQDNy9z83brH/AQAAoBm5+58Xt3Sy//X/+n/9v/5f/7/56+v/l0n/P0z/P0L/r//X/+v/mdSM+v8zftWp1fPjlk72PwAAAPQgd/8L4hb7HwAAAJqRu/+FcYv9DwAAAM3I3X9d3NLJ/tf/z6b/38v52ur/d1arlf5/1Wn/v3PG38/6vtT/6/+PgP5/mP5/hP5f/6//1/8zqRn1/3s/zt3/orilk/0PAAAAPcjd/+K4xf4HAACAZuTuf0ncYv8DAABAM3L3vzRu6WT/6/9n0//vaav/9/7/2d8fPfX/3v9fp/8/Gvr/Yfr/Efp//b/+X//PpObW/+fuf1ncdOL4Bf8WAQAAgJnJ3f/yuKWTP/8HAACAHuTuf0XcYv8DAADAQl279jO5+18Zt3Sy//X/0/b/J874Of2//v/s7w/9v/5f/3/x6f+H6f9H6P/1//p//T+Tmlv/n7v/VXFLJ/sfAAAAepC7//q4xf4HAACAZuTuf3XcYv8DAABAM3L3vyZu6WT/6/+9/6//1//r/zd/ff3/Mun/h+n/R+j/D+znz+VpbP3/ofv/k6f/T/0/bTiP/n93d/eqi97/5+5/bdzSyf4HAACAHuTuvyFusf8BAACgGbn7Xxe32P8AAADQjNz9r49bOtn/+v9O+//8Vl9W/3/1aqX/1//r//X/w/T/w/T/I/T/3v/3/r/+n0nN7f3/3P1viFs62f8AAADQg9z9b4xb7H8AAABoRu7+N8Ut9j8AAAA0I3f/m+OWTva//r/T/t/7//p//f9R9/+3rvT/R2IR/f/OwV9/7v3/Nfp//f+A7vr/e9xt3w/1//p/1s2t/8/d/5a4pZP9DwAAAD3I3f/WuMX+BwAAgGbk7n9b3GL/AwAAQDNy9789bjrWyf7X/+v/9f/6f/3/5q9/xO//n1itVvr/CSyi/x8w9/5/mvf/z/5f+Wn6f/3/kj+//l//z7q59f+5+98Rt3Sy/wEAAKAHufvfGbfY/wAAANCM3P3vilvsfwAAAGhG7v53xy2d7H/9v/5f/6//b77/v2YR/b/3/yei/x82j/7/YPp//f+SP7/+X//PudtW/5+7/z1xSyf7HwAAAHqQu/+9cYv9DwAAAM3I3f++uMX+BwAAgGbk7n9/3NLJ/tf/6//Pp//Pz6n/b6v/Pzm7/v/Uvv+8Tt7/1/9PRP8/TP8/Qv+v/9f/X6v/Z0pze/8/d/8H4pZO9j8AAAD0IHf/B+PW/+vW/gcAAIBm5O7/UNxi/wMAAEAzcvd/OG7pZP/r//X/3v/X/zf//r/+vyv6/2H6/xH6f/2//t/7/0xqbv1/7v6PxC2d7H8AAADoQe7+j8Yt9j8AAAA0I3f/x+IW+x8AAACakbv/xrilk/2v/9f/6//1//r/2/8e6v/boP8fdjT9/47+X/9f/fwd4n8F+n/9/9ivp01z6/9z9388bulk/wMAAEBrjm/4udz9n4hb7H8AAABoRu7+T8Yt9j8AAAAs0rENP5e7/1NxyyL3/6YKfZj+X/+v/9f/6/83f339/zJtpf/Pbwr9v/f/Qz/9/533/Whp7/+f/e+vS1f6f/0/U5tb/5+7/9NxyyL3PwAAALBJ7v7PxC32PwAAADQjd/9n4xb7HwAAAJqRu/9zcUsn+1//r//X/+v/9f+bv77+f5m8/z9M/z9C/7/V9/OX/vn1//p/1s2t/8/d//m4pZP9DwAAAD3I3f+FuMX+BwAAgGbk7v9i3GL/AwAAQDP2dn/GZR3uf/2//l//r//X/2/++vr/ZdL/D9P/j9D/6//1//p/JjW3/v9Le7/q1OrLcUsn+x8AAAB6kLv/K3GL/Q8AAADNyN3/1bjF/gcAAIBm5O7/WtzSyf7X/+v/l9H/7+7uXqX/1//v//2c7v9vWnD/f53+f2L6/2H6/xH6f/3/7Pv/s/8teZr+nzmaW/+fu//rcUsn+x8AAAB6kLv/G3GL/Q8AAADNyN3/zbjF/gcAAIBm5O7/VtzSyf7X/8+g/z+l//f+v/5/5f1//f9E9P/D9P8jWuz/T537b3/b/fxhbfvze/9f/8+6ufX/ufu/Hbd0sv8BAACgB7n7vxO32P8AAADQjNz9341b7H8AAABoRu7+78Utnex//f/R9f+3/XfXy/v/O6vNn1//r//X/+v/Lzb9/zD9/4gW+//zsO1+fumfX/+v/2fd3Pr/3P3fj1v2D7/j5/e7BAAAAOYkd/8P4pZO/vwfAAAAepC7/4dxi/0PAAAAzcjd/6O4pZP9r/+fwfv/Dfb/3v/f/P2h/591/3+J/r8N+v9h+v8R+n/9v/5/ov4/v5v1/72bW/+fu//HcUsn+x8AAAB6kLv/J3HLFTvb+kgAAADAxHL3/zRu8ef/AAAA0Izc/TfFLWfs/01tdyv0//p//b/+X/+/+evr/5dJ/z/sXPv/k6vD9f9J/6//1//32v97/5/bHXH/f/VY/5+7/2dxiz//BwAAgMU5fsDP5+7/edxi/wMAAEAzcvf/Im6x/wEAAKAZuft/GbfcfMm2PtKR0v/r//X/I/3/LfENrv/X/+v/F0H/P8z7/yP0/1P085fr/9vo/1cr/T+Hd8T9/+iPc/f/Km7x5/8AAADQjNz9v45b7H8AAABoRu7+38Qt9j8AAAA0I3f/b+OWTva//l//f8j+fy/NbLr/9/6//j/o/5dB/z9s+/3/DYNfVv/fRP/v/f9G+n/v/zOFufX/uft/F7d0sv8BAACgB7n7fx+32P8AAADQjNz9f4hb7H8AAABoRu7+P8Ytnez/rfX/8V+1/n/x/X/77/8P9v+7K/2//l//Py/6/2Hb7/+H6f/1/0v+/Pp//T/r5tb/5+7/U9zSyf4HAACAHuTu/3PcYv8DAABAM3L3/yVusf8BAACgGbn7/xq3dLL/vf+v/9f/e/9f/7/56+v/l0n/P0z/v1n9jdL/6//1//p/JjW3/j93/9/ilk72PwAAAPQgd//f4xb7HwAAAJqRu//muMX+BwAAgGbk7v9H3NLE/j82+lfo/xfZ/1cerf/X/+v/9f/sp/8fts3+/553HP+y3v/fev+fH0H/r//X/zOJufX/ufv/Gbc0sf8BAACA2+Tu/1fcYv8DAABAM3L3/ztusf8BAACgGbn7b4lbOtn/I/3/yfoL9f+DvP+///Pr/zd/f+j/9f/6/4tP/z/M+/8j9P/e/9f/6/+Z1Nz6/9z9/4lbOtn/AAAA0IPc/bfGLfY/AAAANCN3/3/jFvsfAAAAmpG7/39xSyf73/v/S+r/L9f/6//1//p//f8I/f8w/f8I/b/+X/+v/2dSc+v/c/f/PwAA///2nlJP") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 7.694315753s ago: executing program 0 (id=5530): futex(&(0x7f0000000140)=0xf2, 0x6, 0x0, 0x0, 0x0, 0x2) 7.14546903s ago: executing program 2 (id=5531): r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x301e00, 0x41) fsmount(r0, 0x0, 0x0) 7.002584326s ago: executing program 0 (id=5532): r0 = socket$inet6(0xa, 0x6, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3800003, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) 6.35748518s ago: executing program 2 (id=5533): r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 5.42678628s ago: executing program 2 (id=5534): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001940)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1800", @ANYRES32], 0x20) 5.383557638s ago: executing program 0 (id=5535): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x20108c0, &(0x7f0000002ac0)=ANY=[@ANYRES8=0x0], 0xfe, 0x61e6, &(0x7f0000002b00)="$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") socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 5.158636494s ago: executing program 1 (id=5536): syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000380)='./bus\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000006a006bb20000000000000000000000000000000008000a80"], 0x20}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x7, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x0, "d30f388c52647612d91de4353d68b0fa00"}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@multicast2, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500"}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ac38f5bd6e0630e369c7b35d21ff1f4d7ed79c31e2b0f1da"}, 0x3c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000180)={@private, @multicast2, 0x0, "941621a61c5815f4678d8fd4a8e14b0447113c694d1fd55708018620fd419884"}, 0x3c) 4.090219023s ago: executing program 4 (id=5537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = gettid() r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0xc0185879, &(0x7f0000000380)={@id={0x2, 0x0, @auto="ffee8e7268b4d909e4003f00"}}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000001240)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@nolazytime}, {@abort}]}, 0x1, 0x60b, &(0x7f0000001b40)="$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") sendmmsg$inet(r2, &(0x7f0000001d00)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="090000000000000000000000bb72440f00000000000000a77ab41d757a586b42fcbf674813218526f8d2e69f880d55ed59f223a3df1208edf735091355cdb4db2bbca0c95806b091", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) 3.858933324s ago: executing program 2 (id=5538): r0 = socket$inet6(0xa, 0x6, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x3000490, &(0x7f0000000180)={[{@dioread_lock}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x80}}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@noload}, {@jqfmt_vfsold}]}, 0x45, 0x7ba, &(0x7f0000002200)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3800003, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair(0x1d, 0x803, 0x1, &(0x7f0000000040)) 3.273389577s ago: executing program 1 (id=5539): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000060001000a00000008000500"], 0x28}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x305) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x84, 0x22, 0x0, &(0x7f00000004c0)) socket$inet_smc(0x2b, 0x1, 0x0) 1.884974355s ago: executing program 4 (id=5540): syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.74569704s ago: executing program 0 (id=5541): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./bus\x00', 0x2000000, &(0x7f0000000080)=ANY=[@ANYBLOB="6669dc1a7b9a513e37e7ae4254526c655f756d61736b3d303030303030300000747970653d7763e6ef2c636f6465706167653d69736f383835392d352c97696c65b6756d61736b3df745d9d6dbbaceb405b837fb58d2ff30303030303030303030304b30303030303030303030312c696f636861725365743d63703835322c002bbba585a92435ea33f44c8f4667a502480f4147956eeb2ec5e9a5bef4f49261945b641d5258d5e8bff11c74f32506d6dc1a234f214d9e2a7561bde56bbee91719a3d00e77e4300ce72dd1affdcd1ae73330cf3fe211ae6a3473d32d4d895d6a1a920418f796166fb4d4b5b544d5"], 0x1, 0x30e, &(0x7f0000000900)="$eJzs3b9u00AcB/DvnZ02pVExbRESC6hQCZaKAgNiCUJZ2ZkQkKRShFVEWyRgIVSMiAdgYuEVeAgWEC8ALExsLNmM7nx27PjiJGocp+X7kRo55/vzu/jP3VkCg4j+W3cbPz7d+K3+BODAAXAbkACqgAvgLM5Vn+8edA78diuvIkeXUH8CYUmRydPcbduKqnK6hOGpby5qyTQqRhAEd36WHQSVTl/9FhJYNNeh3l+dcVzTMti5LnChpFBKk/wNRA89vMBKieEQEdEcMOO/NMNETScJSAlsmmF/nsf/7FpjhF4xcZTlpp9JCnILJMZ/PbsLhDq+p/Wu/npP/6xqv4xWieMEUxn4voDwzErNwYR9VfkrCJlY5NJOx8VW8w1aEoeoG4kC6/qzFZ66kRHRbkx2vgyvrYJ7p8LeqBnl0uDuKKSdjt9eVBuW+Ncma/HoxBfxTTwQHj6gFc//3ECow6SPlDdwpGRFxX9teI3LupTKBXMp1ut1mcpyRjdy3rRgjOhl1b4iSdYZPSDoxhFY4jyMNnTbq0g/Vgh7t21rQPQrX7OV8uJv2bK6rfVUKcecCVvNp37uo5RiRF0U78V9sYE/+IxGYv4vVXybSFyZebd6oXOaMyPsz4I9p6tzepmRoxtvXYwjMBYn7hsBEz4te4fHuIWV/Zevnji+395TG48sG89qe8KkVN4C1jzFbzjIyYNuP0UPHq+DYNyag3TKx7/AUUJVQ18/5epUfwR1/4hT1OVjy6yusjhFFn10ohFvWhV6mP2plb/hwrar8RV5J2ShG9HUZSoVqonWkF1Tvz/RHNoX0UE3CZlJLJ1wat4lwvWfnsmbWZ2+z6gPL2eenr/IRKrG7XgFl54KrtrmLiPWBsvDV3CJFq8PWTPqNdelK8DlRKJAbouejvPEEA18x0M+/yciIiIiIiIiIiIiIiIiIiIiIiIiOm5m8S8Wyu4jEREREREREREREREREREREREREREREdFxN/77f5f6b2qy/R/x+v2/3sj3/6ZeAGxeFMX3/xKV418AAAD///k/d1Y=") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') 1.170452355s ago: executing program 0 (id=5542): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x0, 0x0, @mcast2}, 0x1c) (fail_nth: 3) 1.099403545s ago: executing program 4 (id=5543): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 970.087807ms ago: executing program 1 (id=5544): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x810, &(0x7f0000000100)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRES32=0x0, @ANYRES64], 0x1, 0xa24, &(0x7f0000002080)="$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") unshare(0x20040600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000e400128009000100766c616e00000000d400028006000100000000000c0002000000000000000000060005000000000006000100000000000600050000000000100004800c00010000000000000000007c0004800c00010000000000000000000c00010000000000000000000c00010000000000000000000c0001000000fdc8000000000c00010000000000000000000c00010000000000000000000c00010000000000000000000c00010000000000000000000c00010000000000000000000c000100000000000000000006000500000000000c000200000000000000000004"], 0x104}, 0x1, 0xba01}, 0x0) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x200}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000001c40)={{0x12, 0x1, 0x0, 0x1c, 0xa3, 0x7b, 0x10, 0xc72, 0x13, 0xbabe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x56, 0xb0, 0xd3}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000b80)={0x84, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 318.492157ms ago: executing program 0 (id=5545): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x2c8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000030900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800b00010072656a6563740000140002800800014000000002080001400000000114000000110001"], 0xd8}}, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x8010) 168.509802ms ago: executing program 2 (id=5546): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="93378e66cf9b48cb59638401fcd1730172853a9fa88827996042ab60", 0x1c) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000600), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/48, 0x30}, {&(0x7f0000000700)=""/230, 0xe6}, {&(0x7f0000000800)=""/199, 0xc7}, {&(0x7f0000000900)=""/58, 0x3a}, {&(0x7f0000000940)=""/135, 0x87}], 0x5, &(0x7f0000000ac0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000b40), 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000bc0)=""/144, 0x90}, {&(0x7f0000000c80)=""/5, 0x5}, {&(0x7f0000000cc0)=""/136, 0x88}, {&(0x7f0000000d80)=""/5, 0x5}], 0x4, &(0x7f0000000e00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}], 0x2, 0x0, 0x0) 0s ago: executing program 4 (id=5547): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x800) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, 0x0, &(0x7f00000000c0)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x3a) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="050000000091c700", 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000016c0)="84e72947eb3188877acd603c805503fd6c502bfd6731b7f4b343ef7f9b927515a71dc71dc1d45c8fa79a904c2d1c6aca34aeab5fb1420f9401f9f9efa9ace366784603d832b7713803185ada34af87fe22a057b52fe4a12b45f85256dc4c380d0e82810cc0bbd73d377b65", 0x6b}, {&(0x7f0000001780)="f86f776a078adaaf2bd56765444a4e6a93547e21d9be13d599a3653ae138e5978e0848c9790ba7fd1ba2c9c4edc53958515e4b3fbc793bc69d5298b073a2e078869e00f2c25e93d53dcc623c138679b703862fe426a32b954724ddcbb553a848dcff0c0d37bd7d0a49eeb2ee691b", 0x6e}, {&(0x7f0000001940)="153b44f186ea73ceca04ad5a6bc62a0264e48e3973e0c8694363f2e6057a313d7b83896a8cda5dafe556fb96bc9faff9f3c4b6d5c0ce16bc637e30491ec06e9acab0b75c5fdcc5904898c91043f731e0e0ae3079763d6b310495d63156677ea1c88276222a7cc978c8e49324b449d9ef03620f046eb5233092d9a2b545e8313e95de1d09b8d48bcd8a103d4fc84106e19225413c2281616b29831c63adfb3c07d8cfffc8a4fa88a7097e5c9c719813928215de91e8c6b3ff4648556d58bdccbe920a4daec4c67f61c1a96d7d7b9c11d831f8e9674d922a11150a3bd6aaf90f6c73d3aab61398a95d7f80006e09a5", 0xee}, {&(0x7f0000001ac0)="cc0033dfd27e357329c2abf7013ce3f55b7e96aff16d011101e1540790a573b1b21419503497e6567d00865bfec22327da7fff89374084e1359e0c4cf8d8f8e5a3f314fac02a3e0b10d2510914ef883e28f7fc1041f1c50509763df332701cda0f116eeb98513bcace9ffe", 0x6b}, {&(0x7f0000000400)="7f33f957f7a9", 0x6}], 0x5}}], 0x1, 0x4000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'gretap0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x40, 0x7800, 0x2, 0x401, {{0x1b, 0x4, 0x0, 0x7, 0x6c, 0x68, 0x0, 0xf7, 0x4, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0x5d, 0x3, 0x0, [{@local, 0x1}, {@multicast2}]}, @timestamp={0x44, 0x10, 0x6b, 0x0, 0x2, [0x9, 0x0, 0x2]}, @timestamp={0x44, 0x8, 0x52, 0x0, 0x8, [0xffffffff]}, @timestamp={0x44, 0xc, 0x65, 0x0, 0x6, [0x6, 0x7]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0xe4, 0x3, 0x2, [{@multicast2, 0x5}, {@multicast2, 0x3ff}]}, @generic={0x82, 0x7, "994479c613"}]}}}}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', r4, 0x2f, 0x3, 0x7f, 0x400, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x10, 0x7, 0xbc23}}) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) r8 = socket$inet6(0x10, 0x3, 0x0) write(r8, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r9, 0x0, 0x2e, &(0x7f0000000680)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) getsockopt$inet_buf(r9, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x102, 0x6, {0xd90d, 0x6, 0x8001}}) kernel console output (not intermixed with test programs): -1:0.0: probe with driver nw80x failed with error -110 [ 3281.084283][T25430] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3281.192994][T15976] usb 2-1: USB disconnect, device number 93 [ 3281.560797][T25460] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5092'. [ 3282.383289][T25467] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5094'. [ 3282.502221][T25474] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5098'. [ 3282.590357][T25479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5100'. [ 3282.863568][T20024] Bluetooth: hci9: command 0x0406 tx timeout [ 3283.084176][T25487] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5103'. [ 3283.960527][T25498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5108'. [ 3284.410452][T25503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5109'. [ 3284.505855][T25503] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3284.616730][T25504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5110'. [ 3284.628657][T25506] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5111'. [ 3284.816427][T25503] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3284.929079][T25510] loop2: detected capacity change from 0 to 64 [ 3284.936494][T25503] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3284.972933][T25510] hfs: unable to locate alternate MDB [ 3284.978775][T25510] hfs: continuing without an alternate MDB [ 3285.159220][T25503] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3285.212271][T11295] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 3285.567412][T25512] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5113'. [ 3285.623426][T25503] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3285.659140][T25503] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3285.698808][T25503] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3285.759690][T25503] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3285.793051][T11295] usb 1-1: Using ep0 maxpacket: 32 [ 3285.842458][T11295] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 3285.852194][T11295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3285.893741][T11295] usb 1-1: config 0 descriptor?? [ 3285.990099][T11295] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 3286.286452][T11295] gspca_nw80x: reg_w err -71 [ 3286.291804][T11295] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 3286.363572][T11295] usb 1-1: USB disconnect, device number 117 [ 3286.788141][T25527] loop2: detected capacity change from 0 to 512 [ 3286.817447][T25529] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5122'. [ 3287.102804][T25534] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5121'. [ 3287.161651][T11295] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 3287.312459][T25538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5124'. [ 3287.368742][T11295] usb 3-1: Using ep0 maxpacket: 8 [ 3287.383231][T11295] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 3287.393302][T11295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3287.413905][T11295] usb 3-1: config 0 descriptor?? [ 3287.692921][T11295] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3287.703988][T11295] asix 3-1:0.0: probe with driver asix failed with error -71 [ 3287.726099][T11295] usb 3-1: USB disconnect, device number 86 [ 3288.456780][T25552] coredump: 150(syz.4.5127): written to core: VMAs: 4, size 4096; core: 2827 bytes, pos 8192 [ 3289.168836][T25554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5129'. [ 3289.693076][T25564] loop2: detected capacity change from 0 to 1024 [ 3290.100281][T25564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3290.160283][T25574] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5135'. [ 3290.264414][T25573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5136'. [ 3290.350134][T25573] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3290.499437][T25581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5138'. [ 3290.670497][T25573] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3290.735752][T23689] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3290.773584][T25573] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3290.919305][T25573] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3290.966386][T11295] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 3291.190417][T25589] loop3: detected capacity change from 0 to 256 [ 3291.209011][T25589] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x111a6c00) [ 3291.220331][T25589] exFAT-fs (loop3): invalid boot region [ 3291.226369][T25589] exFAT-fs (loop3): failed to recognize exfat type [ 3291.461479][T11295] usb 1-1: Using ep0 maxpacket: 32 [ 3291.497983][T11295] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 3291.507772][T11295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3291.617856][T11295] usb 1-1: config 0 descriptor?? [ 3291.698113][T11295] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 3292.044997][T25573] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3292.217811][T25573] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3292.302772][T25573] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3292.343341][T25573] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3292.397859][T11295] gspca_nw80x: reg_w err -110 [ 3292.403260][T11295] nw80x 1-1:0.0: probe with driver nw80x failed with error -110 [ 3292.431173][T11295] usb 1-1: USB disconnect, device number 118 [ 3292.727344][T25604] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5146'. [ 3293.760223][T25618] loop2: detected capacity change from 0 to 256 [ 3294.021403][T25618] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010530, chksum : 0x90502ed2, utbl_chksum : 0xe619d30d) [ 3294.172080][ T29] audit: type=1800 audit(1727065990.085:1052): pid=25618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5151" name="file1" dev="loop2" ino=1048950 res=0 errno=0 [ 3294.193447][ C1] vkms_vblank_simulate: vblank timer overrun [ 3294.393757][ T29] audit: type=1804 audit(1727065990.165:1053): pid=25618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5151" name="/newroot/135/file1/file1" dev="loop2" ino=1048950 res=1 errno=0 [ 3295.961608][T19955] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 3296.194802][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 3296.202358][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 3296.522126][T25617] loop3: detected capacity change from 0 to 32768 [ 3296.646422][T25617] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 3296.646707][T25617] (syz.3.5153,25617,0):ocfs2_initialize_super:2283 ERROR: status = -12 [ 3296.684936][T25617] (syz.3.5153,25617,0):ocfs2_fill_super:1178 ERROR: status = -12 [ 3296.704170][T19955] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3296.716155][T19955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3296.727694][T19955] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 3296.737766][T19955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3296.788371][T19955] usb 2-1: config 0 descriptor?? [ 3297.220508][T19955] ath6kl: Failed to submit usb control message: -71 [ 3297.227719][T19955] ath6kl: unable to send the bmi data to the device: -71 [ 3297.235308][T19955] ath6kl: Unable to send get target info: -71 [ 3297.259432][T19955] ath6kl: Failed to init ath6kl core: -71 [ 3297.271145][T19955] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 3298.020272][T19955] usb 2-1: USB disconnect, device number 94 [ 3298.492228][T25649] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5164'. [ 3299.607261][T25661] loop2: detected capacity change from 0 to 256 [ 3299.764262][T25661] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x111a6c00) [ 3299.775303][T25661] exFAT-fs (loop2): invalid boot region [ 3299.781287][T25661] exFAT-fs (loop2): failed to recognize exfat type [ 3300.235380][T25668] loop3: detected capacity change from 0 to 1024 [ 3300.594480][T25668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3300.691526][T25668] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3301.034644][T25668] netlink: 'syz.3.5171': attribute type 1 has an invalid length. [ 3301.042944][T25668] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.5171'. [ 3301.163869][T15978] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 3301.335392][T25686] loop2: detected capacity change from 0 to 512 [ 3301.544087][T15978] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3301.556742][T15978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3301.568268][T15978] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 3301.594192][T15978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3301.616690][T15978] usb 1-1: config 0 descriptor?? [ 3301.672123][T19955] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 3301.752949][T25693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5182'. [ 3301.909234][T19955] usb 3-1: Using ep0 maxpacket: 8 [ 3301.963361][T25693] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3302.007859][T19955] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 3302.014198][T15978] ath6kl: Failed to submit usb control message: -71 [ 3302.017565][T19955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3302.024056][T15978] ath6kl: unable to send the bmi data to the device: -71 [ 3302.039503][T15978] ath6kl: Unable to send get target info: -71 [ 3302.107443][T25695] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5181'. [ 3302.132221][T19955] usb 3-1: config 0 descriptor?? [ 3302.162512][T25693] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3302.237958][T15978] ath6kl: Failed to init ath6kl core: -71 [ 3302.249786][T15978] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 3302.380477][T19955] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3302.393694][T19955] asix 3-1:0.0: probe with driver asix failed with error -71 [ 3302.443368][T15978] usb 1-1: USB disconnect, device number 119 [ 3302.468903][T25693] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3302.495566][T19955] usb 3-1: USB disconnect, device number 87 [ 3302.591494][T11295] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 3302.677975][T25693] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3302.829044][T11295] usb 4-1: Using ep0 maxpacket: 32 [ 3302.850405][T11295] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 3302.859999][T11295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3302.929800][T11295] usb 4-1: config 0 descriptor?? [ 3302.969567][T11295] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 3303.075291][T25693] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3303.105431][T25693] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3303.153780][T25693] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3303.181471][T25693] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3303.496128][T11295] gspca_nw80x: reg_w err -110 [ 3303.502160][T11295] nw80x 4-1:0.0: probe with driver nw80x failed with error -110 [ 3303.721882][T25709] netlink: 'syz.2.5187': attribute type 2 has an invalid length. [ 3303.763429][T25709] 0: entered promiscuous mode [ 3304.772398][T22226] usb 4-1: USB disconnect, device number 104 [ 3305.317635][T25723] netlink: 'syz.0.5192': attribute type 1 has an invalid length. [ 3305.325997][T25723] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.5192'. [ 3305.449556][T25735] loop3: detected capacity change from 0 to 512 [ 3305.652488][T22226] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 3305.663201][T15976] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 3305.761538][T25737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5194'. [ 3305.811465][T22226] usb 5-1: Using ep0 maxpacket: 8 [ 3305.849148][T22226] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 3305.858994][T22226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3305.929881][T15976] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3305.934155][T22226] usb 5-1: config 0 descriptor?? [ 3305.942073][T15976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3305.958295][T15976] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 3305.968012][T15976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3306.175386][T15976] usb 3-1: config 0 descriptor?? [ 3306.271806][T22226] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3306.283326][T22226] asix 5-1:0.0: probe with driver asix failed with error -71 [ 3306.562527][T15976] ath6kl: Failed to submit usb control message: -71 [ 3306.569389][T22226] usb 5-1: USB disconnect, device number 81 [ 3306.569527][T15976] ath6kl: unable to send the bmi data to the device: -71 [ 3306.582957][T15976] ath6kl: Unable to send get target info: -71 [ 3306.590348][T15976] ath6kl: Failed to init ath6kl core: -71 [ 3306.618247][T15976] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 3306.763968][T15976] usb 3-1: USB disconnect, device number 88 [ 3308.066585][T25755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5204'. [ 3308.111910][T25763] FAULT_INJECTION: forcing a failure. [ 3308.111910][T25763] name failslab, interval 1, probability 0, space 0, times 0 [ 3308.126679][T25763] CPU: 0 UID: 0 PID: 25763 Comm: syz.4.5207 Tainted: G W 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 3308.138952][T25763] Tainted: [W]=WARN [ 3308.142977][T25763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 3308.153298][T25763] Call Trace: [ 3308.156775][T25763] [ 3308.159930][T25763] dump_stack_lvl+0x216/0x2d0 [ 3308.164942][T25763] dump_stack+0x1e/0x30 [ 3308.169410][T25763] should_fail_ex+0x748/0x7f0 [ 3308.174438][T25763] should_failslab+0x17f/0x210 [ 3308.179575][T25763] __kmalloc_cache_noprof+0xbf/0xb00 [ 3308.185238][T25763] ? kmsan_get_metadata+0x13e/0x1c0 [ 3308.190817][T25763] ? binder_get_thread+0x363/0xbd0 [ 3308.196291][T25763] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3308.202492][T25763] binder_get_thread+0x363/0xbd0 [ 3308.207783][T25763] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3308.213989][T25763] ? kmsan_get_metadata+0x13e/0x1c0 [ 3308.219550][T25763] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3308.225737][T25763] binder_poll+0x55/0x770 [ 3308.230423][T25763] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3308.236631][T25763] ? __pfx_binder_poll+0x10/0x10 [ 3308.241925][T25763] do_select+0x1639/0x2cd0 [ 3308.246680][T25763] ? __pfx_pollwake+0x10/0x10 [ 3308.251715][T25763] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 3308.258429][T25763] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 3308.264882][T25763] ? kmsan_get_metadata+0x13e/0x1c0 [ 3308.270469][T25763] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3308.276653][T25763] ? process_measurement+0x3a96/0x3f30 [ 3308.282485][T25763] ? kmsan_get_metadata+0x13e/0x1c0 [ 3308.288568][T25763] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3308.294765][T25763] ? kmsan_get_metadata+0x13e/0x1c0 [ 3308.300434][T25763] ? kmsan_get_metadata+0x13e/0x1c0 [ 3308.305968][T25763] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3308.312155][T25763] ? __module_address+0x4d/0x630 [ 3308.317570][T25763] core_sys_select+0x993/0xe70 [ 3308.322727][T25763] ? kmsan_get_metadata+0x13e/0x1c0 [ 3308.328311][T25763] ? set_user_sigmask+0x3d/0x320 [ 3308.333597][T25763] ? __se_sys_pselect6+0x260/0x6d0 [ 3308.339062][T25763] ? set_user_sigmask+0xd4/0x320 [ 3308.344453][T25763] ? __se_sys_pselect6+0x184/0x6d0 [ 3308.349932][T25763] ? __x64_sys_pselect6+0x11f/0x1a0 [ 3308.355487][T25763] __se_sys_pselect6+0x590/0x6d0 [ 3308.360783][T25763] ? kmsan_get_metadata+0x13e/0x1c0 [ 3308.366351][T25763] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3308.372534][T25763] __x64_sys_pselect6+0x11f/0x1a0 [ 3308.377919][T25763] x64_sys_call+0x2e87/0x3ba0 [ 3308.383053][T25763] do_syscall_64+0xcd/0x1e0 [ 3308.387868][T25763] ? clear_bhb_loop+0x25/0x80 [ 3308.392928][T25763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3308.399192][T25763] RIP: 0033:0x7fac40d7def9 [ 3308.403906][T25763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3308.423862][T25763] RSP: 002b:00007fac41bbc038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 3308.432624][T25763] RAX: ffffffffffffffda RBX: 00007fac40f35f80 RCX: 00007fac40d7def9 [ 3308.440862][T25763] RDX: 0000000020000800 RSI: 0000000020002240 RDI: 0000000000000040 [ 3308.449093][T25763] RBP: 00007fac41bbc090 R08: 0000000000000000 R09: 0000000000000000 [ 3308.457565][T25763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3308.465804][T25763] R13: 0000000000000000 R14: 00007fac40f35f80 R15: 00007fffb8f05068 [ 3308.474068][T25763] [ 3308.535424][T20024] Bluetooth: hci10: command 0x0406 tx timeout [ 3308.684899][T25755] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3308.831817][T22226] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 3308.880929][T25755] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3309.025517][T22226] usb 3-1: Using ep0 maxpacket: 32 [ 3309.142775][T25755] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3309.400705][T22226] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 3309.410582][T22226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3309.436304][T22226] usb 3-1: config 0 descriptor?? [ 3309.519438][T22226] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 3310.032655][T22226] gspca_nw80x: reg_w err -110 [ 3310.037899][T22226] nw80x 3-1:0.0: probe with driver nw80x failed with error -110 [ 3310.132503][T25755] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3310.542811][T25780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5211'. [ 3310.608576][T25755] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3310.636935][T25755] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3310.664631][T25755] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3310.711874][T25755] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3310.787252][T25780] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3310.881602][T15976] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 3310.940558][T25780] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3310.985852][T25777] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5212'. [ 3311.062661][T15976] usb 5-1: Using ep0 maxpacket: 8 [ 3311.077768][T15976] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 3311.087709][T15976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3311.124476][T15976] usb 5-1: config 0 descriptor?? [ 3311.162729][T25780] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3311.184923][ T9783] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 3311.192543][T22226] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 3311.302953][T25780] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3311.400441][ T9783] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3311.424785][ T9783] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3311.430489][T22226] usb 4-1: Using ep0 maxpacket: 32 [ 3311.439621][ T9783] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 3311.451868][ T9783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3311.460388][T22226] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 3311.470346][T22226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3311.472162][T15976] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3311.489459][T15976] asix 5-1:0.0: probe with driver asix failed with error -71 [ 3311.529622][T22226] usb 4-1: config 0 descriptor?? [ 3311.534356][T15976] usb 5-1: USB disconnect, device number 82 [ 3311.546194][ T9783] usb 1-1: config 0 descriptor?? [ 3311.755072][T25780] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3311.784140][T25780] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3311.813255][T25780] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3311.864281][T25780] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3312.238842][ T9783] ath6kl: Failed to submit usb control message: -71 [ 3312.250534][ T9783] ath6kl: unable to send the bmi data to the device: -71 [ 3312.258033][ T9783] ath6kl: Unable to send get target info: -71 [ 3312.281978][ T9783] ath6kl: Failed to init ath6kl core: -71 [ 3312.293830][ T9783] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 3312.316756][T22226] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 3312.617020][ T9783] usb 1-1: USB disconnect, device number 120 [ 3312.832350][T22226] gspca_nw80x: reg_w err -110 [ 3312.837715][T22226] nw80x 4-1:0.0: probe with driver nw80x failed with error -110 [ 3312.975803][T15976] usb 3-1: USB disconnect, device number 89 [ 3313.245971][T25801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5220'. [ 3313.396075][T25799] loop2: detected capacity change from 0 to 256 [ 3313.438459][T25799] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x111a6c00) [ 3313.449727][T25799] exFAT-fs (loop2): invalid boot region [ 3313.468049][T25799] exFAT-fs (loop2): failed to recognize exfat type [ 3313.751821][T25806] netlink: 'syz.0.5221': attribute type 1 has an invalid length. [ 3313.760102][T25806] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.5221'. [ 3314.220179][T22226] usb 4-1: USB disconnect, device number 105 [ 3314.703923][T25812] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5224'. [ 3314.784255][T25804] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5219'. [ 3314.806268][T25804] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5219'. [ 3315.387307][T25821] loop3: detected capacity change from 0 to 1024 [ 3315.453610][T25821] hfsplus: session requires an argument [ 3315.459522][T25821] hfsplus: unable to parse mount options [ 3315.477949][T25816] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5225'. [ 3315.868463][T25821] loop3: detected capacity change from 0 to 1024 [ 3315.891500][T15976] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 3316.041736][T22226] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 3316.052351][T15976] usb 1-1: Using ep0 maxpacket: 8 [ 3316.067390][T15976] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 3316.077385][T15976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3316.143773][T15976] usb 1-1: config 0 descriptor?? [ 3316.262529][T22226] usb 3-1: Using ep0 maxpacket: 32 [ 3316.284703][T22226] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 3316.294463][T22226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3316.379796][T22226] usb 3-1: config 0 descriptor?? [ 3316.416688][T15976] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3316.418204][T22226] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 3316.444968][T15976] asix 1-1:0.0: probe with driver asix failed with error -71 [ 3316.521361][T15976] usb 1-1: USB disconnect, device number 121 [ 3316.822746][ T9783] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 3316.981875][T22226] gspca_nw80x: reg_w err -110 [ 3316.987138][T22226] nw80x 3-1:0.0: probe with driver nw80x failed with error -110 [ 3317.078623][ T9783] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3317.090869][ T9783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3317.102501][ T9783] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 3317.112210][ T9783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3317.197982][ T9783] usb 4-1: config 0 descriptor?? [ 3317.489576][ T9783] ath6kl: Failed to submit usb control message: -71 [ 3317.496915][ T9783] ath6kl: unable to send the bmi data to the device: -71 [ 3317.504455][ T9783] ath6kl: Unable to send get target info: -71 [ 3317.531750][ T9783] ath6kl: Failed to init ath6kl core: -71 [ 3317.543606][ T9783] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 3317.637180][ T9783] usb 4-1: USB disconnect, device number 106 [ 3318.811969][T19349] Bluetooth: hci11: command 0x0406 tx timeout [ 3321.191552][T25844] loop3: detected capacity change from 0 to 32768 [ 3321.361707][T25848] netlink: 'syz.4.5236': attribute type 1 has an invalid length. [ 3321.369915][T25848] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.5236'. [ 3321.537435][ T9783] usb 3-1: USB disconnect, device number 90 [ 3322.434511][T25858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5239'. [ 3323.069542][T25864] loop2: detected capacity change from 0 to 512 [ 3323.371440][T22226] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 3323.531889][T22226] usb 3-1: Using ep0 maxpacket: 8 [ 3323.564061][T25871] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5237'. [ 3323.581371][ T9783] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 3323.720705][T22226] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 3323.730371][T22226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3323.825419][T22226] usb 3-1: config 0 descriptor?? [ 3323.838008][ T9783] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3323.850310][ T9783] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3323.861721][ T9783] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 3323.871328][ T9783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3323.885997][ T9783] usb 5-1: config 0 descriptor?? [ 3326.482082][T22226] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3326.492968][T22226] asix 3-1:0.0: probe with driver asix failed with error -71 [ 3326.510462][T22226] usb 3-1: USB disconnect, device number 91 [ 3327.136625][T25878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5248'. [ 3327.243351][T25878] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3327.400627][ T9783] ath6kl: Failed to submit usb control message: -71 [ 3327.407842][ T9783] ath6kl: unable to send the bmi data to the device: -71 [ 3327.415462][ T9783] ath6kl: Unable to send get target info: -71 [ 3327.426161][ T9783] ath6kl: Failed to init ath6kl core: -71 [ 3327.437477][ T9783] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 3327.768449][T25878] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3327.775173][ T9783] usb 5-1: USB disconnect, device number 83 [ 3327.915943][T22226] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 3328.023356][T25878] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3328.114739][T25883] netlink: 'syz.4.5250': attribute type 1 has an invalid length. [ 3328.128309][T25883] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.5250'. [ 3328.148297][T25878] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3328.161426][T22226] usb 4-1: Using ep0 maxpacket: 32 [ 3328.192238][T22226] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 3328.220493][T22226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3328.251792][T25891] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5252'. [ 3328.283687][T22226] usb 4-1: config 0 descriptor?? [ 3328.345826][T22226] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 3328.563519][T25878] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3328.601961][T25878] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3328.685990][T25878] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3328.776265][T25878] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3328.862494][T22226] gspca_nw80x: reg_w err -110 [ 3328.867726][T22226] nw80x 4-1:0.0: probe with driver nw80x failed with error -110 [ 3329.348938][T25898] loop2: detected capacity change from 0 to 2048 [ 3329.526893][T25898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3329.717412][T25896] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5256: bg 0: block 234: padding at end of block bitmap is not set [ 3329.722960][T25909] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5255'. [ 3329.797116][T25896] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 130 with error 117 [ 3329.810108][T25896] EXT4-fs (loop2): This should not happen!! Data will be lost [ 3329.810108][T25896] [ 3329.899091][T25912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5258'. [ 3330.535876][ T9783] usb 4-1: USB disconnect, device number 107 [ 3330.602774][T22226] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 3330.637484][T23689] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3331.449589][T25928] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5266'. [ 3331.934784][T25931] netlink: 'syz.1.5265': attribute type 1 has an invalid length. [ 3331.943522][T25931] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.5265'. [ 3332.221694][T25932] loop3: detected capacity change from 0 to 256 [ 3332.376665][T25932] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x111a6c00) [ 3332.388158][T25932] exFAT-fs (loop3): invalid boot region [ 3332.394292][T25932] exFAT-fs (loop3): failed to recognize exfat type [ 3332.487733][T25934] loop2: detected capacity change from 0 to 512 [ 3332.857157][T22226] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3332.871436][T22226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3332.882887][T22226] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 3332.892428][T22226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3332.931500][ T9783] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 3333.151660][ T9783] usb 3-1: Using ep0 maxpacket: 8 [ 3333.192464][ T9783] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 3333.202390][ T9783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3333.316854][ T9783] usb 3-1: config 0 descriptor?? [ 3333.617037][ T9783] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3333.645516][ T9783] asix 3-1:0.0: probe with driver asix failed with error -71 [ 3333.829514][ T9783] usb 3-1: USB disconnect, device number 92 [ 3333.833165][T22226] usb 1-1: config 0 descriptor?? [ 3333.870027][T22226] usb 1-1: can't set config #0, error -71 [ 3333.879473][T22226] usb 1-1: USB disconnect, device number 122 [ 3335.216723][T25946] loop3: detected capacity change from 0 to 2048 [ 3335.305732][T25950] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5272'. [ 3335.314529][T25946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3335.742197][T25944] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5273: bg 0: block 234: padding at end of block bitmap is not set [ 3335.853209][T25944] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 108 with error 117 [ 3335.868360][T25944] EXT4-fs (loop3): This should not happen!! Data will be lost [ 3335.868360][T25944] [ 3336.241992][T25970] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5277'. [ 3336.548372][T25969] netlink: 'syz.0.5278': attribute type 1 has an invalid length. [ 3336.556648][T25969] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.5278'. [ 3336.580610][T24799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3336.649374][T25972] 9pnet_fd: Insufficient options for proto=fd [ 3337.000503][T25978] loop2: detected capacity change from 0 to 1024 [ 3337.138442][ T9783] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 3337.253194][T25978] hfsplus: keylen 65060 too large [ 3337.272268][T25984] random: crng reseeded on system resumption [ 3337.510280][ T9783] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3337.533627][ T9783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3337.548395][ T9783] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 3337.558359][ T9783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3337.571301][ T9783] usb 4-1: config 0 descriptor?? [ 3337.851782][ T9783] ath6kl: Failed to submit usb control message: -71 [ 3337.858925][ T9783] ath6kl: unable to send the bmi data to the device: -71 [ 3337.866484][ T9783] ath6kl: Unable to send get target info: -71 [ 3337.921769][ T9783] ath6kl: Failed to init ath6kl core: -71 [ 3337.954706][ T9783] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 3338.026599][ T9783] usb 4-1: USB disconnect, device number 108 [ 3338.048260][T25791] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 3338.257008][T25791] usb 1-1: Using ep0 maxpacket: 8 [ 3338.276833][T25791] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 3338.286877][T25791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3338.354520][T25791] usb 1-1: config 0 descriptor?? [ 3338.592884][T25791] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3338.603725][T25791] asix 1-1:0.0: probe with driver asix failed with error -71 [ 3338.685225][T25791] usb 1-1: USB disconnect, device number 123 [ 3339.020268][T26004] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5291'. [ 3339.178820][T26002] loop3: detected capacity change from 0 to 1024 [ 3339.199148][T20024] Bluetooth: hci1: command 0x0406 tx timeout [ 3339.329444][T26002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3339.345749][T26002] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3339.726960][T26019] fuse: Bad value for 'fd' [ 3339.807753][T26002] netlink: 'syz.3.5290': attribute type 1 has an invalid length. [ 3339.816074][T26002] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.5290'. [ 3339.948937][T26008] loop2: detected capacity change from 0 to 2048 [ 3340.172868][T26008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3340.721790][T11295] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 3340.856158][T23689] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3341.463514][T26044] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5304'. [ 3341.602751][T11295] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3341.632952][T11295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3341.652130][T11295] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 3341.662307][T11295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3341.756932][T11295] usb 4-1: config 0 descriptor?? [ 3342.158634][T11295] ath6kl: Failed to submit usb control message: -71 [ 3342.166379][T11295] ath6kl: unable to send the bmi data to the device: -71 [ 3342.173857][T11295] ath6kl: Unable to send get target info: -71 [ 3342.180643][T15978] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 3342.191552][T11295] ath6kl: Failed to init ath6kl core: -71 [ 3342.203033][T11295] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 3342.363487][T11295] usb 4-1: USB disconnect, device number 109 [ 3342.552767][T15978] usb 1-1: Using ep0 maxpacket: 8 [ 3342.630207][T15978] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 3342.657213][T15978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3342.814693][T15978] usb 1-1: config 0 descriptor?? [ 3342.981761][T26058] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5309'. [ 3343.090043][T15978] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3343.101267][T15978] asix 1-1:0.0: probe with driver asix failed with error -71 [ 3343.127290][T15978] usb 1-1: USB disconnect, device number 124 [ 3344.513822][T26080] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5316'. [ 3344.964270][T26083] loop2: detected capacity change from 0 to 1024 [ 3345.050441][T26086] loop3: detected capacity change from 0 to 64 [ 3345.487751][T26086] hfs: unable to locate alternate MDB [ 3345.493813][T26086] hfs: continuing without an alternate MDB [ 3345.530646][T26083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3345.548886][T26083] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3345.905686][T15978] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 3346.417150][T15978] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3346.447087][T15978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3346.464546][T15978] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 3346.474304][T15978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3346.603328][T15978] usb 5-1: config 0 descriptor?? [ 3346.699257][T26107] loop2: detected capacity change from 0 to 512 [ 3347.074937][T11295] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 3347.292644][T11295] usb 3-1: Using ep0 maxpacket: 8 [ 3347.321627][T11295] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 3347.332263][T11295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3347.433962][T11295] usb 3-1: config 0 descriptor?? [ 3347.440911][T15978] ath6kl: Failed to submit usb control message: -71 [ 3347.449014][T15978] ath6kl: unable to send the bmi data to the device: -71 [ 3347.524380][T15978] ath6kl: Unable to send get target info: -71 [ 3347.543990][T15978] ath6kl: Failed to init ath6kl core: -71 [ 3347.604145][T15978] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 3347.630834][T22226] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 3347.653273][T26116] netlink: 'syz.3.5331': attribute type 2 has an invalid length. [ 3347.721498][T15978] usb 5-1: USB disconnect, device number 84 [ 3347.830043][T11295] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3347.842230][T11295] asix 3-1:0.0: probe with driver asix failed with error -71 [ 3347.883671][T11295] usb 3-1: USB disconnect, device number 93 [ 3347.913494][T22226] usb 1-1: Using ep0 maxpacket: 16 [ 3347.958731][T22226] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 3347.985402][T22226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3348.002817][T22226] usb 1-1: Product: syz [ 3348.007281][T22226] usb 1-1: Manufacturer: syz [ 3348.013089][T22226] usb 1-1: SerialNumber: syz [ 3348.023257][T22226] usb 1-1: config 0 descriptor?? [ 3348.185794][T25791] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 3348.495649][T22226] peak_usb 1-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 3348.601480][T25791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3348.613140][T25791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3348.623509][T25791] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 3348.633085][T25791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3348.664177][T25791] usb 4-1: config 0 descriptor?? [ 3348.750257][T26125] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5333'. [ 3349.222676][T22226] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 3349.231532][T22226] peak_usb 1-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 3349.765746][T22226] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 3349.962906][T25791] dragonrise 0003:0079:0011.000E: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.3-1/input0 [ 3349.982809][T22226] usb 1-1: USB disconnect, device number 125 [ 3350.207249][T11295] usb 4-1: USB disconnect, device number 110 [ 3350.349368][T26136] loop2: detected capacity change from 0 to 64 [ 3350.402997][T26136] hfs: unable to locate alternate MDB [ 3350.408639][T26136] hfs: continuing without an alternate MDB [ 3350.702629][T26135] netlink: 'syz.0.5336': attribute type 1 has an invalid length. [ 3350.710807][T26135] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.5336'. [ 3351.569833][T22226] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 3351.785692][T22226] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3351.797846][T22226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3351.809348][T22226] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 3351.817337][T26156] loop2: detected capacity change from 0 to 512 [ 3351.819004][T22226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3352.003337][T22226] usb 1-1: config 0 descriptor?? [ 3352.293214][T11295] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 3352.358002][T22226] ath6kl: Failed to submit usb control message: -71 [ 3352.365495][T22226] ath6kl: unable to send the bmi data to the device: -71 [ 3352.398589][T22226] ath6kl: Unable to send get target info: -71 [ 3352.417707][T26166] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5348'. [ 3352.437672][T22226] ath6kl: Failed to init ath6kl core: -71 [ 3352.449578][T22226] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 3352.551540][T11295] usb 3-1: Using ep0 maxpacket: 8 [ 3352.614277][T11295] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 3352.624276][T11295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3352.649219][T11295] usb 3-1: config 0 descriptor?? [ 3352.664154][T22226] usb 1-1: USB disconnect, device number 126 [ 3352.932470][T11295] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3352.943620][T11295] asix 3-1:0.0: probe with driver asix failed with error -71 [ 3352.963575][T11295] usb 3-1: USB disconnect, device number 94 [ 3353.820294][T26170] netlink: 'syz.1.5354': attribute type 1 has an invalid length. [ 3353.828619][T26170] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.5354'. [ 3353.848835][T26178] loop3: detected capacity change from 0 to 64 [ 3353.877783][T26178] hfs: unable to locate alternate MDB [ 3353.884103][T26178] hfs: continuing without an alternate MDB [ 3354.032359][T26184] loop2: detected capacity change from 0 to 256 [ 3354.289484][T26184] FAT-fs (loop2): Directory bread(block 64) failed [ 3354.297197][T26184] FAT-fs (loop2): Directory bread(block 65) failed [ 3354.306695][T26184] FAT-fs (loop2): Directory bread(block 66) failed [ 3354.332596][T26184] FAT-fs (loop2): Directory bread(block 67) failed [ 3354.339594][T26184] FAT-fs (loop2): Directory bread(block 68) failed [ 3354.352743][T26184] FAT-fs (loop2): Directory bread(block 69) failed [ 3354.359720][T26184] FAT-fs (loop2): Directory bread(block 70) failed [ 3354.366897][T26184] FAT-fs (loop2): Directory bread(block 71) failed [ 3354.373993][T26184] FAT-fs (loop2): Directory bread(block 72) failed [ 3354.380840][T26184] FAT-fs (loop2): Directory bread(block 73) failed [ 3355.312735][T25791] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 3355.497085][T25791] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3355.509199][T25791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3355.520714][T25791] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 3355.530351][T25791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3355.658639][T25791] usb 2-1: config 0 descriptor?? [ 3355.997704][T26210] loop3: detected capacity change from 0 to 512 [ 3356.021842][T25791] ath6kl: Failed to submit usb control message: -71 [ 3356.028915][T25791] ath6kl: unable to send the bmi data to the device: -71 [ 3356.036345][T25791] ath6kl: Unable to send get target info: -71 [ 3356.081577][T25791] ath6kl: Failed to init ath6kl core: -71 [ 3356.093322][T25791] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 3356.140111][T25791] usb 2-1: USB disconnect, device number 95 [ 3356.499805][T26215] netlink: 'syz.4.5370': attribute type 1 has an invalid length. [ 3356.508111][T26215] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.5370'. [ 3356.531429][T11295] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 3356.747450][T26216] loop2: detected capacity change from 0 to 64 [ 3356.800216][T26216] hfs: unable to locate alternate MDB [ 3356.806300][T26216] hfs: continuing without an alternate MDB [ 3356.888299][T11295] usb 4-1: Using ep0 maxpacket: 8 [ 3356.924317][ T9783] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 3356.943635][T11295] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 3356.953474][T11295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3357.063214][T11295] usb 4-1: config 0 descriptor?? [ 3357.134115][ T9783] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3357.146470][ T9783] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3357.156852][ T9783] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 3357.166443][ T9783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3357.311487][T11295] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3357.322429][T11295] asix 4-1:0.0: probe with driver asix failed with error -71 [ 3357.332625][ T9783] usb 5-1: config 0 descriptor?? [ 3357.360628][T11295] usb 4-1: USB disconnect, device number 111 [ 3357.619187][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 3357.626046][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 3357.788031][ T9783] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 3357.814265][ T9783] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 3357.867737][ T9783] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.000F/input/input24 [ 3357.941748][ T9783] cm6533_jd 0003:0D8C:0022.000F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 3358.025154][T26232] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5377'. [ 3358.045459][T26219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5373'. [ 3358.222731][T11295] usb 5-1: USB disconnect, device number 85 [ 3358.681273][T26237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5379'. [ 3358.700773][T26237] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3359.312367][T26237] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3359.556456][T11295] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 3359.599978][T26237] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3359.711962][T11295] usb 4-1: Using ep0 maxpacket: 32 [ 3359.730472][T11295] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 3359.758313][T11295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3359.791335][T26237] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3359.835142][T11295] usb 4-1: config 0 descriptor?? [ 3359.969667][T11295] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 3360.517567][T11295] gspca_nw80x: reg_w err -110 [ 3360.523085][T11295] nw80x 4-1:0.0: probe with driver nw80x failed with error -110 [ 3360.718126][T26237] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3360.746267][T26237] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3360.808836][T26237] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3360.837880][T26237] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3360.860100][T26256] netlink: 'syz.4.5383': attribute type 1 has an invalid length. [ 3360.888159][T26256] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.5383'. [ 3361.346595][T26258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5387'. [ 3361.369266][T26258] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 3361.467743][T26258] pim6reg: entered allmulticast mode [ 3361.571836][ T9783] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 3361.764051][ T9783] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3361.776508][ T9783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3361.800054][ T9783] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 3361.813134][ T9783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3361.882137][ T9783] usb 3-1: config 0 descriptor?? [ 3362.241550][ T9783] ath6kl: Failed to submit usb control message: -71 [ 3362.248741][ T9783] ath6kl: unable to send the bmi data to the device: -71 [ 3362.256379][ T9783] ath6kl: Unable to send get target info: -71 [ 3362.337265][ T9783] ath6kl: Failed to init ath6kl core: -71 [ 3362.349195][ T9783] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 3362.379662][ T9783] usb 3-1: USB disconnect, device number 95 [ 3362.445147][ T9777] usb 4-1: USB disconnect, device number 112 [ 3362.912679][T25791] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 3363.151274][T25791] usb 2-1: Using ep0 maxpacket: 8 [ 3363.173062][T25791] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 3363.182766][T25791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3363.249791][T25791] usb 2-1: config 0 descriptor?? [ 3363.487498][T25791] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3363.498821][T25791] asix 2-1:0.0: probe with driver asix failed with error -71 [ 3363.518478][T25791] usb 2-1: USB disconnect, device number 96 [ 3363.749408][T26273] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5392'. [ 3364.681586][T25791] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 3364.981405][T25791] usb 4-1: Using ep0 maxpacket: 16 [ 3364.995524][T25791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3365.007130][T25791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3365.017397][T25791] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3365.030810][T25791] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3365.040386][T25791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3365.179621][T25791] usb 4-1: config 0 descriptor?? [ 3365.744848][T26286] netlink: 'syz.1.5398': attribute type 1 has an invalid length. [ 3365.753308][T26286] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.5398'. [ 3365.933679][T26289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5399'. [ 3365.956267][T26289] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 3366.027958][T25791] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 3366.035840][T25791] microsoft 0003:045E:07DA.0010: unknown main item tag 0x2 [ 3366.043702][T25791] microsoft 0003:045E:07DA.0010: ignoring exceeding usage max [ 3366.119521][T26290] pim6reg: entered allmulticast mode [ 3366.142707][T25791] microsoft 0003:045E:07DA.0010: No inputs registered, leaving [ 3366.217796][T25791] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 3366.230681][T25791] microsoft 0003:045E:07DA.0010: no inputs found [ 3366.237404][T25791] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway [ 3366.490020][T25791] usb 4-1: USB disconnect, device number 113 [ 3366.886161][T26294] loop2: detected capacity change from 0 to 2048 [ 3367.227799][T26294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3367.356343][T26292] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5400: bg 0: block 234: padding at end of block bitmap is not set [ 3367.401971][T22226] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 3367.402210][T26292] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 312 with error 117 [ 3367.435961][T26292] EXT4-fs (loop2): This should not happen!! Data will be lost [ 3367.435961][T26292] [ 3367.957311][T22226] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3367.969599][T22226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3367.981452][T22226] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 3367.990857][T22226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3368.025911][T22226] usb 1-1: config 0 descriptor?? [ 3368.124476][T23689] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3368.310507][T22226] ath6kl: Failed to submit usb control message: -71 [ 3368.317755][T22226] ath6kl: unable to send the bmi data to the device: -71 [ 3368.325635][T22226] ath6kl: Unable to send get target info: -71 [ 3368.382410][T22226] ath6kl: Failed to init ath6kl core: -71 [ 3368.394699][T22226] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 3368.502484][T22226] usb 1-1: USB disconnect, device number 127 [ 3368.689461][T26311] loop2: detected capacity change from 0 to 8 [ 3368.813420][T26313] loop3: detected capacity change from 0 to 512 [ 3369.142713][T22226] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 3369.561437][T22226] usb 4-1: Using ep0 maxpacket: 8 [ 3369.617011][T22226] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 3369.626658][T22226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3369.717936][T22226] usb 4-1: config 0 descriptor?? [ 3369.946343][T22226] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3369.957550][T22226] asix 4-1:0.0: probe with driver asix failed with error -71 [ 3370.039115][T22226] usb 4-1: USB disconnect, device number 114 [ 3370.231492][T26323] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5407'. [ 3371.775302][T25791] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 3372.097296][T25791] usb 4-1: config 0 has an invalid interface number: 178 but max is 0 [ 3372.106518][T25791] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3372.116956][T25791] usb 4-1: config 0 has no interface number 0 [ 3372.194983][T26339] FAULT_INJECTION: forcing a failure. [ 3372.194983][T26339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3372.209950][T26339] CPU: 1 UID: 0 PID: 26339 Comm: syz.0.5413 Tainted: G W 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 3372.222270][T26339] Tainted: [W]=WARN [ 3372.226278][T26339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 3372.236590][T26339] Call Trace: [ 3372.240078][T26339] [ 3372.243203][T26339] dump_stack_lvl+0x216/0x2d0 [ 3372.248232][T26339] dump_stack+0x1e/0x30 [ 3372.252706][T26339] should_fail_ex+0x748/0x7f0 [ 3372.257723][T26339] should_fail+0x2a/0x40 [ 3372.262344][T26339] should_fail_usercopy+0x2e/0x40 [ 3372.267772][T26339] _copy_from_iter+0x1d8/0x2b40 [ 3372.272926][T26339] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3372.279083][T26339] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3372.285253][T26339] ? skb_put+0x189/0x230 [ 3372.289802][T26339] netlink_sendmsg+0xc1d/0x11e0 [ 3372.294937][T26339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3372.300516][T26339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3372.306078][T26339] __sock_sendmsg+0x30f/0x380 [ 3372.311067][T26339] ____sys_sendmsg+0x877/0xb60 [ 3372.316137][T26339] ___sys_sendmsg+0x28d/0x3c0 [ 3372.321111][T26339] ? kmsan_get_metadata+0x13e/0x1c0 [ 3372.326687][T26339] ? __rcu_read_unlock+0x7b/0xe0 [ 3372.331935][T26339] ? __fget_files+0x4f5/0x5c0 [ 3372.336929][T26339] ? kmsan_get_metadata+0x13e/0x1c0 [ 3372.342544][T26339] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3372.348730][T26339] __x64_sys_sendmsg+0x301/0x490 [ 3372.353984][T26339] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3372.360156][T26339] x64_sys_call+0x2da0/0x3ba0 [ 3372.365169][T26339] do_syscall_64+0xcd/0x1e0 [ 3372.369985][T26339] ? clear_bhb_loop+0x25/0x80 [ 3372.374966][T26339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3372.381191][T26339] RIP: 0033:0x7fb86357def9 [ 3372.385898][T26339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3372.405802][T26339] RSP: 002b:00007fb864349038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3372.414496][T26339] RAX: ffffffffffffffda RBX: 00007fb863735f80 RCX: 00007fb86357def9 [ 3372.423051][T26339] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 3372.431256][T26339] RBP: 00007fb864349090 R08: 0000000000000000 R09: 0000000000000000 [ 3372.439445][T26339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3372.447657][T26339] R13: 0000000000000000 R14: 00007fb863735f80 R15: 00007fff2638c318 [ 3372.455886][T26339] [ 3372.625961][T26341] FAULT_INJECTION: forcing a failure. [ 3372.625961][T26341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3372.639737][T26341] CPU: 1 UID: 0 PID: 26341 Comm: syz.1.5414 Tainted: G W 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 3372.651975][T26341] Tainted: [W]=WARN [ 3372.655971][T26341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 3372.666369][T26341] Call Trace: [ 3372.670381][T26341] [ 3372.673519][T26341] dump_stack_lvl+0x216/0x2d0 [ 3372.678514][T26341] dump_stack+0x1e/0x30 [ 3372.682970][T26341] should_fail_ex+0x748/0x7f0 [ 3372.688002][T26341] should_fail+0x2a/0x40 [ 3372.692637][T26341] should_fail_usercopy+0x2e/0x40 [ 3372.697995][T26341] _copy_from_user+0x33/0x160 [ 3372.703056][T26341] uhid_char_write+0x35f/0xee0 [ 3372.708214][T26341] ? __pfx_uhid_char_write+0x10/0x10 [ 3372.713874][T26341] ? __pfx_uhid_char_write+0x10/0x10 [ 3372.719490][T26341] vfs_write+0x487/0x1540 [ 3372.724109][T26341] ? kmsan_get_metadata+0x13e/0x1c0 [ 3372.729636][T26341] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 3372.736295][T26341] ? kmsan_get_metadata+0x13e/0x1c0 [ 3372.741824][T26341] ksys_write+0x20f/0x4c0 [ 3372.746467][T26341] __x64_sys_write+0x93/0xe0 [ 3372.751378][T26341] x64_sys_call+0x306a/0x3ba0 [ 3372.756377][T26341] do_syscall_64+0xcd/0x1e0 [ 3372.761231][T26341] ? clear_bhb_loop+0x25/0x80 [ 3372.766257][T26341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3372.772468][T26341] RIP: 0033:0x7f48eb37def9 [ 3372.777230][T26341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3372.797368][T26341] RSP: 002b:00007f48ec1ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3372.806099][T26341] RAX: ffffffffffffffda RBX: 00007f48eb535f80 RCX: 00007f48eb37def9 [ 3372.814311][T26341] RDX: 0000000000000138 RSI: 0000000020000100 RDI: 0000000000000003 [ 3372.822536][T26341] RBP: 00007f48ec1ff090 R08: 0000000000000000 R09: 0000000000000000 [ 3372.830753][T26341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3372.839052][T26341] R13: 0000000000000000 R14: 00007f48eb535f80 R15: 00007ffec77a3f78 [ 3372.847311][T26341] [ 3372.912599][T25791] usb 4-1: New USB device found, idVendor=0711, idProduct=0903, bcdDevice=6e.b0 [ 3372.922454][T25791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3372.930754][T25791] usb 4-1: Product: syz [ 3372.935416][T25791] usb 4-1: Manufacturer: syz [ 3372.940297][T25791] usb 4-1: SerialNumber: syz [ 3373.083700][T25791] usb 4-1: config 0 descriptor?? [ 3373.119614][T25791] sisusb 4-1:0.178: Invalid USB2VGA device [ 3373.126562][T25791] sisusb 4-1:0.178: probe with driver sisusb failed with error -22 [ 3373.512226][T20024] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 3373.537356][T25791] usb 4-1: USB disconnect, device number 115 [ 3373.551225][T20024] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 3373.607739][T20024] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 3373.704123][T20024] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 3373.720109][T20024] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 3373.730438][T20024] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 3373.831464][T26349] loop2: detected capacity change from 0 to 256 [ 3374.037864][ T9783] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 3374.137039][T26349] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x111a6c00) [ 3374.149187][T26349] exFAT-fs (loop2): invalid boot region [ 3374.155322][T26349] exFAT-fs (loop2): failed to recognize exfat type [ 3374.305430][ T9783] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3374.317510][ T9783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3374.328958][ T9783] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 3374.338760][ T9783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3374.475456][ T9783] usb 2-1: config 0 descriptor?? [ 3375.039950][ T9783] ath6kl: Failed to submit usb control message: -71 [ 3375.047420][ T9783] ath6kl: unable to send the bmi data to the device: -71 [ 3375.054994][ T9783] ath6kl: Unable to send get target info: -71 [ 3375.087884][ T9783] ath6kl: Failed to init ath6kl core: -71 [ 3375.116858][ T9783] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 3375.172921][ T9783] usb 2-1: USB disconnect, device number 97 [ 3375.244525][T26342] chnl_net:caif_netlink_parms(): no params data found [ 3375.326324][T25791] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 3375.400006][T26362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5419'. [ 3375.559856][T25791] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 3375.596590][T25791] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3375.599523][T26364] loop3: detected capacity change from 0 to 512 [ 3375.606097][T25791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3375.635799][T25791] usb 1-1: Product: syz [ 3375.640220][T25791] usb 1-1: Manufacturer: syz [ 3375.645277][T25791] usb 1-1: SerialNumber: syz [ 3375.846826][T19349] Bluetooth: hci12: command tx timeout [ 3376.158408][T26370] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5421'. [ 3376.250340][T22226] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 3376.312509][T25791] cdc_ncm 1-1:1.0: bind() failure [ 3376.343632][T25791] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 3376.350825][T25791] cdc_ncm 1-1:1.1: bind() failure [ 3376.495221][T22226] usb 4-1: Using ep0 maxpacket: 8 [ 3376.563138][T22226] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 3376.572774][T22226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3376.581614][T25791] usb 1-1: USB disconnect, device number 2 [ 3376.608699][T22226] usb 4-1: config 0 descriptor?? [ 3376.893744][T26374] loop2: detected capacity change from 0 to 1024 [ 3376.906406][T26374] hfsplus: session requires an argument [ 3376.912934][T26374] hfsplus: unable to parse mount options [ 3377.010465][T26342] bridge0: port 1(bridge_slave_0) entered blocking state [ 3377.018633][T26342] bridge0: port 1(bridge_slave_0) entered disabled state [ 3377.029836][T26342] bridge_slave_0: entered allmulticast mode [ 3377.035046][T22226] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3377.040450][T26342] bridge_slave_0: entered promiscuous mode [ 3377.073205][T22226] asix 4-1:0.0: probe with driver asix failed with error -71 [ 3377.199329][T26374] loop2: detected capacity change from 0 to 512 [ 3377.208757][T26342] bridge0: port 2(bridge_slave_1) entered blocking state [ 3377.216881][T26342] bridge0: port 2(bridge_slave_1) entered disabled state [ 3377.225305][T26342] bridge_slave_1: entered allmulticast mode [ 3377.236162][T26342] bridge_slave_1: entered promiscuous mode [ 3377.478372][T26374] EXT4-fs: Ignoring removed i_version option [ 3377.484952][T26374] EXT4-fs: Ignoring removed nobh option [ 3377.505982][T26374] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 3377.647472][T22226] usb 4-1: USB disconnect, device number 116 [ 3377.842209][T26342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3377.902441][T19349] Bluetooth: hci12: command tx timeout [ 3377.912658][T26374] EXT4-fs (loop2): 1 truncate cleaned up [ 3377.925336][T26342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3377.938929][T26374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3378.119828][T26342] team0: Port device team_slave_0 added [ 3378.222639][T26342] team0: Port device team_slave_1 added [ 3378.649187][T26342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3378.657338][T26342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3378.704742][T26342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3378.823989][T26342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3378.831399][T26342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3378.858033][T26342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3379.043196][T23689] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3379.596248][T26342] hsr_slave_0: entered promiscuous mode [ 3379.742361][T26342] hsr_slave_1: entered promiscuous mode [ 3379.771312][T26342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3379.779315][T26342] Cannot create hsr debugfs directory [ 3379.991761][T19349] Bluetooth: hci12: command tx timeout [ 3380.081593][T26396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5431'. [ 3380.821455][T22226] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 3381.204142][T22226] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3381.217063][T22226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3381.228508][T22226] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 3381.238044][T22226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3381.575239][T22226] usb 3-1: config 0 descriptor?? [ 3381.643807][T26408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5432'. [ 3381.728151][T26401] loop3: detected capacity change from 0 to 512 [ 3381.945052][T22226] ath6kl: Failed to submit usb control message: -71 [ 3381.954182][T22226] ath6kl: unable to send the bmi data to the device: -71 [ 3381.987795][T22226] ath6kl: Unable to send get target info: -71 [ 3382.102396][T20024] Bluetooth: hci12: command tx timeout [ 3382.152914][T22226] ath6kl: Failed to init ath6kl core: -71 [ 3382.197765][T22226] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 3382.537544][T22226] usb 3-1: USB disconnect, device number 96 [ 3382.561762][T26401] EXT4-fs error (device loop3): ext4_quota_enable:7049: comm syz.3.5428: Bad quota inum: 1, type: 2 [ 3382.940191][T26401] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 3383.127078][T26401] EXT4-fs (loop3): mount failed [ 3383.771370][T26342] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3383.882697][T26342] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3384.064725][T26342] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3384.163014][T26421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5434'. [ 3384.176628][T26342] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3384.190663][ T29] audit: type=1326 audit(1727066080.105:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26418 comm="syz.2.5434" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa4a4f7def9 code=0x0 [ 3384.601125][T26426] fuse: Bad value for 'fd' [ 3385.371434][T26428] loop3: detected capacity change from 0 to 1024 [ 3385.381619][T26428] hfsplus: session requires an argument [ 3385.387415][T26428] hfsplus: unable to parse mount options [ 3385.931638][T26428] loop3: detected capacity change from 0 to 512 [ 3386.048934][T26342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3386.054438][T26428] EXT4-fs: Ignoring removed i_version option [ 3386.091488][T26428] EXT4-fs: Ignoring removed nobh option [ 3386.224639][T26428] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 3386.307624][T26441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5441'. [ 3386.329218][T26342] 8021q: adding VLAN 0 to HW filter on device team0 [ 3386.456429][T20595] bridge0: port 1(bridge_slave_0) entered blocking state [ 3386.464256][T20595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3386.550172][T20595] bridge0: port 2(bridge_slave_1) entered blocking state [ 3386.558076][T20595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3386.632626][T26428] EXT4-fs (loop3): 1 truncate cleaned up [ 3386.640537][T26428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3386.669388][T26439] loop2: detected capacity change from 0 to 2048 [ 3387.042418][T26439] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3387.314945][T26342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3387.384093][T26439] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5440: bg 0: block 234: padding at end of block bitmap is not set [ 3387.462675][T26439] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 200 with error 117 [ 3387.476520][T26439] EXT4-fs (loop2): This should not happen!! Data will be lost [ 3387.476520][T26439] [ 3387.984495][T25791] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 3388.084573][T23689] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3388.273516][T25791] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3388.285822][T25791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3388.297387][T25791] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 3388.314379][T25791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3388.357455][T25791] usb 1-1: config 0 descriptor?? [ 3389.666146][T25791] ath6kl: Failed to submit usb control message: -71 [ 3389.673270][T25791] ath6kl: unable to send the bmi data to the device: -71 [ 3389.680562][T25791] ath6kl: Unable to send get target info: -71 [ 3389.703553][T24799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3389.719735][T25791] ath6kl: Failed to init ath6kl core: -71 [ 3389.733889][T25791] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 3390.015997][T26342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3390.423716][T26466] fuse: Bad value for 'fd' [ 3390.706313][T25791] usb 1-1: USB disconnect, device number 3 [ 3391.096934][T26460] loop2: detected capacity change from 0 to 32768 [ 3391.173887][T26469] FAULT_INJECTION: forcing a failure. [ 3391.173887][T26469] name failslab, interval 1, probability 0, space 0, times 0 [ 3391.199358][T26469] CPU: 1 UID: 0 PID: 26469 Comm: syz.3.5446 Tainted: G W 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 3391.211590][T26469] Tainted: [W]=WARN [ 3391.215593][T26469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 3391.225909][T26469] Call Trace: [ 3391.229423][T26469] [ 3391.232537][T26469] dump_stack_lvl+0x216/0x2d0 [ 3391.237511][T26469] dump_stack+0x1e/0x30 [ 3391.241934][T26469] should_fail_ex+0x748/0x7f0 [ 3391.247104][T26469] should_failslab+0x17f/0x210 [ 3391.252217][T26469] __kmalloc_noprof+0x175/0xf30 [ 3391.257486][T26469] ? ovl_stack_alloc+0x35/0x40 [ 3391.262587][T26469] ? kmsan_get_metadata+0x13e/0x1c0 [ 3391.268190][T26469] ovl_stack_alloc+0x35/0x40 [ 3391.273229][T26469] ovl_lookup+0xde3/0x4860 [ 3391.277988][T26469] ? kmsan_get_metadata+0x13e/0x1c0 [ 3391.283581][T26469] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 3391.290072][T26469] ? kmsan_get_metadata+0x13e/0x1c0 [ 3391.295688][T26469] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3391.301853][T26469] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3391.308068][T26469] ? kmsan_get_metadata+0x13e/0x1c0 [ 3391.313652][T26469] ? __pfx_ovl_lookup+0x10/0x10 [ 3391.318866][T26469] path_openat+0x292f/0x6200 [ 3391.323876][T26469] do_filp_open+0x20e/0x590 [ 3391.328731][T26469] do_sys_openat2+0x1bf/0x2f0 [ 3391.333737][T26469] __x64_sys_creat+0xe6/0x140 [ 3391.338757][T26469] x64_sys_call+0x3a6c/0x3ba0 [ 3391.343784][T26469] do_syscall_64+0xcd/0x1e0 [ 3391.348599][T26469] ? clear_bhb_loop+0x25/0x80 [ 3391.353633][T26469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3391.359896][T26469] RIP: 0033:0x7fc90b57def9 [ 3391.364596][T26469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3391.384553][T26469] RSP: 002b:00007fc90afff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 3391.393337][T26469] RAX: ffffffffffffffda RBX: 00007fc90b735f80 RCX: 00007fc90b57def9 [ 3391.401594][T26469] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020000040 [ 3391.409846][T26469] RBP: 00007fc90afff090 R08: 0000000000000000 R09: 0000000000000000 [ 3391.418103][T26469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3391.426370][T26469] R13: 0000000000000000 R14: 00007fc90b735f80 R15: 00007fffb50b92c8 [ 3391.434646][T26469] [ 3391.930147][ T3032] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3392.597769][ T3032] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3392.852018][ T3032] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3393.049476][ T3032] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3393.772494][T26267] coredump: 208(syz.3.5390): written to core: VMAs: 34, size 99516416; core: 62120902 bytes, pos 99524608 [ 3393.906645][T26342] veth0_vlan: entered promiscuous mode [ 3393.985508][T26342] veth1_vlan: entered promiscuous mode [ 3394.161995][T19349] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 3394.220259][T26483] loop2: detected capacity change from 0 to 1024 [ 3394.233493][T19349] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 3394.294633][T19349] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 3394.307228][ T3032] bridge_slave_1: left allmulticast mode [ 3394.315716][ T3032] bridge_slave_1: left promiscuous mode [ 3394.324794][ T3032] bridge0: port 2(bridge_slave_1) entered disabled state [ 3394.343041][T19349] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 3394.372978][ T3032] bridge_slave_0: left allmulticast mode [ 3394.378884][ T3032] bridge_slave_0: left promiscuous mode [ 3394.386621][ T3032] bridge0: port 1(bridge_slave_0) entered disabled state [ 3394.400274][T26483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3394.414913][T19349] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 3394.432256][T19349] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 3394.484563][T26483] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3395.113727][ T3032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3395.150520][T26489] netlink: 'syz.2.5451': attribute type 1 has an invalid length. [ 3395.158835][T26489] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.5451'. [ 3395.213785][ T3032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3395.252755][ T3032] bond0 (unregistering): Released all slaves [ 3395.642593][T26492] support for the xor transformation has been removed. [ 3396.561247][T26342] veth0_macvtap: entered promiscuous mode [ 3397.361546][T19349] Bluetooth: hci11: command tx timeout [ 3397.588016][ T9777] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 3397.819772][T26342] veth1_macvtap: entered promiscuous mode [ 3397.928823][ T9777] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3397.953613][ T9777] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3397.969546][ T9777] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 3397.980413][ T9777] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3398.203963][ T9777] usb 4-1: config 0 descriptor?? [ 3398.337339][T26480] chnl_net:caif_netlink_parms(): no params data found [ 3398.442970][T26502] fuse: Bad value for 'fd' [ 3398.729386][ T3032] hsr_slave_0: left promiscuous mode [ 3398.798358][ T3032] hsr_slave_1: left promiscuous mode [ 3398.835829][ T3032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3398.844395][ T3032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3398.926185][ T3032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3398.934631][ T3032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3399.088878][ T3032] veth1_macvtap: left promiscuous mode [ 3399.095057][ T3032] veth0_macvtap: left promiscuous mode [ 3399.101423][ T3032] veth1_vlan: left promiscuous mode [ 3399.107013][ T3032] veth0_vlan: left promiscuous mode [ 3399.145812][ T9777] ath6kl: Failed to submit usb control message: -71 [ 3399.153046][ T9777] ath6kl: unable to send the bmi data to the device: -71 [ 3399.160337][ T9777] ath6kl: Unable to send get target info: -71 [ 3399.251839][ T9777] ath6kl: Failed to init ath6kl core: -71 [ 3399.263436][ T9777] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 3399.439635][T20024] Bluetooth: hci11: command tx timeout [ 3399.503373][ T9777] usb 4-1: USB disconnect, device number 117 [ 3399.749658][ T3032] pim6reg (unregistering): left allmulticast mode [ 3401.165697][ T3032] team0 (unregistering): Port device team_slave_1 removed [ 3401.403637][ T3032] team0 (unregistering): Port device team_slave_0 removed [ 3401.691603][T20024] Bluetooth: hci11: command tx timeout [ 3402.532943][T26507] loop3: detected capacity change from 0 to 32768 [ 3402.566391][T26507] read_mapping_page failed! [ 3402.571344][T26507] jfs_mount: Failed to read AGGREGATE_I [ 3402.577105][T26507] Mount JFS Failure: -5 [ 3402.581753][T26507] jfs_mount failed w/return code = -5 [ 3402.874961][T25791] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 3403.026537][T26342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3403.038264][T26342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3403.048573][T26342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3403.078793][T26342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3403.082514][T26513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5463'. [ 3403.094426][T26342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3403.108887][T26342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3403.119053][T26342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3403.129928][T26342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3403.140138][T26342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3403.152032][T26342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3403.181557][T26342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3403.197703][T26342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3403.207647][T25791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3403.207841][T25791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3403.219018][T26342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3403.228995][T25791] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 3403.239518][T26342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3403.239646][T26342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3403.239739][T26342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3403.239843][T26342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3403.239961][T26342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3403.249119][T25791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3403.279279][T26342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3403.336996][T26342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3403.347531][T26342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3403.358428][T26342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3403.388936][T26342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3403.405481][T26342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3403.415877][T26342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3403.426769][T26342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3403.437022][T26342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3403.447810][T26342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3403.458022][T26342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3403.489431][T26342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3403.492568][T25791] usb 3-1: config 0 descriptor?? [ 3403.511191][T26342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3403.725247][T26513] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3403.742254][T20024] Bluetooth: hci11: command tx timeout [ 3403.855085][T26513] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3403.946574][T26342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3403.957559][T26342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3403.968203][T26342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3403.999109][T26342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3404.015031][T26342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3404.026085][T26342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3404.036346][T26342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3404.047365][T26342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3404.057577][T26342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3404.068610][T26342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3404.103057][ T9783] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 3404.106009][T26342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3404.121603][T26342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3404.132124][T26342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3404.147218][T26342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3404.158332][T26342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3404.169277][T26342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3404.179540][T26342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3404.214886][T26342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3404.232409][T26342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3404.243784][T26342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3404.254038][T26342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3404.265445][T26342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3404.275654][T26342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3404.313098][T26342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3404.330600][T26342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3404.344022][T26342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3404.354239][T26342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3404.365109][T26342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3404.375315][T26342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3404.410117][T26342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3404.431888][T26342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3404.535862][T25791] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 3404.543875][T25791] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 3404.564489][T25791] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0011/input/input26 [ 3404.610567][T26513] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3404.635930][T25791] cm6533_jd 0003:0D8C:0022.0011: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 3404.713518][T26342] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3404.722924][T26342] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3404.732111][T26342] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3404.741306][T26342] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3405.028505][T25791] usb 3-1: USB disconnect, device number 97 [ 3405.065162][ T9783] usb 1-1: Using ep0 maxpacket: 32 [ 3405.099383][ T9783] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 3405.125373][ T9783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3405.185927][T26513] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3405.218568][ T9783] usb 1-1: config 0 descriptor?? [ 3405.236855][ T9783] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 3405.641667][T26480] bridge0: port 1(bridge_slave_0) entered blocking state [ 3405.649436][T26480] bridge0: port 1(bridge_slave_0) entered disabled state [ 3405.660237][T26480] bridge_slave_0: entered allmulticast mode [ 3405.672956][T26480] bridge_slave_0: entered promiscuous mode [ 3405.690724][T26480] bridge0: port 2(bridge_slave_1) entered blocking state [ 3405.698941][T26480] bridge0: port 2(bridge_slave_1) entered disabled state [ 3405.707069][T26480] bridge_slave_1: entered allmulticast mode [ 3405.738740][T26480] bridge_slave_1: entered promiscuous mode [ 3405.754000][ T9783] gspca_nw80x: reg_w err -110 [ 3405.754345][ T9783] nw80x 1-1:0.0: probe with driver nw80x failed with error -110 [ 3406.159988][T26480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3406.203400][T26513] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3406.405647][T26480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3406.523204][T26528] loop3: detected capacity change from 0 to 1024 [ 3406.629896][T26513] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3406.686793][T26513] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3406.714956][T26513] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3406.939204][T26480] team0: Port device team_slave_0 added [ 3407.033710][T26480] team0: Port device team_slave_1 added [ 3407.085909][T26528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3407.235832][T26532] loop2: detected capacity change from 0 to 512 [ 3407.244621][T26528] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3407.294800][T26480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3407.303577][T26480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3407.332230][T26480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3407.353074][T26480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3407.378690][T26480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3407.391550][T26532] EXT4-fs error (device loop2): ext4_quota_enable:7049: comm syz.2.5465: Bad quota inum: 1, type: 2 [ 3407.412076][T26480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3407.510195][T26532] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 3407.548482][T26532] EXT4-fs (loop2): mount failed [ 3407.908870][T26480] hsr_slave_0: entered promiscuous mode [ 3407.940423][T26528] netlink: 'syz.3.5464': attribute type 1 has an invalid length. [ 3407.948697][T26528] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.5464'. [ 3407.963276][T26480] hsr_slave_1: entered promiscuous mode [ 3408.021869][ T9783] usb 1-1: USB disconnect, device number 4 [ 3408.034956][T26480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3408.043123][T26480] Cannot create hsr debugfs directory [ 3408.167945][T26528] support for the xor transformation has been removed. [ 3408.545149][T26547] fuse: Bad value for 'fd' [ 3409.654847][T26556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5469'. [ 3409.787987][T26556] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3409.998551][T26556] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3410.056475][T26480] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3410.089745][T26480] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3410.150324][T26556] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3410.170653][T26480] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3410.206337][T26480] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3410.459276][T26556] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3410.660916][T22226] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 3410.892152][T26556] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3410.920891][T26556] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3410.979338][T26556] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3411.008317][T26556] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3411.422122][T26480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3411.495857][T26480] 8021q: adding VLAN 0 to HW filter on device team0 [ 3411.550346][T22920] bridge0: port 1(bridge_slave_0) entered blocking state [ 3411.558172][T22920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3411.591774][T22920] bridge0: port 2(bridge_slave_1) entered blocking state [ 3411.599533][T22920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3411.634032][T22226] usb 3-1: Using ep0 maxpacket: 32 [ 3411.937916][T22226] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 3411.949355][T22226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3413.146115][T22226] usb 3-1: config 0 descriptor?? [ 3413.574730][T22226] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 3414.281497][T22226] gspca_nw80x: reg_w err -110 [ 3414.286685][T22226] nw80x 3-1:0.0: probe with driver nw80x failed with error -110 [ 3414.484052][T26570] loop3: detected capacity change from 0 to 32768 [ 3414.927145][T25791] usb 3-1: USB disconnect, device number 98 [ 3415.775449][T26582] Illegal XDP return value 2959307043 on prog (id 556) dev N/A, expect packet loss! [ 3415.882203][ T3032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3415.890317][ T3032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3416.040111][T26586] loop2: detected capacity change from 0 to 256 [ 3416.202976][T26574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3416.211925][T26574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3416.530307][T26480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3416.773274][T26480] veth0_vlan: entered promiscuous mode [ 3416.910881][T26480] veth1_vlan: entered promiscuous mode [ 3417.050823][T26590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5412'. [ 3417.075966][T26590] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 3417.237145][T26480] veth0_macvtap: entered promiscuous mode [ 3417.271882][T26592] pim6reg: entered allmulticast mode [ 3417.308849][T26480] veth1_macvtap: entered promiscuous mode [ 3417.325222][T26586] FAT-fs (loop2): Directory bread(block 64) failed [ 3417.332935][T26586] FAT-fs (loop2): Directory bread(block 65) failed [ 3417.339953][T26586] FAT-fs (loop2): Directory bread(block 66) failed [ 3417.347003][T26586] FAT-fs (loop2): Directory bread(block 67) failed [ 3417.354163][T26586] FAT-fs (loop2): Directory bread(block 68) failed [ 3417.361225][T26586] FAT-fs (loop2): Directory bread(block 69) failed [ 3417.368225][T26586] FAT-fs (loop2): Directory bread(block 70) failed [ 3417.375756][T26586] FAT-fs (loop2): Directory bread(block 71) failed [ 3417.382845][T26586] FAT-fs (loop2): Directory bread(block 72) failed [ 3417.411368][T26586] FAT-fs (loop2): Directory bread(block 73) failed [ 3417.533287][T15978] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 3417.546473][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3417.558025][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3417.568324][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3417.581443][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3417.592585][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3417.617696][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3417.632415][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3417.643343][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3417.653590][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3417.664494][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3417.674730][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3417.685559][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3417.696238][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3417.720599][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3417.735127][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3417.746052][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3417.756232][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3417.767109][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3417.777283][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3417.780538][T15978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3417.787948][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3417.788031][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3417.788123][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3417.788221][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3417.788323][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3417.788410][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3417.788510][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3417.788598][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3417.788697][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3417.788801][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3417.818248][T15978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3417.826901][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3417.827005][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3417.827104][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3417.833530][T26480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3417.838387][T15978] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 3418.002718][T15978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3418.051171][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3418.064378][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3418.075070][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3418.085904][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3418.096585][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3418.127326][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3418.142956][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3418.156960][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3418.167565][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3418.178492][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3418.188808][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3418.199700][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3418.233201][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3418.264424][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3418.274772][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3418.285643][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3418.295867][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3418.306721][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3418.336763][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3418.353533][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3418.363877][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3418.374747][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3418.390404][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3418.405471][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3418.436511][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3418.452874][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3418.463222][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3418.474070][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3418.484236][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3418.495061][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3418.505266][T26480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3418.537534][T26480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3418.561743][T26480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3418.808790][T26480] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3418.818280][T26480] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3418.848499][T26480] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3418.863444][T26480] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3418.923540][T15978] usb 4-1: config 0 descriptor?? [ 3419.045971][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 3419.052769][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 3419.414871][T15978] cm6533_jd 0003:0D8C:0022.0012: unknown main item tag 0x0 [ 3419.424897][T15978] cm6533_jd 0003:0D8C:0022.0012: unknown main item tag 0x0 [ 3419.469712][T15978] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0012/input/input27 [ 3419.715270][T15978] cm6533_jd 0003:0D8C:0022.0012: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 3421.582193][T25791] usb 4-1: reset high-speed USB device number 118 using dummy_hcd [ 3425.271171][ T9783] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 3425.466352][T26635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5487'. [ 3425.746029][ T9783] usb 1-1: Using ep0 maxpacket: 8 [ 3426.051261][ T9783] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3426.061832][ T9783] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3426.071270][ T9783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3426.190451][T26639] loop2: detected capacity change from 0 to 1024 [ 3426.274343][ T9783] usb 1-1: config 0 descriptor?? [ 3426.337076][ T9783] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 3426.384366][T26639] hfsplus: session requires an argument [ 3426.390142][T26639] hfsplus: unable to parse mount options [ 3426.665843][ T9783] usb 1-1: USB disconnect, device number 5 [ 3426.752698][T26639] loop2: detected capacity change from 0 to 512 [ 3426.776656][T26642] loop3: detected capacity change from 0 to 128 [ 3426.835919][T26639] EXT4-fs: Ignoring removed i_version option [ 3426.842736][T26639] EXT4-fs: Ignoring removed nobh option [ 3426.886847][T26642] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 3426.956241][T26639] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 3427.103578][T26639] EXT4-fs (loop2): 1 truncate cleaned up [ 3427.111446][T26639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3427.198059][ T9777] usb 4-1: USB disconnect, device number 118 [ 3428.134649][T26652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5493'. [ 3428.233944][T23689] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3428.383132][T26652] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3428.489575][T26654] netlink: 'syz.0.5494': attribute type 1 has an invalid length. [ 3428.497811][T26654] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.5494'. [ 3428.571227][T11295] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 3428.608501][T26652] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3428.742740][T26567] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 3428.802271][T26652] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3428.819176][T11295] usb 5-1: Using ep0 maxpacket: 32 [ 3428.929673][T11295] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 3428.939502][T11295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3429.013525][T26567] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3429.025239][T26567] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3429.035748][T26567] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 3429.045429][T26567] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3429.108378][T11295] usb 5-1: config 0 descriptor?? [ 3429.157890][T11295] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 3429.225237][T26652] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3429.250804][T26567] usb 3-1: config 0 descriptor?? [ 3429.766598][T26567] cm6533_jd 0003:0D8C:0022.0013: unknown main item tag 0x0 [ 3429.774578][T26567] cm6533_jd 0003:0D8C:0022.0013: unknown main item tag 0x0 [ 3429.810479][T11295] gspca_nw80x: reg_w err -110 [ 3429.822728][T11295] nw80x 5-1:0.0: probe with driver nw80x failed with error -110 [ 3429.851724][T26567] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0013/input/input28 [ 3429.938495][T26652] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3429.969540][T26652] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3430.025376][T26652] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3430.053783][T26652] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3430.115685][T26567] cm6533_jd 0003:0D8C:0022.0013: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 3430.177590][T20594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3430.186126][T20594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3430.232533][T26567] usb 3-1: USB disconnect, device number 99 [ 3430.367834][T20594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3430.376399][T20594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3430.693757][T26669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5452'. [ 3431.487706][T26567] usb 5-1: USB disconnect, device number 86 [ 3431.813631][T26678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5499'. [ 3431.902178][T26679] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5499'. [ 3431.912018][T26679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5499'. [ 3432.015195][T26678] tipc: Enabling of bearer rejected, failed to enable media [ 3432.053729][T26681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5500'. [ 3432.081551][T26681] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 3432.133017][T26681] pim6reg: entered allmulticast mode [ 3433.041893][T26689] FAULT_INJECTION: forcing a failure. [ 3433.041893][T26689] name failslab, interval 1, probability 0, space 0, times 0 [ 3433.056266][T26689] CPU: 0 UID: 0 PID: 26689 Comm: syz.4.5503 Tainted: G W 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 3433.068514][T26689] Tainted: [W]=WARN [ 3433.072523][T26689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 3433.082832][T26689] Call Trace: [ 3433.086316][T26689] [ 3433.089459][T26689] dump_stack_lvl+0x216/0x2d0 [ 3433.094427][T26689] dump_stack+0x1e/0x30 [ 3433.098892][T26689] should_fail_ex+0x748/0x7f0 [ 3433.103917][T26689] should_failslab+0x17f/0x210 [ 3433.109050][T26689] kmem_cache_alloc_node_noprof+0xeb/0xb80 [ 3433.115229][T26689] ? __alloc_skb+0x1e9/0x7b0 [ 3433.120169][T26689] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3433.126348][T26689] __alloc_skb+0x1e9/0x7b0 [ 3433.131093][T26689] netlink_ack+0x281/0xe80 [ 3433.135819][T26689] ? kmsan_get_metadata+0x13e/0x1c0 [ 3433.141381][T26689] netlink_rcv_skb+0x510/0x650 [ 3433.146456][T26689] ? __pfx_genl_rcv_msg+0x10/0x10 [ 3433.151848][T26689] ? __pfx_genl_rcv+0x10/0x10 [ 3433.156941][T26689] genl_rcv+0x40/0x60 [ 3433.161241][T26689] netlink_unicast+0xf52/0x1260 [ 3433.166447][T26689] netlink_sendmsg+0x10da/0x11e0 [ 3433.171716][T26689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3433.177309][T26689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3433.182933][T26689] __sock_sendmsg+0x30f/0x380 [ 3433.187982][T26689] ____sys_sendmsg+0x877/0xb60 [ 3433.193109][T26689] ___sys_sendmsg+0x28d/0x3c0 [ 3433.198070][T26689] ? kmsan_get_metadata+0x13e/0x1c0 [ 3433.203690][T26689] ? __rcu_read_unlock+0x7b/0xe0 [ 3433.208964][T26689] ? __fget_files+0x4f5/0x5c0 [ 3433.214175][T26689] ? kmsan_get_metadata+0x13e/0x1c0 [ 3433.219740][T26689] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3433.225952][T26689] __x64_sys_sendmsg+0x301/0x490 [ 3433.231189][T26689] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3433.237378][T26689] x64_sys_call+0x2da0/0x3ba0 [ 3433.242420][T26689] do_syscall_64+0xcd/0x1e0 [ 3433.247250][T26689] ? clear_bhb_loop+0x25/0x80 [ 3433.252271][T26689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3433.258514][T26689] RIP: 0033:0x7f52f737def9 [ 3433.263205][T26689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3433.283115][T26689] RSP: 002b:00007f52f8180038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3433.291867][T26689] RAX: ffffffffffffffda RBX: 00007f52f7535f80 RCX: 00007f52f737def9 [ 3433.300211][T26689] RDX: 0000000004040000 RSI: 0000000020000440 RDI: 0000000000000004 [ 3433.308461][T26689] RBP: 00007f52f8180090 R08: 0000000000000000 R09: 0000000000000000 [ 3433.316707][T26689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3433.324965][T26689] R13: 0000000000000000 R14: 00007f52f7535f80 R15: 00007fff0201c578 [ 3433.333230][T26689] [ 3434.656668][T26685] loop2: detected capacity change from 0 to 32768 [ 3434.991259][T26567] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 3435.036143][T26699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5509'. [ 3435.188726][T26567] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3435.200451][T26567] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3435.228980][T26567] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 3435.243852][T26567] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3435.334298][T26567] usb 5-1: config 0 descriptor?? [ 3435.961503][T26567] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0 [ 3435.969343][T26567] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0 [ 3435.992003][T26567] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0014/input/input29 [ 3436.014805][T26567] cm6533_jd 0003:0D8C:0022.0014: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 3436.361951][T26567] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 3436.561092][T26567] usb 2-1: Using ep0 maxpacket: 8 [ 3436.606118][T26567] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 3436.700421][T26567] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 3436.711724][T26567] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3436.720022][T26567] usb 2-1: Product: syz [ 3436.725325][T26567] usb 2-1: Manufacturer: syz [ 3436.730184][T26567] usb 2-1: SerialNumber: syz [ 3436.780187][T26567] usb 2-1: config 0 descriptor?? [ 3436.812444][T26567] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 3437.186618][T11295] usb 5-1: reset high-speed USB device number 87 using dummy_hcd [ 3437.491895][T19349] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 3437.502644][T19349] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 3437.523364][T19349] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 3437.538917][T19349] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 3437.553843][T19349] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 3437.598462][T19349] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 3437.635446][T26567] gspca_zc3xx: reg_w_i err -110 [ 3438.479266][T26567] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 3438.513337][T26567] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 3439.662373][T26719] Bluetooth: hci13: command tx timeout [ 3441.142605][T26716] chnl_net:caif_netlink_parms(): no params data found [ 3441.747925][T26719] Bluetooth: hci13: command tx timeout [ 3442.652072][T15978] usb 5-1: USB disconnect, device number 87 [ 3442.752465][T11295] usb 2-1: USB disconnect, device number 98 [ 3443.995444][T26719] Bluetooth: hci13: command tx timeout [ 3445.547977][T26716] bridge0: port 1(bridge_slave_0) entered blocking state [ 3445.574063][T26716] bridge0: port 1(bridge_slave_0) entered disabled state [ 3445.584893][T26716] bridge_slave_0: entered allmulticast mode [ 3445.595334][T26716] bridge_slave_0: entered promiscuous mode [ 3445.680400][T26716] bridge0: port 2(bridge_slave_1) entered blocking state [ 3445.688499][T26716] bridge0: port 2(bridge_slave_1) entered disabled state [ 3445.698076][T26716] bridge_slave_1: entered allmulticast mode [ 3445.708309][T26716] bridge_slave_1: entered promiscuous mode [ 3446.113429][T26716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3446.123289][T26719] Bluetooth: hci13: command tx timeout [ 3446.143270][T26716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3446.300636][T26716] team0: Port device team_slave_0 added [ 3446.319114][T26716] team0: Port device team_slave_1 added [ 3446.342501][T26760] netlink: 'syz.4.5528': attribute type 1 has an invalid length. [ 3446.450026][T26716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3446.460412][T26716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3446.507863][T26716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3446.730746][T26716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3446.738308][T26716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3446.764915][T26716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3447.559640][T26716] hsr_slave_0: entered promiscuous mode [ 3447.669634][T26716] hsr_slave_1: entered promiscuous mode [ 3447.747207][T26716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3447.755493][T26716] Cannot create hsr debugfs directory [ 3448.854598][T15978] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 3450.034857][T15978] usb 2-1: device descriptor read/all, error -71 [ 3451.114503][T26716] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3451.370499][T26716] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3451.847335][T26716] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3452.172194][T26716] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3452.451754][T26795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5539'. [ 3452.786761][T26792] loop2: detected capacity change from 0 to 2048 [ 3453.090316][T26716] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3453.122416][T26716] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3453.171730][T26792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3453.172955][T26716] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3453.214312][T26716] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3453.467171][T26790] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5538: bg 0: block 234: padding at end of block bitmap is not set [ 3453.495610][T26790] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 118 with error 117 [ 3453.508694][T26790] EXT4-fs (loop2): This should not happen!! Data will be lost [ 3453.508694][T26790] [ 3453.632366][T26809] FAULT_INJECTION: forcing a failure. [ 3453.632366][T26809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3453.664949][T26809] CPU: 0 UID: 0 PID: 26809 Comm: syz.0.5542 Tainted: G W 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 3453.677203][T26809] Tainted: [W]=WARN [ 3453.681208][T26809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 3453.691542][T26809] Call Trace: [ 3453.695045][T26809] [ 3453.698228][T26809] dump_stack_lvl+0x216/0x2d0 [ 3453.703264][T26809] dump_stack+0x1e/0x30 [ 3453.707749][T26809] should_fail_ex+0x748/0x7f0 [ 3453.712772][T26809] should_fail+0x2a/0x40 [ 3453.717363][T26809] should_fail_usercopy+0x2e/0x40 [ 3453.722693][T26809] _copy_from_user+0x33/0x160 [ 3453.727744][T26809] kstrtouint_from_user+0x75/0x140 [ 3453.733169][T26809] ? proc_fail_nth_write+0x43/0x2e0 [ 3453.738686][T26809] ? vfs_write+0x487/0x1540 [ 3453.743586][T26809] proc_fail_nth_write+0x62/0x2e0 [ 3453.748927][T26809] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 3453.754898][T26809] vfs_write+0x487/0x1540 [ 3453.759527][T26809] ? kmsan_get_metadata+0x13e/0x1c0 [ 3453.765074][T26809] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 3453.771759][T26809] ksys_write+0x20f/0x4c0 [ 3453.776397][T26809] __x64_sys_write+0x93/0xe0 [ 3453.781287][T26809] x64_sys_call+0x306a/0x3ba0 [ 3453.786284][T26809] do_syscall_64+0xcd/0x1e0 [ 3453.791108][T26809] ? clear_bhb_loop+0x25/0x80 [ 3453.796131][T26809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3453.802350][T26809] RIP: 0033:0x7fb86357c9df [ 3453.807039][T26809] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 3453.827269][T26809] RSP: 002b:00007fb864349030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 3453.836024][T26809] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb86357c9df [ 3453.844303][T26809] RDX: 0000000000000001 RSI: 00007fb8643490a0 RDI: 0000000000000004 [ 3453.852541][T26809] RBP: 00007fb864349090 R08: 0000000000000000 R09: 0000000000000000 [ 3453.860778][T26809] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 3453.869043][T26809] R13: 0000000000000000 R14: 00007fb863735f80 R15: 00007fff2638c318 [ 3453.877341][T26809] [ 3454.443932][T23689] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3454.762238][T15978] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 3454.838929][T26716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3454.909458][T11295] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 3454.965909][T26821] ===================================================== [ 3454.973412][T26821] BUG: KMSAN: uninit-value in nf_reject_ip6_tcphdr_put+0x688/0x6c0 [ 3454.981699][T26821] nf_reject_ip6_tcphdr_put+0x688/0x6c0 [ 3454.987517][T26821] nf_send_reset6+0xd84/0x15b0 [ 3454.992626][T26821] nft_reject_inet_eval+0x3c1/0x880 [ 3454.998035][T26821] nft_do_chain+0x426/0x2290 [ 3455.002963][T26821] nft_do_chain_inet+0x41a/0x4f0 [ 3455.008151][T26821] nf_hook_slow+0xf4/0x400 [ 3455.012908][T26821] ip6_xmit+0x2488/0x25d0 [ 3455.017500][T26821] tcp_v6_send_synack+0xa7c/0xeb0 [ 3455.022842][T26821] tcp_conn_request+0x3cb6/0x4b00 [ 3455.028067][T26821] tcp_v6_conn_request+0x2f5/0x3d0 [ 3455.033529][T26821] tcp_rcv_state_process+0x2f1/0x4c10 [ 3455.039104][T26821] tcp_v6_do_rcv+0xc9b/0x1c30 [ 3455.044081][T26821] tcp_v6_rcv+0x43f1/0x4fa0 [ 3455.048790][T26821] ip6_protocol_deliver_rcu+0x1ad5/0x2cb0 [ 3455.054865][T26821] ip6_input+0x161/0x430 [ 3455.059338][T26821] ip6_rcv_finish+0x617/0x970 [ 3455.064346][T26821] ipv6_rcv+0xde/0x390 [ 3455.068645][T26821] __netif_receive_skb+0x1da/0xa00 [ 3455.074068][T26821] netif_receive_skb+0x58/0x660 [ 3455.079162][T26821] tun_rx_batched+0x3ee/0x980 [ 3455.084155][T26821] tun_get_user+0x5783/0x6c60 [ 3455.089019][T26821] tun_chr_write_iter+0x3ac/0x5d0 [ 3455.094364][T26821] vfs_write+0xb28/0x1540 [ 3455.098910][T26821] ksys_write+0x20f/0x4c0 [ 3455.103573][T26821] __x64_sys_write+0x93/0xe0 [ 3455.108377][T26821] x64_sys_call+0x306a/0x3ba0 [ 3455.111385][T11295] usb 2-1: Using ep0 maxpacket: 16 [ 3455.113343][T26821] do_syscall_64+0xcd/0x1e0 [ 3455.123270][T26821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3455.129408][T26821] [ 3455.131942][T26821] Uninit was stored to memory at: [ 3455.137300][T26821] nf_reject_ip6_tcphdr_put+0x60c/0x6c0 [ 3455.143192][T26821] nf_send_reset6+0xd84/0x15b0 [ 3455.148229][T26821] nft_reject_inet_eval+0x3c1/0x880 [ 3455.153730][T26821] nft_do_chain+0x426/0x2290 [ 3455.158574][T26821] nft_do_chain_inet+0x41a/0x4f0 [ 3455.163863][T26821] nf_hook_slow+0xf4/0x400 [ 3455.168512][T26821] ip6_xmit+0x2488/0x25d0 [ 3455.173152][T26821] tcp_v6_send_synack+0xa7c/0xeb0 [ 3455.178392][T26821] tcp_conn_request+0x3cb6/0x4b00 [ 3455.183735][T26821] tcp_v6_conn_request+0x2f5/0x3d0 [ 3455.189066][T26821] tcp_rcv_state_process+0x2f1/0x4c10 [ 3455.194733][T26821] tcp_v6_do_rcv+0xc9b/0x1c30 [ 3455.199603][T26821] tcp_v6_rcv+0x43f1/0x4fa0 [ 3455.204396][T26821] ip6_protocol_deliver_rcu+0x1ad5/0x2cb0 [ 3455.210394][T26821] ip6_input+0x161/0x430 [ 3455.214942][T26821] ip6_rcv_finish+0x617/0x970 [ 3455.219837][T26821] ipv6_rcv+0xde/0x390 [ 3455.224211][T26821] __netif_receive_skb+0x1da/0xa00 [ 3455.229534][T26821] netif_receive_skb+0x58/0x660 [ 3455.234752][T26821] tun_rx_batched+0x3ee/0x980 [ 3455.239631][T26821] tun_get_user+0x5783/0x6c60 [ 3455.244583][T26821] tun_chr_write_iter+0x3ac/0x5d0 [ 3455.249827][T26821] vfs_write+0xb28/0x1540 [ 3455.254454][T26821] ksys_write+0x20f/0x4c0 [ 3455.258988][T26821] __x64_sys_write+0x93/0xe0 [ 3455.263888][T26821] x64_sys_call+0x306a/0x3ba0 [ 3455.268790][T26821] do_syscall_64+0xcd/0x1e0 [ 3455.273599][T26821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3455.279755][T26821] [ 3455.282312][T26821] Uninit was stored to memory at: [ 3455.287658][T26821] nf_reject_ip6_tcphdr_put+0x2ca/0x6c0 [ 3455.293582][T26821] nf_send_reset6+0xd84/0x15b0 [ 3455.298638][T26821] nft_reject_inet_eval+0x3c1/0x880 [ 3455.304138][T26821] nft_do_chain+0x426/0x2290 [ 3455.308976][T26821] nft_do_chain_inet+0x41a/0x4f0 [ 3455.314263][T26821] nf_hook_slow+0xf4/0x400 [ 3455.318938][T26821] ip6_xmit+0x2488/0x25d0 [ 3455.323580][T26821] tcp_v6_send_synack+0xa7c/0xeb0 [ 3455.328824][T26821] tcp_conn_request+0x3cb6/0x4b00 [ 3455.334183][T26821] tcp_v6_conn_request+0x2f5/0x3d0 [ 3455.339512][T26821] tcp_rcv_state_process+0x2f1/0x4c10 [ 3455.345180][T26821] tcp_v6_do_rcv+0xc9b/0x1c30 [ 3455.350059][T26821] tcp_v6_rcv+0x43f1/0x4fa0 [ 3455.354874][T26821] ip6_protocol_deliver_rcu+0x1ad5/0x2cb0 [ 3455.360847][T26821] ip6_input+0x161/0x430 [ 3455.365427][T26821] ip6_rcv_finish+0x617/0x970 [ 3455.370346][T26821] ipv6_rcv+0xde/0x390 [ 3455.374750][T26821] __netif_receive_skb+0x1da/0xa00 [ 3455.380043][T26821] netif_receive_skb+0x58/0x660 [ 3455.385215][T26821] tun_rx_batched+0x3ee/0x980 [ 3455.390098][T26821] tun_get_user+0x5783/0x6c60 [ 3455.395063][T26821] tun_chr_write_iter+0x3ac/0x5d0 [ 3455.400368][T26821] vfs_write+0xb28/0x1540 [ 3455.405073][T26821] ksys_write+0x20f/0x4c0 [ 3455.409614][T26821] __x64_sys_write+0x93/0xe0 [ 3455.414536][T26821] x64_sys_call+0x306a/0x3ba0 [ 3455.419436][T26821] do_syscall_64+0xcd/0x1e0 [ 3455.424214][T26821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3455.430331][T26821] [ 3455.432881][T26821] Uninit was created at: [ 3455.437417][T26821] kmem_cache_alloc_node_noprof+0x6bf/0xb80 [ 3455.443665][T26821] kmalloc_reserve+0x13d/0x4a0 [ 3455.448681][T26821] __alloc_skb+0x363/0x7b0 [ 3455.453454][T26821] nf_send_reset6+0x98d/0x15b0 [ 3455.458490][T26821] nft_reject_inet_eval+0x3c1/0x880 [ 3455.464052][T26821] nft_do_chain+0x426/0x2290 [ 3455.468894][T26821] nft_do_chain_inet+0x41a/0x4f0 [ 3455.474210][T26821] nf_hook_slow+0xf4/0x400 [ 3455.478857][T26821] ip6_xmit+0x2488/0x25d0 [ 3455.483497][T26821] tcp_v6_send_synack+0xa7c/0xeb0 [ 3455.488746][T26821] tcp_conn_request+0x3cb6/0x4b00 [ 3455.494077][T26821] tcp_v6_conn_request+0x2f5/0x3d0 [ 3455.499412][T26821] tcp_rcv_state_process+0x2f1/0x4c10 [ 3455.505087][T26821] tcp_v6_do_rcv+0xc9b/0x1c30 [ 3455.509960][T26821] tcp_v6_rcv+0x43f1/0x4fa0 [ 3455.514754][T26821] ip6_protocol_deliver_rcu+0x1ad5/0x2cb0 [ 3455.520700][T26821] ip6_input+0x161/0x430 [ 3455.525236][T26821] ip6_rcv_finish+0x617/0x970 [ 3455.530118][T26821] ipv6_rcv+0xde/0x390 [ 3455.534482][T26821] __netif_receive_skb+0x1da/0xa00 [ 3455.539779][T26821] netif_receive_skb+0x58/0x660 [ 3455.544989][T26821] tun_rx_batched+0x3ee/0x980 [ 3455.549870][T26821] tun_get_user+0x5783/0x6c60 [ 3455.554884][T26821] tun_chr_write_iter+0x3ac/0x5d0 [ 3455.560113][T26821] vfs_write+0xb28/0x1540 [ 3455.564775][T26821] ksys_write+0x20f/0x4c0 [ 3455.569348][T26821] __x64_sys_write+0x93/0xe0 [ 3455.574370][T26821] x64_sys_call+0x306a/0x3ba0 [ 3455.579287][T26821] do_syscall_64+0xcd/0x1e0 [ 3455.584107][T26821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3455.590235][T26821] [ 3455.592807][T26821] CPU: 1 UID: 0 PID: 26821 Comm: syz.4.5547 Tainted: G W 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 3455.605121][T26821] Tainted: [W]=WARN [ 3455.609055][T26821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 3455.619399][T26821] ===================================================== [ 3455.626675][T26821] Disabling lock debugging due to kernel taint [ 3455.633073][T26821] Kernel panic - not syncing: kmsan.panic set ... [ 3455.639639][T26821] CPU: 1 UID: 0 PID: 26821 Comm: syz.4.5547 Tainted: G B W 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 3455.651882][T26821] Tainted: [B]=BAD_PAGE, [W]=WARN [ 3455.657030][T26821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 3455.667243][T26821] Call Trace: [ 3455.670653][T26821] [ 3455.673714][T26821] dump_stack_lvl+0x216/0x2d0 [ 3455.678595][T26821] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3455.684703][T26821] dump_stack+0x1e/0x30 [ 3455.689057][T26821] panic+0x4e2/0xcf0 [ 3455.693212][T26821] ? kmsan_get_metadata+0xc1/0x1c0 [ 3455.698587][T26821] kmsan_report+0x2c7/0x2d0 [ 3455.703358][T26821] ? kmsan_internal_chain_origin+0x10/0xd0 [ 3455.709432][T26821] ? __msan_warning+0x95/0x120 [ 3455.714437][T26821] ? nf_reject_ip6_tcphdr_put+0x688/0x6c0 [ 3455.720405][T26821] ? nf_send_reset6+0xd84/0x15b0 [ 3455.725571][T26821] ? nft_reject_inet_eval+0x3c1/0x880 [ 3455.731226][T26821] ? nft_do_chain+0x426/0x2290 [ 3455.736323][T26821] ? nft_do_chain_inet+0x41a/0x4f0 [ 3455.741675][T26821] ? nf_hook_slow+0xf4/0x400 [ 3455.746502][T26821] ? ip6_xmit+0x2488/0x25d0 [ 3455.751210][T26821] ? tcp_v6_send_synack+0xa7c/0xeb0 [ 3455.756632][T26821] ? tcp_conn_request+0x3cb6/0x4b00 [ 3455.762044][T26821] ? tcp_v6_conn_request+0x2f5/0x3d0 [ 3455.767558][T26821] ? tcp_rcv_state_process+0x2f1/0x4c10 [ 3455.773329][T26821] ? tcp_v6_do_rcv+0xc9b/0x1c30 [ 3455.778397][T26821] ? tcp_v6_rcv+0x43f1/0x4fa0 [ 3455.783292][T26821] ? ip6_protocol_deliver_rcu+0x1ad5/0x2cb0 [ 3455.789433][T26821] ? ip6_input+0x161/0x430 [ 3455.794108][T26821] ? ip6_rcv_finish+0x617/0x970 [ 3455.799183][T26821] ? ipv6_rcv+0xde/0x390 [ 3455.803664][T26821] ? __netif_receive_skb+0x1da/0xa00 [ 3455.809170][T26821] ? netif_receive_skb+0x58/0x660 [ 3455.814461][T26821] ? tun_rx_batched+0x3ee/0x980 [ 3455.819531][T26821] ? tun_get_user+0x5783/0x6c60 [ 3455.824607][T26821] ? tun_chr_write_iter+0x3ac/0x5d0 [ 3455.830022][T26821] ? vfs_write+0xb28/0x1540 [ 3455.834740][T26821] ? ksys_write+0x20f/0x4c0 [ 3455.839440][T26821] ? __x64_sys_write+0x93/0xe0 [ 3455.844407][T26821] ? x64_sys_call+0x306a/0x3ba0 [ 3455.849477][T26821] ? do_syscall_64+0xcd/0x1e0 [ 3455.854366][T26821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3455.860637][T26821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3455.866917][T26821] ? kmem_cache_alloc_node_noprof+0x6df/0xb80 [ 3455.873201][T26821] ? kmsan_get_metadata+0x13e/0x1c0 [ 3455.878624][T26821] ? kmsan_get_metadata+0x13e/0x1c0 [ 3455.884084][T26821] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3455.890120][T26821] ? csum_partial+0x45e/0x4b0 [ 3455.895019][T26821] __msan_warning+0x95/0x120 [ 3455.899824][T26821] nf_reject_ip6_tcphdr_put+0x688/0x6c0 [ 3455.905660][T26821] nf_send_reset6+0xd84/0x15b0 [ 3455.910711][T26821] nft_reject_inet_eval+0x3c1/0x880 [ 3455.916095][T26821] ? kmsan_get_metadata+0x13e/0x1c0 [ 3455.921537][T26821] ? __pfx_nft_reject_inet_eval+0x10/0x10 [ 3455.927460][T26821] nft_do_chain+0x426/0x2290 [ 3455.932288][T26821] ? kmsan_get_metadata+0x13e/0x1c0 [ 3455.937725][T26821] ? kmsan_get_metadata+0x13e/0x1c0 [ 3455.943186][T26821] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 3455.949736][T26821] ? kmsan_get_metadata+0x13e/0x1c0 [ 3455.955152][T26821] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3455.961185][T26821] nft_do_chain_inet+0x41a/0x4f0 [ 3455.966367][T26821] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 3455.972075][T26821] nf_hook_slow+0xf4/0x400 [ 3455.976712][T26821] ip6_xmit+0x2488/0x25d0 [ 3455.981239][T26821] ? __pfx_dst_output+0x10/0x10 [ 3455.986313][T26821] tcp_v6_send_synack+0xa7c/0xeb0 [ 3455.991542][T26821] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 3455.997903][T26821] ? __pfx_tcp_v6_send_synack+0x10/0x10 [ 3456.003679][T26821] tcp_conn_request+0x3cb6/0x4b00 [ 3456.008940][T26821] ? kmsan_get_metadata+0x13e/0x1c0 [ 3456.014405][T26821] ? kmsan_get_metadata+0x13e/0x1c0 [ 3456.019911][T26821] tcp_v6_conn_request+0x2f5/0x3d0 [ 3456.025263][T26821] ? __pfx_tcp_v6_conn_request+0x10/0x10 [ 3456.031144][T26821] ? tcp_rcv_state_process+0x286/0x4c10 [ 3456.036918][T26821] tcp_rcv_state_process+0x2f1/0x4c10 [ 3456.042483][T26821] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3456.048522][T26821] ? kmsan_get_metadata+0x13e/0x1c0 [ 3456.053994][T26821] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3456.060037][T26821] tcp_v6_do_rcv+0xc9b/0x1c30 [ 3456.064915][T26821] tcp_v6_rcv+0x43f1/0x4fa0 [ 3456.069667][T26821] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 3456.074722][T26821] ip6_protocol_deliver_rcu+0x1ad5/0x2cb0 [ 3456.080731][T26821] ip6_input+0x161/0x430 [ 3456.085184][T26821] ? __pfx_ip6_input_finish+0x10/0x10 [ 3456.090779][T26821] ? __pfx_ip6_input+0x10/0x10 [ 3456.095852][T26821] ip6_rcv_finish+0x617/0x970 [ 3456.100796][T26821] ipv6_rcv+0xde/0x390 [ 3456.105093][T26821] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 3456.110549][T26821] __netif_receive_skb+0x1da/0xa00 [ 3456.115877][T26821] ? kmsan_get_metadata+0x13e/0x1c0 [ 3456.121347][T26821] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3456.127456][T26821] netif_receive_skb+0x58/0x660 [ 3456.132574][T26821] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3456.138662][T26821] ? tun_rx_batched+0x37c/0x980 [ 3456.143742][T26821] tun_rx_batched+0x3ee/0x980 [ 3456.148645][T26821] ? kmsan_get_metadata+0x13e/0x1c0 [ 3456.154098][T26821] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3456.160183][T26821] tun_get_user+0x5783/0x6c60 [ 3456.165069][T26821] ? kmsan_get_metadata+0x13e/0x1c0 [ 3456.170511][T26821] ? kmsan_get_metadata+0x13e/0x1c0 [ 3456.175959][T26821] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 3456.182561][T26821] tun_chr_write_iter+0x3ac/0x5d0 [ 3456.187789][T26821] vfs_write+0xb28/0x1540 [ 3456.192360][T26821] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 3456.198122][T26821] ksys_write+0x20f/0x4c0 [ 3456.202697][T26821] __x64_sys_write+0x93/0xe0 [ 3456.207520][T26821] x64_sys_call+0x306a/0x3ba0 [ 3456.212455][T26821] do_syscall_64+0xcd/0x1e0 [ 3456.217151][T26821] ? clear_bhb_loop+0x25/0x80 [ 3456.222066][T26821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3456.228246][T26821] RIP: 0033:0x7f52f737c9df [ 3456.232851][T26821] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 3456.252681][T26821] RSP: 002b:00007f52f8180000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 3456.261333][T26821] RAX: ffffffffffffffda RBX: 00007f52f7535f80 RCX: 00007f52f737c9df [ 3456.269477][T26821] RDX: 000000000000004a RSI: 0000000020000000 RDI: 00000000000000c8 [ 3456.277711][T26821] RBP: 00007f52f73f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 3456.285855][T26821] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000000 [ 3456.293983][T26821] R13: 0000000000000000 R14: 00007f52f7535f80 R15: 00007fff0201c578 [ 3456.302135][T26821] [ 3456.305740][T26821] Kernel Offset: disabled [ 3456.310150][T26821] Rebooting in 86400 seconds..