last executing test programs: 3m43.351793586s ago: executing program 3 (id=46): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080304000000e8fea4a118000e000600142603600e1208000f0000810401a80016040a00014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace80", 0x64}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="6127e29a1000810804a7a4f6594cb92e0a28b137140000004abd6efb2503eaff0d0001", 0x23}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r3, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300006d"], 0xfe33) 3m42.791386215s ago: executing program 3 (id=49): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65, 0x0, 0x6}}, [@printk={@llx, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x7, 0x0, 0x3, 0x9}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3m40.637281896s ago: executing program 3 (id=55): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000010000100a1ffffffffffffff00000000", @ANYRES32=r2, @ANYBLOB="c89904bd0000000008000d000000000034001680300001802c"], 0x5c}}, 0x0) 2m59.813153164s ago: executing program 3 (id=55): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000010000100a1ffffffffffffff00000000", @ANYRES32=r2, @ANYBLOB="c89904bd0000000008000d000000000034001680300001802c"], 0x5c}}, 0x0) 2m25.049643007s ago: executing program 3 (id=55): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000010000100a1ffffffffffffff00000000", @ANYRES32=r2, @ANYBLOB="c89904bd0000000008000d000000000034001680300001802c"], 0x5c}}, 0x0) 1m53.03592669s ago: executing program 1 (id=287): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x59}]}]}, 0x30}}, 0x0) 1m52.44142774s ago: executing program 1 (id=289): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x4) 1m51.613946415s ago: executing program 1 (id=293): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800000011000100"/20, @ANYRES32=0x0, @ANYBLOB="100000000000000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4008090}, 0x0) 1m50.917672144s ago: executing program 1 (id=295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3, 0x6}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$key(0xf, 0x3, 0x2) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 1m46.868469557s ago: executing program 1 (id=303): setresgid(0xee00, 0xee01, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xee0000) 1m46.260698094s ago: executing program 1 (id=305): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x170) 1m42.476569241s ago: executing program 3 (id=55): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000010000100a1ffffffffffffff00000000", @ANYRES32=r2, @ANYBLOB="c89904bd0000000008000d000000000034001680300001802c"], 0x5c}}, 0x0) 1m30.798643402s ago: executing program 32 (id=305): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x170) 12.085181695s ago: executing program 2 (id=426): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21415, &(0x7f00000008c0), 0xfe, 0x246, &(0x7f0000000e80)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vgUheFgpQiIqhQEXFRWqG2uLVOLg46q3RyKeJmdZQuxUURnKp2qIugxcHioEMkuVZqG62amnvpfT5w/3L33O85ct8nWS4J0FhXk0wnaSWZTNJJUhw/4O5qunq4uT6xPZ/0ek/8VAyOq7YrR+2uJFlL8lCSrbLIS+1kZfOZvV92HrvvzeXOve9vPj0x1os8tL+3+/jBe7NvfDTz4MoXX/0wW2Q63T9d1/krhrzWLpJb/o9i14miXXcP+CfmXvvw637ub01yzyD/nZSp3ry3lm7Y6uSBd/+q7ds/fnn7OPsKnL9er9P/DFzrAY1TJummKKeSVOtlOTVVfYf/pnW5fHlx6dXJFxeXF16oe6QCzks32X30k0sfXzmR/+9bVf6Bi6uf/yfnNr7trx+06u4NMBZ3VIt+/iefW70/8g+NI//QRL3BXP6hueQfmkv+obnkH5pL/uEC6/z9bvmH5pJ/aC75h+Y6nn8AoFl6l+p+AhmoS93jDwAAAAAAAAAAAAAAAAAAcNr6xPb80TSump+9k+w/kqQ9rH5r8H/EyY2D+eWfi/5hfyiqZiN59q4RTzCiD2p++vqm7+qt//md9dZfXUjWXk9yrd0+ff8Vh/fff3fzGfs7z49Y4F8qTmw//NR465/020a99Wd2kk/748+1YeNPmdsGy+HjT/fsn1g+0yu/jngCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxub3AAAA//85Fm5L") mkdir(0x0, 0x0) syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file2\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00c5a61e37404fa38bfe005f7f00289df192b36714cc2af888b2961bf20614c3c673e2e4a41038f85bca1cf4027dc2b05818687391bbadecdf98899d27b75be625e6dc484c1ee4b74a3564cbbdaf35a4bcc7f048d5c0c109afd5cbf4c2d0ef861e18482b0ca4e1b498e3ba763e62708af0a905ac134baa570718ab6be38c95b88995"], 0x1, 0x48f, &(0x7f0000001100)="$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") 9.41213439s ago: executing program 2 (id=431): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x694, &(0x7f0000000d00)="$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") open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r0, &(0x7f00000005c0)=[{&(0x7f0000000000)='K', 0x1}], 0x1, 0x7fff, 0x0, 0x0) 8.197491403s ago: executing program 0 (id=433): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x9}, {0x2, [{0xc9, 0xa1a}, {0xc8, 0x3}]}}}, 0xc) 7.645200318s ago: executing program 0 (id=435): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x5030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\"/'], 0x0}, 0x0) 6.956793008s ago: executing program 4 (id=436): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000780)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, 0x1c) bind$inet6(r0, 0x0, 0x0) 6.271899256s ago: executing program 2 (id=437): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) socket$inet6(0xa, 0x3, 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast2}}}}}}}, 0x0) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80dc5521, &(0x7f0000002300)=""/4115) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 5.844815848s ago: executing program 4 (id=438): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000000), 0x8) 4.548938214s ago: executing program 4 (id=439): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x2000000, &(0x7f0000000880)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="4689bd08ca678c20ed3db13d91eaebfc8c0900000000000000d9481850c5ce1b726cdfc36d9cb7b5270bbd77fd75355bffacf1a7c54f4f8861aaa7c0977e776e25eac51adaadd286cbc8909f9b4fab83cd15e1078d7aada1cf9c569a", @ANYRESHEX, @ANYRES16=0x0, @ANYBLOB="15e1ba77442f447cd02d69dfc2161089e3f6dd3252933d034fa5a8c65ca1848437a252d2f5fa1854a50a9650567e2f3f16bd86f6aa84e61d360cf70e8b2bc3f97e558b2c0200ce397dae5443fb75edf95ef253b41f8cb8b5dcd22e9a03571b2af371e6e177fc5a315256df3d77d0363613e72e3e2b6051ebb69557744dbdf9e8cfefb52bde759bb9069b140e78154d5c9217f2b5d81894c2b2", @ANYRES32=0x0], 0x1, 0x2bb, &(0x7f0000000440)="$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") syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.779786504s ago: executing program 0 (id=440): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noload}, {}, {@acl}, {@data_err_abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x0, 0x566, &(0x7f00000015c0)="$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") lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x361, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e080a1b0c0900"], 0xb) 2.98796858s ago: executing program 2 (id=441): lseek(0xffffffffffffffff, 0x9, 0x0) open(0x0, 0x14927e, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000006c0)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x3001}, 0x10, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/file4/file7\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x1, r1}, 0x0) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, 0x0, 0x0) 2.303145098s ago: executing program 0 (id=442): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000)=0x6, 0x67) 2.155332671s ago: executing program 4 (id=443): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000440)) 1.609800174s ago: executing program 2 (id=444): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f000000ac40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, 0xee01, r3) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000080), 0x24, 0x0) setreuid(0x0, r2) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000200)={0x10}, 0x10) 1.18443869s ago: executing program 4 (id=445): r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r1, 0x0) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setfsgid(r3) 1.100221152s ago: executing program 0 (id=446): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x4, 0x0, &(0x7f0000000040)) 715.017714ms ago: executing program 2 (id=447): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x703, 0x0, 0x0, 0x0, 0x0, 0x41000000}}], 0x600, 0x0, 0x0) accept$alg(r1, 0x0, 0x0) 233.521332ms ago: executing program 0 (id=448): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x2) 0s ago: executing program 4 (id=449): clock_gettime(0x0, 0x0) setitimer(0x2, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x202, 0x0) syz_read_part_table(0x403a, &(0x7f0000004040)="$eJzs0D1KA2EQBuBZQbCxsBAs5wiyspZ6AQ+hrAsKi40/mCLN5l6BXCNFjpArJLAJSbtFElI8T/O98DHDy7x8fv3+Zz1qs8y39ifv8+M9y6rK76bOx4c4gWKXrmISRXRxE5dDBl+vF8tjFjsXt3dxsY1Fn1bxvP99mm1u2L8RMe6G7p1Pm79DdwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYM0OHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADByQAAAAAgv6/bkegAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8FAAD//8QZE0c=") kernel console output (not intermixed with test programs): layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.253132][ T6109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.838044][ T6109] hsr_slave_0: entered promiscuous mode [ 324.901105][ T6258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.89'. [ 324.934361][ T6109] hsr_slave_1: entered promiscuous mode [ 324.979924][ T6109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.990642][ T6109] Cannot create hsr debugfs directory [ 325.066271][ T6261] syz_tun: entered promiscuous mode [ 325.072014][ T6261] vlan2: entered promiscuous mode [ 325.243331][ T6261] syz_tun: left promiscuous mode [ 326.762267][ T6280] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 327.558316][ T1680] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 327.777641][ T1680] usb 5-1: Using ep0 maxpacket: 8 [ 327.820403][ T1680] usb 5-1: too many configurations: 195, using maximum allowed: 8 [ 327.925804][ T1680] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 327.935621][ T1680] usb 5-1: can't read configurations, error -22 [ 328.486609][ T1680] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 328.704876][ T1680] usb 5-1: Using ep0 maxpacket: 8 [ 328.720641][ T1680] usb 5-1: too many configurations: 195, using maximum allowed: 8 [ 328.754145][ T1680] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 328.763392][ T1680] usb 5-1: can't read configurations, error -22 [ 328.900991][ T1680] usb usb5-port1: attempt power cycle [ 329.278614][ T6109] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 329.312913][ T1680] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 329.337555][ T1680] usb 5-1: Using ep0 maxpacket: 8 [ 329.342968][ T6294] bond_slave_0: entered promiscuous mode [ 329.343195][ T6294] bond_slave_1: entered promiscuous mode [ 329.343599][ T6294] vlan2: entered promiscuous mode [ 329.360736][ T6294] bond0: entered promiscuous mode [ 329.374994][ T1680] usb 5-1: too many configurations: 195, using maximum allowed: 8 [ 329.393579][ T6294] bond0: left promiscuous mode [ 329.407922][ T6294] bond_slave_0: left promiscuous mode [ 329.413835][ T6294] bond_slave_1: left promiscuous mode [ 329.420362][ T1680] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 329.429727][ T1680] usb 5-1: can't read configurations, error -22 [ 329.495965][ T6109] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 329.564591][ T6109] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 329.593156][ T1680] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 329.657879][ T1680] usb 5-1: Using ep0 maxpacket: 8 [ 329.668523][ T1680] usb 5-1: too many configurations: 195, using maximum allowed: 8 [ 329.700846][ T6109] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 329.729017][ T1680] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 329.738092][ T1680] usb 5-1: can't read configurations, error -22 [ 329.814502][ T1680] usb usb5-port1: unable to enumerate USB device [ 330.282211][ T6302] loop0: detected capacity change from 0 to 256 [ 330.513698][ T6302] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60c5118c, utbl_chksum : 0xe619d30d) [ 330.651017][ T6304] tmpfs: Bad value for 'mpol' [ 330.884753][ T1680] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 331.128179][ T6109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.183301][ T1680] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.194208][ T1680] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 331.259807][ T1680] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 331.270771][ T1680] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 331.279525][ T1680] usb 1-1: SerialNumber: syz [ 331.409106][ T6109] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.618480][ T3493] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.626420][ T3493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.764530][ T4356] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.772324][ T4356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.776156][ T1680] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 333.072219][ T1680] usb 1-1: USB disconnect, device number 3 [ 333.255993][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 333.379105][ T6328] loop1: detected capacity change from 0 to 512 [ 333.484719][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 333.505622][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.517091][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.527413][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 333.536979][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.740349][ T25] usb 5-1: config 0 descriptor?? [ 333.797567][ T25] hub 5-1:0.0: USB hub found [ 333.983345][ T25] hub 5-1:0.0: 1 port detected [ 334.431890][ T6339] snd_dummy snd_dummy.0: control 0:1:0:syz0:0 is already present [ 334.655145][ T5849] hub 5-1:0.0: activate --> -90 [ 334.899238][ T6109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.082130][ T6318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.109'. [ 335.093815][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.109'. [ 335.221043][ T6344] FAULT_INJECTION: forcing a failure. [ 335.221043][ T6344] name failslab, interval 1, probability 0, space 0, times 0 [ 335.239084][ T6344] CPU: 1 UID: 0 PID: 6344 Comm: syz.1.113 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 335.250051][ T6344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 335.260403][ T6344] Call Trace: [ 335.263909][ T6344] [ 335.267069][ T6344] dump_stack_lvl+0x216/0x2d0 [ 335.272151][ T6344] dump_stack+0x1e/0x30 [ 335.277027][ T6344] should_fail_ex+0x748/0x7f0 [ 335.282096][ T6344] should_failslab+0x17f/0x210 [ 335.287218][ T6344] kmem_cache_alloc_noprof+0xe2/0xb20 [ 335.292994][ T6344] ? vm_area_alloc+0x5c/0x410 [ 335.298046][ T6344] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 335.304217][ T6344] vm_area_alloc+0x5c/0x410 [ 335.309115][ T6344] mmap_region+0x1577/0x4360 [ 335.314063][ T6344] ? arch_get_unmapped_area_topdown+0xcf9/0xde0 [ 335.320751][ T6344] ? security_mmap_addr+0x78/0x520 [ 335.326263][ T6344] do_mmap+0xead/0x1b00 [ 335.330758][ T6344] vm_mmap_pgoff+0x23b/0x5a0 [ 335.335659][ T6344] ksys_mmap_pgoff+0x16e/0x790 [ 335.340728][ T6344] ? kmsan_get_metadata+0x13e/0x1c0 [ 335.346230][ T6344] __x64_sys_mmap+0x1a8/0x240 [ 335.351232][ T6344] x64_sys_call+0x1bfb/0x3ba0 [ 335.356234][ T6344] do_syscall_64+0xcd/0x1e0 [ 335.361076][ T6344] ? clear_bhb_loop+0x25/0x80 [ 335.366056][ T6344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.372256][ T6344] RIP: 0033:0x7fc505d7e753 [ 335.376940][ T6344] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 335.396859][ T6344] RSP: 002b:00007fc506b64e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 335.405595][ T6344] RAX: ffffffffffffffda RBX: 0000000000009dc1 RCX: 00007fc505d7e753 [ 335.413825][ T6344] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 335.422041][ T6344] RBP: 0000000020009e82 R08: 00000000ffffffff R09: 0000000000000000 [ 335.430262][ T6344] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 335.438492][ T6344] R13: 00007fc506b64ef0 R14: 00007fc506b64eb0 R15: 0000000020000000 [ 335.446752][ T6344] [ 335.560834][ T6109] veth0_vlan: entered promiscuous mode [ 335.601708][ T6109] veth1_vlan: entered promiscuous mode [ 335.761511][ T6109] veth0_macvtap: entered promiscuous mode [ 335.911214][ T6109] veth1_macvtap: entered promiscuous mode [ 336.274550][ T6109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.285484][ T6109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.295802][ T6109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.306673][ T6109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.316943][ T6109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.327812][ T6109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.339512][ T6109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.350573][ T6109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.373432][ T6109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.632880][ T25] usb 5-1: USB disconnect, device number 6 [ 336.794036][ T6109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.804954][ T6109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.815464][ T6109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.826378][ T6109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.836561][ T6109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.847391][ T6109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.857608][ T6109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.868429][ T6109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.890200][ T6109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.074018][ T6109] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.088084][ T6109] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.098808][ T6109] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.108285][ T6109] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.696483][ T6349] 9pnet_fd: Insufficient options for proto=fd [ 337.957420][ T6356] loop4: detected capacity change from 0 to 1024 [ 338.859410][ T6353] loop0: detected capacity change from 0 to 32768 [ 338.883872][ T6353] [ 338.883872][ T6353] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 338.883872][ T6353] [ 338.906950][ T6347] [ 338.906950][ T6347] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 338.906950][ T6347] [ 338.918473][ T6347] [ 338.918473][ T6347] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 338.918473][ T6347] [ 338.933277][ T6347] [ 338.933277][ T6347] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 338.933277][ T6347] [ 338.945588][ T6347] [ 338.945588][ T6347] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 338.945588][ T6347] [ 339.030507][ T6353] ialloc: diAlloc returned -5! [ 339.071668][ T110] [ 339.071668][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 339.071668][ T110] [ 339.660802][ T5794] [ 339.660802][ T5794] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 339.660802][ T5794] [ 339.671772][ T5794] [ 339.671772][ T5794] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 339.671772][ T5794] [ 341.172150][ T6378] loop2: detected capacity change from 0 to 1024 [ 341.885512][ T13] hfsplus: b-tree write err: -5, ino 4 [ 342.755828][ T6395] loop1: detected capacity change from 0 to 4096 [ 343.108929][ T6415] FAULT_INJECTION: forcing a failure. [ 343.108929][ T6415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.126626][ T6415] CPU: 0 UID: 0 PID: 6415 Comm: syz.0.130 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 343.137614][ T6415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 343.147970][ T6415] Call Trace: [ 343.151487][ T6415] [ 343.154645][ T6415] dump_stack_lvl+0x216/0x2d0 [ 343.159747][ T6415] dump_stack+0x1e/0x30 [ 343.164282][ T6415] should_fail_ex+0x748/0x7f0 [ 343.169364][ T6415] should_fail+0x2a/0x40 [ 343.173976][ T6415] should_fail_usercopy+0x2e/0x40 [ 343.179393][ T6415] _copy_from_user+0x35/0x110 [ 343.184480][ T6415] generic_map_delete_batch+0x4ae/0x890 [ 343.190414][ T6415] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 343.196865][ T6415] bpf_map_do_batch+0x763/0xab0 [ 343.202059][ T6415] __sys_bpf+0xb00/0xd90 [ 343.206693][ T6415] ? ksys_write+0x416/0x4c0 [ 343.211579][ T6415] __x64_sys_bpf+0xa0/0xe0 [ 343.216365][ T6415] x64_sys_call+0x2cce/0x3ba0 [ 343.221420][ T6415] do_syscall_64+0xcd/0x1e0 [ 343.226334][ T6415] ? clear_bhb_loop+0x25/0x80 [ 343.231367][ T6415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.237640][ T6415] RIP: 0033:0x7fad7417e719 [ 343.242366][ T6415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.262350][ T6415] RSP: 002b:00007fad74ec7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 343.271160][ T6415] RAX: ffffffffffffffda RBX: 00007fad74335f80 RCX: 00007fad7417e719 [ 343.279446][ T6415] RDX: 0000000000000038 RSI: 0000000020000440 RDI: 000000000000001b [ 343.287726][ T6415] RBP: 00007fad74ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 343.295999][ T6415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.304268][ T6415] R13: 0000000000000000 R14: 00007fad74335f80 R15: 00007fffa0d36ba8 [ 343.312565][ T6415] [ 343.642137][ T6421] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 343.693033][ T29] audit: type=1804 audit(1731022011.952:10): pid=6422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.125" name="/newroot/33/file0/file1" dev="loop1" ino=15 res=1 errno=0 [ 343.732832][ T6395] syz.1.125 (6395) used greatest stack depth: 4392 bytes left [ 344.181057][ T6424] loop2: detected capacity change from 0 to 16 [ 344.256739][ T6424] erofs: (device loop2): mounted with root inode @ nid 36. [ 344.316388][ T6428] netlink: 'syz.0.132': attribute type 1 has an invalid length. [ 344.325554][ T6428] netlink: 20 bytes leftover after parsing attributes in process `syz.0.132'. [ 344.405971][ T6424] netlink: 228 bytes leftover after parsing attributes in process `syz.2.131'. [ 344.415534][ T6424] netlink: 32 bytes leftover after parsing attributes in process `syz.2.131'. [ 344.955343][ T6437] mmap: syz.0.135 (6437) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 346.019185][ T6448] loop4: detected capacity change from 0 to 512 [ 346.086646][ T6441] loop2: detected capacity change from 0 to 2048 [ 346.211753][ T6448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.225645][ T6448] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 346.329498][ T6454] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 346.352571][ T6454] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 346.452065][ T6448] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.456294][ T6458] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 347.356140][ T6465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.930094][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.942045][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.957287][ T3888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.965535][ T3888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.408310][ T6473] loop0: detected capacity change from 0 to 4096 [ 348.605629][ T6473] NILFS (loop0): invalid segment: Checksum error in segment payload [ 348.614763][ T6473] NILFS (loop0): trying rollback from an earlier position [ 348.769729][ T6473] NILFS (loop0): recovery complete [ 348.838724][ T3888] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.148515][ T3888] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.273277][ T6481] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 349.532682][ T3888] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.656977][ T3888] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.208989][ T6488] netlink: 'syz.2.148': attribute type 12 has an invalid length. [ 350.217358][ T6488] netlink: 120 bytes leftover after parsing attributes in process `syz.2.148'. [ 350.360936][ T6488] loop2: detected capacity change from 0 to 64 [ 350.420823][ T3888] bridge_slave_1: left allmulticast mode [ 350.427004][ T3888] bridge_slave_1: left promiscuous mode [ 350.433942][ T3888] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.485730][ T6488] hfs: unable to parse mount options [ 350.564824][ T3888] bridge_slave_0: left allmulticast mode [ 350.570961][ T3888] bridge_slave_0: left promiscuous mode [ 350.578064][ T3888] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.618410][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 350.629572][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 350.694903][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 351.118280][ T6499] netlink: 84 bytes leftover after parsing attributes in process `syz.1.150'. [ 351.269394][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 351.433970][ T5800] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 351.435360][ T3888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.445407][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 351.730681][ T3888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.849467][ T6502] loop1: detected capacity change from 0 to 512 [ 351.858846][ T3888] bond0 (unregistering): Released all slaves [ 352.314730][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.321593][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.457055][ T6505] bond_slave_0: entered promiscuous mode [ 352.463276][ T6505] bond_slave_1: entered promiscuous mode [ 352.469649][ T6505] vlan2: entered promiscuous mode [ 352.475276][ T6505] bond0: entered promiscuous mode [ 352.548256][ T6505] bond0: left promiscuous mode [ 352.560950][ T6505] bond_slave_0: left promiscuous mode [ 352.566868][ T6505] bond_slave_1: left promiscuous mode [ 353.571785][ T5800] Bluetooth: hci1: command tx timeout [ 353.653901][ T3888] hsr_slave_0: left promiscuous mode [ 353.707039][ T3888] hsr_slave_1: left promiscuous mode [ 353.736658][ T3888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.745293][ T3888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.764070][ T1680] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 353.798925][ T6522] loop2: detected capacity change from 0 to 1024 [ 353.809212][ T3888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.817207][ T3888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.917634][ T3888] veth1_macvtap: left promiscuous mode [ 353.924114][ T3888] veth0_macvtap: left promiscuous mode [ 353.930102][ T3888] veth1_vlan: left promiscuous mode [ 353.936014][ T3888] veth0_vlan: left promiscuous mode [ 353.963577][ T1680] usb 5-1: Using ep0 maxpacket: 16 [ 354.406203][ T6526] hfsplus: xattr searching failed [ 354.438041][ T1680] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 354.449954][ T1680] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 354.459496][ T1680] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.474006][ T1680] usb 5-1: config 0 descriptor?? [ 354.747195][ T6533] FAULT_INJECTION: forcing a failure. [ 354.747195][ T6533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.765923][ T6533] CPU: 1 UID: 0 PID: 6533 Comm: syz.0.162 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 354.776917][ T6533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 354.787368][ T6533] Call Trace: [ 354.790883][ T6533] [ 354.794063][ T6533] dump_stack_lvl+0x216/0x2d0 [ 354.799142][ T6533] dump_stack+0x1e/0x30 [ 354.803670][ T6533] should_fail_ex+0x748/0x7f0 [ 354.808758][ T6533] should_fail+0x2a/0x40 [ 354.813371][ T6533] should_fail_usercopy+0x2e/0x40 [ 354.818783][ T6533] _copy_to_user+0x34/0x120 [ 354.823662][ T6533] simple_read_from_buffer+0x199/0x340 [ 354.829492][ T6533] proc_fail_nth_read+0x1e5/0x2c0 [ 354.834912][ T6533] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.840847][ T6533] vfs_read+0x29d/0xf50 [ 354.845368][ T6533] ? kmsan_get_metadata+0x13e/0x1c0 [ 354.850901][ T6533] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 354.857668][ T6533] ksys_read+0x24f/0x4c0 [ 354.862287][ T6533] __x64_sys_read+0x93/0xe0 [ 354.867153][ T6533] x64_sys_call+0x3055/0x3ba0 [ 354.872205][ T6533] do_syscall_64+0xcd/0x1e0 [ 354.877087][ T6533] ? clear_bhb_loop+0x25/0x80 [ 354.882129][ T6533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.888398][ T6533] RIP: 0033:0x7fad7417d15c [ 354.893116][ T6533] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 354.913109][ T6533] RSP: 002b:00007fad74ec7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 354.921918][ T6533] RAX: ffffffffffffffda RBX: 00007fad74335f80 RCX: 00007fad7417d15c [ 354.930219][ T6533] RDX: 000000000000000f RSI: 00007fad74ec70a0 RDI: 0000000000000004 [ 354.938495][ T6533] RBP: 00007fad74ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 354.946759][ T6533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.955110][ T6533] R13: 0000000000000000 R14: 00007fad74335f80 R15: 00007fffa0d36ba8 [ 354.963408][ T6533] [ 355.032218][ T6521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.044742][ T6521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.105970][ T4356] hfsplus: b-tree write err: -5, ino 4 [ 355.198410][ T1680] hid (null): unknown global tag 0xd [ 355.213266][ T1680] hid (null): unknown global tag 0xc [ 355.313983][ T1680] hid-generic 0003:0158:0100.0001: unknown main item tag 0x1 [ 355.322137][ T1680] hid-generic 0003:0158:0100.0001: unexpected long global item [ 355.437994][ T6521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.448387][ T6521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.578160][ T1680] hid-generic 0003:0158:0100.0001: probe with driver hid-generic failed with error -22 [ 355.828868][ T5800] Bluetooth: hci1: command tx timeout [ 356.045177][ T3888] team0 (unregistering): Port device team_slave_1 removed [ 356.098651][ T6521] loop4: detected capacity change from 0 to 4096 [ 356.114562][ T3888] team0 (unregistering): Port device team_slave_0 removed [ 356.402935][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 356.694614][ T6521] ntfs3(loop4): Failed to read $UpCase (-4). [ 356.728741][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 356.744440][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 356.757722][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 356.771037][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 356.786720][ T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 356.796246][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.967001][ T25] usb 3-1: config 0 descriptor?? [ 357.139028][ T1680] usb 5-1: USB disconnect, device number 7 [ 357.541563][ T6493] chnl_net:caif_netlink_parms(): no params data found [ 357.645246][ T25] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 357.791087][ T25] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 357.877481][ T6553] loop1: detected capacity change from 0 to 64 [ 357.884694][ T5800] Bluetooth: hci1: command tx timeout [ 358.343304][ T1680] usb 3-1: USB disconnect, device number 4 [ 358.385554][ T6551] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 358.982833][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 359.073553][ T6493] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.081393][ T6493] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.097211][ T6493] bridge_slave_0: entered allmulticast mode [ 359.108103][ T6493] bridge_slave_0: entered promiscuous mode [ 359.201449][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 359.215645][ T6493] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.223617][ T6493] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.231532][ T6493] bridge_slave_1: entered allmulticast mode [ 359.241139][ T6493] bridge_slave_1: entered promiscuous mode [ 359.284707][ T25] usb 1-1: config 150 has an invalid interface number: 204 but max is 1 [ 359.293682][ T25] usb 1-1: config 150 has no interface number 0 [ 359.304301][ T25] usb 1-1: config 150 interface 204 has no altsetting 0 [ 359.311608][ T25] usb 1-1: config 150 interface 1 has no altsetting 0 [ 359.431446][ T6563] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 359.477390][ T25] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 359.487019][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.495800][ T25] usb 1-1: Product: syz [ 359.500274][ T25] usb 1-1: Manufacturer: syz [ 359.508793][ T25] usb 1-1: SerialNumber: syz [ 359.867523][ T6571] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 359.870423][ T25] xr_serial 1-1:150.204: xr_serial converter detected [ 359.938296][ T6493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.986657][ T5800] Bluetooth: hci1: command tx timeout [ 360.023591][ T6493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.248282][ T6493] team0: Port device team_slave_0 added [ 360.377559][ T6493] team0: Port device team_slave_1 added [ 360.678770][ T25] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 360.688949][ T25] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 360.747091][ T25] usb 1-1: USB disconnect, device number 4 [ 360.757576][ T25] xr_serial 1-1:150.204: device disconnected [ 360.844092][ T6493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.851352][ T6493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.878465][ T6493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.895944][ T6493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.903382][ T6493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.929787][ T6493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.059367][ T6585] loop2: detected capacity change from 0 to 16 [ 361.076648][ T6585] erofs: (device loop2): mounted with root inode @ nid 36. [ 361.204152][ T6584] netlink: 228 bytes leftover after parsing attributes in process `syz.2.173'. [ 361.213904][ T6584] netlink: 32 bytes leftover after parsing attributes in process `syz.2.173'. [ 361.383895][ T6590] loop1: detected capacity change from 0 to 64 [ 361.511160][ T6493] hsr_slave_0: entered promiscuous mode [ 361.627874][ T6493] hsr_slave_1: entered promiscuous mode [ 361.689765][ T6493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.698216][ T6493] Cannot create hsr debugfs directory [ 362.660602][ T6599] loop0: detected capacity change from 0 to 256 [ 362.881056][ T6600] loop4: detected capacity change from 0 to 1024 [ 363.047432][ T6599] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 363.055749][ T6599] FAT-fs (loop0): Filesystem has been set read-only [ 363.280533][ T6600] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 363.296379][ T6600] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 363.493019][ T6600] jbd2_journal_init_inode: Cannot locate journal superblock [ 363.504778][ T6600] EXT4-fs (loop4): Could not load journal inode [ 363.825489][ T6493] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 363.957891][ T6493] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 364.180916][ T6493] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 364.398151][ T6493] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 368.180427][ T6493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.236825][ T6493] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.369133][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.377105][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.394170][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.401972][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.542890][ T6645] syz.2.186: attempt to access beyond end of device [ 368.542890][ T6645] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 368.556536][ T6645] syz.2.186: attempt to access beyond end of device [ 368.556536][ T6645] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 368.570020][ T6645] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 368.580488][ T6645] syz.2.186: attempt to access beyond end of device [ 368.580488][ T6645] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 368.593802][ T6645] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 368.603983][ T6493] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 368.606981][ T6645] syz.2.186: attempt to access beyond end of device [ 368.606981][ T6645] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 368.615686][ T6493] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 368.633895][ T6645] syz.2.186: attempt to access beyond end of device [ 368.633895][ T6645] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 368.655622][ T6645] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 368.665849][ T6645] syz.2.186: attempt to access beyond end of device [ 368.665849][ T6645] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 368.679196][ T6645] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 368.691352][ T6645] syz.2.186: attempt to access beyond end of device [ 368.691352][ T6645] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 368.704866][ T6645] syz.2.186: attempt to access beyond end of device [ 368.704866][ T6645] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 368.718208][ T6645] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 368.733910][ T6645] syz.2.186: attempt to access beyond end of device [ 368.733910][ T6645] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 368.747409][ T6645] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 368.758776][ T6645] syz.2.186: attempt to access beyond end of device [ 368.758776][ T6645] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 368.773035][ T6645] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 368.783335][ T6645] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 368.793268][ T6645] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 369.325531][ T5842] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 369.570017][ T5842] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.727446][ T5842] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=74.72 [ 369.737339][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.749416][ T5842] usb 2-1: Product: syz [ 369.755120][ T5842] usb 2-1: Manufacturer: syz [ 369.760006][ T5842] usb 2-1: SerialNumber: syz [ 369.966075][ T5842] usb 2-1: config 0 descriptor?? [ 370.057590][ T5842] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 370.067410][ T5842] dvb-usb: bulk message failed: -22 (3/0) [ 370.170923][ T5842] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 370.215765][ T6658] loop0: detected capacity change from 0 to 256 [ 370.261951][ T5842] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 370.272765][ T5842] dvb_usb_umt_010 2-1:0.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 370.559416][ T5842] usb 2-1: USB disconnect, device number 2 [ 370.698363][ T6493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.750662][ T6662] loop2: detected capacity change from 0 to 512 [ 370.920888][ T6665] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 370.929080][ T6665] FAT-fs (loop0): Filesystem has been set read-only [ 371.032833][ T6662] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 371.346093][ T6493] veth0_vlan: entered promiscuous mode [ 371.352718][ T6662] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 371.420915][ T6493] veth1_vlan: entered promiscuous mode [ 371.479672][ T6671] loop1: detected capacity change from 0 to 1024 [ 371.509965][ T6662] EXT4-fs (loop2): Remounting filesystem read-only [ 371.583037][ T6662] EXT4-fs (loop2): 1 truncate cleaned up [ 371.594842][ T6662] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.615925][ T6493] veth0_macvtap: entered promiscuous mode [ 371.700076][ T6493] veth1_macvtap: entered promiscuous mode [ 371.730972][ T6671] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 371.841187][ T6493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.852115][ T6493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.862511][ T6493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.873591][ T6493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.883909][ T6493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.899006][ T6493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.910677][ T6493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.934121][ T6493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.950041][ T6493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.046267][ T6493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.057408][ T6493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.068301][ T6493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.079154][ T6493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.089382][ T6493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.106095][ T6493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.116497][ T6493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.127403][ T6493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.143289][ T6493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.153992][ T6671] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 372.165481][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.180051][ T6671] EXT4-fs (loop1): orphan cleanup on readonly fs [ 372.193365][ T6493] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.207562][ T6493] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.218945][ T6493] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.227142][ T6671] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.192: Freeing blocks not in datazone - block = 0, count = 4096 [ 372.228220][ T6493] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.283058][ T6671] EXT4-fs (loop1): Remounting filesystem read-only [ 372.290199][ T6671] EXT4-fs (loop1): 1 truncate cleaned up [ 372.298460][ T6671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 372.598727][ T6677] FAULT_INJECTION: forcing a failure. [ 372.598727][ T6677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.616853][ T6677] CPU: 1 UID: 0 PID: 6677 Comm: syz.2.194 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 372.627828][ T6677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 372.638182][ T6677] Call Trace: [ 372.641692][ T6677] [ 372.644848][ T6677] dump_stack_lvl+0x216/0x2d0 [ 372.649932][ T6677] dump_stack+0x1e/0x30 [ 372.654469][ T6677] should_fail_ex+0x748/0x7f0 [ 372.659553][ T6677] should_fail+0x2a/0x40 [ 372.664169][ T6677] should_fail_usercopy+0x2e/0x40 [ 372.669598][ T6677] _copy_from_user+0x35/0x110 [ 372.674646][ T6677] bpf_test_init+0x1c4/0x2f0 [ 372.679732][ T6677] bpf_prog_test_run_xdp+0x6b8/0x1ae0 [ 372.685561][ T6677] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 372.691771][ T6677] bpf_prog_test_run+0x5e5/0xa30 [ 372.697139][ T6677] __sys_bpf+0x6aa/0xd90 [ 372.701787][ T6677] ? ksys_write+0x416/0x4c0 [ 372.706670][ T6677] __x64_sys_bpf+0xa0/0xe0 [ 372.711461][ T6677] x64_sys_call+0x2cce/0x3ba0 [ 372.716527][ T6677] do_syscall_64+0xcd/0x1e0 [ 372.721421][ T6677] ? clear_bhb_loop+0x25/0x80 [ 372.726481][ T6677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.732738][ T6677] RIP: 0033:0x7f4ed377e719 [ 372.737430][ T6677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.757543][ T6677] RSP: 002b:00007f4ed1bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 372.766356][ T6677] RAX: ffffffffffffffda RBX: 00007f4ed3935f80 RCX: 00007f4ed377e719 [ 372.774647][ T6677] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 372.782919][ T6677] RBP: 00007f4ed1bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 372.791198][ T6677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.799468][ T6677] R13: 0000000000000000 R14: 00007f4ed3935f80 R15: 00007ffd1e4ee278 [ 372.807778][ T6677] [ 372.816787][ T6677] Driver unsupported XDP return value 0 on prog (id 18) dev N/A, expect packet loss! [ 372.863583][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.838960][ T6707] bio_check_eod: 2 callbacks suppressed [ 374.839072][ T6707] syz.4.198: attempt to access beyond end of device [ 374.839072][ T6707] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 374.858466][ T6707] syz.4.198: attempt to access beyond end of device [ 374.858466][ T6707] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 374.876268][ T6707] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 374.887732][ T6707] syz.4.198: attempt to access beyond end of device [ 374.887732][ T6707] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 374.901118][ T6707] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 374.914009][ T6707] syz.4.198: attempt to access beyond end of device [ 374.914009][ T6707] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 374.927958][ T6707] syz.4.198: attempt to access beyond end of device [ 374.927958][ T6707] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 374.941327][ T6707] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 374.951561][ T6707] syz.4.198: attempt to access beyond end of device [ 374.951561][ T6707] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 374.973507][ T6707] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 374.992127][ T6707] syz.4.198: attempt to access beyond end of device [ 374.992127][ T6707] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 375.005805][ T6707] syz.4.198: attempt to access beyond end of device [ 375.005805][ T6707] nbd4: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 375.019217][ T6707] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 375.029425][ T6707] syz.4.198: attempt to access beyond end of device [ 375.029425][ T6707] nbd4: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 375.042949][ T6707] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 375.052891][ T6707] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 375.065266][ T6702] block nbd4: shutting down sockets [ 376.749933][ T6732] loop2: detected capacity change from 0 to 256 [ 377.451319][ T6735] loop1: detected capacity change from 0 to 2048 [ 377.624522][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.204'. [ 377.944471][ T6750] bridge2: entered promiscuous mode [ 377.950006][ T6750] bridge2: entered allmulticast mode [ 377.951519][ T6747] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 377.963795][ T6747] FAT-fs (loop2): Filesystem has been set read-only [ 377.969270][ T6750] team0: Port device bridge2 added [ 379.201934][ T6763] syz.2.211: attempt to access beyond end of device [ 379.201934][ T6763] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 379.215588][ T6763] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 379.225961][ T6763] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 379.343577][ T6763] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 379.354540][ T6763] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 379.465046][ T6763] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 379.479707][ T6763] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 379.654398][ T6763] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 379.664903][ T6763] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 379.675398][ T6763] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 379.752971][ T6760] block nbd2: shutting down sockets [ 379.823061][ T5842] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 380.051043][ T5842] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 380.062464][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 380.073978][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.084159][ T5842] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 380.101423][ T5842] usb 1-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 380.112107][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.413363][ T5842] usb 1-1: config 0 descriptor?? [ 380.835405][ T25] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 381.084540][ T25] usb 3-1: device descriptor read/64, error -71 [ 381.151390][ T6785] loop4: detected capacity change from 0 to 164 [ 381.173182][ T5842] hid-rmi 0003:17EF:6085.0003: unknown main item tag 0x0 [ 381.180634][ T5842] hid-rmi 0003:17EF:6085.0003: unknown main item tag 0x0 [ 381.188257][ T5842] hid-rmi 0003:17EF:6085.0003: item fetching failed at offset 2/5 [ 381.204942][ T6789] FAULT_INJECTION: forcing a failure. [ 381.204942][ T6789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.222292][ T6789] CPU: 0 UID: 0 PID: 6789 Comm: syz.1.217 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 381.233275][ T6789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 381.243627][ T6789] Call Trace: [ 381.247109][ T6789] [ 381.250269][ T6789] dump_stack_lvl+0x216/0x2d0 [ 381.255351][ T6789] dump_stack+0x1e/0x30 [ 381.257925][ T5842] hid-rmi 0003:17EF:6085.0003: parse failed [ 381.259773][ T6789] should_fail_ex+0x748/0x7f0 [ 381.266382][ T5842] hid-rmi 0003:17EF:6085.0003: probe with driver hid-rmi failed with error -22 [ 381.270602][ T6789] should_fail+0x2a/0x40 [ 381.284312][ T6789] should_fail_usercopy+0x2e/0x40 [ 381.289742][ T6789] _copy_from_user+0x35/0x110 [ 381.294801][ T6789] ___sys_sendmsg+0x120/0x3c0 [ 381.299854][ T6789] ? kmsan_get_metadata+0x13e/0x1c0 [ 381.305402][ T6789] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 381.311583][ T6789] ? __rcu_read_unlock+0x7b/0xe0 [ 381.316893][ T6789] ? __fget_files+0x4f5/0x5c0 [ 381.321972][ T6789] ? kmsan_get_metadata+0x13e/0x1c0 [ 381.327523][ T6789] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 381.333684][ T6789] __x64_sys_sendmsg+0x300/0x4a0 [ 381.339021][ T6789] ? ksys_write+0x416/0x4c0 [ 381.343915][ T6789] ? kmsan_get_metadata+0x13e/0x1c0 [ 381.349479][ T6789] x64_sys_call+0x2da0/0x3ba0 [ 381.354529][ T6789] do_syscall_64+0xcd/0x1e0 [ 381.359402][ T6789] ? clear_bhb_loop+0x25/0x80 [ 381.364428][ T6789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.370679][ T6789] RIP: 0033:0x7fc505d7e719 [ 381.373076][ T25] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 381.375280][ T6789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.375426][ T6789] RSP: 002b:00007fc506b65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.375595][ T6789] RAX: ffffffffffffffda RBX: 00007fc505f35f80 RCX: 00007fc505d7e719 [ 381.419826][ T6789] RDX: 0000000000000810 RSI: 0000000020000480 RDI: 0000000000000004 [ 381.428102][ T6789] RBP: 00007fc506b65090 R08: 0000000000000000 R09: 0000000000000000 [ 381.436388][ T6789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.444672][ T6789] R13: 0000000000000000 R14: 00007fc505f35f80 R15: 00007ffddb14fef8 [ 381.452958][ T6789] [ 381.536971][ T25] usb 3-1: device descriptor read/64, error -71 [ 381.552576][ T4356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.556423][ T5842] usb 1-1: USB disconnect, device number 5 [ 381.560587][ T4356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.655125][ T25] usb usb3-port1: attempt power cycle [ 381.691489][ T6785] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 381.950591][ T3888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.959096][ T3888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.167281][ T6792] loop1: detected capacity change from 0 to 128 [ 382.176512][ T6792] vfat: Unknown parameter '' [ 382.436265][ T25] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 382.601592][ T25] usb 3-1: device descriptor read/8, error -71 [ 382.845737][ T25] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 383.048614][ T25] usb 3-1: device descriptor read/8, error -71 [ 383.075714][ T6792] loop1: detected capacity change from 0 to 4096 [ 383.107769][ T6792] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 383.291580][ T25] usb usb3-port1: unable to enumerate USB device [ 383.829114][ T1876] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.163428][ T6807] loop0: detected capacity change from 0 to 256 [ 384.299631][ T1876] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.394290][ T6812] loop2: detected capacity change from 0 to 256 [ 384.581348][ T1876] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.824546][ T6807] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 384.832681][ T6807] FAT-fs (loop0): Filesystem has been set read-only [ 386.673560][ T6825] netlink: 16 bytes leftover after parsing attributes in process `syz.4.223'. [ 386.682987][ T6825] netlink: 32 bytes leftover after parsing attributes in process `syz.4.223'. [ 386.763827][ T6812] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60c5118c, utbl_chksum : 0xe619d30d) [ 386.790842][ T1876] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.905436][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 386.942820][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 387.046606][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 387.174103][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 387.192087][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 387.201671][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 387.777607][ T1876] bridge_slave_1: left allmulticast mode [ 387.784301][ T1876] bridge_slave_1: left promiscuous mode [ 387.791309][ T1876] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.813767][ T1680] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 387.953589][ T1876] bridge_slave_0: left allmulticast mode [ 387.959641][ T1876] bridge_slave_0: left promiscuous mode [ 387.969034][ T1876] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.097539][ T6836] bio_check_eod: 11 callbacks suppressed [ 388.097626][ T6836] syz.1.225: attempt to access beyond end of device [ 388.097626][ T6836] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 388.117404][ T6836] syz.1.225: attempt to access beyond end of device [ 388.117404][ T6836] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 388.132052][ T6836] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 388.142565][ T6836] syz.1.225: attempt to access beyond end of device [ 388.142565][ T6836] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 388.155919][ T6836] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 388.312012][ T6836] syz.1.225: attempt to access beyond end of device [ 388.312012][ T6836] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 388.326259][ T6836] syz.1.225: attempt to access beyond end of device [ 388.326259][ T6836] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 388.340086][ T6836] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 388.350419][ T6836] syz.1.225: attempt to access beyond end of device [ 388.350419][ T6836] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 388.364006][ T6836] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 388.516173][ T6836] syz.1.225: attempt to access beyond end of device [ 388.516173][ T6836] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 388.529918][ T6836] syz.1.225: attempt to access beyond end of device [ 388.529918][ T6836] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 388.543613][ T6836] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 388.553831][ T6836] syz.1.225: attempt to access beyond end of device [ 388.553831][ T6836] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 388.567217][ T6836] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 388.636358][ T1680] usb 3-1: device descriptor read/all, error -71 [ 388.661739][ T6836] syz.1.225: attempt to access beyond end of device [ 388.661739][ T6836] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 388.675786][ T6836] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 388.686189][ T6836] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 388.701458][ T6836] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 388.806549][ T6835] block nbd1: shutting down sockets [ 389.321119][ T1876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.346423][ T5793] Bluetooth: hci1: command tx timeout [ 389.430197][ T1876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.624238][ T1876] bond0 (unregistering): Released all slaves [ 389.653383][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 389.796645][ T6848] netlink: 'syz.2.231': attribute type 1 has an invalid length. [ 389.804918][ T6848] netlink: 20 bytes leftover after parsing attributes in process `syz.2.231'. [ 390.757791][ T6859] netlink: 80 bytes leftover after parsing attributes in process `syz.1.236'. [ 390.816096][ T6860] loop2: detected capacity change from 0 to 128 [ 390.898401][ T6859] loop1: detected capacity change from 0 to 128 [ 390.933456][ T5842] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 390.971455][ T6860] omfs: sysblock number (f784317bf884317b) is out of range [ 391.016270][ T6859] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 391.361061][ T1876] hsr_slave_0: left promiscuous mode [ 391.376913][ T1876] hsr_slave_1: left promiscuous mode [ 391.391925][ T1876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.404550][ T1876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.418904][ T5793] Bluetooth: hci1: command tx timeout [ 391.577526][ T1876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.587461][ T1876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.613652][ T5842] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 391.623265][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.754419][ T5842] usb 5-1: config 0 descriptor?? [ 391.769422][ T1876] veth1_macvtap: left promiscuous mode [ 391.775622][ T1876] veth0_macvtap: left promiscuous mode [ 391.781704][ T1876] veth1_vlan: left promiscuous mode [ 391.787652][ T1876] veth0_vlan: left promiscuous mode [ 391.821140][ T5842] cp210x 5-1:0.0: cp210x converter detected [ 392.222446][ T5842] usb 5-1: cp210x converter now attached to ttyUSB0 [ 393.483472][ T5091] Bluetooth: hci1: command tx timeout [ 393.675097][ T5842] usb 5-1: USB disconnect, device number 8 [ 393.853290][ T5842] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 393.956369][ T1876] team0 (unregistering): Port device team_slave_1 removed [ 393.962779][ T5842] cp210x 5-1:0.0: device disconnected [ 394.085638][ T1876] team0 (unregistering): Port device team_slave_0 removed [ 394.403931][ T6864] netlink: 68 bytes leftover after parsing attributes in process `syz.0.237'. [ 394.454136][ T6823] chnl_net:caif_netlink_parms(): no params data found [ 395.410166][ T6898] loop0: detected capacity change from 0 to 1024 [ 395.416259][ T5091] Bluetooth: hci2: command 0x0406 tx timeout [ 395.423415][ T5091] Bluetooth: hci3: command 0x0406 tx timeout [ 395.434144][ T5792] Bluetooth: hci4: command 0x0406 tx timeout [ 395.437396][ T5802] Bluetooth: hci0: command 0x0406 tx timeout [ 395.554165][ T6902] loop2: detected capacity change from 0 to 16 [ 395.586584][ T5798] Bluetooth: hci1: command tx timeout [ 395.629106][ T6902] erofs: (device loop2): mounted with root inode @ nid 36. [ 395.743571][ T5842] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 396.008947][ T5842] usb 2-1: Using ep0 maxpacket: 16 [ 396.068556][ T5842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.080313][ T5842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.090626][ T5842] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 396.104189][ T5842] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 396.113879][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.394879][ T5842] usb 2-1: config 0 descriptor?? [ 396.971557][ T5842] microsoft 0003:045E:07DA.0004: item fetching failed at offset 31/34 [ 397.047384][ T5842] microsoft 0003:045E:07DA.0004: parse failed [ 397.054416][ T5842] microsoft 0003:045E:07DA.0004: probe with driver microsoft failed with error -22 [ 397.268756][ T5842] usb 2-1: USB disconnect, device number 3 [ 397.382791][ T29] audit: type=1326 audit(1731022065.642:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6917 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7417e719 code=0x7ffc0000 [ 397.408159][ T29] audit: type=1326 audit(1731022065.642:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6917 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7417e719 code=0x7ffc0000 [ 397.543390][ T6823] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.551403][ T6823] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.559453][ T6823] bridge_slave_0: entered allmulticast mode [ 397.569050][ T6823] bridge_slave_0: entered promiscuous mode [ 397.710601][ T29] audit: type=1326 audit(1731022065.722:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6917 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7fad7417e719 code=0x7ffc0000 [ 397.735012][ T29] audit: type=1326 audit(1731022065.732:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6917 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7417e719 code=0x7ffc0000 [ 397.757869][ T29] audit: type=1326 audit(1731022065.732:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6917 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7417e719 code=0x7ffc0000 [ 397.778085][ T6823] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.788441][ T6823] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.796655][ T6823] bridge_slave_1: entered allmulticast mode [ 397.810549][ T6823] bridge_slave_1: entered promiscuous mode [ 398.253027][ T6823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.277478][ T6823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.845731][ T6823] team0: Port device team_slave_0 added [ 398.866473][ T6823] team0: Port device team_slave_1 added [ 399.112684][ T6823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.119921][ T6823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.150069][ T6823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.359420][ T6823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.368098][ T6823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.394617][ T6823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.849085][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 400.362081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 400.707345][ T6823] hsr_slave_0: entered promiscuous mode [ 400.819915][ T6823] hsr_slave_1: entered promiscuous mode [ 400.840364][ T6823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 400.848667][ T6823] Cannot create hsr debugfs directory [ 400.978733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 400.992270][ T6932] loop4: detected capacity change from 0 to 128 [ 401.424643][ T6932] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 401.535746][ T6932] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 403.663738][ T6950] netlink: 3 bytes leftover after parsing attributes in process `syz.2.259'. [ 403.999367][ T5799] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 404.642202][ T6955] syz.2.262(6955): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 404.917409][ T5798] Bluetooth: hci0: unexpected event 0x05 length: 10 > 4 [ 405.425945][ T6963] loop2: detected capacity change from 0 to 256 [ 405.429465][ T6823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 405.804147][ T6823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 405.869793][ T6823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 405.980931][ T6823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 406.610718][ T29] audit: type=1326 audit(1731022074.863:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.0.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7417e719 code=0x7ffc0000 [ 406.737824][ T29] audit: type=1326 audit(1731022074.933:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.0.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fad7417e719 code=0x7ffc0000 [ 406.761031][ T29] audit: type=1326 audit(1731022074.933:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.0.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7417e719 code=0x7ffc0000 [ 406.774210][ T6975] loop1: detected capacity change from 0 to 512 [ 406.785533][ T29] audit: type=1326 audit(1731022074.933:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.0.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7417e719 code=0x7ffc0000 [ 406.886130][ T6975] EXT4-fs: Ignoring removed i_version option [ 406.957832][ T6975] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 407.072273][ T6823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.091938][ T6978] loop4: detected capacity change from 0 to 128 [ 407.132219][ T6823] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.247794][ T1876] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.255682][ T1876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.273062][ T1876] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.280869][ T1876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.393544][ T6975] EXT4-fs (loop1): 1 truncate cleaned up [ 407.401559][ T6975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.314575][ T6978] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 408.335676][ T5842] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 408.375437][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.439490][ T6993] loop2: detected capacity change from 0 to 512 [ 408.468059][ T6978] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 408.469510][ T6993] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 408.703061][ T5842] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.714261][ T5842] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 408.723693][ T5842] usb 1-1: config 1 has no interface number 0 [ 408.730094][ T5842] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.741579][ T5842] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 408.850327][ T6993] EXT4-fs (loop2): 1 truncate cleaned up [ 408.858653][ T6993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.987624][ T6993] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.271: corrupted in-inode xattr: overlapping e_value [ 409.054220][ T5842] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 409.064254][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.076581][ T5842] usb 1-1: Product: syz [ 409.081036][ T5842] usb 1-1: Manufacturer: syz [ 409.086192][ T5842] usb 1-1: SerialNumber: syz [ 409.117945][ T6993] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1772: inode #15: comm syz.2.271: unable to update i_inline_off [ 409.211325][ T7002] EXT4-fs error (device loop2): ext4_xattr_ibody_get:653: inode #15: comm syz.2.271: corrupted in-inode xattr: overlapping e_value [ 409.618194][ T5798] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 409.804628][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.288596][ T5842] cdc_ncm 1-1:1.1: bind() failure [ 410.319537][ T5842] usb 1-1: USB disconnect, device number 6 [ 410.459308][ T6823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.491649][ T7010] loop1: detected capacity change from 0 to 256 [ 410.520293][ T7011] loop2: detected capacity change from 0 to 128 [ 410.848450][ T7010] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x607ca4ac, utbl_chksum : 0xe619d30d) [ 410.856684][ T6823] veth0_vlan: entered promiscuous mode [ 410.894892][ T5799] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 411.029515][ T6823] veth1_vlan: entered promiscuous mode [ 411.133514][ T29] audit: type=1800 audit(1731022079.323:20): pid=7010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.275" name="bus" dev="loop1" ino=1048615 res=0 errno=0 [ 411.147120][ T6823] veth0_macvtap: entered promiscuous mode [ 411.337137][ T6823] veth1_macvtap: entered promiscuous mode [ 411.860946][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.871978][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.891001][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.901920][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.912090][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.923152][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.938721][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.951261][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.967217][ T6823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.144947][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.155858][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.166176][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.178051][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.189147][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.200474][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.211613][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.223155][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.244071][ T6823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.350750][ T6823] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.363511][ T6823] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.372871][ T6823] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.381982][ T6823] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.393373][ T7019] loop2: detected capacity change from 0 to 512 [ 412.629216][ T7019] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 412.639244][ T7019] EXT4-fs (loop2): orphan cleanup on readonly fs [ 412.666115][ T7019] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 412.762043][ T7019] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 412.839624][ T7019] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #16: comm syz.2.278: casefold flag without casefold feature [ 413.026875][ T7019] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.278: couldn't read orphan inode 16 (err -117) [ 413.135212][ T7019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 413.198846][ T7027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.280'. [ 413.294572][ T7019] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 413.320366][ T7027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.280'. [ 413.761183][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.768137][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 414.115950][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.346610][ T7040] loop0: detected capacity change from 0 to 8 [ 414.574538][ T7040] SQUASHFS error: lzo decompression failed, data probably corrupt [ 414.583086][ T7040] SQUASHFS error: Failed to read block 0x91: -5 [ 414.589599][ T7040] SQUASHFS error: Unable to read metadata cache entry [8f] [ 414.600359][ T7040] SQUASHFS error: Unable to read inode 0x11f [ 415.340784][ T7046] loop2: detected capacity change from 0 to 2048 [ 415.543194][ T7046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.557503][ T7046] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.159280][ T7069] cgroup: Unknown subsys name 'cpuset' [ 416.360526][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.893969][ T7096] loop0: detected capacity change from 0 to 16 [ 417.994972][ T7096] erofs: (device loop0): mounted with root inode @ nid 36. [ 418.600316][ T7105] loop4: detected capacity change from 0 to 1024 [ 418.825918][ T7105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.283363][ T29] audit: type=1326 audit(1731022087.543:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7114 comm="syz.0.299" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad7417e719 code=0x0 [ 419.378628][ T5799] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.954220][ T7122] loop2: detected capacity change from 0 to 256 [ 420.114993][ T7122] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 420.666082][ T7122] bio_check_eod: 2 callbacks suppressed [ 420.666175][ T7122] syz.2.298: attempt to access beyond end of device [ 420.666175][ T7122] loop2: rw=524288, sector=34359738488, nr_sectors = 1 limit=256 [ 420.686961][ T7122] syz.2.298: attempt to access beyond end of device [ 420.686961][ T7122] loop2: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 420.704935][ T29] audit: type=1800 audit(1731022088.973:22): pid=7122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.298" name="file1" dev="loop2" ino=1048618 res=0 errno=0 [ 420.899610][ T7126] loop4: detected capacity change from 0 to 512 [ 421.053522][ T7122] exFAT-fs (loop2): error, in sector 168, dentry 2 should be unused, but 0xa8 [ 421.062956][ T7122] exFAT-fs (loop2): Filesystem has been set read-only [ 421.095295][ T7126] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 421.170007][ T7126] EXT4-fs (loop4): 1 truncate cleaned up [ 421.178346][ T7126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.013764][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.021793][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.116424][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.124920][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.387972][ T7137] loop0: detected capacity change from 0 to 16 [ 422.486400][ T7137] erofs: (device loop0): mounted with root inode @ nid 36. [ 422.577140][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 86 @ nid 36 [ 422.590947][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 84 @ nid 36 [ 422.602247][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 80 @ nid 36 [ 422.612200][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 74 @ nid 36 [ 422.621993][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 72 @ nid 36 [ 422.631864][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 70 @ nid 36 [ 422.641767][ T7137] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 62 of nid 36 [ 422.653146][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 63 @ nid 36 [ 422.662770][ T7137] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 62 of nid 36 [ 422.673831][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 62 @ nid 36 [ 422.686822][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 58 @ nid 36 [ 422.700595][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 57 @ nid 36 [ 422.711770][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 54 @ nid 36 [ 422.721403][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 53 @ nid 36 [ 422.731050][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 52 @ nid 36 [ 422.740676][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 51 @ nid 36 [ 422.750574][ T7137] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 363 @ lcn 50 of nid 36 [ 422.761671][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 50 @ nid 36 [ 422.763108][ T5799] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.771367][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 422.793712][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 422.805118][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 422.814793][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 422.824589][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 422.835502][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 34 @ nid 36 [ 422.845439][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 32 @ nid 36 [ 422.855328][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 30 @ nid 36 [ 422.865327][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 27 @ nid 36 [ 422.874997][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 26 @ nid 36 [ 422.884588][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 25 @ nid 36 [ 422.897965][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 422.908788][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 23 @ nid 36 [ 422.918451][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 22 @ nid 36 [ 422.928319][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 21 @ nid 36 [ 422.937986][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 20 @ nid 36 [ 422.947729][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 18 @ nid 36 [ 422.957988][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 12 @ nid 36 [ 422.967706][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 10 @ nid 36 [ 422.977838][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 6 @ nid 36 [ 422.987525][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 4 @ nid 36 [ 423.001087][ T7137] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 423.012541][ T7137] erofs: (device loop0): z_erofs_readahead: readahead error at folio 0 @ nid 36 [ 423.022210][ T7137] syz.0.302: attempt to access beyond end of device [ 423.022210][ T7137] loop0: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 423.037130][ T7137] syz.0.302: attempt to access beyond end of device [ 423.037130][ T7137] loop0: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 423.052141][ T7137] syz.0.302: attempt to access beyond end of device [ 423.052141][ T7137] loop0: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 423.067244][ T7137] syz.0.302: attempt to access beyond end of device [ 423.067244][ T7137] loop0: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 423.081655][ T7137] syz.0.302: attempt to access beyond end of device [ 423.081655][ T7137] loop0: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 423.100432][ T7137] syz.0.302: attempt to access beyond end of device [ 423.100432][ T7137] loop0: rw=524288, sector=13478624032, nr_sectors = 8 limit=16 [ 423.116585][ T7137] syz.0.302: attempt to access beyond end of device [ 423.116585][ T7137] loop0: rw=524288, sector=13716630376, nr_sectors = 8 limit=16 [ 423.131569][ T7137] syz.0.302: attempt to access beyond end of device [ 423.131569][ T7137] loop0: rw=524288, sector=133693448, nr_sectors = 8 limit=16 [ 423.152283][ T7141] erofs: (device loop0): z_erofs_read_folio: read error -5 @ 43 of nid 36 [ 423.358282][ T7147] warning: `syz.2.307' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 425.637355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 425.647444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 425.662975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 425.673507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 425.963841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 425.972392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 426.175713][ T3888] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.469714][ T3888] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.600147][ T7153] loop0: detected capacity change from 0 to 256 [ 426.648993][ T3888] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.806395][ T7153] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 426.869586][ T3888] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.163637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 427.233757][ T7156] loop2: detected capacity change from 0 to 1024 [ 427.369104][ T3888] bridge_slave_1: left allmulticast mode [ 427.375449][ T3888] bridge_slave_1: left promiscuous mode [ 427.381923][ T3888] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.458563][ T7156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.538771][ T3888] bridge_slave_0: left allmulticast mode [ 427.545173][ T3888] bridge_slave_0: left promiscuous mode [ 427.552064][ T3888] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.026997][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.559336][ T3888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.628926][ T3888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.942666][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 428.962870][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 428.974212][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 429.540314][ T7165] loop4: detected capacity change from 0 to 1024 [ 429.616864][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 429.629574][ T5800] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 429.639379][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 429.759133][ T7165] EXT4-fs: Ignoring removed orlov option [ 429.765319][ T7165] EXT4-fs: Ignoring removed nomblk_io_submit option [ 429.901974][ T3888] bond0 (unregistering): Released all slaves [ 430.196519][ T7165] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 430.216728][ T7165] System zones: 0-1, 3-36 [ 430.285277][ T7165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.410528][ T3888] hsr_slave_0: left promiscuous mode [ 431.439233][ T5799] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.450137][ T3888] hsr_slave_1: left promiscuous mode [ 431.473225][ T3888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.481047][ T3888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.565073][ T3888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.573070][ T3888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.689052][ T3888] veth1_macvtap: left promiscuous mode [ 431.699810][ T3888] veth0_macvtap: left promiscuous mode [ 431.705783][ T3888] veth1_vlan: left promiscuous mode [ 431.711286][ T3888] veth0_vlan: left promiscuous mode [ 431.743107][ T5798] Bluetooth: hci1: command tx timeout [ 432.846254][ T7189] loop2: detected capacity change from 0 to 128 [ 433.556043][ T3888] team0 (unregistering): Port device team_slave_1 removed [ 433.725259][ T3888] team0 (unregistering): Port device team_slave_0 removed [ 433.803294][ T5798] Bluetooth: hci1: command tx timeout [ 434.077906][ T7194] loop0: detected capacity change from 0 to 1024 [ 434.130918][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.314'. [ 434.374820][ T29] audit: type=1800 audit(1731022102.623:23): pid=7194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.316" name="bus" dev="loop0" ino=26 res=0 errno=0 [ 434.880206][ T4356] hfsplus: b-tree write err: -5, ino 4 [ 435.769018][ T7166] chnl_net:caif_netlink_parms(): no params data found [ 435.886774][ T5798] Bluetooth: hci1: command tx timeout [ 436.570677][ T7209] loop4: detected capacity change from 0 to 1024 [ 436.672205][ T7209] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 436.683499][ T7209] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 436.853164][ T7209] journal_load_superblock: Cannot read journal superblock [ 436.860779][ T7209] EXT4-fs (loop4): Could not load journal inode [ 437.954496][ T7221] loop2: detected capacity change from 0 to 1024 [ 437.967841][ T5798] Bluetooth: hci1: command tx timeout [ 438.419031][ T29] audit: type=1326 audit(1731022106.653:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7225 comm="syz.0.327" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad7417e719 code=0x0 [ 438.461131][ T7166] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.471359][ T7166] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.483208][ T7166] bridge_slave_0: entered allmulticast mode [ 438.492791][ T7166] bridge_slave_0: entered promiscuous mode [ 438.686041][ T7166] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.694016][ T7166] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.702023][ T7166] bridge_slave_1: entered allmulticast mode [ 438.711660][ T7166] bridge_slave_1: entered promiscuous mode [ 439.313903][ T7166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.493515][ T7166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.549775][ T5800] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 439.577608][ T5800] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 439.599952][ T5800] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 439.754017][ T5800] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 439.849927][ T5800] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 439.998835][ T5800] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 440.312627][ T5849] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 440.504001][ T5849] usb 1-1: Using ep0 maxpacket: 16 [ 440.518401][ T5849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.529232][ T5849] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 440.539294][ T5849] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 440.548854][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.672053][ T3694] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.779295][ T5849] usb 1-1: config 0 descriptor?? [ 440.929299][ T3694] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.125784][ T5800] Bluetooth: hci5: command tx timeout [ 442.274824][ T7166] team0: Port device team_slave_0 added [ 442.336793][ T3694] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.897728][ T7166] team0: Port device team_slave_1 added [ 444.273702][ T5800] Bluetooth: hci5: command tx timeout [ 445.181607][ T3694] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.264748][ T7166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.271985][ T7166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.298621][ T7166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.671520][ T7166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.678808][ T7166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.705550][ T7166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.774771][ T5842] usb 1-1: USB disconnect, device number 7 [ 445.897457][ T3694] bridge_slave_1: left allmulticast mode [ 445.905667][ T3694] bridge_slave_1: left promiscuous mode [ 445.913468][ T3694] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.039439][ T3694] bridge_slave_0: left allmulticast mode [ 446.045565][ T3694] bridge_slave_0: left promiscuous mode [ 446.052487][ T3694] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.292672][ T5800] Bluetooth: hci5: command tx timeout [ 447.207103][ T3694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.300097][ T3694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.377253][ T3694] bond0 (unregistering): Released all slaves [ 447.515173][ T7275] loop0: detected capacity change from 0 to 2048 [ 447.637046][ T29] audit: type=1326 audit(1731022115.903:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87df7e719 code=0x7ffc0000 [ 447.659954][ T29] audit: type=1326 audit(1731022115.903:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87df7e719 code=0x7ffc0000 [ 447.708858][ T7275] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 447.732238][ T29] audit: type=1326 audit(1731022115.963:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fe87df7e719 code=0x7ffc0000 [ 447.756171][ T29] audit: type=1326 audit(1731022115.963:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87df7e719 code=0x7ffc0000 [ 447.782806][ T29] audit: type=1326 audit(1731022115.963:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87df7e719 code=0x7ffc0000 [ 447.806675][ T29] audit: type=1326 audit(1731022115.983:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe87df7e719 code=0x7ffc0000 [ 447.829450][ T29] audit: type=1326 audit(1731022116.073:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87df7e719 code=0x7ffc0000 [ 447.852560][ T29] audit: type=1326 audit(1731022116.073:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87df7e719 code=0x7ffc0000 [ 447.878569][ T29] audit: type=1326 audit(1731022116.093:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe87df7e719 code=0x7ffc0000 [ 447.901973][ T29] audit: type=1326 audit(1731022116.093:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87df7e719 code=0x7ffc0000 [ 447.924057][ T7275] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 448.371144][ T5800] Bluetooth: hci5: command tx timeout [ 448.633048][ T7166] hsr_slave_0: entered promiscuous mode [ 448.744563][ T7166] hsr_slave_1: entered promiscuous mode [ 448.841034][ T7166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 448.849431][ T7166] Cannot create hsr debugfs directory [ 449.047337][ T7237] chnl_net:caif_netlink_parms(): no params data found [ 449.346517][ T3694] hsr_slave_0: left promiscuous mode [ 449.365338][ T3694] hsr_slave_1: left promiscuous mode [ 449.384791][ T3694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.392823][ T3694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.453746][ T7289] netlink: 'syz.4.340': attribute type 1 has an invalid length. [ 449.472586][ T3694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.480387][ T3694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.585222][ T3694] veth1_macvtap: left promiscuous mode [ 449.591142][ T3694] veth0_macvtap: left promiscuous mode [ 449.600011][ T3694] veth1_vlan: left promiscuous mode [ 449.605855][ T3694] veth0_vlan: left promiscuous mode [ 450.679683][ T7299] loop0: detected capacity change from 0 to 1024 [ 450.916170][ T3694] team0 (unregistering): Port device team_slave_1 removed [ 451.008773][ T3694] team0 (unregistering): Port device team_slave_0 removed [ 452.326580][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 453.374712][ T7330] tmpfs: Bad value for 'nr_blocks' [ 454.442950][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 454.636833][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 454.724777][ T25] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 454.734520][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.841186][ T25] usb 5-1: config 0 descriptor?? [ 454.907126][ T7237] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.916689][ T7237] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.924859][ T7237] bridge_slave_0: entered allmulticast mode [ 454.935832][ T7237] bridge_slave_0: entered promiscuous mode [ 455.232492][ T7237] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.240308][ T7237] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.255374][ T7237] bridge_slave_1: entered allmulticast mode [ 455.265057][ T7237] bridge_slave_1: entered promiscuous mode [ 455.521589][ T7166] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 455.614369][ T7237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.684076][ T7166] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 455.746244][ T7237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.791038][ T7166] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 456.385398][ T7166] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 456.426350][ T7237] team0: Port device team_slave_0 added [ 456.521916][ T7237] team0: Port device team_slave_1 added [ 457.319221][ T25] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 457.329846][ T25] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 457.341560][ T25] asix 5-1:0.0: probe with driver asix failed with error -71 [ 457.490258][ T25] usb 5-1: USB disconnect, device number 9 [ 457.988797][ T7237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.996540][ T7237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.023813][ T7237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.290755][ T7237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.298304][ T7237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.326057][ T7237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.245744][ T7237] hsr_slave_0: entered promiscuous mode [ 467.805111][ T7237] hsr_slave_1: entered promiscuous mode [ 468.793778][ T7379] ALSA: seq fatal error: cannot create timer (-19) [ 469.058790][ T7166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.364056][ T7166] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.513162][ T7237] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 469.538273][ T7237] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 469.562734][ T7237] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 469.607204][ T7237] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 470.043877][ T3888] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.051792][ T3888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.174925][ T3888] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.182903][ T3888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.428977][ T7398] input: syz0 as /devices/virtual/input/input6 [ 473.227899][ T7399] loop0: detected capacity change from 0 to 2048 [ 473.454032][ T7399] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 474.119405][ T7237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.386745][ T7237] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.481187][ T3888] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.489146][ T3888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.674546][ T7166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.718023][ T3888] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.726058][ T3888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.187772][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.195412][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.720490][ T7166] veth0_vlan: entered promiscuous mode [ 475.956716][ T7166] veth1_vlan: entered promiscuous mode [ 476.023260][ T5849] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 476.190336][ T7426] loop4: detected capacity change from 0 to 1024 [ 476.240309][ T5849] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.251028][ T5849] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 476.287284][ T7426] EXT4-fs: Ignoring removed orlov option [ 476.294518][ T7426] EXT4-fs: Ignoring removed nomblk_io_submit option [ 476.387391][ T5849] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 476.396067][ T7166] veth0_macvtap: entered promiscuous mode [ 476.397012][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 476.411039][ T5849] usb 1-1: SerialNumber: syz [ 476.476805][ T7166] veth1_macvtap: entered promiscuous mode [ 476.601718][ T7426] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 476.781168][ T7426] System zones: 0-1, 3-36 [ 476.805588][ T5849] usb 1-1: 0:2 : does not exist [ 476.879820][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.891107][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.901288][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.912248][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.922635][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.933474][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.949083][ T7166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.029397][ T7426] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.115362][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.126242][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.136472][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.147290][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.154626][ T5849] usb 1-1: USB disconnect, device number 8 [ 477.157400][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.181217][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.196907][ T7166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.275683][ T7166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.286065][ T7166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.295265][ T7166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.304437][ T7166] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.734168][ T5989] udevd[5989]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 478.270551][ T7237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.431904][ T7443] loop0: detected capacity change from 0 to 512 [ 478.506724][ T7443] EXT4-fs: inline encryption not supported [ 478.557927][ T7443] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 479.586725][ T5799] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.996368][ T7464] loop4: detected capacity change from 0 to 512 [ 484.136004][ T7464] EXT4-fs: Ignoring removed nobh option [ 484.505521][ T7237] veth0_vlan: entered promiscuous mode [ 484.543835][ T7237] veth1_vlan: entered promiscuous mode [ 484.693010][ T7237] veth0_macvtap: entered promiscuous mode [ 484.857818][ T7237] veth1_macvtap: entered promiscuous mode [ 485.159345][ T7473] loop0: detected capacity change from 0 to 1024 [ 485.215962][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.226832][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.237470][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.248274][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.263898][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.276413][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.286648][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.297514][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.313299][ T7237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.357276][ T7464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.370702][ T7464] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 485.589107][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.600565][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.611698][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.622756][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.632967][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.643851][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.654123][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.666102][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.681982][ T7237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.689910][ T7477] loop2: detected capacity change from 0 to 128 [ 485.715835][ T7237] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.725226][ T7237] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.734554][ T7237] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.743957][ T7237] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.825496][ T7464] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.381: bg 0: block 224: padding at end of block bitmap is not set [ 485.914047][ T7477] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 485.933209][ T7464] EXT4-fs (loop4): Remounting filesystem read-only [ 485.970099][ T7464] __quota_error: 12 callbacks suppressed [ 485.970310][ T7464] Quota error (device loop4): write_blk: dquota write failed [ 485.984994][ T7464] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 486.004187][ T7473] hfsplus: bad catalog entry type [ 486.385336][ T3493] hfsplus: b-tree write err: -5, ino 4 [ 487.026219][ T5799] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.084114][ T3694] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 487.744501][ T7499] cgroup: Unknown subsys name 'cpuset' [ 493.736128][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 493.756013][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 493.766589][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 493.784101][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 493.796452][ T5798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 493.818887][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 495.963269][ T5798] Bluetooth: hci0: command tx timeout [ 496.191585][ T4461] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.346174][ T7554] loop2: detected capacity change from 0 to 512 [ 496.468703][ T4461] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.472136][ T7554] ext4: Unexpected value for 'nobarrier' [ 496.778957][ T4461] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.904181][ T7526] chnl_net:caif_netlink_parms(): no params data found [ 497.078596][ T4461] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.053064][ T5798] Bluetooth: hci0: command tx timeout [ 498.333981][ T4461] bridge_slave_1: left allmulticast mode [ 498.340168][ T4461] bridge_slave_1: left promiscuous mode [ 498.347349][ T4461] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.514901][ T4461] bridge_slave_0: left allmulticast mode [ 498.520884][ T4461] bridge_slave_0: left promiscuous mode [ 498.528156][ T4461] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.652945][ T7556] loop0: detected capacity change from 0 to 4096 [ 499.267236][ T7556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.659285][ T7583] loop2: detected capacity change from 0 to 512 [ 499.849376][ T4461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.952123][ T4461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.049559][ T4461] bond0 (unregistering): Released all slaves [ 500.127029][ T5798] Bluetooth: hci0: command tx timeout [ 500.251866][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 500.318521][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 500.342764][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 500.356991][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 500.368831][ T5800] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 500.458458][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 500.599076][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.075347][ T4461] hsr_slave_0: left promiscuous mode [ 501.164012][ T4461] hsr_slave_1: left promiscuous mode [ 501.257018][ T4461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.265189][ T4461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.308730][ T4461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.318359][ T4461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.354007][ T7583] EXT4-fs: Ignoring removed oldalloc option [ 501.431195][ T7583] EXT4-fs (loop2): Test dummy encryption mode enabled [ 501.439617][ T4461] veth1_macvtap: left promiscuous mode [ 501.446222][ T4461] veth0_macvtap: left promiscuous mode [ 501.452412][ T4461] veth1_vlan: left promiscuous mode [ 501.458101][ T4461] veth0_vlan: left promiscuous mode [ 502.293946][ T5800] Bluetooth: hci0: command tx timeout [ 502.307860][ T7601] loop0: detected capacity change from 0 to 764 [ 502.524625][ T7583] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #12: comm syz.2.399: corrupted in-inode xattr: invalid ea_ino [ 502.539394][ T5800] Bluetooth: hci1: command tx timeout [ 502.714860][ T7583] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.399: couldn't read orphan inode 12 (err -117) [ 502.897866][ T7583] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.228377][ T4461] team0 (unregistering): Port device team_slave_1 removed [ 503.314791][ T4461] team0 (unregistering): Port device team_slave_0 removed [ 503.963889][ T5796] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 504.148207][ T7526] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.158327][ T7526] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.166603][ T7526] bridge_slave_0: entered allmulticast mode [ 504.176052][ T7526] bridge_slave_0: entered promiscuous mode [ 504.541650][ T7526] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.549654][ T7526] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.558147][ T7526] bridge_slave_1: entered allmulticast mode [ 504.567680][ T7526] bridge_slave_1: entered promiscuous mode [ 504.627610][ T5800] Bluetooth: hci1: command tx timeout [ 504.988417][ T7526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.137976][ T7526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.661670][ T7619] loop0: detected capacity change from 0 to 1024 [ 505.828904][ T4461] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.070408][ T7587] chnl_net:caif_netlink_parms(): no params data found [ 506.168092][ T4461] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.254474][ T7526] team0: Port device team_slave_0 added [ 506.387969][ T4461] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.658839][ T4461] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.687913][ T5800] Bluetooth: hci1: command tx timeout [ 506.800178][ T7526] team0: Port device team_slave_1 added [ 507.100589][ T7634] loop0: detected capacity change from 0 to 1024 [ 507.189780][ T7634] EXT4-fs: Ignoring removed orlov option [ 507.298408][ T7634] EXT4-fs (loop0): Test dummy encryption mode enabled [ 507.333663][ T7634] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 507.620454][ T7634] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.655958][ T7526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.664444][ T7526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.699169][ T7526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.744274][ T4461] bridge_slave_1: left allmulticast mode [ 507.750359][ T4461] bridge_slave_1: left promiscuous mode [ 507.757473][ T4461] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.919914][ T4461] bridge_slave_0: left allmulticast mode [ 507.926114][ T4461] bridge_slave_0: left promiscuous mode [ 507.933066][ T4461] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.824093][ T5800] Bluetooth: hci1: command tx timeout [ 509.255365][ T4461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.325910][ T4461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.384236][ T4461] bond0 (unregistering): Released all slaves [ 509.500337][ T7526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.507889][ T7526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.539545][ T7526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.024229][ T7634] fscrypt (loop0): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 510.595638][ T7526] hsr_slave_0: entered promiscuous mode [ 510.663141][ T7526] hsr_slave_1: entered promiscuous mode [ 510.680880][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.713021][ T7526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 510.720880][ T7526] Cannot create hsr debugfs directory [ 510.799726][ T4461] hsr_slave_0: left promiscuous mode [ 510.882153][ T4461] hsr_slave_1: left promiscuous mode [ 510.943054][ T4461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.950962][ T4461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.051910][ T4461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.065989][ T4461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.234308][ T4461] veth1_macvtap: left promiscuous mode [ 511.240250][ T4461] veth0_macvtap: left promiscuous mode [ 511.246529][ T4461] veth1_vlan: left promiscuous mode [ 511.252187][ T4461] veth0_vlan: left promiscuous mode [ 511.770522][ T7681] loop2: detected capacity change from 0 to 256 [ 515.411041][ T4461] team0 (unregistering): Port device team_slave_1 removed [ 515.504992][ T4461] team0 (unregistering): Port device team_slave_0 removed [ 515.819904][ T7587] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.827992][ T7587] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.836442][ T7587] bridge_slave_0: entered allmulticast mode [ 515.845977][ T7587] bridge_slave_0: entered promiscuous mode [ 515.973734][ T7587] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.981549][ T7587] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.989769][ T7587] bridge_slave_1: entered allmulticast mode [ 515.999213][ T7587] bridge_slave_1: entered promiscuous mode [ 516.269054][ T7587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.293010][ T7587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.786708][ T7694] loop2: detected capacity change from 0 to 128 [ 517.075473][ T7587] team0: Port device team_slave_0 added [ 517.102140][ T7587] team0: Port device team_slave_1 added [ 517.210180][ T7694] loop2: detected capacity change from 0 to 128 [ 517.316377][ T7694] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 517.392588][ T7694] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 517.403368][ T7694] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 517.415890][ T7694] UDF-fs: Scanning with blocksize 512 failed [ 517.539866][ T7694] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 517.570523][ T7694] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 517.580978][ T7694] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 517.589123][ T7694] UDF-fs: Scanning with blocksize 1024 failed [ 517.624876][ T7587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.632018][ T7587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.658665][ T7587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.764950][ T7694] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 517.845936][ T7587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.853321][ T7587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.880035][ T7587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.963256][ T7694] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 517.973485][ T7694] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 517.981419][ T7694] UDF-fs: Scanning with blocksize 2048 failed [ 518.139796][ T7694] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 518.265784][ T7694] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 518.277338][ T7694] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 518.285490][ T7694] UDF-fs: Scanning with blocksize 4096 failed [ 518.291805][ T7694] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 518.709078][ T7703] loop4: detected capacity change from 0 to 512 [ 518.815455][ T7703] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.429: corrupted in-inode xattr: invalid ea_ino [ 518.863862][ T7703] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.429: couldn't read orphan inode 15 (err -117) [ 518.880045][ T7703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.896479][ T7587] hsr_slave_0: entered promiscuous mode [ 518.913148][ T7703] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.429: invalid indirect mapped block 234881024 (level 0) [ 519.035166][ T7587] hsr_slave_1: entered promiscuous mode [ 519.078043][ T5799] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.612853][ T7714] loop2: detected capacity change from 0 to 1024 [ 520.660116][ T7526] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 520.774795][ T7526] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 520.865517][ T7714] hfsplus: request for non-existent node 3 in B*Tree [ 520.872755][ T7714] hfsplus: request for non-existent node 3 in B*Tree [ 520.887527][ T7526] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 520.964699][ T7526] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 521.328489][ T7714] hfsplus: b-tree write err: -5, ino 3 [ 521.652649][ T5863] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 522.034481][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.045992][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.057349][ T5863] usb 1-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.00 [ 522.066989][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.187985][ T5863] usb 1-1: config 0 descriptor?? [ 522.280393][ T7587] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 522.440725][ T7587] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 522.604401][ T7587] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 522.712821][ T7587] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 522.938999][ T5863] hid-generic 0003:18D1:5030.0005: unknown main item tag 0x0 [ 522.947088][ T5863] hid-generic 0003:18D1:5030.0005: unknown main item tag 0x0 [ 522.955196][ T5863] hid-generic 0003:18D1:5030.0005: unknown main item tag 0x0 [ 522.963199][ T5863] hid-generic 0003:18D1:5030.0005: unknown main item tag 0x0 [ 522.970958][ T5863] hid-generic 0003:18D1:5030.0005: unknown main item tag 0x0 [ 523.265674][ T5863] hid-generic 0003:18D1:5030.0005: hidraw0: USB HID v0.00 Device [HID 18d1:5030] on usb-dummy_hcd.0-1/input0 [ 523.375019][ T5863] usb 1-1: USB disconnect, device number 9 [ 523.411822][ T7526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.751739][ T7526] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.905748][ T1876] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.913691][ T1876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.078822][ T1876] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.086729][ T1876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.529466][ T7587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.598997][ T7587] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.641678][ T29] audit: type=1326 audit(1731022192.873:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.2.437" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ed377e719 code=0x0 [ 524.684979][ T1876] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.692839][ T1876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.709945][ T1876] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.717842][ T1876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.871021][ T7587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 525.044183][ T7747] loop0: detected capacity change from 0 to 1024 [ 525.054048][ T7747] EXT4-fs: Ignoring removed nomblk_io_submit option [ 525.369662][ T7742] loop4: detected capacity change from 0 to 128 [ 525.422769][ T7742] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 525.643093][ T5798] Bluetooth: hci1: command 0x0405 tx timeout [ 525.721178][ T7742] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 525.844951][ T7747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.943579][ T5800] Bluetooth: hci2: unexpected event for opcode 0x0c1b [ 526.308294][ T7587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.505415][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.804469][ T7526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.498434][ T7526] veth0_vlan: entered promiscuous mode [ 527.560090][ T7526] veth1_vlan: entered promiscuous mode [ 527.670141][ T7526] veth0_macvtap: entered promiscuous mode [ 527.695347][ T7526] veth1_macvtap: entered promiscuous mode [ 527.759103][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.770895][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.783513][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.794378][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.804563][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.815360][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.830893][ T7526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.857837][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.868769][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.879068][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.890867][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.901368][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.912225][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.928013][ T7526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.948783][ T7526] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.964090][ T7526] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.979790][ T7526] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.993591][ T7526] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.013743][ T7587] veth0_vlan: entered promiscuous mode [ 529.022561][ T5800] ===================================================== [ 529.029814][ T5800] BUG: KMSAN: uninit-value in hci_rx_work+0x10db/0x11f0 [ 529.037146][ T5800] hci_rx_work+0x10db/0x11f0 [ 529.041972][ T5800] process_scheduled_works+0xae0/0x1c40 [ 529.047916][ T5800] worker_thread+0xea7/0x14f0 [ 529.053067][ T5800] kthread+0x3e2/0x540 [ 529.057444][ T5800] ret_from_fork+0x6d/0x90 [ 529.062093][ T5800] ret_from_fork_asm+0x1a/0x30 [ 529.068188][ T5800] [ 529.070641][ T5800] Uninit was created at: [ 529.076515][ T5800] kmem_cache_alloc_node_noprof+0x6bf/0xb80 [ 529.084582][ T5800] kmalloc_reserve+0x13d/0x4a0 [ 529.089607][ T5800] __alloc_skb+0x363/0x7b0 [ 529.095310][ T5800] vhci_write+0x127/0x900 [ 529.099863][ T5800] vfs_write+0xb2b/0x1540 [ 529.105495][ T5800] ksys_write+0x24f/0x4c0 [ 529.110070][ T5800] __x64_sys_write+0x93/0xe0 [ 529.115999][ T5800] x64_sys_call+0x306a/0x3ba0 [ 529.120951][ T5800] do_syscall_64+0xcd/0x1e0 [ 529.126751][ T5800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.133961][ T5800] [ 529.136430][ T5800] CPU: 1 UID: 0 PID: 5800 Comm: kworker/u9:6 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 529.147890][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 529.158309][ T5800] Workqueue: hci2 hci_rx_work [ 529.163971][ T5800] ===================================================== [ 529.171071][ T5800] Disabling lock debugging due to kernel taint [ 529.177978][ T5800] Kernel panic - not syncing: kmsan.panic set ... [ 529.184595][ T5800] CPU: 1 UID: 0 PID: 5800 Comm: kworker/u9:6 Tainted: G B 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 529.197288][ T5800] Tainted: [B]=BAD_PAGE [ 529.201604][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 529.211876][ T5800] Workqueue: hci2 hci_rx_work [ 529.216819][ T5800] Call Trace: [ 529.220264][ T5800] [ 529.223348][ T5800] dump_stack_lvl+0x216/0x2d0 [ 529.228317][ T5800] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 529.234380][ T5800] dump_stack+0x1e/0x30 [ 529.238813][ T5800] panic+0x4e2/0xcf0 [ 529.242981][ T5800] ? kmsan_get_metadata+0x131/0x1c0 [ 529.248439][ T5800] kmsan_report+0x2c7/0x2d0 [ 529.253246][ T5800] ? kmsan_get_metadata+0x13e/0x1c0 [ 529.258668][ T5800] ? __msan_warning+0x95/0x120 [ 529.263719][ T5800] ? hci_rx_work+0x10db/0x11f0 [ 529.268722][ T5800] ? process_scheduled_works+0xae0/0x1c40 [ 529.274722][ T5800] ? worker_thread+0xea7/0x14f0 [ 529.279840][ T5800] ? kthread+0x3e2/0x540 [ 529.284362][ T5800] ? ret_from_fork+0x6d/0x90 [ 529.289193][ T5800] ? ret_from_fork_asm+0x1a/0x30 [ 529.294415][ T5800] ? filter_irq_stacks+0x60/0x1a0 [ 529.299746][ T5800] ? kmsan_get_metadata+0x13e/0x1c0 [ 529.305204][ T5800] ? kmsan_get_metadata+0x13e/0x1c0 [ 529.310635][ T5800] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 529.317271][ T5800] ? kmsan_get_metadata+0x13e/0x1c0 [ 529.322709][ T5800] ? kmsan_get_metadata+0x13e/0x1c0 [ 529.328153][ T5800] ? kmsan_get_metadata+0x13e/0x1c0 [ 529.333595][ T5800] ? kmsan_get_metadata+0x13e/0x1c0 [ 529.339026][ T5800] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 529.345660][ T5800] ? kmsan_get_metadata+0x13e/0x1c0 [ 529.351134][ T5800] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 529.357195][ T5800] __msan_warning+0x95/0x120 [ 529.362073][ T5800] hci_rx_work+0x10db/0x11f0 [ 529.366937][ T5800] ? __pfx_hci_rx_work+0x10/0x10 [ 529.372121][ T5800] process_scheduled_works+0xae0/0x1c40 [ 529.377989][ T5800] worker_thread+0xea7/0x14f0 [ 529.382982][ T5800] kthread+0x3e2/0x540 [ 529.387343][ T5800] ? __pfx_worker_thread+0x10/0x10 [ 529.392743][ T5800] ? __pfx_kthread+0x10/0x10 [ 529.397628][ T5800] ret_from_fork+0x6d/0x90 [ 529.402296][ T5800] ? __pfx_kthread+0x10/0x10 [ 529.407185][ T5800] ret_from_fork_asm+0x1a/0x30 [ 529.412248][ T5800] [ 529.415802][ T5800] Kernel Offset: disabled [ 529.420237][ T5800] Rebooting in 86400 seconds..