last executing test programs: 35.002174879s ago: executing program 2 (id=3611): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='0', 0x1) write(r0, &(0x7f0000000500)='1', 0x1) 34.323961676s ago: executing program 2 (id=3618): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='sysfs\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/acpi/devices\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000500)=""/4096, 0x1000) 34.004924333s ago: executing program 2 (id=3621): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x1ff) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 33.392469239s ago: executing program 2 (id=3623): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/cpu/drivers/processor\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/cpu/drivers/intel_pstate\x00', 0x0, 0x0) 33.138837944s ago: executing program 2 (id=3627): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='0\n', 0x2) close(r0) 32.841051642s ago: executing program 2 (id=3630): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='core\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='mem\x00', 0x3) 31.627210921s ago: executing program 1 (id=3634): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/1/root\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/1024, 0x400) 31.344662778s ago: executing program 1 (id=3636): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="63000000000000000000000001000000000400"/72], 0x48) 31.183239292s ago: executing program 1 (id=3637): nanosleep(&(0x7f0000000200)={0x0, 0x23c34600}, 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x23c34600}, 0x0) 30.372123392s ago: executing program 1 (id=3642): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='0\x00', 0x1) write(r0, &(0x7f0000000400)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/event_source/devices/cpu/freeze_on_smi\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='0\x00', 0x1) write(r1, &(0x7f0000000700)='1\x00', 0x1) 30.308534463s ago: executing program 1 (id=3643): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='foo\n', 0x4) close(r0) 30.069350819s ago: executing program 1 (id=3644): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='0\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='0\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/power/pm_test\x00', 0x2, 0x0) write(r2, &(0x7f0000000800)='processors\n\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/power/mem_sleep\x00', 0x2, 0x0) write(r3, &(0x7f0000000a00)='deep\n\x00', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/power/state\x00', 0x2, 0x0) write(r4, &(0x7f0000000c00)='disk\n\x00', 0x5) write(r4, &(0x7f0000000d00)='mem\n\x00', 0x4) 14.7999238s ago: executing program 32 (id=3644): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='0\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='0\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/power/pm_test\x00', 0x2, 0x0) write(r2, &(0x7f0000000800)='processors\n\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/power/mem_sleep\x00', 0x2, 0x0) write(r3, &(0x7f0000000a00)='deep\n\x00', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/power/state\x00', 0x2, 0x0) write(r4, &(0x7f0000000c00)='disk\n\x00', 0x5) write(r4, &(0x7f0000000d00)='mem\n\x00', 0x4) 10.338359879s ago: executing program 0 (id=3700): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1b, {0x0, "0f08f4"}}, @nested_vmlaunch={0x12f, 0x18}, @nested_vmresume={0x130, 0x18}], 0x7b}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.192392343s ago: executing program 3 (id=3703): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/devices/system/cpu/cpufreq/scaling_governor\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpufreq/scaling_cur_freq\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpufreq/scaling_driver\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/cpu/cpufreq/scaling_available_governors\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/devices/system/cpu/cpufreq/chip0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpufreq/policy\x00', 0x0, 0x0) 9.975656668s ago: executing program 3 (id=3705): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000280)="ed7f000000000000", 0x8, 0x280) 9.975444328s ago: executing program 0 (id=3706): mmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0xe) madvise(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x4) munmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000) 9.902318449s ago: executing program 0 (id=3707): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/pci0000:00/0000:00:00.0/vendor\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/pci0000:00/0000:00:00.0/device\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/pci0000:00/0000:00:00.0/config\x00', 0x0, 0x0) 9.87976783s ago: executing program 3 (id=3708): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/debug/exception-trace\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) close(r0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0xffffffffff600000) 9.744229823s ago: executing program 0 (id=3709): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/algif_hash\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/algif_skcipher\x00', 0x0, 0x0) 9.676114095s ago: executing program 0 (id=3710): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='0\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='freezer\n', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='mem\n', 0x4) close(r2) 8.073525134s ago: executing program 4 (id=3716): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000060)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='devtmpfs\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000e0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='on\n', 0x3) close(r1) pwrite64(0xffffffffffffffff, &(0x7f0000000280)="ed7f000000000000", 0x8, 0x280) 7.993966246s ago: executing program 4 (id=3717): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) 7.82023231s ago: executing program 4 (id=3718): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/firmware/devicetree/base\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/1024, 0x400) 7.784703251s ago: executing program 4 (id=3719): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private2, 0x9, 0x0, 0x3, 0x1, 0xe, 0x1124}, 0x17) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) syz_open_dev$vim2m(&(0x7f00000001c0), 0x10007fffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000010b40)={0x0, 0x0, &(0x7f0000010b80)={&(0x7f0000010bc0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, 0x0, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) recvmmsg(r2, &(0x7f0000010c00)=[{{0x0, 0x0, &(0x7f0000010c40)=[{&(0x7f0000010d00)=""/162, 0xa2}, {&(0x7f0000010dc0)=""/70, 0x46}, {&(0x7f0000010e40)=""/52, 0x34}, {&(0x7f0000010e80)=""/194, 0xc2}, {&(0x7f0000010f80)=""/159, 0x9f}, {&(0x7f0000011040)=""/169, 0xa9}, {&(0x7f0000011100)=""/4103, 0x1007}, {&(0x7f0000012140)=""/4096, 0x1000}, {&(0x7f0000013140)=""/4096, 0x1000}], 0x9}, 0x3}], 0x1b00, 0x40010022, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000010740), r1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000010840)={0x0, 0x0, &(0x7f0000010880)={&(0x7f00000108c0)=ANY=[@ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x404a0c4}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000010800)={&(0x7f0000010700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000107c0)={&(0x7f0000010780)={0x24, r3, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) write$binfmt_script(r1, &(0x7f0000000580)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000010a40)={{{@in6=@loopback, @in6=@empty, 0x1, 0x80, 0x4e21, 0x8, 0xa, 0xa0, 0x80, 0x4}, {0x3, 0x3, 0x100, 0x2, 0x1, 0x1997, 0x9}, {0x7, 0xacc, 0x8, 0x200}, 0x7f, 0x6e6bba, 0x2, 0x0, 0x0, 0xf57f87cb2bc19895}, {{@in6=@local, 0x4d2, 0x2b}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x36}, 0x3501, 0x3, 0x1, 0xff, 0x6, 0x2, 0x1}}, 0xe8) r6 = socket(0x40000000015, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x271e, 0x0, &(0x7f00000106c0)) 7.360751711s ago: executing program 3 (id=3720): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cpuinfo\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/4096, 0x1000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/misc\x00', 0x0, 0x0) read(r1, &(0x7f0000000400)=""/4096, 0x1000) 7.216208395s ago: executing program 3 (id=3721): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='0', 0x1) 6.817467824s ago: executing program 4 (id=3722): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) 150.686966ms ago: executing program 3 (id=3723): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sysrq-trigger\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='0\x00', 0x1) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/kernel/parameters/panic_on_warn\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='0\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/module/phram/parameters/phram\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='test,0x8000000000000000,0x1000\x00', 0x1e) close(r2) 235.56µs ago: executing program 4 (id=3724): syz_ublk_setup_io_uring(0x4c5b, &(0x7f00000024c0)={0x0, 0x3e07, 0x0, 0x3, 0x2a8}, 0x0, &(0x7f0000000280), &(0x7f0000000140)) fsopen(0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103"], 0x0) syz_open_dev$evdev(&(0x7f0000000400), 0x4, 0x6443) 0s ago: executing program 0 (id=3725): setrlimit(0x1, &(0x7f0000000000)={0x20000000, 0x20000000}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) fallocate(r0, 0x0, 0x0, 0xc000000) kernel console output (not intermixed with test programs): 1302.591830][T18117] udc-core: couldn't find an available UDC or it's busy [ 1302.615585][T15640] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.632043][T18117] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1302.654645][T18137] rock: directory entry would overflow storage [ 1302.661861][T18137] rock: sig=0x4f50, size=4, remaining=3 [ 1302.667460][T18137] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1302.718995][T15640] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.760466][ T5944] usb 3-1: selecting invalid altsetting 1 [ 1302.809401][ T5944] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 1302.839579][ T5944] usb 3-1: USB disconnect, device number 25 [ 1302.876159][T15640] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.050474][T17951] udevd[17951]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1303.137872][ T4261] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1303.357810][ T4264] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1303.397696][ T4261] usb 5-1: Using ep0 maxpacket: 32 [ 1303.554843][ T4261] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1303.582802][ T4261] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1303.628695][T18163] overlayfs: filesystem on './file0' not supported as upperdir [ 1303.640123][ T4261] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1303.721085][T15517] Bluetooth: hci2: command 0x0409 tx timeout [ 1303.762665][T18183] loop2: detected capacity change from 0 to 512 [ 1303.878126][ T4261] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1303.887245][ T4261] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1303.908379][T18162] loop0: detected capacity change from 0 to 4096 [ 1303.914887][ T4264] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1303.935172][ T4261] usb 5-1: Product: syz [ 1303.958098][ T4261] usb 5-1: Manufacturer: syz [ 1303.962765][ T4261] usb 5-1: SerialNumber: syz [ 1304.022841][ T4264] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1304.057723][ T4264] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1304.106466][T18122] chnl_net:caif_netlink_parms(): no params data found [ 1304.110877][ T4264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.131723][ T4261] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input11 [ 1304.166509][ T4264] usb 1-1: config 0 descriptor?? [ 1304.512866][T18122] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.520371][T18122] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.528929][T18122] device bridge_slave_0 entered promiscuous mode [ 1304.538122][T18122] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.545382][T18122] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.558881][T18122] device bridge_slave_1 entered promiscuous mode [ 1304.632776][T18162] NILFS (loop0): unrecognized mount option "./file0" [ 1304.654495][T18122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1304.675225][T18122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1304.702395][T18163] overlayfs: filesystem on './file0' not supported as upperdir [ 1304.715280][ T4261] usb 5-1: USB disconnect, device number 16 [ 1304.874394][ T4261] appletouch 5-1:1.0: input: appletouch disconnected [ 1304.912619][T18163] overlayfs: filesystem on './file0' not supported as upperdir [ 1305.062985][T18163] overlayfs: filesystem on './file0' not supported as upperdir [ 1305.097025][T18122] team0: Port device team_slave_0 added [ 1305.156815][T18122] team0: Port device team_slave_1 added [ 1305.163561][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.169990][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.256824][T18163] overlayfs: filesystem on './file0' not supported as upperdir [ 1305.299451][T18231] loop2: detected capacity change from 0 to 4096 [ 1305.306954][T18163] overlayfs: filesystem on './file0' not supported as upperdir [ 1305.330072][T18231] __ntfs_warning: 9 callbacks suppressed [ 1305.330087][T18231] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1305.477217][T18231] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1305.495781][T18163] overlayfs: filesystem on './file0' not supported as upperdir [ 1305.523316][T18231] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1305.541013][T18122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1305.551424][T18122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1305.578510][T18231] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1305.599480][T18163] overlayfs: filesystem on './file0' not supported as upperdir [ 1305.617385][T18231] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1305.655233][T18245] loop3: detected capacity change from 0 to 164 [ 1305.656075][T18122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1305.676683][T18231] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1305.694417][T18163] overlayfs: filesystem on './file0' not supported as upperdir [ 1305.747573][T18231] ntfs: volume version 3.1. [ 1305.755267][T18245] rock: directory entry would overflow storage [ 1305.761651][T18245] rock: sig=0x4f50, size=4, remaining=3 [ 1305.767286][T18245] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1305.775036][ T1110] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1305.785872][T18231] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1305.807791][ T9580] Bluetooth: hci2: command 0x041b tx timeout [ 1305.818107][T18231] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1305.841751][T18231] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1305.858385][T18231] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1305.889507][T18122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1305.907510][T18122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1305.936268][T18164] cgroup: fork rejected by pids controller in [ 1305.946442][T18164] /syz0 [ 1305.953504][T18164] [ 1305.969897][T18122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1305.981548][T18231] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1306.011625][T18163] overlayfs: filesystem on './file0' not supported as upperdir [ 1306.047774][ T1110] usb 5-1: Using ep0 maxpacket: 16 [ 1306.211654][T18253] netlink: 'syz.3.3487': attribute type 21 has an invalid length. [ 1306.235288][T18253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3487'. [ 1306.244459][ T4264] usbhid 1-1:0.0: can't add hid device: -71 [ 1306.250944][ T4264] usbhid: probe of 1-1:0.0 failed with error -71 [ 1306.266333][ T4264] usb 1-1: USB disconnect, device number 10 [ 1306.437702][ C0] net_ratelimit: 42 callbacks suppressed [ 1306.458165][ T1110] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1306.475073][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.731504][ T1110] usb 5-1: Product: syz [ 1306.735737][ T1110] usb 5-1: Manufacturer: syz [ 1306.760118][T18259] loop2: detected capacity change from 0 to 2048 [ 1306.770758][ T1110] usb 5-1: SerialNumber: syz [ 1306.779614][T18122] device hsr_slave_0 entered promiscuous mode [ 1306.799361][T18122] device hsr_slave_1 entered promiscuous mode [ 1306.811221][ T1110] usb 5-1: config 0 descriptor?? [ 1306.819547][T18122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1306.828834][T18122] Cannot create hsr debugfs directory [ 1306.859588][T18259] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1306.989267][ T1110] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 1307.754971][T18264] loop3: detected capacity change from 0 to 4096 [ 1307.860401][T18264] ntfs: volume version 3.1. [ 1307.877891][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 1308.077932][ T1110] usb 5-1: clie_3_5_startup: get interface number failed: -71 [ 1308.087683][T13728] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 1308.096415][ T1110] visor: probe of 5-1:0.0 failed with error -71 [ 1308.172412][ T1110] usb 5-1: USB disconnect, device number 17 [ 1308.192408][T18264] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1308.381746][T15640] IPVS: stopping master sync thread 17515 ... [ 1308.410281][T13728] usb 1-1: not running at top speed; connect to a high speed hub [ 1308.548545][T18286] device tunl0 entered promiscuous mode [ 1308.577802][T18213] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1308.600048][T18286] netlink: 'syz.3.3494': attribute type 4 has an invalid length. [ 1308.629345][T18286] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3494'. [ 1308.665969][T13728] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1308.698752][T13728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.727967][T13728] usb 1-1: Product: syz [ 1308.749671][T13728] usb 1-1: Manufacturer: syz [ 1308.754342][T13728] usb 1-1: SerialNumber: syz [ 1308.760625][T18290] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1308.838880][T18213] usb 3-1: Using ep0 maxpacket: 32 [ 1308.870620][T18294] loop3: detected capacity change from 0 to 164 [ 1308.882600][T13728] keyspan 1-1:1.0: Keyspan 4 port adapter converter detected [ 1308.941778][T18294] rock: directory entry would overflow storage [ 1308.962135][T18294] rock: sig=0x4f50, size=4, remaining=3 [ 1308.968309][T18213] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 1308.976507][T18213] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.976531][T18213] usb 3-1: config 0 has no interface number 0 [ 1308.976565][T18213] usb 3-1: config 0 interface 239 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1308.976594][T18213] usb 3-1: config 0 interface 239 has no altsetting 0 [ 1309.051509][T13728] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1309.063056][T18294] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1309.198524][T13728] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1309.248280][T13728] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1309.308214][T18213] usb 3-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1309.326997][T18213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.365283][T18213] usb 3-1: Product: syz [ 1309.372129][T13728] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1309.383707][T18213] usb 3-1: Manufacturer: syz [ 1309.400188][T18213] usb 3-1: SerialNumber: syz [ 1309.451952][T18213] usb 3-1: config 0 descriptor?? [ 1309.510041][T13728] usb 1-1: USB disconnect, device number 11 [ 1309.620607][T13728] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1309.662784][T18307] loop4: detected capacity change from 0 to 4096 [ 1309.675024][T15640] device hsr_slave_0 left promiscuous mode [ 1309.729924][T13728] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1309.763428][T15640] device hsr_slave_1 left promiscuous mode [ 1309.795465][T13728] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1309.824413][T13728] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1309.840660][T15640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1309.855186][T15640] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1309.890259][T13728] keyspan 1-1:1.0: device disconnected [ 1309.917989][T15640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1309.957824][ T9580] Bluetooth: hci2: command 0x0419 tx timeout [ 1309.963895][T15640] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1310.069148][T15640] device bridge_slave_1 left promiscuous mode [ 1310.100574][T15640] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.121321][T18327] tipc: Can't bind to reserved service type 1 [ 1310.186840][T15640] device bridge_slave_0 left promiscuous mode [ 1310.218252][T15640] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.341538][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 1310.341556][ T26] audit: type=1400 audit(1792170121.667:97): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=18330 comm="syz.4.3504" [ 1310.367994][T15640] device veth1_macvtap left promiscuous mode [ 1310.374079][T15640] device veth0_macvtap left promiscuous mode [ 1310.400779][T15640] device veth1_vlan left promiscuous mode [ 1310.406637][T15640] device veth0_vlan left promiscuous mode [ 1310.454359][T18333] loop4: detected capacity change from 0 to 8 [ 1310.512774][T18333] squashfs: Unknown parameter '' [ 1310.794242][T15640] team0 (unregistering): Port device batadv1 removed [ 1310.986640][T18344] loop0: detected capacity change from 0 to 2 [ 1311.078602][T18344] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1311.155404][T18344] loop0: detected capacity change from 0 to 1024 [ 1311.226623][T15640] team0 (unregistering): Port device team_slave_1 removed [ 1311.240087][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1311.273536][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1311.319558][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x5494 instead [ 1311.334164][T15640] team0 (unregistering): Port device team_slave_0 removed [ 1311.367335][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xae2c instead [ 1311.387790][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1311.407707][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1311.427762][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1311.450427][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1311.478732][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1311.496384][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1311.528536][T18345] jffs2: Further such events for this erase block will not be printed [ 1311.537242][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1311.559913][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1311.578468][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x5494 instead [ 1311.601479][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xae2c instead [ 1311.612190][T18213] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1311.636309][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1311.656959][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1311.672634][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1311.693785][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1311.717060][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1311.736410][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1311.758615][T18345] jffs2: Further such events for this erase block will not be printed [ 1311.776781][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 1311.804495][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 1311.815049][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x5494 instead [ 1311.826753][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xae2c instead [ 1311.838146][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 1311.850388][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 1311.881216][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x5494 instead [ 1311.903607][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xae2c instead [ 1311.919009][T18337] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3504'. [ 1311.958068][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 1311.958095][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 1311.958116][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x5494 instead [ 1311.958137][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xae2c instead [ 1311.958185][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 1311.969362][ C1] net_ratelimit: 60 callbacks suppressed [ 1312.079165][T18214] usb 3-1: USB disconnect, device number 26 [ 1312.112873][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 1312.134333][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x5494 instead [ 1312.202212][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xae2c instead [ 1312.212947][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 1312.225592][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 1312.270221][T18213] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 1312.279857][T18356] loop4: detected capacity change from 0 to 164 [ 1312.311087][T18213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.327684][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x5494 instead [ 1312.357702][T18213] usb 1-1: Product: syz [ 1312.366143][T18354] loop2: detected capacity change from 0 to 2048 [ 1312.382888][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xae2c instead [ 1312.393502][T18213] usb 1-1: Manufacturer: syz [ 1312.427488][T18213] usb 1-1: SerialNumber: syz [ 1312.444902][T18354] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1312.456662][T18360] device ip6gre1 entered promiscuous mode [ 1312.462871][T18356] rock: directory entry would overflow storage [ 1312.482310][T18356] rock: sig=0x4f50, size=4, remaining=3 [ 1312.488224][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 1312.505193][T18356] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1312.551007][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 1312.564180][T18213] ums_eneub6250 1-1:1.0: USB Mass Storage device detected [ 1312.609217][T18213] scsi host1: usb-storage 1-1:1.0 [ 1312.615147][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x5494 instead [ 1312.626626][T17982] udevd[17982]: incorrect nilfs2 checksum on /dev/loop2 [ 1312.650704][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xae2c instead [ 1312.702281][T17982] udevd[17982]: incorrect nilfs2 checksum on /dev/loop2 [ 1312.714078][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 1312.724691][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 1312.735306][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x5494 instead [ 1312.774427][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xae2c instead [ 1312.789754][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 1312.827815][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 1312.893584][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x5494 instead [ 1312.908028][T18371] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1313.774058][ T9580] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1313.788394][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xae2c instead [ 1313.815576][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 1313.901612][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 1313.923679][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x5494 instead [ 1313.978503][ T9580] usb 4-1: device descriptor read/64, error -71 [ 1313.998565][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xae2c instead [ 1314.045866][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 1314.152407][T18213] ums_eneub6250: probe of 1-1:1.0 failed with error 3 [ 1314.175792][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 1314.201166][T18122] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1314.237918][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x5494 instead [ 1314.257812][ T9580] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1314.557909][ T9580] usb 4-1: device descriptor read/64, error -71 [ 1314.623932][T18122] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1314.688674][ T9580] usb usb4-port1: attempt power cycle [ 1314.852446][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xae2c instead [ 1314.908491][T18122] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1314.931803][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 1314.960306][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 1314.977794][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x5494 instead [ 1315.011781][T18122] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1315.018705][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xae2c instead [ 1315.059842][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 1315.128512][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 1315.199444][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x5494 instead [ 1315.294618][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xae2c instead [ 1315.307705][T18213] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1315.389557][T18122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1315.427809][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 1315.427837][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 1315.481197][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1315.493478][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1315.526996][T18122] 8021q: adding VLAN 0 to HW filter on device team0 [ 1315.553823][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x5494 instead [ 1315.596772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1315.643227][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1315.656167][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xae2c instead [ 1315.679502][T18213] usb 5-1: not running at top speed; connect to a high speed hub [ 1315.706950][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.708638][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 1315.714201][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1315.783272][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 1315.817710][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x5494 instead [ 1315.861203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1315.958049][T18213] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1315.967291][T18213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.086930][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xae2c instead [ 1316.241225][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 1316.384638][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 1316.546419][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x5494 instead [ 1316.638050][T11377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1316.636202][T18213] usb 5-1: Product: syz [ 1316.650844][T18213] usb 5-1: Manufacturer: syz [ 1316.655478][T18213] usb 5-1: SerialNumber: syz [ 1316.677201][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xae2c instead [ 1316.688874][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 1316.699386][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 1316.709788][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x5494 instead [ 1316.720491][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xae2c instead [ 1316.731323][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 1316.741788][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 1316.752518][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x5494 instead [ 1316.763143][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xae2c instead [ 1316.773915][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 1316.786902][T18213] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 1316.795790][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 1316.815210][T11377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1316.824278][T18213] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1316.838311][T11377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.845441][T11377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1316.861394][T18213] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1316.869670][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x5494 instead [ 1316.900700][T18213] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1316.916517][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xae2c instead [ 1316.948143][T18213] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1316.956797][T11377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1317.005085][T11377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1317.018310][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 1317.085283][ C0] net_ratelimit: 30 callbacks suppressed [ 1317.109038][T11377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1317.144518][T18412] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1317.158063][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 1317.184803][T11377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1317.256983][T11377] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1317.268922][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x5494 instead [ 1317.328574][T11377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1317.341270][T14067] usb 5-1: USB disconnect, device number 18 [ 1317.362400][T11377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1317.369589][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xae2c instead [ 1317.392094][T14067] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1317.417109][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 1317.450604][T11377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1317.467704][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 1317.488192][T14067] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1317.508649][T18420] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1317.517656][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x5494 instead [ 1317.567725][ T1110] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1317.585506][T11377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1317.670831][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xae2c instead [ 1317.713951][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 1317.728884][T18122] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1317.749303][T14067] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1317.776846][T11377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1317.776929][T14067] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1317.807885][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 1317.827885][ T1110] usb 3-1: Using ep0 maxpacket: 32 [ 1317.968343][ T1110] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 1318.004548][ T1110] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1318.120428][ T1110] usb 3-1: config 0 has no interface number 0 [ 1318.127469][ T1110] usb 3-1: config 0 interface 239 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1318.273978][ T1110] usb 3-1: config 0 interface 239 has no altsetting 0 [ 1318.568824][ T1110] usb 3-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1318.596274][T11377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1318.604991][T14067] keyspan 5-1:1.0: device disconnected [ 1318.611349][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x5494 instead [ 1318.637758][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xae2c instead [ 1318.648519][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.678678][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 1318.695454][ T1110] usb 3-1: Product: syz [ 1318.717661][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 1318.730164][ T1110] usb 3-1: Manufacturer: syz [ 1318.751199][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x5494 instead [ 1318.755919][ T1110] usb 3-1: SerialNumber: syz [ 1318.797126][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xae2c instead [ 1318.833495][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 1318.844107][ T1110] usb 3-1: config 0 descriptor?? [ 1318.893579][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 1318.923581][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x5494 instead [ 1318.997673][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xae2c instead [ 1319.089465][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 1319.157867][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 1319.199569][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x5494 instead [ 1319.220585][T18439] loop4: detected capacity change from 0 to 512 [ 1319.257758][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xae2c instead [ 1319.315220][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 1319.338384][T18444] loop3: detected capacity change from 0 to 512 [ 1319.361566][T18439] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 1319.378945][T11377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1319.386621][T11377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1319.394402][T18439] System zones: 1-12 [ 1319.400041][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 1319.428695][T18439] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.3522: missing EA_INODE flag [ 1319.457761][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x5494 instead [ 1319.494619][T18444] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1319.528962][T18122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1319.539740][T18444] ext4 filesystem being mounted at /23/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1319.550304][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xae2c instead [ 1319.562783][T18439] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.3522: error while reading EA inode 12 err=-117 [ 1319.615868][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 1319.670979][T18439] EXT4-fs (loop4): 1 orphan inode deleted [ 1319.676804][T18439] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 1319.687954][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 1319.714524][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x5494 instead [ 1319.752765][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xae2c instead [ 1319.792808][T18455] EXT4-fs error (device loop3): __ext4_new_inode:1084: comm syz.3.3523: reserved inode found cleared - inode=1 [ 1319.823224][T18444] EXT4-fs error (device loop3): __ext4_new_inode:1084: comm syz.3.3523: reserved inode found cleared - inode=1 [ 1319.863077][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 1319.878206][T18439] fscrypt (loop4, inode 18): Reserved bits set in encryption policy [ 1319.897939][ T1110] usb 3-1: USB disconnect, device number 27 [ 1319.927745][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 1319.939230][T11377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1319.962161][T11377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1319.982604][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x5494 instead [ 1320.020692][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xae2c instead [ 1320.057794][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 1320.107435][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 1320.126320][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1320.142283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1320.169058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1320.189327][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x5494 instead [ 1320.200709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1320.234915][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xae2c instead [ 1320.263990][T18122] device veth0_vlan entered promiscuous mode [ 1320.287011][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 1320.310984][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 1320.368443][T18122] device veth1_vlan entered promiscuous mode [ 1320.400719][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1320.427865][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x5494 instead [ 1320.472540][T18465] loop4: detected capacity change from 0 to 4096 [ 1320.504119][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1320.509020][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xae2c instead [ 1320.551074][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1320.561542][T18465] ntfs: (device loop4): parse_options(): Invalid fmask option argument: 0000000000000000017T777 [ 1320.569422][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 1320.613574][T18122] device veth0_macvtap entered promiscuous mode [ 1320.649422][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 1320.661864][T18122] device veth1_macvtap entered promiscuous mode [ 1320.692674][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x5494 instead [ 1320.743517][T18122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1320.760647][T18345] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xae2c instead [ 1320.797635][T18122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.797734][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1320.808210][T18345] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1320.855151][T18122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1320.893449][T18345] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1320.914057][T18122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.940596][T18474] tipc: Failed to remove unknown binding: 66,0,0/0:2228614362/2228614364 [ 1320.958542][T18474] tipc: Failed to remove unknown binding: 66,0,0/0:2228614362/2228614363 [ 1320.978155][T18122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1320.998715][T18474] tipc: Failed to remove unknown binding: 66,0,0/0:2228614362/2228614364 [ 1321.014314][T18185] usb 1-1: USB disconnect, device number 12 [ 1321.037965][T18122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.057822][T18474] tipc: Failed to remove unknown binding: 66,0,0/0:2228614362/2228614363 [ 1321.087357][T18122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1321.127708][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 1321.131945][T18122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.181714][T18122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1321.204443][T18465] loop4: detected capacity change from 0 to 4096 [ 1321.236332][T18122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1321.248283][ T7] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 1321.256824][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.279614][ T7] usb 4-1: config 0 has no interface number 0 [ 1321.285805][ T7] usb 4-1: config 0 interface 239 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1321.307646][T18122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.332596][T18122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1321.347723][ T7] usb 4-1: config 0 interface 239 has no altsetting 0 [ 1321.357713][T18122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.417920][T18122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1321.436970][T18489] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3529'. [ 1321.449692][T18122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.467659][T18122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1321.497871][T18122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.526270][T18122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1321.543825][T18465] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1321.558253][ T7] usb 4-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1321.569023][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1321.577390][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1321.599071][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.631819][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1321.647697][ T7] usb 4-1: Product: syz [ 1321.662775][ T7] usb 4-1: Manufacturer: syz [ 1321.667545][ T7] usb 4-1: SerialNumber: syz [ 1321.688638][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1321.746929][T18465] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1321.756454][ T7] usb 4-1: config 0 descriptor?? [ 1321.763039][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1321.783563][T18465] ntfs3: loop4: Failed to load $Extend. [ 1321.799285][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1321.871107][T18122] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.912102][T18122] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.937714][T18122] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.979263][T18122] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.117662][ C0] net_ratelimit: 28 callbacks suppressed [ 1322.231701][ T7] usb 4-1: USB disconnect, device number 5 [ 1322.381756][ T4396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1322.395934][ T4396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1322.436682][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1322.446444][ T4261] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1322.563171][ T4396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1322.581569][ T4396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1322.607139][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1322.747700][ T4261] usb 3-1: Using ep0 maxpacket: 32 [ 1322.888119][ T4261] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 1322.896802][ T4261] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1322.959429][ T4261] usb 3-1: config 0 has no interface number 0 [ 1322.965603][ T4261] usb 3-1: config 0 interface 239 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1323.009036][T18525] FAULT_INJECTION: forcing a failure. [ 1323.009036][T18525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1323.067471][ T4261] usb 3-1: config 0 interface 239 has no altsetting 0 [ 1323.081842][T18525] CPU: 0 PID: 18525 Comm: syz.1.3537 Not tainted syzkaller #0 [ 1323.089494][T18525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1323.099588][T18525] Call Trace: [ 1323.102896][T18525] [ 1323.105860][T18525] dump_stack_lvl+0x188/0x250 [ 1323.110597][T18525] ? show_regs_print_info+0x20/0x20 [ 1323.115846][T18525] ? load_image+0x410/0x410 [ 1323.120388][T18525] ? __lock_acquire+0x7d40/0x7d40 [ 1323.125481][T18525] ? aa_file_perm+0x38b/0xe80 [ 1323.130202][T18525] should_fail+0x383/0x4b0 [ 1323.134660][T18525] _copy_from_user+0x2e/0x170 [ 1323.139457][T18525] vga_arb_write+0x118/0x1f00 [ 1323.144176][T18525] ? vga_arb_read+0x490/0x490 [ 1323.148893][T18525] ? common_file_perm+0x171/0x1c0 [ 1323.153952][T18525] ? fsnotify_perm+0x5d/0x560 [ 1323.158663][T18525] ? security_file_permission+0x75/0xa0 [ 1323.164272][T18525] ? vga_arb_read+0x490/0x490 [ 1323.168991][T18525] vfs_write+0x304/0xd70 [ 1323.173290][T18525] ? file_end_write+0x250/0x250 [ 1323.178201][T18525] ? __fget_files+0x402/0x470 [ 1323.182937][T18525] ? __fdget_pos+0x1e2/0x370 [ 1323.187611][T18525] ? ksys_write+0x70/0x260 [ 1323.192163][T18525] ksys_write+0x153/0x260 [ 1323.196530][T18525] ? __ia32_sys_read+0x80/0x80 [ 1323.201329][T18525] ? lockdep_hardirqs_on+0x94/0x140 [ 1323.206568][T18525] do_syscall_64+0x4c/0xa0 [ 1323.211022][T18525] ? clear_bhb_loop+0x30/0x80 [ 1323.215736][T18525] ? clear_bhb_loop+0x30/0x80 [ 1323.220452][T18525] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1323.226386][T18525] RIP: 0033:0x7f12ef679559 [ 1323.230823][T18525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1323.250547][T18525] RSP: 002b:00007f12ed8d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1323.258988][T18525] RAX: ffffffffffffffda RBX: 00007f12ef900fa0 RCX: 00007f12ef679559 [ 1323.266984][T18525] RDX: 0000000000000009 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1323.274976][T18525] RBP: 00007f12ed8d1090 R08: 0000000000000000 R09: 0000000000000000 [ 1323.282973][T18525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1323.290961][T18525] R13: 00007f12ef901038 R14: 00007f12ef900fa0 R15: 00007ffebda576f8 [ 1323.298964][T18525] [ 1323.418029][ T4261] usb 3-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1323.439755][ T4261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.480224][ T4261] usb 3-1: Product: syz [ 1323.484465][ T4261] usb 3-1: Manufacturer: syz [ 1323.507731][ T4261] usb 3-1: SerialNumber: syz [ 1323.515246][ T4261] usb 3-1: config 0 descriptor?? [ 1323.640957][T18535] FAULT_INJECTION: forcing a failure. [ 1323.640957][T18535] name failslab, interval 1, probability 0, space 0, times 0 [ 1323.662765][T18535] CPU: 1 PID: 18535 Comm: syz.1.3539 Not tainted syzkaller #0 [ 1323.670327][T18535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1323.680402][T18535] Call Trace: [ 1323.680434][T18535] [ 1323.680443][T18535] dump_stack_lvl+0x188/0x250 [ 1323.680474][T18535] ? show_regs_print_info+0x20/0x20 [ 1323.680498][T18535] ? load_image+0x410/0x410 [ 1323.686762][T18535] ? __might_sleep+0xf0/0xf0 [ 1323.696649][T18535] ? __lock_acquire+0x7d40/0x7d40 [ 1323.705863][T18535] ? mark_lock+0x94/0x320 [ 1323.715264][T18535] should_fail+0x383/0x4b0 [ 1323.715303][T18535] should_failslab+0x5/0x20 [ 1323.724246][T18535] slab_pre_alloc_hook+0x51/0xc0 [ 1323.729220][T18535] __kmalloc+0x6b/0x340 [ 1323.729242][T18535] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 1323.739151][T18535] tomoyo_realpath_from_path+0xed/0x5e0 [ 1323.744746][T18535] tomoyo_path_number_perm+0x251/0x6b0 [ 1323.750240][T18535] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1323.750269][T18535] ? ksys_write+0x1d4/0x260 [ 1323.760329][T18535] security_file_ioctl+0x6c/0xa0 [ 1323.765346][T18535] __se_sys_ioctl+0x48/0x170 [ 1323.769981][T18535] do_syscall_64+0x4c/0xa0 [ 1323.774436][T18535] ? clear_bhb_loop+0x30/0x80 [ 1323.779155][T18535] ? clear_bhb_loop+0x30/0x80 [ 1323.783871][T18535] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1323.789804][T18535] RIP: 0033:0x7f12ef679559 [ 1323.794252][T18535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1323.813897][T18535] RSP: 002b:00007f12ed8d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1323.822377][T18535] RAX: ffffffffffffffda RBX: 00007f12ef900fa0 RCX: 00007f12ef679559 [ 1323.830384][T18535] RDX: 0000200000000b40 RSI: 0000000040186f40 RDI: 0000000000000003 [ 1323.838402][T18535] RBP: 00007f12ed8d1090 R08: 0000000000000000 R09: 0000000000000000 [ 1323.846421][T18535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1323.854430][T18535] R13: 00007f12ef901038 R14: 00007f12ef900fa0 R15: 00007ffebda576f8 [ 1323.862462][T18535] [ 1323.912081][T18501] loop0: detected capacity change from 0 to 40427 [ 1324.001613][T18185] usb 3-1: USB disconnect, device number 28 [ 1324.016343][T18535] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1324.023644][T18535] ubi: mtd0 is already attached to ubi16 [ 1324.143476][T18501] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 1324.157808][T18501] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1324.197342][T18501] F2FS-fs (loop0): build fault injection attr: rate: 2, type: 0x1ffff [ 1324.261691][T18501] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x1f8 [ 1324.302894][T18501] F2FS-fs (loop0): invalid crc value [ 1324.343579][T18547] loop1: detected capacity change from 0 to 512 [ 1324.354286][T18501] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1324.496852][T18547] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1324.547854][T18547] ext4 filesystem being mounted at /3/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 1324.619432][T18501] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1324.626536][T18501] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1324.722550][T18556] rxe_eth0 speed is unknown, defaulting to 1000 [ 1324.776583][T18531] loop3: detected capacity change from 0 to 32768 [ 1324.810381][ T4396] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.905795][T18561] loop2: detected capacity change from 0 to 16 [ 1325.016522][ T4396] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.041941][T18531] ea_get: invalid extended attribute [ 1325.070822][T18561] erofs: (device loop2): mounted with root inode @ nid 36. [ 1325.080494][T18531] ffff888059273170: 04 00 00 00 .... [ 1325.199080][ T4396] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.326873][ T4396] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.386240][T13728] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1325.568055][T18214] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1325.628910][T18565] loop0: detected capacity change from 0 to 128 [ 1325.647040][T13728] usb 2-1: Using ep0 maxpacket: 32 [ 1325.731608][T18568] loop3: detected capacity change from 0 to 512 [ 1325.797999][T13728] usb 2-1: config 4 has an invalid interface number: 142 but max is 0 [ 1325.806236][T13728] usb 2-1: config 4 has no interface number 0 [ 1325.883517][T18568] EXT4-fs error (device loop3): __ext4_iget:4919: inode #11: block 1: comm syz.3.3546: invalid block [ 1325.924323][T13728] usb 2-1: config 4 interface 142 has no altsetting 0 [ 1325.951879][T18568] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.3546: couldn't read orphan inode 11 (err -117) [ 1325.997957][T18214] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.019231][T18214] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1326.047065][T18556] chnl_net:caif_netlink_parms(): no params data found [ 1326.054855][T18568] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1326.138118][T13728] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a0c, bcdDevice=8b.14 [ 1326.176774][T13728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.185352][T18214] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice=67.13 [ 1326.194871][T18214] usb 3-1: New USB device strings: Mfr=40, Product=175, SerialNumber=0 [ 1326.209975][T13728] usb 2-1: Product: syz [ 1326.210644][T18214] usb 3-1: Product: syz [ 1326.214191][T13728] usb 2-1: Manufacturer: syz [ 1326.214210][T13728] usb 2-1: SerialNumber: syz [ 1326.227850][T18214] usb 3-1: Manufacturer: syz [ 1326.254262][T18214] usb 3-1: config 0 descriptor?? [ 1326.433026][T18556] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.446106][T18556] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.455215][T18556] device bridge_slave_0 entered promiscuous mode [ 1326.464529][T18556] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.472460][T18556] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.482374][T18556] device bridge_slave_1 entered promiscuous mode [ 1326.588636][T13728] usb 2-1: USB disconnect, device number 2 [ 1326.597204][T18561] loop2: detected capacity change from 0 to 512 [ 1326.678023][ T9580] Bluetooth: hci1: command 0x0409 tx timeout [ 1326.761374][T18556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1326.810094][T18561] EXT4-fs (loop2): 1 orphan inode deleted [ 1326.819350][T18602] loop3: detected capacity change from 0 to 512 [ 1326.858021][T18561] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 1326.870347][T18561] ext4 filesystem being mounted at /641/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1326.910795][T18556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1326.934134][T18602] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1326.979577][T18556] team0: Port device team_slave_0 added [ 1326.996347][T18606] loop0: detected capacity change from 0 to 512 [ 1327.027229][T18556] team0: Port device team_slave_1 added [ 1327.186960][T18561] udc-core: couldn't find an available UDC or it's busy [ 1327.205068][T18606] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1327.238341][T18561] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1327.343401][T13728] usb 3-1: USB disconnect, device number 29 [ 1327.421272][T18556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1327.440360][T18556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1327.498691][T18622] loop1: detected capacity change from 0 to 22 [ 1327.509415][T18556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1327.529193][T18556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1327.536333][T18556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1327.562997][ C0] net_ratelimit: 81 callbacks suppressed [ 1327.570298][ T9580] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1327.587496][T18622] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1327.673745][T18622] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1327.701551][T18556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1327.818227][ T9580] usb 4-1: Using ep0 maxpacket: 32 [ 1327.939725][ T9580] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 1327.974198][ T9580] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1328.126430][ T9580] usb 4-1: config 0 has no interface number 0 [ 1328.190571][ T9580] usb 4-1: config 0 interface 239 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1328.358785][ T9580] usb 4-1: config 0 interface 239 has no altsetting 0 [ 1328.698098][ T9580] usb 4-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1328.714875][ T9580] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.741742][ T9580] usb 4-1: Product: syz [ 1328.750183][ T9580] usb 4-1: Manufacturer: syz [ 1328.750208][ T9580] usb 4-1: SerialNumber: syz [ 1328.767826][T18213] Bluetooth: hci1: command 0x041b tx timeout [ 1328.778441][ T9580] usb 4-1: config 0 descriptor?? [ 1328.971777][T18636] loop1: detected capacity change from 0 to 512 [ 1329.038655][T18636] FAT-fs (loop1): Unrecognized mount option "xœìÝ=k[" or missing value [ 1329.302430][T18556] device hsr_slave_0 entered promiscuous mode [ 1329.379278][T18556] device hsr_slave_1 entered promiscuous mode [ 1329.483063][T18556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1329.494117][T18556] Cannot create hsr debugfs directory [ 1329.605002][ T9580] usb 4-1: USB disconnect, device number 6 [ 1329.695763][T18655] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3560'. [ 1330.880198][T18214] Bluetooth: hci1: command 0x040f tx timeout [ 1330.959296][ T4396] device hsr_slave_0 left promiscuous mode [ 1331.037234][T18688] binder: 18678:18688 ioctl c00c620f 0 returned -14 [ 1331.100718][T18685] loop0: detected capacity change from 0 to 4096 [ 1331.210936][ T4396] device hsr_slave_1 left promiscuous mode [ 1331.222359][T18687] dns_resolver: Unsupported content type (254) [ 1331.359348][T18685] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 1331.421158][ T4396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1331.617771][ T4396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1331.704405][ T4396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1331.718201][ T4396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1331.747386][ T4396] device bridge_slave_1 left promiscuous mode [ 1331.766082][ T4396] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.799926][ T4396] device bridge_slave_0 left promiscuous mode [ 1331.823492][ T4396] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.860783][ T4396] device veth1_macvtap left promiscuous mode [ 1331.868403][ T4396] device veth0_macvtap left promiscuous mode [ 1331.877795][ T4396] device veth1_vlan left promiscuous mode [ 1331.885208][ T4396] device veth0_vlan left promiscuous mode [ 1332.097028][T18703] Context (ID=0x0) not attached to queue pair (handle=0x0:0x2) [ 1332.757710][ C0] net_ratelimit: 70 callbacks suppressed [ 1332.895330][ T4396] team0 (unregistering): Port device team_slave_1 removed [ 1332.929127][T18213] Bluetooth: hci1: command 0x0419 tx timeout [ 1332.949021][ T4396] team0 (unregistering): Port device team_slave_0 removed [ 1332.995866][ T4396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1333.048533][ T4396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1333.447004][ T4396] bond0 (unregistering): Released all slaves [ 1335.327947][T18214] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1335.666730][T18556] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1335.719528][T18214] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.737757][T18214] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1335.746742][T18214] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1335.762296][T18214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.813178][T18770] smpboot: CPU 1 is now offline [ 1335.846065][T18556] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1335.889021][T18214] usb 2-1: config 0 descriptor?? [ 1336.017303][T18556] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1336.116845][T18556] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1336.798138][T18556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1336.948107][T15640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1336.999344][T15640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1337.086438][T18556] 8021q: adding VLAN 0 to HW filter on device team0 [ 1337.170681][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1337.229552][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1337.300966][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 1337.308285][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1337.487021][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1337.549111][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1337.646032][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1337.725910][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 1337.733141][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1337.797726][ C0] net_ratelimit: 41 callbacks suppressed [ 1337.887424][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1338.068857][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1338.136456][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1338.258380][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1338.278116][T18214] Bluetooth: Can't get version to change to load ram patch err [ 1338.285711][T18214] Bluetooth: Loading sysconfig file failed [ 1338.378810][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1338.413624][T18214] ath3k: probe of 2-1:0.0 failed with error -71 [ 1338.468227][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1338.498084][T18214] usb 2-1: USB disconnect, device number 3 [ 1338.551381][T18836] x86: Booting SMP configuration: [ 1338.585336][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1338.624060][T18836] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1338.683672][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1338.704811][ T0] kvm-clock: cpu 1, msr ff0a041, secondary cpu clock [ 1338.733142][ T18] kvm-guest: stealtime: cpu 1, msr b8f27440 [ 1338.784243][T18556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1338.862710][T18556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1338.908796][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1338.947217][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1338.996409][T18847] smpboot: CPU 1 is now offline [ 1339.003123][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1340.088834][T18556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1340.119019][T18900] PM: suspend entry (deep) [ 1340.194410][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1340.261608][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1340.500200][T18900] Filesystems sync: 0.311 seconds [ 1340.511819][T18912] x86: Booting SMP configuration: [ 1340.566512][T18912] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1340.650585][ T0] kvm-clock: cpu 1, msr ff0a041, secondary cpu clock [ 1340.670078][ T18] kvm-guest: stealtime: cpu 1, msr b8f27440 [ 1340.688010][T18927] PM: suspend entry (deep) [ 1340.742149][T18927] PM: suspend exit [ 1340.775579][T18921] smpboot: CPU 1 is now offline [ 1341.368625][T18948] PM: suspend entry (s2idle) [ 1341.423556][T18948] PM: Unsupported test mode for suspend to idle, please choose none/freezer/devices/platform. [ 1341.517781][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1341.551160][T18948] PM: suspend exit [ 1341.588719][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1341.722162][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1341.775497][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1341.850710][T18556] device veth0_vlan entered promiscuous mode [ 1341.901143][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1341.930453][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1342.015581][T18556] device veth1_vlan entered promiscuous mode [ 1342.229163][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1342.260234][T18968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3638'. [ 1342.285744][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1342.321254][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1342.370571][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1342.416601][T18556] device veth0_macvtap entered promiscuous mode [ 1342.476685][T18556] device veth1_macvtap entered promiscuous mode [ 1342.531474][T15637] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1342.568795][T15637] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1342.665936][T18556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.734736][T18556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.779409][T18556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.807105][T18556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.855255][T18556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.901546][T18556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.918166][ T9580] Bluetooth: hci4: command 0x0c1a tx timeout [ 1342.955821][T18556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.997785][T18900] Bluetooth: hci4: Timed out waiting for suspend events [ 1343.025536][T18556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.037693][T18900] Bluetooth: hci4: Suspend timeout bit: 4 [ 1343.045393][T18900] Bluetooth: hci4: Suspend timeout bit: 6 [ 1343.077730][ C0] net_ratelimit: 40 callbacks suppressed [ 1343.095152][T18556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1343.109654][T18900] Bluetooth: hci4: Suspend notifier action (3) failed: -110 [ 1343.148358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1343.201823][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1343.265800][T18556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.306110][T18556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.344228][T18556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.371175][T18556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.401524][T18556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.440409][T18556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.465795][T18556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.501065][T18556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.532360][T18556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1343.568140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1343.577317][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1343.633679][T18556] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.672863][T18556] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.696145][T18556] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.721128][T18556] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.945158][T15637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.991526][T15637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1344.046797][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1344.092290][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1344.112218][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1344.143763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1344.998615][ T9580] Bluetooth: hci4: command 0x0406 tx timeout [ 1345.238005][T13728] Bluetooth: hci5: command 0x0c1a tx timeout [ 1345.244141][T18900] Bluetooth: hci5: Timed out waiting for suspend events [ 1345.261398][T18900] Bluetooth: hci5: Suspend timeout bit: 4 [ 1345.272965][T18900] Bluetooth: hci5: Suspend timeout bit: 6 [ 1345.279822][T18900] Bluetooth: hci5: Suspend notifier action (3) failed: -110 [ 1347.318153][T15517] Bluetooth: hci2: command 0x0c1a tx timeout [ 1347.325059][T18900] Bluetooth: hci2: Timed out waiting for suspend events [ 1347.336004][T15517] Bluetooth: hci5: command 0x0406 tx timeout [ 1347.342621][T18900] Bluetooth: hci2: Suspend timeout bit: 4 [ 1347.352747][T18900] Bluetooth: hci2: Suspend timeout bit: 6 [ 1347.365851][T18900] Bluetooth: hci2: Suspend notifier action (3) failed: -110 [ 1348.437690][ C0] net_ratelimit: 88 callbacks suppressed [ 1349.397941][T15517] Bluetooth: hci1: command 0x0c1a tx timeout [ 1349.404834][T18900] Bluetooth: hci1: Timed out waiting for suspend events [ 1349.416926][T15517] Bluetooth: hci5: command 0x0406 tx timeout [ 1349.423017][T18900] Bluetooth: hci1: Suspend timeout bit: 4 [ 1349.432789][T15517] Bluetooth: hci2: command 0x0406 tx timeout [ 1349.439077][T18900] Bluetooth: hci1: Suspend timeout bit: 6 [ 1349.444854][T18900] Bluetooth: hci1: Suspend notifier action (3) failed: -110 [ 1349.484439][T18900] Freezing user space processes ... [ 1349.594501][T18900] [ 1349.596870][T18900] Freezing of tasks failed after 0.110 seconds (1 tasks refusing to freeze, wq_busy=0): [ 1349.611395][T18900] task:syz.1.3644 state:D stack:29040 pid:19003 ppid: 18122 flags:0x00004004 [ 1349.621851][T18900] Call Trace: [ 1349.625167][T18900] [ 1349.628367][T18900] __schedule+0x11c3/0x4350 [ 1349.632904][T18900] ? rcu_lock_acquire+0x30/0x30 [ 1349.637795][T18900] ? __mutex_lock_common+0xdf0/0x2400 [ 1349.643175][T18900] ? release_firmware_map_entry+0x190/0x190 [ 1349.649106][T18900] ? __lock_acquire+0x7d40/0x7d40 [ 1349.654149][T18900] ? __mutex_trylock_common+0x86/0x260 [ 1349.659649][T18900] ? rcu_lock_release+0x20/0x20 [ 1349.664512][T18900] schedule+0x11b/0x1e0 [ 1349.668707][T18900] schedule_preempt_disabled+0xf/0x20 [ 1349.674092][T18900] __mutex_lock_common+0xdf5/0x2400 [ 1349.679329][T18900] ? __fdget_pos+0x2bf/0x370 [ 1349.683927][T18900] ? mutex_lock_io_nested+0x60/0x60 [ 1349.689264][T18900] mutex_lock_nested+0x17/0x20 [ 1349.694032][T18900] __fdget_pos+0x2bf/0x370 [ 1349.698477][T18900] ? ksys_write+0x70/0x260 [ 1349.702920][T18900] ksys_write+0x77/0x260 [ 1349.707168][T18900] ? lock_chain_count+0x20/0x20 [ 1349.712076][T18900] ? __ia32_sys_read+0x80/0x80 [ 1349.716852][T18900] ? lockdep_hardirqs_on+0x94/0x140 [ 1349.722174][T18900] do_syscall_64+0x4c/0xa0 [ 1349.726617][T18900] ? clear_bhb_loop+0x30/0x80 [ 1349.731325][T18900] ? clear_bhb_loop+0x30/0x80 [ 1349.736010][T18900] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1349.741950][T18900] RIP: 0033:0x7f12ef679559 [ 1349.746371][T18900] RSP: 002b:00007f12ed88f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1349.754815][T18900] RAX: ffffffffffffffda RBX: 00007f12ef901180 RCX: 00007f12ef679559 [ 1349.762812][T18900] RDX: 0000000000000004 RSI: 0000200000000d00 RDI: 0000000000000006 [ 1349.770816][T18900] RBP: 00007f12ef7108b0 R08: 0000000000000000 R09: 0000000000000000 [ 1349.778820][T18900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1349.786818][T18900] R13: 00007f12ef901218 R14: 00007f12ef901180 R15: 00007ffebda576f8 [ 1349.794838][T18900] [ 1349.812567][T18900] [ 1349.814991][T18900] OOM killer enabled. [ 1349.823818][T18900] Restarting tasks ... [ 1349.850383][T18900] done. [ 1349.874909][T19000] PM: hibernation: hibernation entry [ 1349.890940][T18900] PM: suspend exit [ 1350.114497][T19000] Filesystems sync: 0.179 seconds [ 1350.144313][T19000] Freezing user space processes ... [ 1350.254068][T19000] [ 1350.256453][T19000] Freezing of tasks failed after 0.109 seconds (2 tasks refusing to freeze, wq_busy=0): [ 1350.301590][T19000] task:syz-executor state:D stack:21104 pid: 4194 ppid: 1 flags:0x00004006 [ 1350.311081][T19000] Call Trace: [ 1350.314373][T19000] [ 1350.317307][T19000] __schedule+0x11c3/0x4350 [ 1350.321960][T19000] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1350.328040][T19000] ? lock_chain_count+0x20/0x20 [ 1350.333502][T19000] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1350.339647][T19000] ? lockdep_hardirqs_on+0x94/0x140 [ 1350.344867][T19000] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1350.350809][T19000] ? release_firmware_map_entry+0x190/0x190 [ 1350.356709][T19000] ? queue_work_on+0x196/0x1f0 [ 1350.361608][T19000] ? __might_sleep+0xf0/0xf0 [ 1350.366213][T19000] ? wq_worker_last_func+0x40/0x40 [ 1350.371506][T19000] schedule+0x11b/0x1e0 [ 1350.375687][T19000] synchronize_rcu_expedited+0x5c1/0x750 [ 1350.381462][T19000] ? synchronize_rcu+0x1e0/0x1e0 [ 1350.386417][T19000] ? fib6_run_gc+0x1e1/0x2a0 [ 1350.391059][T19000] ? rcu_exp_sel_wait_wake+0x1d30/0x1d30 [ 1350.396724][T19000] ? __might_sleep+0xf0/0xf0 [ 1350.401355][T19000] ? init_wait_entry+0xd0/0xd0 [ 1350.406206][T19000] unregister_netdevice_many+0xa0d/0x1a40 [ 1350.412030][T19000] ? alloc_netdev_mqs+0xc40/0xc40 [ 1350.417074][T19000] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1350.423214][T19000] ? lock_chain_count+0x20/0x20 [ 1350.428130][T19000] ? __queue_work+0x9a7/0xc80 [ 1350.432825][T19000] ? queue_delayed_work_on+0x110/0x1f0 [ 1350.438326][T19000] ? lockdep_hardirqs_on+0x94/0x140 [ 1350.443539][T19000] unregister_netdevice_queue+0x2e1/0x320 [ 1350.449307][T19000] ? delayed_work_timer_fn+0x80/0x80 [ 1350.454605][T19000] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1350.460546][T19000] ? list_netdevice+0x460/0x460 [ 1350.465406][T19000] ? linkwatch_urgent_event+0x31d/0x430 [ 1350.471111][T19000] ? linkwatch_fire_event+0x2b7/0x370 [ 1350.476504][T19000] __tun_detach+0xdb7/0x1580 [ 1350.481252][T19000] tun_chr_close+0x109/0x1b0 [ 1350.485853][T19000] ? tun_chr_open+0x4d0/0x4d0 [ 1350.490596][T19000] __fput+0x212/0x8c0 [ 1350.494606][T19000] task_work_run+0x125/0x1a0 [ 1350.499244][T19000] do_exit+0x635/0x2110 [ 1350.503414][T19000] ? put_task_struct+0x80/0x80 [ 1350.508235][T19000] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1350.514231][T19000] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1350.519323][T19000] do_group_exit+0x12c/0x2f0 [ 1350.523925][T19000] ? lockdep_hardirqs_on+0x94/0x140 [ 1350.529176][T19000] get_signal+0x7eb/0x12e0 [ 1350.533634][T19000] arch_do_signal_or_restart+0xe6/0x12a0 [ 1350.539399][T19000] ? kernel_read+0x1e0/0x1e0 [ 1350.544066][T19000] ? get_sigframe_size+0x10/0x10 [ 1350.549101][T19000] ? ksys_read+0x1f4/0x260 [ 1350.553548][T19000] ? exit_to_user_mode_loop+0x3b/0x130 [ 1350.559173][T19000] exit_to_user_mode_loop+0x9e/0x130 [ 1350.564613][T19000] exit_to_user_mode_prepare+0xee/0x180 [ 1350.570327][T19000] syscall_exit_to_user_mode+0x16/0x40 [ 1350.575939][T19000] do_syscall_64+0x58/0xa0 [ 1350.580454][T19000] ? clear_bhb_loop+0x30/0x80 [ 1350.585154][T19000] ? clear_bhb_loop+0x30/0x80 [ 1350.589892][T19000] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1350.595836][T19000] RIP: 0033:0x7f9ea05d2d8e [ 1350.600314][T19000] RSP: 002b:00007fffc1232d98 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1350.608960][T19000] RAX: fffffffffffffe00 RBX: 000055559298b500 RCX: 00007f9ea05d2d8e [ 1350.616958][T19000] RDX: 0000000000000030 RSI: 00007fffc1232e90 RDI: 00000000000000f9 [ 1350.625066][T19000] RBP: 00007fffc1232e3c R08: 0000000000000000 R09: 0000000000000000 [ 1350.633085][T19000] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000028d [ 1350.641109][T19000] R13: 000055559299ea00 R14: 00000000001477d6 R15: 00007fffc1232e90 [ 1350.649138][T19000] [ 1350.652228][T19000] task:syz.1.3644 state:D stack:29040 pid:19003 ppid: 18122 flags:0x00004004 [ 1350.661481][T19000] Call Trace: [ 1350.664906][T19000] [ 1350.667886][T19000] __schedule+0x11c3/0x4350 [ 1350.672419][T19000] ? rcu_lock_acquire+0x30/0x30 [ 1350.677278][T19000] ? __mutex_lock_common+0xdf0/0x2400 [ 1350.682690][T19000] ? release_firmware_map_entry+0x190/0x190 [ 1350.688627][T19000] ? __lock_acquire+0x7d40/0x7d40 [ 1350.693665][T19000] ? __mutex_trylock_common+0x86/0x260 [ 1350.699181][T19000] ? rcu_lock_release+0x20/0x20 [ 1350.704057][T19000] schedule+0x11b/0x1e0 [ 1350.708257][T19000] schedule_preempt_disabled+0xf/0x20 [ 1350.713644][T19000] __mutex_lock_common+0xdf5/0x2400 [ 1350.718892][T19000] ? __fdget_pos+0x2bf/0x370 [ 1350.723499][T19000] ? mutex_lock_io_nested+0x60/0x60 [ 1350.728746][T19000] mutex_lock_nested+0x17/0x20 [ 1350.733517][T19000] __fdget_pos+0x2bf/0x370 [ 1350.737965][T19000] ? ksys_write+0x70/0x260 [ 1350.742391][T19000] ksys_write+0x77/0x260 [ 1350.746641][T19000] ? lock_chain_count+0x20/0x20 [ 1350.751530][T19000] ? __ia32_sys_read+0x80/0x80 [ 1350.756307][T19000] ? lockdep_hardirqs_on+0x94/0x140 [ 1350.761547][T19000] do_syscall_64+0x4c/0xa0 [ 1350.766043][T19000] ? clear_bhb_loop+0x30/0x80 [ 1350.770835][T19000] ? clear_bhb_loop+0x30/0x80 [ 1350.775548][T19000] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1350.781500][T19000] RIP: 0033:0x7f12ef679559 [ 1350.785926][T19000] RSP: 002b:00007f12ed88f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1350.794380][T19000] RAX: ffffffffffffffda RBX: 00007f12ef901180 RCX: 00007f12ef679559 [ 1350.802385][T19000] RDX: 0000000000000004 RSI: 0000200000000d00 RDI: 0000000000000006 [ 1350.810388][T19000] RBP: 00007f12ef7108b0 R08: 0000000000000000 R09: 0000000000000000 [ 1350.818432][T19000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1350.826421][T19000] R13: 00007f12ef901218 R14: 00007f12ef901180 R15: 00007ffebda576f8 [ 1350.834462][T19000] [ 1350.881596][T19000] [ 1350.883967][T19000] OOM killer enabled. [ 1350.889166][T19000] Restarting tasks ... [ 1350.935005][T19000] done. [ 1350.971149][T19000] PM: hibernation: hibernation exit [ 1351.017255][ T4396] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.045890][T19003] PM: suspend entry (deep) [ 1351.192322][ T4396] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.204408][T19003] Filesystems sync: 0.116 seconds [ 1351.341863][ T4396] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.473365][ T4396] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.484075][ T1110] Bluetooth: hci2: command 0x0406 tx timeout [ 1351.503943][ T1110] Bluetooth: hci1: command 0x0406 tx timeout [ 1351.665945][T19065] PM: suspend entry (deep) [ 1351.694707][T19065] PM: suspend exit [ 1352.295503][T19081] rtc_cmos 00:00: in use; can't configure [ 1352.345727][T19081] i8042 kbd 00:01: in use; can't configure [ 1352.391297][T19081] i8042 aux 00:02: in use; can't configure [ 1352.434297][T19081] serial 00:03: in use; can't configure [ 1353.317738][T19003] Bluetooth: hci5: Timed out waiting for suspend events [ 1353.324849][T15517] Bluetooth: hci5: command 0x0c1a tx timeout [ 1353.348667][ T4396] device hsr_slave_0 left promiscuous mode [ 1353.356956][T19003] Bluetooth: hci5: Suspend timeout bit: 4 [ 1353.385550][ T4396] device hsr_slave_1 left promiscuous mode [ 1353.404287][T19003] Bluetooth: hci5: Suspend timeout bit: 6 [ 1353.443647][T19003] Bluetooth: hci5: Suspend notifier action (3) failed: -110 [ 1353.457054][ T4396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1353.489274][ T4396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1353.538671][ T4396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1353.557649][T15517] Bluetooth: hci1: command 0x0406 tx timeout [ 1353.590493][ T4396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1353.642935][ T4396] device bridge_slave_1 left promiscuous mode [ 1353.683362][ T4396] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.733303][ T4396] device bridge_slave_0 left promiscuous mode [ 1353.786740][ T4396] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.866077][ T4396] device veth1_macvtap left promiscuous mode [ 1353.906120][ T4396] device veth0_macvtap left promiscuous mode [ 1353.947386][ T4396] device veth1_vlan left promiscuous mode [ 1353.957873][ C0] net_ratelimit: 63 callbacks suppressed [ 1353.993291][ T4396] device veth0_vlan left promiscuous mode [ 1354.370278][T19139] PM: suspend entry (deep) [ 1354.374750][T19139] PM: suspend exit [ 1355.052390][ T4396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1355.127266][ T4396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1355.445706][ T4396] bond0 (unregistering): Released all slaves [ 1355.557704][T19003] Bluetooth: hci2: Timed out waiting for suspend events [ 1355.564765][T15517] Bluetooth: hci2: command 0x0c1a tx timeout [ 1355.594355][T19003] Bluetooth: hci2: Suspend timeout bit: 4 [ 1355.639693][T19003] Bluetooth: hci2: Suspend timeout bit: 6 [ 1355.645636][T19003] Bluetooth: hci2: Suspend notifier action (3) failed: -110 [ 1357.797791][T19003] Bluetooth: hci1: Timed out waiting for suspend events [ 1357.804905][T19003] Bluetooth: hci1: Suspend timeout bit: 4 [ 1357.810924][ T7] Bluetooth: hci1: command 0x0c1a tx timeout [ 1357.847691][T19003] Bluetooth: hci1: Suspend timeout bit: 6 [ 1357.853538][T19003] Bluetooth: hci1: Suspend notifier action (3) failed: -110 [ 1357.931016][T19003] Freezing user space processes ... [ 1358.043962][T19003] [ 1358.046333][T19003] Freezing of tasks failed after 0.112 seconds (1 tasks refusing to freeze, wq_busy=0): [ 1358.080837][T19003] task:syz-executor state:D stack:27408 pid:19055 ppid: 19040 flags:0x00004004 [ 1358.090365][T19003] Call Trace: [ 1358.093676][T19003] [ 1358.096630][T19003] __schedule+0x11c3/0x4350 [ 1358.101241][T19003] ? verify_lock_unused+0x140/0x140 [ 1358.106474][T19003] ? release_firmware_map_entry+0x190/0x190 [ 1358.112498][T19003] ? verify_lock_unused+0x140/0x140 [ 1358.117927][T19003] schedule+0x11b/0x1e0 [ 1358.122243][T19003] schedule_timeout+0xbd/0x2d0 [ 1358.127041][T19003] ? console_conditional_schedule+0x40/0x40 [ 1358.133010][T19003] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1358.139062][T19003] ? __lock_acquire+0x7d40/0x7d40 [ 1358.144099][T19003] ? lock_chain_count+0x20/0x20 [ 1358.148999][T19003] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1358.154217][T19003] ? lockdep_hardirqs_on+0x94/0x140 [ 1358.159466][T19003] do_wait_for_common+0x295/0x460 [ 1358.164521][T19003] ? console_conditional_schedule+0x40/0x40 [ 1358.170565][T19003] ? wait_for_completion_killable_timeout+0x60/0x60 [ 1358.177239][T19003] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1358.182331][T19003] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1358.187974][T19003] wait_for_completion+0x48/0x60 [ 1358.192938][T19003] flush_workqueue+0x667/0x1390 [ 1358.197849][T19003] ? __hci_dev_get+0x116/0x1e0 [ 1358.202695][T19003] ? rcu_work_rcufn+0x120/0x120 [ 1358.207555][T19003] ? __cancel_work+0x1f9/0x2e0 [ 1358.212397][T19003] ? cancel_work+0x20/0x20 [ 1358.216842][T19003] ? _raw_read_unlock+0x24/0x40 [ 1358.221856][T19003] ? __hci_dev_get+0x116/0x1e0 [ 1358.226652][T19003] hci_dev_open+0x141/0x280 [ 1358.231227][T19003] sock_do_ioctl+0xfb/0x320 [ 1358.235925][T19003] ? sock_show_fdinfo+0xb0/0xb0 [ 1358.240878][T19003] sock_ioctl+0x48a/0x700 [ 1358.245232][T19003] ? sock_poll+0x420/0x420 [ 1358.249709][T19003] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1358.254741][T19003] ? security_file_ioctl+0x7c/0xa0 [ 1358.259903][T19003] ? sock_poll+0x420/0x420 [ 1358.264338][T19003] __se_sys_ioctl+0xfa/0x170 [ 1358.268987][T19003] do_syscall_64+0x4c/0xa0 [ 1358.273416][T19003] ? clear_bhb_loop+0x30/0x80 [ 1358.278166][T19003] ? clear_bhb_loop+0x30/0x80 [ 1358.282882][T19003] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1358.289315][T19003] RIP: 0033:0x7fbfa92b71eb [ 1358.294692][T19003] RSP: 002b:00007fffc704c850 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1358.303188][T19003] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fbfa92b71eb [ 1358.311223][T19003] RDX: 0000000000000003 RSI: 00000000400448c9 RDI: 0000000000000003 [ 1358.319284][T19003] RBP: 00007fffc704c8bc R08: 00007fbfa7d106c0 R09: 00007fffc704c7c7 [ 1358.327291][T19003] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000003 [ 1358.335368][T19003] R13: 0000000000000003 R14: 00007fffc704cb78 R15: 0000000000000000 [ 1358.343439][T19003] [ 1358.422095][T19003] [ 1358.424472][T19003] OOM killer enabled. [ 1358.428552][T19003] Restarting tasks ... [ 1358.543338][T19003] done. [ 1358.588715][T19088] PM: hibernation: hibernation entry [ 1358.600605][T19003] PM: suspend exit [ 1358.731150][T19055] rxe_eth0 speed is unknown, defaulting to 1000 [ 1358.790662][T19088] Filesystems sync: 0.124 seconds [ 1358.813696][T19088] Freezing user space processes ... [ 1358.919920][T19088] [ 1358.922305][T19088] Freezing of tasks failed after 0.106 seconds (3 tasks refusing to freeze, wq_busy=0): [ 1358.985634][T19088] task:syz-executor state:S stack:21840 pid:18122 ppid: 1 flags:0x00004002 [ 1358.995028][T19088] Call Trace: [ 1358.998425][T19088] [ 1359.001364][T19088] __schedule+0x11c3/0x4350 [ 1359.005887][T19088] ? wait_consider_task+0x1ad7/0x2e30 [ 1359.011354][T19088] ? do_wait+0x681/0xaa0 [ 1359.015606][T19088] ? release_firmware_map_entry+0x190/0x190 [ 1359.021541][T19088] ? __lock_acquire+0x7d40/0x7d40 [ 1359.026580][T19088] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1359.032547][T19088] ? _raw_spin_unlock+0x40/0x40 [ 1359.038008][T19088] schedule+0x11b/0x1e0 [ 1359.042180][T19088] do_wait+0x758/0xaa0 [ 1359.046289][T19088] kernel_wait4+0x22b/0x2b0 [ 1359.051080][T19088] ? __ia32_sys_waitid+0xc0/0xc0 [ 1359.056033][T19088] ? kernel_waitid+0x3d0/0x3d0 [ 1359.060853][T19088] zap_pid_ns_processes+0x366/0x590 [ 1359.066246][T19088] ? lock_chain_count+0x20/0x20 [ 1359.071147][T19088] ? put_pid_ns+0x130/0x130 [ 1359.075680][T19088] ? _raw_write_unlock_irq+0x1f/0x40 [ 1359.081022][T19088] ? lockdep_hardirqs_on+0x94/0x140 [ 1359.086245][T19088] do_exit+0x1d65/0x2110 [ 1359.090530][T19088] ? put_task_struct+0x80/0x80 [ 1359.095305][T19088] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1359.101358][T19088] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1359.106401][T19088] do_group_exit+0x12c/0x2f0 [ 1359.111028][T19088] ? lockdep_hardirqs_on+0x94/0x140 [ 1359.116344][T19088] get_signal+0x7eb/0x12e0 [ 1359.120928][T19088] arch_do_signal_or_restart+0xe6/0x12a0 [ 1359.126603][T19088] ? get_sigframe_size+0x10/0x10 [ 1359.131581][T19088] ? __x64_sys_wait4+0x1b4/0x230 [ 1359.136550][T19088] ? exit_to_user_mode_loop+0x3b/0x130 [ 1359.142067][T19088] exit_to_user_mode_loop+0x9e/0x130 [ 1359.147362][T19088] exit_to_user_mode_prepare+0xee/0x180 [ 1359.152948][T19088] syscall_exit_to_user_mode+0x16/0x40 [ 1359.158443][T19088] do_syscall_64+0x58/0xa0 [ 1359.162889][T19088] ? clear_bhb_loop+0x30/0x80 [ 1359.167660][T19088] ? clear_bhb_loop+0x30/0x80 [ 1359.172385][T19088] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1359.178442][T19088] RIP: 0033:0x7f12ef639d8e [ 1359.182867][T19088] RSP: 002b:00007ffebda579f8 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 1359.191334][T19088] RAX: fffffffffffffe00 RBX: 0000555590ae6500 RCX: 00007f12ef639d8e [ 1359.199344][T19088] RDX: 0000000040000000 RSI: 00007ffebda57a9c RDI: ffffffffffffffff [ 1359.207350][T19088] RBP: 00007ffebda57a9c R08: 0000000000000000 R09: 0000000000000000 [ 1359.215400][T19088] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001f [ 1359.223443][T19088] R13: 0000555590af9a00 R14: 000000000014825d R15: 00007ffebda57af0 [ 1359.231504][T19088] [ 1359.234560][T19088] task:syz.1.3644 state:D stack:24656 pid:19003 ppid: 18122 flags:0x00004006 [ 1359.243829][T19088] Call Trace: [ 1359.247120][T19088] [ 1359.250093][T19088] __schedule+0x11c3/0x4350 [ 1359.254635][T19088] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1359.260676][T19088] ? lock_chain_count+0x20/0x20 [ 1359.265543][T19088] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1359.271474][T19088] ? lockdep_hardirqs_on+0x94/0x140 [ 1359.276694][T19088] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1359.282628][T19088] ? release_firmware_map_entry+0x190/0x190 [ 1359.288556][T19088] ? queue_work_on+0x196/0x1f0 [ 1359.293438][T19088] ? __might_sleep+0xf0/0xf0 [ 1359.298106][T19088] ? wq_worker_last_func+0x40/0x40 [ 1359.303380][T19088] schedule+0x11b/0x1e0 [ 1359.307687][T19088] synchronize_rcu_expedited+0x5c1/0x750 [ 1359.313375][T19088] ? synchronize_rcu+0x1e0/0x1e0 [ 1359.318388][T19088] ? kasan_save_stack+0x35/0x60 [ 1359.323289][T19088] ? kasan_record_aux_stack+0xb8/0x100 [ 1359.328924][T19088] ? rcu_exp_sel_wait_wake+0x1d30/0x1d30 [ 1359.334581][T19088] ? __mutex_lock_common+0x435/0x2400 [ 1359.339996][T19088] ? __might_sleep+0xf0/0xf0 [ 1359.344855][T19088] ? init_wait_entry+0xd0/0xd0 [ 1359.349659][T19088] __tun_detach+0x8ac/0x1580 [ 1359.354299][T19088] tun_chr_close+0x109/0x1b0 [ 1359.358958][T19088] ? tun_chr_open+0x4d0/0x4d0 [ 1359.363672][T19088] __fput+0x212/0x8c0 [ 1359.367748][T19088] task_work_run+0x125/0x1a0 [ 1359.372369][T19088] do_exit+0x635/0x2110 [ 1359.376542][T19088] ? put_task_struct+0x80/0x80 [ 1359.381355][T19088] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1359.387353][T19088] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1359.392435][T19088] do_group_exit+0x12c/0x2f0 [ 1359.397036][T19088] ? lockdep_hardirqs_on+0x94/0x140 [ 1359.402290][T19088] get_signal+0x7eb/0x12e0 [ 1359.406748][T19088] arch_do_signal_or_restart+0xe6/0x12a0 [ 1359.412504][T19088] ? get_sigframe_size+0x10/0x10 [ 1359.417459][T19088] ? kick_process+0xd4/0x140 [ 1359.422222][T19088] ? ksys_write+0x203/0x260 [ 1359.426756][T19088] ? exit_to_user_mode_loop+0x3b/0x130 [ 1359.432286][T19088] exit_to_user_mode_loop+0x9e/0x130 [ 1359.437620][T19088] exit_to_user_mode_prepare+0xee/0x180 [ 1359.443177][T19088] syscall_exit_to_user_mode+0x16/0x40 [ 1359.448719][T19088] do_syscall_64+0x58/0xa0 [ 1359.453161][T19088] ? clear_bhb_loop+0x30/0x80 [ 1359.457913][T19088] ? clear_bhb_loop+0x30/0x80 [ 1359.462604][T19088] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1359.468542][T19088] RIP: 0033:0x7f12ef679559 [ 1359.473005][T19088] RSP: 002b:00007f12ed88f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1359.481477][T19088] RAX: fffffffffffffff0 RBX: 00007f12ef901180 RCX: 00007f12ef679559 [ 1359.489487][T19088] RDX: 0000000000000004 RSI: 0000200000000d00 RDI: 0000000000000006 [ 1359.497466][T19088] RBP: 00007f12ef7108b0 R08: 0000000000000000 R09: 0000000000000000 [ 1359.505483][T19088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1359.513491][T19088] R13: 00007f12ef901218 R14: 00007f12ef901180 R15: 00007ffebda576f8 [ 1359.521839][T19088] [ 1359.524888][T19088] task:syz-executor state:R running task stack:24304 pid:19055 ppid: 19040 flags:0x00004004 [ 1359.535953][T19088] Call Trace: [ 1359.539279][T19088] [ 1359.542223][T19088] __schedule+0x11c3/0x4350 [ 1359.546831][T19088] ? verify_lock_unused+0x140/0x140 [ 1359.552069][T19088] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1359.558100][T19088] ? release_firmware_map_entry+0x190/0x190 [ 1359.564020][T19088] ? mark_lock+0x94/0x320 [ 1359.568388][T19088] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1359.574378][T19088] ? rcu_lock_release+0x5/0x20 [ 1359.579293][T19088] ? preempt_schedule+0xbc/0xd0 [ 1359.584192][T19088] preempt_schedule_common+0x82/0xd0 [ 1359.589548][T19088] preempt_schedule+0xbc/0xd0 [ 1359.594259][T19088] ? schedule_preempt_disabled+0x20/0x20 [ 1359.599931][T19088] ? lockdep_hardirqs_on+0x94/0x140 [ 1359.605148][T19088] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1359.611352][T19088] preempt_schedule_thunk+0x16/0x18 [ 1359.616914][T19088] unwind_next_frame+0x1202/0x1cf0 [ 1359.622146][T19088] ? kstrdup_const+0x51/0x90 [ 1359.626980][T19088] ? stack_trace_save+0xf0/0xf0 [ 1359.631927][T19088] arch_stack_walk+0x10c/0x140 [ 1359.636840][T19088] ? __kernfs_new_node+0xa8/0x6b0 [ 1359.642011][T19088] stack_trace_save+0xa6/0xf0 [ 1359.646717][T19088] ? stack_trace_snprint+0xe0/0xe0 [ 1359.651931][T19088] ? __lock_acquire+0x13b3/0x7d40 [ 1359.656976][T19088] __kasan_kmalloc+0xaf/0xe0 [ 1359.661623][T19088] ? __kasan_kmalloc+0xaf/0xe0 [ 1359.666420][T19088] ? kstrdup_const+0x51/0x90 [ 1359.671134][T19088] kstrdup_const+0x51/0x90 [ 1359.675574][T19088] __kernfs_new_node+0xa8/0x6b0 [ 1359.680510][T19088] ? __lock_acquire+0x7d40/0x7d40 [ 1359.685958][T19088] ? kernfs_new_node+0x250/0x250 [ 1359.690984][T19088] ? kernfs_activate+0x1eb/0x210 [ 1359.695939][T19088] kernfs_new_node+0x148/0x250 [ 1359.700779][T19088] __kernfs_create_file+0x47/0x2e0 [ 1359.705932][T19088] sysfs_add_file_mode_ns+0x2d2/0x390 [ 1359.711362][T19088] internal_create_group+0x492/0xd00 [ 1359.716668][T19088] ? sysfs_create_group+0x20/0x20 [ 1359.721760][T19088] sysfs_create_groups+0x55/0x120 [ 1359.726811][T19088] ib_setup_port_attrs+0x161d/0x2140 [ 1359.732291][T19088] ? ib_free_port_attrs+0x3a0/0x3a0 [ 1359.737525][T19088] ? kobject_put+0x416/0x450 [ 1359.742226][T19088] ? do_raw_spin_unlock+0x11d/0x230 [ 1359.747465][T19088] ? device_add+0xa94/0x1050 [ 1359.752203][T19088] add_one_compat_dev+0x3da/0x5c0 [ 1359.757249][T19088] rdma_dev_init_net+0x1e4/0x280 [ 1359.762247][T19088] ? rcu_lock_release+0x20/0x20 [ 1359.767116][T19088] ops_init+0x360/0x5f0 [ 1359.771342][T19088] setup_net+0x39e/0xa10 [ 1359.775637][T19088] ? copy_net_ns+0x5b0/0x5b0 [ 1359.780298][T19088] ? copy_net_ns+0x324/0x5b0 [ 1359.784990][T19088] ? down_read_killable+0x1ce/0x340 [ 1359.790230][T19088] copy_net_ns+0x33e/0x5b0 [ 1359.794658][T19088] create_new_namespaces+0x3ce/0x700 [ 1359.799990][T19088] unshare_nsproxy_namespaces+0x116/0x160 [ 1359.805725][T19088] ksys_unshare+0x4f6/0x8e0 [ 1359.810371][T19088] ? __lock_acquire+0x7d40/0x7d40 [ 1359.815445][T19088] ? sighand_ctor+0x40/0x40 [ 1359.820002][T19088] ? lock_chain_count+0x20/0x20 [ 1359.824890][T19088] ? syscall_enter_from_user_mode+0x21/0x70 [ 1359.830833][T19088] __x64_sys_unshare+0x34/0x40 [ 1359.835608][T19088] do_syscall_64+0x4c/0xa0 [ 1359.840202][T19088] ? clear_bhb_loop+0x30/0x80 [ 1359.845093][T19088] ? clear_bhb_loop+0x30/0x80 [ 1359.849863][T19088] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1359.855883][T19088] RIP: 0033:0x7fbfa92b8827 [ 1359.860388][T19088] RSP: 002b:00007fffc704c938 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 1359.868985][T19088] RAX: ffffffffffffffda RBX: 00007fbfa953ef40 RCX: 00007fbfa92b8827 [ 1359.877008][T19088] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1359.885089][T19088] RBP: 00007fbfa953f7b8 R08: 0000000000000000 R09: 0000000000000000 [ 1359.893435][T19088] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1359.901636][T19088] R13: 0000000000000003 R14: 00007fffc704cb78 R15: 0000000000000000 [ 1359.909809][T19088] [ 1359.913901][ C0] net_ratelimit: 66 callbacks suppressed [ 1360.044671][T19088] [ 1360.047052][T19088] OOM killer enabled. [ 1360.054090][T19088] Restarting tasks ... [ 1360.096982][T19088] done. [ 1360.133349][T19088] PM: hibernation: hibernation exit [ 1360.228212][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.498730][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.517738][ T4264] Bluetooth: hci3: command 0x0409 tx timeout [ 1360.749647][T19217] x86: Booting SMP configuration: [ 1360.813681][T19217] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1360.849476][ T0] kvm-clock: cpu 1, msr ff0a041, secondary cpu clock [ 1360.860096][ T18] kvm-guest: stealtime: cpu 1, msr b8f27440 [ 1360.899868][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.931552][T19224] smpboot: CPU 1 is now offline [ 1360.960918][T19228] x86: Booting SMP configuration: [ 1361.005699][T19228] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1361.060203][ T0] kvm-clock: cpu 1, msr ff0a041, secondary cpu clock [ 1361.075304][ T18] kvm-guest: stealtime: cpu 1, msr b8f27440 [ 1361.191366][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.268848][T19203] rxe_eth0 speed is unknown, defaulting to 1000 [ 1361.284913][T19055] chnl_net:caif_netlink_parms(): no params data found [ 1361.384088][T19241] smpboot: CPU 1 is now offline [ 1361.528093][T19248] x86: Booting SMP configuration: [ 1361.533154][T19248] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1361.558964][T19246] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1361.639848][ T0] kvm-clock: cpu 1, msr ff0a041, secondary cpu clock [ 1361.658559][ T18] kvm-guest: stealtime: cpu 1, msr b8f27440 [ 1361.865802][T19246] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1362.115233][T19268] PM: suspend entry (s2idle) [ 1362.127815][T19268] PM: Unsupported test mode for suspend to idle, please choose none/freezer/devices/platform. [ 1362.139984][T19268] PM: suspend exit [ 1362.283607][T19055] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.294298][T19055] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.349844][T19055] device bridge_slave_0 entered promiscuous mode [ 1362.434994][T19055] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.438823][ T1110] Bluetooth: hci2: command 0x0409 tx timeout [ 1362.449684][T19055] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.479045][T19055] device bridge_slave_1 entered promiscuous mode [ 1362.593311][T19286] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1362.601021][ T1110] Bluetooth: hci3: command 0x041b tx timeout [ 1362.814059][T19055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1362.913288][T19055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1363.144095][T19203] chnl_net:caif_netlink_parms(): no params data found [ 1363.212191][T19055] team0: Port device team_slave_0 added [ 1363.293764][T19055] team0: Port device team_slave_1 added [ 1363.537218][T19055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1363.557853][T19055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1363.622098][T19055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1363.687050][T19055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1363.702189][T19055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1363.731439][T19339] PM: suspend entry (deep) [ 1363.749846][ T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1363.772029][T19055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1363.897918][T19339] Filesystems sync: 0.154 seconds [ 1364.072521][T19055] device hsr_slave_0 entered promiscuous mode [ 1364.099060][T19055] device hsr_slave_1 entered promiscuous mode [ 1364.108077][T19055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1364.115679][T19055] Cannot create hsr debugfs directory [ 1364.151661][T19203] bridge0: port 1(bridge_slave_0) entered blocking state [ 1364.161730][T19203] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.179010][T19203] device bridge_slave_0 entered promiscuous mode [ 1364.296021][T19203] bridge0: port 2(bridge_slave_1) entered blocking state [ 1364.307801][T19203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.316345][T19203] device bridge_slave_1 entered promiscuous mode [ 1364.367947][ T7] usb 4-1: string descriptor 0 read error: -22 [ 1364.374678][ T7] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1364.423334][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.533416][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 1364.614328][T19350] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1364.625452][T19203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1364.669409][T19203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1364.680460][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 1364.910983][ T154] device hsr_slave_0 left promiscuous mode [ 1364.938482][ T154] device hsr_slave_1 left promiscuous mode [ 1364.958438][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1364.965955][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1364.975028][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1364.982758][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1364.996750][ T154] device bridge_slave_1 left promiscuous mode [ 1365.003146][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.039187][ T154] device bridge_slave_0 left promiscuous mode [ 1365.058070][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.094814][ T154] device veth1_macvtap left promiscuous mode [ 1365.105847][ T154] device veth0_macvtap left promiscuous mode [ 1365.122788][ T154] device veth1_vlan left promiscuous mode [ 1365.140292][ T154] device veth0_vlan left promiscuous mode [ 1365.146503][ T154] net_ratelimit: 42 callbacks suppressed [ 1365.178601][T13728] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1365.385533][ T1110] usb 4-1: USB disconnect, device number 7 [ 1365.863824][ T154] team0 (unregistering): Port device team_slave_1 removed [ 1365.916520][ T154] team0 (unregistering): Port device team_slave_0 removed [ 1365.958492][ T7] Bluetooth: hci5: command 0x0c1a tx timeout [ 1365.964707][T19339] Bluetooth: hci5: Timed out waiting for suspend events [ 1365.976725][T19339] Bluetooth: hci5: Suspend timeout bit: 4 [ 1365.995391][T19339] Bluetooth: hci5: Suspend timeout bit: 6 [ 1366.001887][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1366.013870][T19339] Bluetooth: hci5: Suspend notifier action (3) failed: -110 [ 1366.051224][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1366.278148][T13728] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1366.285580][ T154] bond0 (unregistering): Released all slaves [ 1366.296495][T13728] ath9k_htc: Failed to initialize the device [ 1366.311394][ T1110] usb 4-1: ath9k_htc: USB layer deinitialized [ 1366.406836][T19203] team0: Port device team_slave_0 added [ 1366.417041][T19203] team0: Port device team_slave_1 added [ 1366.601133][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.607497][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.612238][T13728] Bluetooth: hci2: command 0x040f tx timeout [ 1366.700407][T19203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1366.714639][T19203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1366.750348][T19203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1366.767817][T13728] Bluetooth: hci3: command 0x0419 tx timeout [ 1366.780428][T19203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1366.815244][T19203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1366.848157][T19203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1367.210516][T19203] device hsr_slave_0 entered promiscuous mode [ 1367.236393][T19203] device hsr_slave_1 entered promiscuous mode [ 1367.257409][T19203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1367.265218][T19203] Cannot create hsr debugfs directory [ 1367.858173][T19055] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1367.893409][T19055] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1367.959122][T19055] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1368.006776][T19055] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1368.117733][T19339] Bluetooth: hci1: Timed out waiting for suspend events [ 1368.124912][T19339] Bluetooth: hci1: Suspend timeout bit: 4 [ 1368.130907][T13728] Bluetooth: hci1: command 0x0c1a tx timeout [ 1368.161388][T19339] Bluetooth: hci1: Suspend timeout bit: 6 [ 1368.167271][T19339] Bluetooth: hci1: Suspend notifier action (3) failed: -110 [ 1368.330019][T19203] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1368.398959][T19203] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1368.459858][T19203] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1368.507034][T19055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1368.526244][T19203] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1368.564515][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1368.577203][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1368.616339][T19055] 8021q: adding VLAN 0 to HW filter on device team0 [ 1368.671884][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1368.680535][T13728] Bluetooth: hci2: command 0x0419 tx timeout [ 1368.707937][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1368.716802][ T1442] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.724073][ T1442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1368.759058][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1368.810846][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1368.827702][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1368.845263][ T1442] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.852437][ T1442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1368.927284][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1368.939091][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1368.985912][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1369.036291][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1369.066379][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1369.094298][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1369.137323][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1369.179555][T15640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1369.205595][T15640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1369.250943][T15637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1369.270962][T15637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1369.314285][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1369.427828][T19203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1369.462009][T15637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1369.490874][T15637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1369.526493][T19203] 8021q: adding VLAN 0 to HW filter on device team0 [ 1369.565281][T15640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1369.578717][T15640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1369.599329][T15640] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.606527][T15640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1369.619884][T15640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1369.645648][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1369.671401][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1369.690033][ T1442] bridge0: port 2(bridge_slave_1) entered blocking state [ 1369.697159][ T1442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1369.733553][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1369.762886][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1369.806795][T15637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1369.827516][T15637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1369.839753][T15637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1369.874709][T15637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1369.885031][T15637] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1369.939704][T15637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1369.959057][T15637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1369.989488][T15637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1370.003787][T15637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1370.029203][T15637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1370.036959][T15637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1370.061828][T19203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1370.094436][T19055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1370.152344][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1370.168963][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1370.242365][T11377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1370.259627][T11377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1370.278227][T13728] Bluetooth: hci3: command 0x0c1a tx timeout [ 1370.284548][T19339] Bluetooth: hci3: Timed out waiting for suspend events [ 1370.296989][T19339] Bluetooth: hci3: Suspend timeout bit: 4 [ 1370.302942][T19055] device veth0_vlan entered promiscuous mode [ 1370.314766][T19339] Bluetooth: hci3: Suspend timeout bit: 6 [ 1370.321773][T19339] Bluetooth: hci3: Suspend notifier action (3) failed: -110 [ 1370.343144][T11377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1370.366994][T11377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1370.401668][T19055] device veth1_vlan entered promiscuous mode [ 1370.438047][ C0] net_ratelimit: 45 callbacks suppressed [ 1370.474138][T15637] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1370.492374][T15637] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1370.504238][T15637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1370.512704][T15637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1370.555527][T19203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1370.583151][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1370.615429][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1370.643214][T19055] device veth0_macvtap entered promiscuous mode [ 1370.684601][T19055] device veth1_macvtap entered promiscuous mode [ 1370.750194][T19055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1370.787403][T19055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.812802][T19055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1370.830291][T19055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.843905][T19055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1370.857050][T19055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.874697][T19055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1370.889077][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1370.905353][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1370.921757][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1370.956565][T19055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1370.979446][T19055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.995146][T19055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1371.016257][T19055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.026928][T19055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1371.038606][T19055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.067825][T19055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1371.079414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1371.095808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1371.113658][T19055] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.126903][T19055] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.136197][T19055] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.145255][T19055] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.272800][T15637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1371.287174][T15637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1371.313231][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1371.324175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1371.333693][T19203] device veth0_vlan entered promiscuous mode [ 1371.345764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1371.355123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1371.385746][T19203] device veth1_vlan entered promiscuous mode [ 1371.449278][T19203] device veth0_macvtap entered promiscuous mode [ 1371.457105][T11377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1371.466908][T11377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1371.476055][T11377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1371.495502][T11377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1371.506850][T11377] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1371.525064][T19203] device veth1_macvtap entered promiscuous mode [ 1371.554332][T19203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1371.568755][T19203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.579142][T19203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1371.593716][T19203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.605724][T19203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1371.622026][T19203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.634583][T19203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1371.652395][T19203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.664592][T19203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1371.683950][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1371.696452][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1371.708881][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1371.722109][T19203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1371.741850][T19203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.753057][T19203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1371.769417][T19203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.783875][T19203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1371.802995][T19203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.815202][T19203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1371.831992][T19203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.846744][T19203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1371.860509][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1371.871503][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1371.892608][T19203] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.905910][T19203] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.923015][T19203] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.934143][T19203] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.358695][T19339] Bluetooth: hci2: Timed out waiting for suspend events [ 1372.366093][T19339] Bluetooth: hci2: Suspend timeout bit: 4 [ 1372.373878][T13728] Bluetooth: hci2: command 0x0c1a tx timeout [ 1372.380191][T13728] Bluetooth: hci3: command 0x0406 tx timeout [ 1372.388230][T19339] Bluetooth: hci2: Suspend timeout bit: 6 [ 1372.394075][T19339] Bluetooth: hci2: Suspend notifier action (3) failed: -110 [ 1372.427737][T19339] Freezing user space processes ... [ 1372.543382][T19339] [ 1372.545762][T19339] Freezing of tasks failed after 0.115 seconds (2 tasks refusing to freeze, wq_busy=0): [ 1372.556966][T19339] task:syz-executor state:D stack:21648 pid:19055 ppid: 19040 flags:0x00004004 [ 1372.566464][T19339] Call Trace: [ 1372.569869][T19339] [ 1372.572833][T19339] __schedule+0x11c3/0x4350 [ 1372.577372][T19339] ? rcu_lock_acquire+0x30/0x30 [ 1372.582319][T19339] ? __mutex_lock_common+0xdf0/0x2400 [ 1372.588324][T19339] ? release_firmware_map_entry+0x190/0x190 [ 1372.594381][T19339] ? __lock_acquire+0x7d40/0x7d40 [ 1372.600093][T19339] ? __mutex_trylock_common+0x86/0x260 [ 1372.605782][T19339] ? rcu_lock_release+0x20/0x20 [ 1372.610793][T19339] schedule+0x11b/0x1e0 [ 1372.615034][T19339] schedule_preempt_disabled+0xf/0x20 [ 1372.620957][T19339] __mutex_lock_common+0xdf5/0x2400 [ 1372.626579][T19339] ? misc_open+0x55/0x390 [ 1372.631662][T19339] ? mutex_lock_io_nested+0x60/0x60 [ 1372.636918][T19339] ? __lock_acquire+0x7d40/0x7d40 [ 1372.642071][T19339] ? kobject_get_unless_zero+0x15f/0x1e0 [ 1372.647954][T19339] mutex_lock_nested+0x17/0x20 [ 1372.653368][T19339] misc_open+0x55/0x390 [ 1372.658000][T19339] chrdev_open+0x585/0x5f0 [ 1372.662601][T19339] ? cd_forget+0x160/0x160 [ 1372.667046][T19339] ? fsnotify_perm+0x3a7/0x560 [ 1372.671949][T19339] ? cd_forget+0x160/0x160 [ 1372.676414][T19339] do_dentry_open+0x7f7/0xf90 [ 1372.681419][T19339] ? vfs_open+0x2b/0x80 [ 1372.685972][T19339] path_openat+0x2718/0x2fb0 [ 1372.690765][T19339] ? __kasan_slab_alloc+0xa9/0xc0 [ 1372.695855][T19339] ? do_filp_open+0x400/0x400 [ 1372.700841][T19339] do_filp_open+0x1df/0x400 [ 1372.705392][T19339] ? vfs_tmpfile+0x300/0x300 [ 1372.710081][T19339] ? _raw_spin_unlock+0x24/0x40 [ 1372.714969][T19339] ? alloc_fd+0x59e/0x650 [ 1372.720297][T19339] do_sys_openat2+0x14b/0x500 [ 1372.725126][T19339] ? __lock_acquire+0x7d40/0x7d40 [ 1372.730242][T19339] ? do_sys_open+0xe0/0xe0 [ 1372.734726][T19339] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1372.740791][T19339] ? lock_chain_count+0x20/0x20 [ 1372.745890][T19339] __x64_sys_openat+0x135/0x160 [ 1372.750966][T19339] do_syscall_64+0x4c/0xa0 [ 1372.755449][T19339] ? clear_bhb_loop+0x30/0x80 [ 1372.760270][T19339] ? clear_bhb_loop+0x30/0x80 [ 1372.765028][T19339] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1372.771274][T19339] RIP: 0033:0x7fbfa9277d8e [ 1372.775756][T19339] RSP: 002b:00007fffc704c7f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1372.784621][T19339] RAX: ffffffffffffffda RBX: 00005555776ca500 RCX: 00007fbfa9277d8e [ 1372.792816][T19339] RDX: 0000000000000002 RSI: 00007fbfa934e99e RDI: ffffffffffffff9c [ 1372.800892][T19339] RBP: 00007fbfa953f7b8 R08: 0000000000000000 R09: 0000000000000000 [ 1372.809190][T19339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1372.817288][T19339] R13: 0000000000000003 R14: 00007fffc704cb78 R15: 0000000000000000 [ 1372.825354][T19339] [ 1372.828607][T19339] task:syz-executor state:D stack:22000 pid:19203 ppid: 19192 flags:0x00004004 [ 1372.838164][T19339] Call Trace: [ 1372.841517][T19339] [ 1372.844504][T19339] __schedule+0x11c3/0x4350 [ 1372.849159][T19339] ? rcu_lock_acquire+0x30/0x30 [ 1372.854071][T19339] ? __mutex_lock_common+0xdf0/0x2400 [ 1372.859535][T19339] ? release_firmware_map_entry+0x190/0x190 [ 1372.865485][T19339] ? __lock_acquire+0x7d40/0x7d40 [ 1372.870872][T19339] ? __mutex_trylock_common+0x86/0x260 [ 1372.876400][T19339] ? rcu_lock_release+0x20/0x20 [ 1372.881445][T19339] schedule+0x11b/0x1e0 [ 1372.885655][T19339] schedule_preempt_disabled+0xf/0x20 [ 1372.891190][T19339] __mutex_lock_common+0xdf5/0x2400 [ 1372.896451][T19339] ? misc_open+0x55/0x390 [ 1372.900861][T19339] ? mutex_lock_io_nested+0x60/0x60 [ 1372.906114][T19339] ? __lock_acquire+0x7d40/0x7d40 [ 1372.911236][T19339] ? kobject_get_unless_zero+0x15f/0x1e0 [ 1372.916935][T19339] mutex_lock_nested+0x17/0x20 [ 1372.921971][T19339] misc_open+0x55/0x390 [ 1372.926308][T19339] chrdev_open+0x585/0x5f0 [ 1372.930983][T19339] ? cd_forget+0x160/0x160 [ 1372.935492][T19339] ? fsnotify_perm+0x3a7/0x560 [ 1372.940399][T19339] ? cd_forget+0x160/0x160 [ 1372.945027][T19339] do_dentry_open+0x7f7/0xf90 [ 1372.949884][T19339] ? vfs_open+0x2b/0x80 [ 1372.954145][T19339] path_openat+0x2718/0x2fb0 [ 1372.958849][T19339] ? __kasan_slab_alloc+0xa9/0xc0 [ 1372.964019][T19339] ? do_filp_open+0x400/0x400 [ 1372.968887][T19339] do_filp_open+0x1df/0x400 [ 1372.974558][T19339] ? vfs_tmpfile+0x300/0x300 [ 1372.979899][T19339] ? _raw_spin_unlock+0x24/0x40 [ 1372.984820][T19339] ? alloc_fd+0x59e/0x650 [ 1372.989493][T19339] do_sys_openat2+0x14b/0x500 [ 1372.994305][T19339] ? __lock_acquire+0x7d40/0x7d40 [ 1372.999664][T19339] ? do_sys_open+0xe0/0xe0 [ 1373.004125][T19339] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1373.010787][T19339] ? lock_chain_count+0x20/0x20 [ 1373.015715][T19339] __x64_sys_openat+0x135/0x160 [ 1373.020761][T19339] do_syscall_64+0x4c/0xa0 [ 1373.025209][T19339] ? clear_bhb_loop+0x30/0x80 [ 1373.030040][T19339] ? clear_bhb_loop+0x30/0x80 [ 1373.034784][T19339] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1373.040748][T19339] RIP: 0033:0x7f9349247d8e [ 1373.045205][T19339] RSP: 002b:00007ffe2d55c7b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1373.053918][T19339] RAX: ffffffffffffffda RBX: 0000555558a44500 RCX: 00007f9349247d8e [ 1373.061973][T19339] RDX: 0000000000000002 RSI: 00007f934931e99e RDI: ffffffffffffff9c [ 1373.070071][T19339] RBP: 00007f934950f7b8 R08: 0000000000000000 R09: 0000000000000000 [ 1373.078135][T19339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1373.086374][T19339] R13: 0000000000000003 R14: 00007ffe2d55cb38 R15: 0000000000000000 [ 1373.094494][T19339] [ 1373.111808][T19339] [ 1373.114181][T19339] OOM killer enabled. [ 1373.118277][T19339] Restarting tasks ... [ 1373.137736][T19339] done. [ 1373.160993][T19339] PM: suspend exit [ 1373.235652][T19496] ioremap: invalid physical address 8000000000000000 [ 1373.263015][T19496] ------------[ cut here ]------------ [ 1373.301871][T19496] WARNING: CPU: 0 PID: 19496 at arch/x86/mm/ioremap.c:200 __ioremap_caller+0x4f8/0x620 [ 1373.322505][T19496] Modules linked in: [ 1373.332290][T19496] CPU: 0 PID: 19496 Comm: syz.3.3723 Tainted: G S syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1373.351977][T19496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1373.375837][T19496] RIP: 0010:__ioremap_caller+0x4f8/0x620 [ 1373.388442][T19496] Code: 85 ff 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 69 43 00 48 8b 74 24 60 48 c7 c7 20 bc 28 8a e8 c8 b8 81 08 <0f> 0b eb 8d 4c 8b 74 24 28 41 81 e6 ff 0f 00 00 4d 01 ee 48 8b 7c [ 1373.490905][T19496] RSP: 0018:ffffc90002eff900 EFLAGS: 00010246 [ 1373.535383][T19496] RAX: 0000000000000032 RBX: 1ffff920005dff00 RCX: 352b2f21647f6c00 [ 1373.587768][T13728] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1373.598084][T19496] RDX: ffffc90013efc000 RSI: 000000000000794e RDI: 000000000000794f [ 1373.650953][T19496] RBP: ffffc90002effa10 R08: ffffc90002eff427 R09: 1ffff920005dfe84 [ 1373.667978][T19496] R10: dffffc0000000000 R11: fffff520005dfe85 R12: 000000000000002e [ 1373.676207][T19496] R13: 8000000000000000 R14: 0000000000020000 R15: dffffc0000000000 [ 1373.727792][T19496] FS: 00007f19c67ae6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1373.736825][T19496] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1373.777698][T19496] CR2: 0000560714e15000 CR3: 0000000066b96000 CR4: 00000000003506f0 [ 1373.786786][T19496] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1373.837929][T19496] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1373.847081][T19496] Call Trace: [ 1373.878179][T19496] [ 1373.881169][T19496] ? phram_setup+0x87c/0xdf0 [ 1373.886576][T19496] ? ioremap+0x30/0x30 [ 1373.917745][T19496] phram_setup+0x87c/0xdf0 [ 1373.922255][T19496] ? __mutex_lock_common+0x435/0x2400 [ 1373.937999][T19496] ? phram_param_call+0x70/0x70 [ 1373.943081][T19496] ? mutex_lock_io_nested+0x60/0x60 [ 1373.965165][T19496] ? read_lock_is_recursive+0x10/0x10 [ 1373.970800][T19496] param_attr_store+0x20a/0x300 [ 1373.975956][T19496] ? param_attr_show+0x170/0x170 [ 1373.994564][T19496] ? sysfs_kf_read+0x350/0x350 [ 1374.002160][T19496] module_attr_store+0x5b/0x80 [ 1374.006997][T19496] kernfs_fop_write_iter+0x3a8/0x500 [ 1374.012615][T19496] vfs_write+0x748/0xd70 [ 1374.016922][T19496] ? file_end_write+0x250/0x250 [ 1374.022181][T19496] ? mutex_lock_nested+0x17/0x20 [ 1374.027259][T19496] ? __fdget_pos+0x2bf/0x370 [ 1374.031949][T19496] ? ksys_write+0x70/0x260 [ 1374.036442][T19496] ksys_write+0x153/0x260 [ 1374.041181][T19496] ? __ia32_sys_read+0x80/0x80 [ 1374.045983][T19496] ? lockdep_hardirqs_on+0x94/0x140 [ 1374.051300][T19496] do_syscall_64+0x4c/0xa0 [ 1374.055980][T19496] ? clear_bhb_loop+0x30/0x80 [ 1374.060825][T19496] ? clear_bhb_loop+0x30/0x80 [ 1374.065551][T19496] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1374.071563][T19496] RIP: 0033:0x7f19c8556559 [ 1374.076014][T19496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1374.097152][T19496] RSP: 002b:00007f19c67ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1374.105858][T19496] RAX: ffffffffffffffda RBX: 00007f19c87ddfa0 RCX: 00007f19c8556559 [ 1374.116175][T19496] RDX: 000000000000001e RSI: 0000200000000900 RDI: 0000000000000003 [ 1374.125001][T19496] RBP: 00007f19c85ed8b0 R08: 0000000000000000 R09: 0000000000000000 [ 1374.133871][T19496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1374.142194][T19496] R13: 00007f19c87de038 R14: 00007f19c87ddfa0 R15: 00007fff8fd44d68 [ 1374.150585][T19496] [ 1374.153728][T19496] irq event stamp: 3291 [ 1374.158084][T19496] hardirqs last enabled at (3319): [] __up_console_sem+0xf9/0x1a0 [ 1374.168340][T19496] hardirqs last disabled at (3348): [] __up_console_sem+0xde/0x1a0 [ 1374.178435][T19496] softirqs last enabled at (3368): [] __irq_exit_rcu+0x13b/0x230 [ 1374.188380][T19496] softirqs last disabled at (3379): [] __irq_exit_rcu+0x13b/0x230 [ 1374.199407][T19496] ---[ end trace 2df7f0744188fb03 ]--- [ 1374.204947][T19496] phram: ioremap failed [ 1374.457703][ T9580] Bluetooth: hci3: command 0x0406 tx timeout [ 1374.746406][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.885045][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.021253][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.096092][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.477641][ C0] net_ratelimit: 117 callbacks suppressed [ 1376.411807][ T154] device hsr_slave_0 left promiscuous mode [ 1376.421914][ T154] device hsr_slave_1 left promiscuous mode [ 1376.459994][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1376.467505][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1376.482293][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1376.510024][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1376.519220][ T154] device bridge_slave_1 left promiscuous mode [ 1376.526059][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.555307][ T154] device bridge_slave_0 left promiscuous mode [ 1376.573283][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.621400][ T154] device veth1_macvtap left promiscuous mode [ 1376.627519][ T154] device veth0_macvtap left promiscuous mode [ 1376.643879][ T154] device veth1_vlan left promiscuous mode [ 1376.650667][ T154] device veth0_vlan left promiscuous mode [ 1377.393755][ T154] team0 (unregistering): Port device team_slave_1 removed [ 1377.449156][ T154] team0 (unregistering): Port device team_slave_0 removed [ 1377.477228][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1377.526882][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1377.812451][ T154] bond0 (unregistering): Released all slaves [ 1379.703008][ T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.766416][ T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.825675][ T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.884762][ T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.042011][ T154] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.105080][ T154] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.159911][ T154] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.242170][ T154] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.396216][ T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.456372][ T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.515702][ T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.590245][ T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.743145][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.814891][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.837681][ C0] net_ratelimit: 61 callbacks suppressed [ 1380.874970][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.942494][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0