last executing test programs: 4m49.704108905s ago: executing program 2 (id=90): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x8, 0x4, 0xfa11, 0xffffffff}, 0x0) socket$inet6(0xa, 0x2, 0x0) sync() mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f00001dc000/0x1000)=nil], 0x0, &(0x7f0000001680), 0x0) sync() sync() sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0}) request_key(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0xfffffffffffffffe) 4m49.132217202s ago: executing program 2 (id=92): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x8081, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002") ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001") ioctl(r1, 0x932, &(0x7f0000000440)="020000000100") connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0xfffffffb, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4801}, 0x2000400c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7c}, {0x3, 0x2, 0x0, 0x401, 0x8001}, 0x9, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) shutdown(0xffffffffffffffff, 0x0) 4m48.734237881s ago: executing program 2 (id=94): io_uring_setup(0x1b54, &(0x7f0000000100)={0x0, 0x1d49, 0x400, 0x4, 0x3d8}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f00000003c0), 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) r5 = syz_open_dev$radio(&(0x7f0000000500), 0x3, 0x2) ioctl$VIDIOC_G_MODULATOR(r5, 0xc0445636, &(0x7f0000000540)={0x6, "9e58dca567d4404ef94f54652acb330ec0aabc93cd0dd92d6960273c928540d0", 0x800, 0x5, 0x8e, 0x0, 0x1}) sendto$inet(r0, 0x0, 0x0, 0x20008005, 0x0, 0x0) 4m46.099374952s ago: executing program 2 (id=96): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x800000000c, 0xfffffffffffffffd}) fcntl$lock(r4, 0x6, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x14, r5, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24044894}, 0x0) 4m45.150545026s ago: executing program 2 (id=98): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_VENDOR(r6, 0x0, 0x4024) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 4m42.010098092s ago: executing program 2 (id=104): bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) r4 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) mq_notify(r4, 0x0) write(r3, &(0x7f0000000040), 0x0) 4m26.110529617s ago: executing program 32 (id=104): bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) r4 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) mq_notify(r4, 0x0) write(r3, &(0x7f0000000040), 0x0) 10.204635517s ago: executing program 0 (id=545): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)='\b', 0x1}], 0x1, 0x0, 0x0, 0x804}], 0x1, 0x4048091) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), r3) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10009010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x30, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000810) 7.950635031s ago: executing program 3 (id=550): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)='\b', 0x1}], 0x1, 0x0, 0x0, 0x804}], 0x1, 0x4048091) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), r3) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10009010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x30, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000810) 6.911962189s ago: executing program 3 (id=552): syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file1\x00', 0x1000802, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xc, 0x27e, &(0x7f00000005c0)="$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") fspick(0xffffffffffffffff, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file0'}}]}) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0xcf0be2279761c16b) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000600)={r3, r3, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x120, 0x5, 0x5, 0x2, 0xfffffffe, 'syz0\x00'}) r5 = semget$private(0x0, 0x6, 0x1a8) semtimedop(r5, &(0x7f00000003c0)=[{0x4, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x1, 0x402, 0x1800}], 0x1) 6.69195789s ago: executing program 4 (id=554): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x200000b, 0x12, r1, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x10000}}, 0xa) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6.509397228s ago: executing program 1 (id=555): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x25000, 0xd000, 0x1}) timerfd_create(0x8, 0x80800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12) fcntl$setlease(r6, 0x400, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000200)={0xb000, 0x103000}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000040)={0xfffffffffffff001, 0x13000}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000080)}, 0x10) 5.904911216s ago: executing program 4 (id=556): mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000f86dd6100272400383afffc00000000eeffffffff010000000000000000000000000001011e9078000000006d2318d30f510001200100000000000000000000000000000000000000000000000800a7980a68d0d22b013a0081086500000000000000"], 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x20000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) 5.874705877s ago: executing program 0 (id=557): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000013020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0x22, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000008007e227f3ad7a91ba78c185431cb8329614f78c7e6", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2c}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x401}, 0x80, &(0x7f0000002640)=[{&(0x7f00000001c0)="b2", 0x1}], 0x1}, 0x844) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r4, 0x40047438, &(0x7f0000000040)) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/225, 0xe1}], 0x1) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 5.214183358s ago: executing program 3 (id=558): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1/file0\x00', 0x181201, 0x0) write(r3, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='1234567890\n', 0xb) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cec", 0x39) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000480)='dummy_udc.0\n', 0xc) write(r6, &(0x7f00000004c0)='\n', 0x1) 4.877682643s ago: executing program 4 (id=559): r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x1ff) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000002140)=0x1) r2 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r3, 0xc0086448, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4.778606038s ago: executing program 0 (id=560): syz_open_dev$dvb_dvr(&(0x7f0000000100), 0x0, 0x2600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000012700)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) syz_genetlink_get_family_id$tipc2(0x0, r1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYRES64=r7], 0xfffffdef}, 0x1, 0x0, 0x0, 0x40}, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) 4.655021794s ago: executing program 4 (id=561): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_emit_ethernet(0x4a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_open_dev$loop(0x0, 0xffff, 0x14f600) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) kexec_load(0x1, 0x0, 0x0, 0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000002480)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x140, 0x7}, 0xfffffffe, 0x4, 0x3, 0xffffffffffff52e9, r1, r1, 0x7}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'tr:\x00\x00\x00\x00\x00'}, 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_regs={0x12}}) 3.955222226s ago: executing program 1 (id=562): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100037040100"/20, @ANYRES32=r4, @ANYBLOB="c30801000b2eba2628001280090001007665746800000000180002801400010000000000", @ANYRES32=r4, @ANYBLOB="0002020081025495"], 0x48}, 0x1, 0x0, 0x0, 0x404c000}, 0x14) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x170, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe2, 0xa8, @random="e09163270d7070ac38774108f7165f0bba78f4fc06155b4f0e9129b4e0373219a4adf1f612d832cdac1147980bfdc15e6884ff090df3dccaf52cd7d2e1c4260e2aa6aae5d9916409b9286daf91fe86fa8d7a096efcdc68782029dacacb32fbd6fd5814ee94d979bae72a75d803113d9faa0ca506fbc1b3b50f37cf94ba54c5337018273c311fc2f854025d08393afee67258575f7adc228613e094c25cc262090f192798ed0c954938ef752b6c4e08ccf06375eadbee70dcc32bbcf9b5aa433fc518964e3727f844c0024c7c0c1d9efae5fa24793898eed18b274a788865"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x170}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000fcb000)=0x3, 0x4) close(r6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r1, r0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x0, 0x10000000}, @flat=@binder={0x73622a85, 0x100}, @flat=@binder={0x73622a85, 0xa, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x82000000000006}) 3.641014051s ago: executing program 4 (id=563): setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000100)=0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='atkbd', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x1000000, 0x0, 0x0, 0x5, 0x8081, r2, 0x0}]) write(r1, &(0x7f0000000100)='slave-24c02 0x1022', 0x12) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r6, 0x8) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', r5, 0x4000, r4}, 0x18) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r7, &(0x7f0000000180)='tcpci 0x2', 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2c, 0x200, {0x0, 0x0, 0x12, 0x0, {0xc, 0xd}, {0xffff, 0x3}, {0x2, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4000853, 0x1ff, 0x43ff, 0x1, 0x8005}, 0x0, 0x10000000, 0x2, 0x5, 0x6, 0x18, 0x13, 0xa, 0x0, 0x0, {0x0, 0x2521, 0xff, 0x9, 0x81, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4048810}, 0x2000000) r8 = epoll_create1(0x0) r9 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) fanotify_init(0x20, 0x0) write$P9_RFSYNC(r9, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7) 3.586584123s ago: executing program 0 (id=564): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x200000b, 0x12, r1, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x10000}}, 0xa) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.465419669s ago: executing program 3 (id=565): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)='\b', 0x1}], 0x1, 0x0, 0x0, 0x804}], 0x1, 0x4048091) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), r3) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10009010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x30, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000810) 3.338452525s ago: executing program 1 (id=566): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f00000008c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3f}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x52, 0x39, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566a945d7e924cc9136ff00112233445575778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x62, 0x31, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x33, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x3d}, 0x48, r0) add_key$fscrypt_provisioning(&(0x7f0000000380), &(0x7f00000007c0)={'syz', 0x3}, &(0x7f0000000800)={0x1, 0x0, @d}, 0x18, r0) request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)=']$^\x00', r0) 3.320367156s ago: executing program 0 (id=567): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sysinfo(0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89b1, &(0x7f0000000540)={'macvlan1\x00', @ifru_map={0x2, 0xf, 0xd, 0x2, 0x9, 0x8}}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0xe, &(0x7f0000000100)={@local, @remote, @void, {@generic={0x6003}}}, 0x0) 2.213374457s ago: executing program 0 (id=568): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000013020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2c}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x401}, 0x80, &(0x7f0000002640)=[{&(0x7f00000001c0)="b2", 0x1}], 0x1}, 0x844) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r3, 0x40047438, &(0x7f0000000040)) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/225, 0xe1}], 0x1) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 2.13577805s ago: executing program 1 (id=569): r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x1ff) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000002140)=0x1) r1 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r2, 0xc0086448, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.976909968s ago: executing program 3 (id=570): io_uring_setup(0x3f10, &(0x7f00000000c0)={0x0, 0x7fd4, 0x40, 0x0, 0x3d7}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x200) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xfffe) bpf$MAP_CREATE(0x0, 0x0, 0x50) getpriority(0x0, 0xffffffffffffffff) ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, 0x0) 1.93382474s ago: executing program 1 (id=571): timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb3209000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123301, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt(r1, 0x85, 0x7d, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x102, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) close(0x3) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$XFS_IOC_GETPARENTS(r2, 0xc028583e, &(0x7f0000000480)={{[0x1, 0xa86, 0x3, 0x200]}, 0x0, 0x0, 0x7, 0x0, &(0x7f00000003c0)}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2800009) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00001ae000/0x2000)=nil, 0x2000, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 165.541532ms ago: executing program 3 (id=572): mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) write(0xffffffffffffffff, &(0x7f0000000300)='pcspkr', 0x6) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000900), 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') 2.09834ms ago: executing program 1 (id=573): r0 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=574): socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) semctl$IPC_INFO(0x0, 0x1, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='net/snmp6\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb77d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) socket$inet6(0xa, 0x3, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044081}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.175' (ED25519) to the list of known hosts. [ 77.129806][ T5766] cgroup: Unknown subsys name 'net' [ 77.260322][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.952297][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.025615][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.034439][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.043964][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.051728][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.063188][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.071282][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.079652][ T5793] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.087128][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.094939][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.108353][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.116651][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.116996][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.125753][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.139055][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.147144][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.147903][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.156524][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.162142][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.171354][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.183242][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.191516][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.199170][ T5090] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.199770][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.214709][ T5090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.691905][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 81.756351][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 81.778070][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 81.809554][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 81.925448][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.933564][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.941121][ T5779] bridge_slave_0: entered allmulticast mode [ 81.948167][ T5779] bridge_slave_0: entered promiscuous mode [ 81.994452][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.001596][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.009700][ T5779] bridge_slave_1: entered allmulticast mode [ 82.022900][ T5779] bridge_slave_1: entered promiscuous mode [ 82.155381][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.162539][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.182844][ T5778] bridge_slave_0: entered allmulticast mode [ 82.189834][ T5778] bridge_slave_0: entered promiscuous mode [ 82.205885][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.222783][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.229990][ T5778] bridge_slave_1: entered allmulticast mode [ 82.237963][ T5778] bridge_slave_1: entered promiscuous mode [ 82.249357][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.276394][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.298047][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.306017][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.318745][ T5777] bridge_slave_0: entered allmulticast mode [ 82.327501][ T5777] bridge_slave_0: entered promiscuous mode [ 82.361114][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.368526][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.381699][ T5780] bridge_slave_0: entered allmulticast mode [ 82.390950][ T5780] bridge_slave_0: entered promiscuous mode [ 82.469072][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.481971][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.489640][ T5777] bridge_slave_1: entered allmulticast mode [ 82.502911][ T5777] bridge_slave_1: entered promiscuous mode [ 82.529465][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.537347][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.545296][ T5780] bridge_slave_1: entered allmulticast mode [ 82.558684][ T5780] bridge_slave_1: entered promiscuous mode [ 82.580197][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.623205][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.636260][ T5779] team0: Port device team_slave_0 added [ 82.648362][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.660010][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.672572][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.712165][ T5779] team0: Port device team_slave_1 added [ 82.721069][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.764009][ T5778] team0: Port device team_slave_0 added [ 82.793506][ T5777] team0: Port device team_slave_0 added [ 82.801171][ T5778] team0: Port device team_slave_1 added [ 82.830828][ T5780] team0: Port device team_slave_0 added [ 82.838681][ T5777] team0: Port device team_slave_1 added [ 82.857481][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.864605][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.890850][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.903840][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.910817][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.937339][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.950884][ T5780] team0: Port device team_slave_1 added [ 82.968690][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.978430][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.005447][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.017432][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.024655][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.051480][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.101145][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.109657][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.135946][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.163654][ T51] Bluetooth: hci2: command tx timeout [ 83.174659][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.181729][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.210861][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.223713][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.230678][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.256735][ T51] Bluetooth: hci0: command tx timeout [ 83.262259][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.273736][ T5789] Bluetooth: hci1: command tx timeout [ 83.303423][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.310655][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.336988][ T51] Bluetooth: hci3: command tx timeout [ 83.348224][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.396416][ T5778] hsr_slave_0: entered promiscuous mode [ 83.404103][ T5778] hsr_slave_1: entered promiscuous mode [ 83.434953][ T5779] hsr_slave_0: entered promiscuous mode [ 83.441841][ T5779] hsr_slave_1: entered promiscuous mode [ 83.448301][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.456293][ T5779] Cannot create hsr debugfs directory [ 83.481812][ T5777] hsr_slave_0: entered promiscuous mode [ 83.488471][ T5777] hsr_slave_1: entered promiscuous mode [ 83.496316][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.504006][ T5777] Cannot create hsr debugfs directory [ 83.563684][ T5780] hsr_slave_0: entered promiscuous mode [ 83.570057][ T5780] hsr_slave_1: entered promiscuous mode [ 83.577140][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.584885][ T5780] Cannot create hsr debugfs directory [ 83.983945][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.002277][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.032160][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.045063][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.094971][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.108838][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.119676][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.131369][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.211452][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.236862][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.247619][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.259180][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.345989][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.357765][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.371177][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.389179][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.521917][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.555728][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.585833][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.600849][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.608232][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.624938][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.648329][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.671575][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.678740][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.698670][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.705904][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.720797][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.745360][ T3437] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.752501][ T3437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.772906][ T3437] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.780119][ T3437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.816171][ T3437] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.823521][ T3437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.858260][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.967757][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.048249][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.055539][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.076122][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.083362][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.220835][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.244240][ T51] Bluetooth: hci2: command tx timeout [ 85.325221][ T51] Bluetooth: hci0: command tx timeout [ 85.325512][ T5789] Bluetooth: hci1: command tx timeout [ 85.396830][ T5779] veth0_vlan: entered promiscuous mode [ 85.403438][ T5789] Bluetooth: hci3: command tx timeout [ 85.450234][ T5779] veth1_vlan: entered promiscuous mode [ 85.569802][ T5779] veth0_macvtap: entered promiscuous mode [ 85.593954][ T5779] veth1_macvtap: entered promiscuous mode [ 85.637586][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.667763][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.681052][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.716969][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.726633][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.736674][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.745502][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.775946][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.790059][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.924709][ T5777] veth0_vlan: entered promiscuous mode [ 85.986340][ T5780] veth0_vlan: entered promiscuous mode [ 85.995743][ T5777] veth1_vlan: entered promiscuous mode [ 86.006343][ T2911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.023394][ T2911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.037572][ T5778] veth0_vlan: entered promiscuous mode [ 86.092289][ T5780] veth1_vlan: entered promiscuous mode [ 86.101234][ T5778] veth1_vlan: entered promiscuous mode [ 86.118163][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.136317][ T5777] veth0_macvtap: entered promiscuous mode [ 86.143783][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.195521][ T5777] veth1_macvtap: entered promiscuous mode [ 86.221269][ T5780] veth0_macvtap: entered promiscuous mode [ 86.243552][ T5778] veth0_macvtap: entered promiscuous mode [ 86.257452][ T5778] veth1_macvtap: entered promiscuous mode [ 86.281769][ T5780] veth1_macvtap: entered promiscuous mode [ 86.320651][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.331936][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.357136][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.396081][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.409015][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.425584][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.523361][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.571040][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.635023][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.669121][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.710930][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.775280][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.814879][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.855212][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.894591][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.100399][ T788] cfg80211: failed to load regulatory.db [ 87.323193][ T5789] Bluetooth: hci2: command tx timeout [ 87.338795][ T5829] smpboot: CPU 1 is now offline [ 87.354968][ T5789] Bluetooth: hci1: command tx timeout [ 87.372143][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.402833][ T5789] Bluetooth: hci0: command tx timeout [ 87.412868][ T5789] Bluetooth: hci3: command tx timeout [ 87.418304][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.437276][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.450672][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.474401][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.529167][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.546853][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.577753][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.597104][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.609010][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.623500][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.637073][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.651890][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.666379][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.676033][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.686855][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.701918][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.720932][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.735856][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.747188][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.759657][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.783165][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.813746][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.889416][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.913055][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.934994][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.957230][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.148250][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.176568][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.235254][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.261182][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.319416][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.354315][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.415087][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.439669][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.566661][ T2911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.609276][ T2911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.623961][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.662530][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.842637][ C0] sched: RT throttling activated [ 89.842877][ T5789] Bluetooth: hci1: command tx timeout [ 90.159272][ T51] Bluetooth: hci2: command tx timeout [ 90.165282][ T51] Bluetooth: hci3: command tx timeout [ 90.170679][ T51] Bluetooth: hci0: command tx timeout [ 91.605106][ T5865] futex_wake_op: syz.2.3 tries to shift op by 144; fix this program [ 91.618138][ T5865] syz.2.3[5865]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.631056][ T5865] loop2: detected capacity change from 0 to 256 [ 91.669501][ T5862] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 91.730756][ T5865] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 91.778141][ T27] audit: type=1800 audit(1790233108.036:2): pid=5865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file1" dev="loop2" ino=1048592 res=0 errno=0 [ 91.847579][ T5865] syz.2.3: attempt to access beyond end of device [ 91.847579][ T5865] loop2: rw=0, sector=256, nr_sectors = 8 limit=256 [ 92.557180][ T5869] loop3: detected capacity change from 0 to 32768 [ 92.619997][ T5869] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 92.756945][ T5869] XFS (loop3): Ending clean mount [ 92.806038][ T5869] XFS (loop3): Quotacheck needed: Please wait. [ 92.962915][ T5869] XFS (loop3): Quotacheck: Done. [ 93.645140][ T5777] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 102.833239][ T5920] Zero length message leads to an empty skb [ 105.424648][ T5934] syzkaller0: entered promiscuous mode [ 105.449786][ T5934] syzkaller0: entered allmulticast mode [ 113.534768][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28'. [ 114.699076][ T27] audit: type=1326 audit(1790233130.976:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.1.33" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fceb1f9e159 code=0x0 [ 116.247157][ T5998] loop3: detected capacity change from 0 to 2048 [ 117.434722][ T5998] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 117.509539][ T5998] UDF-fs: warning (device loop3): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 121.675987][ T6017] af_packet: tpacket_rcv: packet too big, clamped from 324 to 4294967272. macoff=96 [ 121.954114][ T6019] Bluetooth: MGMT ver 1.22 [ 122.115770][ T6021] loop1: detected capacity change from 0 to 164 [ 124.804246][ T6027] 0x7073726500000000-0x7073726500306e61 : "" [ 124.810504][ T6027] mtd: partition "" is out of reach -- disabled [ 124.826161][ T6027] ftl_cs: FTL header not found. [ 125.445316][ T788] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 125.715234][ T788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.766464][ T788] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 125.784697][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.904538][ T788] usb 2-1: Product: syz [ 125.922952][ T788] usb 2-1: Manufacturer: syz [ 125.940498][ T788] usb 2-1: SerialNumber: syz [ 126.228813][ T6032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.269814][ T6032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.809434][ T6032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.863311][ T6032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.370473][ T788] usb 2-1: selecting invalid altsetting 1 [ 128.421275][ T788] speedtch 2-1:1.0: speedtch_bind: setting interface to 1 failed (-22)! [ 128.490533][ T788] speedtch 2-1:1.0: usbatm_usb_probe: bind failed: -22! [ 128.533356][ T788] speedtch: probe of 2-1:1.0 failed with error -22 [ 128.615348][ T788] usb 2-1: selecting invalid altsetting 1 [ 128.621569][ T788] speedtch 2-1:1.1: speedtch_bind: setting interface to 1 failed (-22)! [ 128.674657][ T6058] loop3: detected capacity change from 0 to 128 [ 128.681619][ T6058] ======================================================= [ 128.681619][ T6058] WARNING: The mand mount option has been deprecated and [ 128.681619][ T6058] and is ignored by this kernel. Remove the mand [ 128.681619][ T6058] option from the mount to silence this warning. [ 128.681619][ T6058] ======================================================= [ 128.764315][ T788] speedtch 2-1:1.1: usbatm_usb_probe: bind failed: -22! [ 128.771381][ T788] speedtch: probe of 2-1:1.1 failed with error -22 [ 129.296528][ T788] usb 2-1: USB disconnect, device number 2 [ 129.429448][ T6058] EXT4-fs (loop3): Test dummy encryption mode enabled [ 129.464821][ T6058] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.512550][ T6058] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 130.040464][ T5777] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.361987][ T6067] loop3: detected capacity change from 0 to 32768 [ 130.466313][ T6067] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.59 (6067) [ 130.491020][ T6067] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 130.502211][ T6067] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 130.511204][ T6067] BTRFS info (device loop3): setting nodatasum [ 130.517422][ T6067] BTRFS info (device loop3): force zlib compression, level 3 [ 130.525149][ T6067] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 130.534631][ T6067] BTRFS info (device loop3): use lzo compression, level 0 [ 130.541781][ T6067] BTRFS info (device loop3): turning on flush-on-commit [ 130.549049][ T6067] BTRFS info (device loop3): enabling auto defrag [ 130.555891][ T6067] BTRFS info (device loop3): max_inline at 4096 [ 130.562480][ T6067] BTRFS info (device loop3): using free space tree [ 130.852779][ T6067] BTRFS info (device loop3): enabling ssd optimizations [ 131.130207][ T6085] Console: switching to colour VGA+ 80x25 [ 131.197976][ T6085] Console: switching to colour frame buffer device 128x48 [ 133.221793][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.231523][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.697698][ T5777] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 136.565565][ T6121] mmap: syz.3.63 (6121) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 140.177415][ T6133] loop1: detected capacity change from 0 to 512 [ 140.230966][ T5829] IPVS: starting estimator thread 0... [ 140.312108][ T6133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.392890][ T6134] IPVS: using max 32 ests per chain, 76800 per kthread [ 140.618659][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.864840][ T6141] netlink: 'syz.0.71': attribute type 9 has an invalid length. [ 142.553049][ T6151] netlink: 'syz.0.74': attribute type 1 has an invalid length. [ 142.718070][ T6153] nvmet_rdma: address family 255 not supported [ 143.807692][ T27] audit: type=1326 audit(1790233159.536:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.3.76" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e9139e159 code=0x0 [ 143.984158][ T6164] loop0: detected capacity change from 0 to 512 [ 144.085634][ T6164] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 144.146357][ T6164] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.77: invalid indirect mapped block 256 (level 1) [ 144.262665][ T6164] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.77: invalid indirect mapped block 2683928664 (level 1) [ 144.351766][ T6164] EXT4-fs (loop0): 1 truncate cleaned up [ 144.400941][ T6164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.446516][ T6176] loop2: detected capacity change from 0 to 512 [ 144.473503][ T6176] ext4: Bad value for 'data' [ 144.605134][ T5794] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 146.058440][ T27] audit: type=1800 audit(1790233162.276:5): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.77" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 146.245402][ T6184] Bluetooth: ISO socket layer initialized [ 146.318183][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.806287][ T6201] ip6gretap1: entered allmulticast mode [ 147.813489][ T6201] batman_adv: batadv0: Adding interface: ip6gretap1 [ 147.820107][ T6201] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.845828][ T6201] batman_adv: batadv0: Interface activated: ip6gretap1 [ 147.986694][ T6203] netlink: 'syz.0.84': attribute type 1 has an invalid length. [ 150.563416][ T6209] gretap1: entered promiscuous mode [ 150.837931][ T6216] atomic_op ffff88805ced1198 conn xmit_atomic 0000000000000000 [ 151.979893][ T6236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.058002][ T6235] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 155.137650][ T6255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.89'. [ 156.379238][ T6270] overlayfs: workdir and upperdir must be separate subtrees [ 157.886043][ T6280] loop3: detected capacity change from 0 to 164 [ 158.703851][ T6285] rock: directory entry would overflow storage [ 158.710231][ T6285] rock: sig=0x4f50, size=4, remaining=3 [ 158.715867][ T6285] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 159.052475][ T6288] loop1: detected capacity change from 0 to 1024 [ 159.597204][ T6288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.218661][ T27] audit: type=1800 audit(1790233176.456:6): pid=6302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.102" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 160.465571][ T27] audit: type=1800 audit(1790233176.476:7): pid=6300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.102" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 160.559390][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.204177][ T6348] dlm: Unknown command passed to DLM device : 3 [ 168.204177][ T6348] [ 169.425582][ T6349] Cannot find add_set index 0 as target [ 169.863473][ T6340] Bluetooth: MGMT ver 1.22 [ 173.614920][ T6369] zram0: detected capacity change from 0 to 8 [ 178.562776][ T6394] loop1: detected capacity change from 0 to 65536 [ 178.689440][ T6394] syz.3.116: attempt to access beyond end of device [ 178.689440][ T6394] loop0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 178.721243][ T5789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.734505][ T5789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.746080][ T5789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.754888][ T5789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.762408][ T5789] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 178.774058][ T5789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.792698][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.814728][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.822196][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.833286][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.845728][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 178.872707][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 179.132150][ T6394] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 179.264266][ T6394] device-mapper: ioctl: error adding target to table [ 179.889467][ T6399] chnl_net:caif_netlink_parms(): no params data found [ 180.160665][ T6414] loop3: detected capacity change from 0 to 128 [ 180.798768][ T6420] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 181.002922][ T5789] Bluetooth: hci4: command tx timeout [ 181.137496][ T6399] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.263463][ T6399] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.326765][ T6399] bridge_slave_0: entered allmulticast mode [ 181.503509][ T6399] bridge_slave_0: entered promiscuous mode [ 181.541158][ T6399] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.840786][ T6399] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.872188][ T6399] bridge_slave_1: entered allmulticast mode [ 181.905670][ T6399] bridge_slave_1: entered promiscuous mode [ 182.906491][ T6399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.282078][ T6445] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6445] [ 183.900029][ T5789] Bluetooth: hci4: command tx timeout [ 186.101557][ T5789] Bluetooth: hci4: command tx timeout [ 186.198804][ T6399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.496800][ T5939] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.376193][ T5939] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.541824][ T6399] team0: Port device team_slave_0 added [ 187.620808][ T6399] team0: Port device team_slave_1 added [ 187.741300][ T5939] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.546070][ T6466] xt_policy: output policy not valid in PREROUTING and INPUT [ 188.581584][ T5789] Bluetooth: hci4: command tx timeout [ 188.649432][ T5939] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.819819][ T6399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.495444][ T6399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.610033][ T6399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.635354][ T6474] page:ffffea0001220000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48800 [ 190.646152][ T6474] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 190.653390][ T6474] page_type: 0xffffffff() [ 190.657758][ T6474] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 190.666476][ T6474] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 190.675157][ T6474] page dumped because: unmovable page [ 190.680571][ T6474] page_owner tracks the page as allocated [ 190.686681][ T6474] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 6381, tgid 6381 (syz-executor), ts 177068271970, free_ts 157597477629 [ 190.705428][ T6474] post_alloc_hook+0x1c1/0x200 [ 190.710241][ T6474] get_page_from_freelist+0x2181/0x22a0 [ 190.715900][ T6474] __alloc_pages+0x1f0/0x460 [ 190.720564][ T6474] __vmalloc_node_range+0x962/0x1320 [ 190.726064][ T6474] vmalloc_user+0x74/0x80 [ 190.730462][ T6474] kcov_ioctl+0x58/0x610 [ 190.734797][ T6474] __se_sys_ioctl+0xfd/0x170 [ 190.739439][ T6474] do_syscall_64+0x55/0xb0 [ 190.743936][ T6474] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.749886][ T6474] page last free stack trace: [ 190.754636][ T6474] __free_pages_ok+0x994/0xad0 [ 190.759447][ T6474] free_large_kmalloc+0x101/0x1b0 [ 190.764598][ T6474] skb_release_data+0x609/0x7f0 [ 190.769582][ T6474] kfree_skb_reason+0x10e/0x170 [ 190.774506][ T6474] tipc_recvstream+0x756/0xe70 [ 190.779304][ T6474] ____sys_recvmsg+0x2bd/0x5d0 [ 190.784245][ T6474] ___sys_recvmsg+0x214/0x590 [ 190.788966][ T6474] __x64_sys_recvmsg+0x21e/0x2f0 [ 190.793979][ T6474] do_syscall_64+0x55/0xb0 [ 190.798442][ T6474] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.874465][ T6399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.881515][ T6399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.137953][ T6399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.140757][ T6483] netlink: 165 bytes leftover after parsing attributes in process `syz.1.140'. [ 192.484629][ T6399] hsr_slave_0: entered promiscuous mode [ 192.648182][ T6399] hsr_slave_1: entered promiscuous mode [ 192.666195][ T6399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.925930][ T6487] FAULT_INJECTION: forcing a failure. [ 192.925930][ T6487] name failslab, interval 1, probability 0, space 0, times 1 [ 192.938984][ T6487] CPU: 0 PID: 6487 Comm: syz.0.130 Not tainted syzkaller #0 [ 192.946283][ T6487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.956356][ T6487] Call Trace: [ 192.959641][ T6487] [ 192.962577][ T6487] dump_stack_lvl+0x18c/0x250 [ 192.967271][ T6487] ? show_regs_print_info+0x20/0x20 [ 192.972491][ T6487] ? load_image+0x420/0x420 [ 192.976994][ T6487] ? __might_sleep+0xe0/0xe0 [ 192.981589][ T6487] ? __lock_acquire+0x7d80/0x7d80 [ 192.986616][ T6487] should_fail_ex+0x394/0x4c0 [ 192.991316][ T6487] should_failslab+0x9/0x20 [ 192.995824][ T6487] slab_pre_alloc_hook+0x59/0x300 [ 193.000859][ T6487] ? rng_is_initialized+0x40/0x40 [ 193.005894][ T6487] ? ceph_create_client+0x6f/0x300 [ 193.011109][ T6487] __kmem_cache_alloc_node+0x53/0x250 [ 193.016494][ T6487] ? ceph_create_client+0x6f/0x300 [ 193.021622][ T6487] kmalloc_trace+0x2a/0xe0 [ 193.026231][ T6487] ceph_create_client+0x6f/0x300 [ 193.031196][ T6487] ceph_get_tree+0x1ca/0x1800 [ 193.035886][ T6487] ? bpf_lsm_capable+0x9/0x10 [ 193.040559][ T6487] ? security_capable+0x89/0xb0 [ 193.045407][ T6487] vfs_get_tree+0x8c/0x280 [ 193.049845][ T6487] vfs_cmd_create+0xe3/0x230 [ 193.054437][ T6487] __se_sys_fsconfig+0x70a/0x850 [ 193.059376][ T6487] ? __x64_sys_fsconfig+0xc0/0xc0 [ 193.064418][ T6487] ? lockdep_hardirqs_on+0x98/0x150 [ 193.069606][ T6487] ? __x64_sys_fsconfig+0x20/0xc0 [ 193.074629][ T6487] do_syscall_64+0x55/0xb0 [ 193.079053][ T6487] ? clear_bhb_loop+0x40/0x90 [ 193.083730][ T6487] ? clear_bhb_loop+0x40/0x90 [ 193.088404][ T6487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.094308][ T6487] RIP: 0033:0x7fee3e39e159 [ 193.098736][ T6487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.118336][ T6487] RSP: 002b:00007fee3c5f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 193.126743][ T6487] RAX: ffffffffffffffda RBX: 00007fee3e626090 RCX: 00007fee3e39e159 [ 193.134710][ T6487] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 193.142674][ T6487] RBP: 00007fee3e43506b R08: 0000000000000000 R09: 0000000000000000 [ 193.150724][ T6487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.158801][ T6487] R13: 00007fee3e626128 R14: 00007fee3e626090 R15: 00007ffc6e95ed38 [ 193.166869][ T6487] [ 193.194802][ T6399] Cannot create hsr debugfs directory [ 193.460959][ T5939] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 193.676021][ T5939] batman_adv: batadv0: Removing interface: ip6gretap1 [ 195.083123][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.089415][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.673915][ T6399] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 196.772332][ T6399] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 196.920611][ T6399] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 196.994991][ T6399] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 198.634049][ T6516] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 198.660732][ T6516] CIFS: Attempting to mount //127.0.0.1/share [ 198.898167][ T6516] CIFS: VFS: Error connecting to socket. Aborting operation. [ 198.905882][ T6516] CIFS: VFS: cifs_mount failed w/return code = -4 [ 200.620188][ T5939] hsr_slave_0: left promiscuous mode [ 200.660864][ T5939] hsr_slave_1: left promiscuous mode [ 200.865908][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.029716][ T5939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.062308][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.329886][ T5939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.372492][ T5939] bridge_slave_1: left allmulticast mode [ 201.401221][ T5939] bridge_slave_1: left promiscuous mode [ 201.428259][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.471916][ T5939] bridge_slave_0: left allmulticast mode [ 201.494370][ T5939] bridge_slave_0: left promiscuous mode [ 201.516855][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.605073][ T5939] veth1_macvtap: left promiscuous mode [ 201.622397][ T5939] veth0_macvtap: left promiscuous mode [ 201.655724][ T5939] veth1_vlan: left promiscuous mode [ 201.676801][ T5939] veth0_vlan: left promiscuous mode [ 202.494833][ T6558] FAULT_INJECTION: forcing a failure. [ 202.494833][ T6558] name failslab, interval 1, probability 0, space 0, times 0 [ 202.507641][ T6558] CPU: 0 PID: 6558 Comm: syz.1.150 Not tainted syzkaller #0 [ 202.514939][ T6558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.525009][ T6558] Call Trace: [ 202.528305][ T6558] [ 202.531234][ T6558] dump_stack_lvl+0x18c/0x250 [ 202.535935][ T6558] ? show_regs_print_info+0x20/0x20 [ 202.541148][ T6558] ? load_image+0x420/0x420 [ 202.545685][ T6558] ? __might_sleep+0xe0/0xe0 [ 202.550276][ T6558] ? __lock_acquire+0x7d80/0x7d80 [ 202.555302][ T6558] should_fail_ex+0x394/0x4c0 [ 202.559982][ T6558] should_failslab+0x9/0x20 [ 202.564503][ T6558] slab_pre_alloc_hook+0x59/0x300 [ 202.569528][ T6558] ? rng_is_initialized+0x40/0x40 [ 202.574558][ T6558] ? ceph_create_client+0x6f/0x300 [ 202.579675][ T6558] __kmem_cache_alloc_node+0x53/0x250 [ 202.585073][ T6558] ? ceph_create_client+0x6f/0x300 [ 202.590290][ T6558] kmalloc_trace+0x2a/0xe0 [ 202.594722][ T6558] ceph_create_client+0x6f/0x300 [ 202.599671][ T6558] ceph_get_tree+0x1ca/0x1800 [ 202.604356][ T6558] ? bpf_lsm_capable+0x9/0x10 [ 202.609029][ T6558] ? security_capable+0x89/0xb0 [ 202.613893][ T6558] vfs_get_tree+0x8c/0x280 [ 202.618308][ T6558] vfs_cmd_create+0xe3/0x230 [ 202.622903][ T6558] __se_sys_fsconfig+0x70a/0x850 [ 202.627864][ T6558] ? __x64_sys_fsconfig+0xc0/0xc0 [ 202.632893][ T6558] ? lockdep_hardirqs_on+0x98/0x150 [ 202.638088][ T6558] ? __x64_sys_fsconfig+0x20/0xc0 [ 202.643126][ T6558] do_syscall_64+0x55/0xb0 [ 202.647541][ T6558] ? clear_bhb_loop+0x40/0x90 [ 202.652217][ T6558] ? clear_bhb_loop+0x40/0x90 [ 202.656894][ T6558] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.662789][ T6558] RIP: 0033:0x7fceb1f9e159 [ 202.667204][ T6558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.686894][ T6558] RSP: 002b:00007fceb2d83028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 202.695335][ T6558] RAX: ffffffffffffffda RBX: 00007fceb2226180 RCX: 00007fceb1f9e159 [ 202.703302][ T6558] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 202.711270][ T6558] RBP: 00007fceb203506b R08: 0000000000000000 R09: 0000000000000000 [ 202.719253][ T6558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.727235][ T6558] R13: 00007fceb2226218 R14: 00007fceb2226180 R15: 00007ffc6cd1d068 [ 202.735227][ T6558] [ 202.984636][ T6563] syz.3.151: attempt to access beyond end of device [ 202.984636][ T6563] loop3: rw=0, sector=0, nr_sectors = 8 limit=0 [ 203.098478][ T6563] F2FS-fs (loop3): Unable to read 1th superblock [ 203.189414][ T6563] syz.3.151: attempt to access beyond end of device [ 203.189414][ T6563] loop3: rw=0, sector=8, nr_sectors = 8 limit=0 [ 203.409189][ T6563] F2FS-fs (loop3): Unable to read 2th superblock [ 206.796691][ T6576] loop3: detected capacity change from 0 to 512 [ 207.030509][ T6576] EXT4-fs (loop3): Test dummy encryption mode enabled [ 207.037556][ T6576] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 207.050756][ T6576] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 207.069209][ T6576] EXT4-fs (loop3): 1 truncate cleaned up [ 207.076169][ T6576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.334683][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.403663][ T5939] team0 (unregistering): Port device team_slave_1 removed [ 207.497163][ T5939] team0 (unregistering): Port device team_slave_0 removed [ 207.551839][ T5939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.607969][ T5939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.969965][ T5939] bond0 (unregistering): Released all slaves [ 208.074817][ T6561] netlink: 'syz.0.158': attribute type 39 has an invalid length. [ 208.158182][ T6583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.156'. [ 208.231687][ T6583] bond1: entered promiscuous mode [ 208.245094][ T6583] bond1: entered allmulticast mode [ 209.355720][ T6583] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.389805][ T6584] erspan1: entered allmulticast mode [ 209.454185][ T6584] erspan1: entered promiscuous mode [ 209.459842][ T6584] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 209.575390][ T6399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.649593][ T6399] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.801282][ T3507] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.808486][ T3507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.897599][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.904783][ T3507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.960734][ T6608] serio: Serial port ttyS3 [ 213.338442][ T6399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.355079][ T6632] loop1: detected capacity change from 0 to 164 [ 217.135208][ T6399] veth0_vlan: entered promiscuous mode [ 217.274746][ T6399] veth1_vlan: entered promiscuous mode [ 217.410338][ T6399] veth0_macvtap: entered promiscuous mode [ 217.459703][ T6399] veth1_macvtap: entered promiscuous mode [ 217.497055][ T6640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.168'. [ 217.637215][ T6640] bond1: entered promiscuous mode [ 217.673019][ T6640] bond1: entered allmulticast mode [ 217.678441][ T6640] 8021q: adding VLAN 0 to HW filter on device bond1 [ 217.754731][ T6643] erspan1: entered allmulticast mode [ 218.850212][ T6643] erspan1: entered promiscuous mode [ 218.965327][ T6643] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 219.043429][ T6399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.098022][ T6399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.135094][ T6399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.175668][ T6399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.216048][ T6399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.253209][ T6399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.297114][ T6399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.379365][ T6399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.472675][ T6399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.668376][ T6399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.976232][ T6662] loop3: detected capacity change from 0 to 512 [ 219.983588][ T6399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.020626][ T6662] EXT4-fs: inline encryption not supported [ 220.050000][ T6399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.081407][ T6662] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 220.116859][ T6399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.137982][ T6662] EXT4-fs (loop3): Invalid default hash set in the superblock [ 220.181881][ T6399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.301378][ T6399] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.418515][ T6399] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.437666][ T6399] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.465108][ T6399] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.508770][ T6666] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 220.836116][ T5937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.885802][ T5937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.051307][ T3480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.239867][ T3480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.779238][ T6685] CIFS: Attempting to mount //127.0.0.1/share [ 222.003637][ T6688] loop4: detected capacity change from 0 to 32768 [ 222.122240][ T6688] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 222.196784][ T6688] XFS (loop4): Ending clean mount [ 222.210200][ T6688] XFS (loop4): Quotacheck needed: Please wait. [ 222.584328][ T6685] CIFS: VFS: Error connecting to socket. Aborting operation. [ 222.591792][ T6685] CIFS: VFS: cifs_mount failed w/return code = -4 [ 222.991248][ T6688] XFS (loop4): Quotacheck: Done. [ 224.410275][ T6399] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 231.203445][ T6745] Mass Storage Function, version: 2009/09/11 [ 231.209668][ T6745] LUN: removable file: (no medium) [ 231.285089][ T6745] LUN: removable file: (no medium) [ 234.738550][ T6769] overlayfs: overlapping lowerdir path [ 236.438979][ T6796] loop4: detected capacity change from 0 to 8192 [ 237.495025][ T6815] loop4: detected capacity change from 0 to 164 [ 237.584452][ T6814] loop3: detected capacity change from 0 to 2048 [ 237.938378][ T6817] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 237.957405][ T6815] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 238.086369][ T6814] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 238.181395][ T6814] UDF-fs: warning (device loop3): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 239.444085][ T6824] CIFS: Attempting to mount //127.0.0.1/share [ 239.566841][ T6824] CIFS: VFS: Error connecting to socket. Aborting operation. [ 240.026301][ T6824] CIFS: VFS: cifs_mount failed w/return code = -111 [ 240.319997][ T6836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.735751][ T6844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.531543][ T6864] loop3: detected capacity change from 0 to 1024 [ 243.539150][ T6864] EXT4-fs (loop3): filesystem is read-only [ 243.545518][ T6864] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 1280 [ 244.208040][ T6866] CIFS: Attempting to mount //127.0.0.1/share [ 244.875528][ T6866] CIFS: VFS: Error connecting to socket. Aborting operation. [ 244.921146][ T6866] CIFS: VFS: cifs_mount failed w/return code = -4 [ 245.585620][ T6887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.661251][ T6930] CIFS: Attempting to mount //127.0.0.1/share [ 250.096298][ T6930] CIFS: VFS: Error connecting to socket. Aborting operation. [ 250.786036][ T6930] CIFS: VFS: cifs_mount failed w/return code = -4 [ 251.200646][ T6945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.462464][ T6952] loop1: detected capacity change from 0 to 512 [ 251.516945][ T6952] EXT4-fs (loop1): Test dummy encryption mode enabled [ 251.524085][ T6952] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 251.574038][ T6952] EXT4-fs (loop1): 1 truncate cleaned up [ 251.580456][ T6952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.518891][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.045855][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.052261][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.254764][ T6993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.292194][ T6983] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 261.315972][ T6983] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 262.149392][ T7011] loop4: detected capacity change from 0 to 512 [ 262.169828][ T7011] EXT4-fs (loop4): Test dummy encryption mode enabled [ 262.176943][ T7011] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 262.203894][ T7011] EXT4-fs (loop4): 1 truncate cleaned up [ 262.210333][ T7011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.233916][ T7010] capability: warning: `syz.1.247' uses deprecated v2 capabilities in a way that may be insecure [ 263.369540][ T6399] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.253907][ T7030] CIFS: Attempting to mount //127.0.0.1/share [ 265.265422][ T7033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.342926][ T7030] CIFS: VFS: Error connecting to socket. Aborting operation. [ 266.350380][ T7030] CIFS: VFS: cifs_mount failed w/return code = -4 [ 266.392668][ T27] audit: type=1326 audit(1790233282.666:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.1.255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fceb1f9e159 code=0x0 [ 266.415793][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.036589][ T7088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.390498][ T7096] nvmet: adding nsid 1 to subsystem testnqn [ 277.449106][ T7100] nvmet_rdma: address family 255 not supported [ 278.830970][ T8] nvmet: connect request for invalid subsystem t! [ 278.885036][ T7096] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 279.711871][ T7107] loop4: detected capacity change from 0 to 8192 [ 282.635357][ T7141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.243874][ T7179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.449776][ T7177] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 289.083482][ T7206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.006747][ T7217] loop4: detected capacity change from 0 to 1024 [ 291.481170][ T7218] null_blk: disk rnullb0 created [ 295.978351][ T7264] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.265919][ T27] audit: type=1804 audit(1790233312.546:9): pid=7268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.304" name="/newroot/33/file1" dev="fuse" ino=1 res=1 errno=0 [ 296.865348][ T7275] SET target dimension over the limit! [ 296.986328][ T7274] CIFS: Attempting to mount //127.0.0.1/share [ 297.706448][ T7274] CIFS: VFS: Error connecting to socket. Aborting operation. [ 297.714254][ T7274] CIFS: VFS: cifs_mount failed w/return code = -4 [ 298.241832][ T7276] syz.3.305 uses obsolete (PF_INET,SOCK_PACKET) [ 299.250352][ T7295] nvmet_rdma: enabling port 1 (127.0.0.1:4420) [ 299.959560][ T7311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 300.041071][ T7295] nvme nvme0: failed to connect socket: -512 [ 300.475496][ T7316] ip_tables: iptables: counters copy to user failed while replacing table [ 302.207826][ T7325] macvlan1: entered promiscuous mode [ 302.329386][ T7329] CIFS: Attempting to mount //127.0.0.1/share [ 303.028465][ T7329] CIFS: VFS: Error connecting to socket. Aborting operation. [ 303.036276][ T7329] CIFS: VFS: cifs_mount failed w/return code = -4 [ 304.204387][ T5789] Bluetooth: hci4: command 0x0406 tx timeout [ 304.213252][ T7337] ªªªªªª: renamed from vlan0 (while UP) [ 304.442308][ T7342] CIFS: Attempting to mount //127.0.0.1/share [ 305.132098][ T7342] CIFS: VFS: Error connecting to socket. Aborting operation. [ 305.164947][ T7342] CIFS: VFS: cifs_mount failed w/return code = -4 [ 310.192460][ T7404] netlink: 32 bytes leftover after parsing attributes in process `syz.4.337'. [ 310.231077][ T7406] CIFS: Attempting to mount //127.0.0.1/share [ 311.306483][ T7406] CIFS: VFS: Error connecting to socket. Aborting operation. [ 311.361033][ T7404] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 311.374440][ T7406] CIFS: VFS: cifs_mount failed w/return code = -4 [ 311.525771][ T5939] rtrs_client L2018: : CM error (CM event: address error, err: -19) [ 311.609249][ T7404] rtrs_client L2618: : init_conns() failed: err=-113 path=@ip:27.0.0.1 [:0] [ 311.718065][ T7422] loop3: detected capacity change from 0 to 256 [ 311.830223][ T7422] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 312.079636][ T27] audit: type=1800 audit(1790233328.356:10): pid=7422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.341" name="file1" dev="loop3" ino=1048627 res=0 errno=0 [ 312.100323][ C0] vkms_vblank_simulate: vblank timer overrun [ 313.925181][ T7434] CIFS: Attempting to mount //127.0.0.1/share [ 314.107974][ T7434] CIFS: VFS: Error connecting to socket. Aborting operation. [ 314.115668][ T7434] CIFS: VFS: cifs_mount failed w/return code = -4 [ 317.526165][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.752066][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.933488][ T7472] CIFS: Attempting to mount //127.0.0.1/share [ 320.466719][ T7472] CIFS: VFS: Error connecting to socket. Aborting operation. [ 320.475573][ T7472] CIFS: VFS: cifs_mount failed w/return code = -4 [ 324.790639][ T7498] loop3: detected capacity change from 0 to 1024 [ 324.876054][ T7498] xt_TCPMSS: Only works on TCP SYN packets [ 324.905379][ T7497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.156481][ T7513] sctp: failed to load transform for md5: -4 [ 329.573338][ T7524] CIFS: Attempting to mount //127.0.0.1/share [ 330.171708][ T7524] CIFS: VFS: Error connecting to socket. Aborting operation. [ 330.341443][ T7524] CIFS: VFS: cifs_mount failed w/return code = -4 [ 330.652379][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 330.662363][ T51] CPU: 0 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 330.669752][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 330.679801][ T51] Workqueue: hci4 hci_rx_work [ 330.684485][ T51] Call Trace: [ 330.687760][ T51] [ 330.690687][ T51] dump_stack_lvl+0x18c/0x250 [ 330.695367][ T51] ? show_regs_print_info+0x20/0x20 [ 330.700564][ T51] ? load_image+0x420/0x420 [ 330.705071][ T51] sysfs_create_dir_ns+0x26e/0x2a0 [ 330.710176][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 330.715214][ T51] ? sysfs_warn_dup+0xa0/0xa0 [ 330.719926][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 330.725158][ T51] kobject_add_internal+0x617/0xc90 [ 330.730365][ T51] kobject_add+0x164/0x240 [ 330.734800][ T51] ? kobject_init+0x1d0/0x1d0 [ 330.739479][ T51] ? get_device_parent+0x366/0x390 [ 330.744598][ T51] device_add+0x3fa/0xc40 [ 330.748945][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 330.753902][ T51] le_conn_complete_evt+0xe9a/0x1480 [ 330.759200][ T51] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 330.765449][ T51] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 330.771095][ T51] ? mutex_unlock+0x10/0x10 [ 330.775602][ T51] ? skb_pull_data+0xf0/0x1f0 [ 330.780292][ T51] hci_le_conn_complete_evt+0x187/0x440 [ 330.785844][ T51] ? hci_remote_host_features_evt+0x150/0x150 [ 330.791927][ T51] hci_event_packet+0x7b4/0x1280 [ 330.796864][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 330.801887][ T51] ? lock_chain_count+0x20/0x20 [ 330.806735][ T51] ? bis_list+0x290/0x290 [ 330.811064][ T51] ? kcov_remote_start+0x513/0x810 [ 330.816174][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 330.821380][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 330.826578][ T51] hci_rx_work+0x43a/0xd60 [ 330.831004][ T51] ? process_scheduled_works+0x975/0x1600 [ 330.836742][ T51] process_scheduled_works+0xa60/0x1600 [ 330.842331][ T51] ? worker_attach_to_pool+0x370/0x370 [ 330.847806][ T51] ? assign_work+0x3cc/0x5d0 [ 330.852410][ T51] worker_thread+0xa5e/0xfe0 [ 330.857030][ T51] kthread+0x2fa/0x390 [ 330.861123][ T51] ? pr_cont_work+0x550/0x550 [ 330.865799][ T51] ? kthread_blkcg+0xd0/0xd0 [ 330.870471][ T51] ret_from_fork+0x48/0x80 [ 330.874884][ T51] ? kthread_blkcg+0xd0/0xd0 [ 330.879466][ T51] ret_from_fork_asm+0x11/0x20 [ 330.884235][ T51] [ 330.902338][ T51] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 330.917535][ T51] Bluetooth: hci4: failed to register connection device [ 332.130171][ T7554] CIFS: Attempting to mount //127.0.0.1/share [ 332.522321][ T7561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.691036][ T7554] CIFS: VFS: Error connecting to socket. Aborting operation. [ 333.742792][ T7554] CIFS: VFS: cifs_mount failed w/return code = -4 [ 336.313430][ T7577] CIFS: Attempting to mount //127.0.0.1/share [ 336.505519][ T7577] CIFS: VFS: Error connecting to socket. Aborting operation. [ 336.513161][ T7577] CIFS: VFS: cifs_mount failed w/return code = -4 [ 337.085245][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 339.574509][ T7613] process 'syz.4.371' launched './file0' with NULL argv: empty string added [ 339.593950][ T7605] netlink: 'syz.1.377': attribute type 1 has an invalid length. [ 339.601954][ T7605] netlink: 'syz.1.377': attribute type 2 has an invalid length. [ 339.633187][ T7612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 339.834638][ T27] audit: type=1800 audit(1790233356.116:11): pid=7617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.379" name="ipv4_address" dev="configfs" ino=14022 res=0 errno=0 [ 339.976844][ T27] audit: type=1800 audit(1790233356.156:12): pid=7619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.379" name="ipv4_port" dev="configfs" ino=14027 res=0 errno=0 [ 340.101035][ T7625] CIFS: Attempting to mount //127.0.0.1/share [ 340.323862][ T27] audit: type=1800 audit(1790233356.166:13): pid=7617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.379" name="num" dev="configfs" ino=14029 res=0 errno=0 [ 340.642151][ T27] audit: type=1800 audit(1790233356.176:14): pid=7617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.379" name="local" dev="configfs" ino=14030 res=0 errno=0 [ 340.797339][ T7625] CIFS: VFS: Error connecting to socket. Aborting operation. [ 340.827627][ T7625] CIFS: VFS: cifs_mount failed w/return code = -4 [ 340.865501][ T7634] CIFS: Attempting to mount //127.0.0.1/share [ 341.215855][ T7634] CIFS: VFS: Error connecting to socket. Aborting operation. [ 341.263056][ T7634] CIFS: VFS: cifs_mount failed w/return code = -4 [ 341.442334][ T7656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.459390][ T5160] IPVS: starting estimator thread 0... [ 341.602699][ T7657] IPVS: using max 32 ests per chain, 76800 per kthread [ 345.643705][ T7680] CIFS: Attempting to mount //127.0.0.1/share [ 346.708239][ T7680] CIFS: VFS: Error connecting to socket. Aborting operation. [ 347.501732][ T7680] CIFS: VFS: cifs_mount failed w/return code = -4 [ 347.548328][ T7682] CIFS: Attempting to mount //127.0.0.1/share [ 347.581410][ T7682] CIFS: VFS: Error connecting to socket. Aborting operation. [ 347.633797][ T7682] CIFS: VFS: cifs_mount failed w/return code = -4 [ 347.882309][ T7693] CIFS: Attempting to mount //127.0.0.1/share [ 348.078533][ T7699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.302772][ T7693] CIFS: VFS: Error connecting to socket. Aborting operation. [ 349.310318][ T7693] CIFS: VFS: cifs_mount failed w/return code = -4 [ 349.317149][ T7691] CIFS: Attempting to mount //127.0.0.1/share [ 349.364616][ T7691] CIFS: VFS: Error connecting to socket. Aborting operation. [ 349.413124][ T7691] CIFS: VFS: cifs_mount failed w/return code = -4 [ 349.863239][ T7714] CIFS: Attempting to mount //127.0.0.1/share [ 349.902469][ T7711] team0 (unregistering): Port device team_slave_0 removed [ 349.942062][ T7711] team0 (unregistering): Port device team_slave_1 removed [ 350.516851][ T7714] CIFS: VFS: Error connecting to socket. Aborting operation. [ 350.541742][ T7714] CIFS: VFS: cifs_mount failed w/return code = -4 [ 350.566682][ T7717] CIFS: Attempting to mount //127.0.0.1/share [ 350.714948][ T7723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.991586][ T7717] CIFS: VFS: Error connecting to socket. Aborting operation. [ 351.027129][ T7717] CIFS: VFS: cifs_mount failed w/return code = -4 [ 352.348011][ T27] audit: type=1800 audit(1790233368.576:15): pid=7733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.407" name=08 dev="sda1" ino=2045 res=0 errno=0 [ 354.317011][ T7730] warning: `syz.4.413' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 354.856782][ T7757] CIFS: Attempting to mount //127.0.0.1/share [ 355.249866][ T7767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.452946][ T5829] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 355.676199][ T7757] CIFS: VFS: Error connecting to socket. Aborting operation. [ 355.683932][ T7757] CIFS: VFS: cifs_mount failed w/return code = -4 [ 355.950634][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 357.252775][ T5829] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 358.851757][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 358.912864][ T5829] usb 5-1: Product: syz [ 358.942231][ T5829] usb 5-1: Manufacturer: syz [ 358.978590][ T5829] usb 5-1: SerialNumber: syz [ 359.030157][ T5829] usb 5-1: config 0 descriptor?? [ 359.127485][ T5829] usb 5-1: can't set config #0, error -71 [ 359.256882][ T7793] CIFS: Attempting to mount //127.0.0.1/share [ 359.302959][ T5829] usb 5-1: USB disconnect, device number 2 [ 359.858171][ T7804] loop1: detected capacity change from 0 to 2048 [ 359.900961][ T7793] CIFS: VFS: Error connecting to socket. Aborting operation. [ 359.954405][ T7804] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 359.966272][ T7793] CIFS: VFS: cifs_mount failed w/return code = -4 [ 360.010819][ T7808] CIFS: Attempting to mount //127.0.0.1/share [ 360.785865][ T7808] CIFS: VFS: Error connecting to socket. Aborting operation. [ 360.793746][ T7808] CIFS: VFS: cifs_mount failed w/return code = -4 [ 361.015924][ T7821] CIFS: Attempting to mount //127.0.0.1/share [ 361.203206][ T7822] loop3: detected capacity change from 0 to 32768 [ 361.244452][ T7822] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 361.666788][ T7835] xt_hashlimit: size too large, truncated to 1048576 [ 361.673749][ T7835] xt_hashlimit: max too large, truncated to 1048576 [ 361.680656][ T7835] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 361.699448][ T5829] IPVS: starting estimator thread 0... [ 361.739428][ T7822] XFS (loop3): Ending clean mount [ 361.749998][ T7822] XFS (loop3): Quotacheck needed: Please wait. [ 361.824238][ T7821] CIFS: VFS: Error connecting to socket. Aborting operation. [ 361.831795][ T7821] CIFS: VFS: cifs_mount failed w/return code = -4 [ 361.843377][ T7836] IPVS: using max 32 ests per chain, 76800 per kthread [ 361.864727][ T7822] XFS (loop3): Quotacheck: Done. [ 363.988730][ T5777] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 364.031604][ T8] libceph: connect (1)[c::]:6789 error -101 [ 365.603182][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 365.634117][ T7841] ceph: No mds server is up or the cluster is laggy [ 365.657710][ T5160] libceph: connect (1)[c::]:6789 error -101 [ 365.675862][ T5160] libceph: mon0 (1)[c::]:6789 connect error [ 367.539768][ T7859] CIFS: Attempting to mount //127.0.0.1/share [ 367.549640][ T7854] syz.4.440: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 367.564936][ T7854] CPU: 0 PID: 7854 Comm: syz.4.440 Not tainted syzkaller #0 [ 367.572232][ T7854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 367.582284][ T7854] Call Trace: [ 367.585608][ T7854] [ 367.588564][ T7854] dump_stack_lvl+0x18c/0x250 [ 367.593347][ T7854] ? show_regs_print_info+0x20/0x20 [ 367.598575][ T7854] ? load_image+0x420/0x420 [ 367.603094][ T7854] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 367.609541][ T7854] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 367.616581][ T7854] warn_alloc+0x246/0x340 [ 367.620925][ T7854] ? zone_watermark_ok_safe+0x230/0x230 [ 367.626477][ T7854] __vmalloc_node_range+0x129/0x1320 [ 367.631776][ T7854] ? __mutex_trylock_common+0x160/0x270 [ 367.637326][ T7854] ? trace_raw_output_contention_end+0xd0/0xd0 [ 367.643497][ T7854] ? rcu_is_watching+0x15/0xb0 [ 367.648261][ T7854] ? trace_contention_end+0x39/0xe0 [ 367.653458][ T7854] ? __mutex_lock+0x30d/0xc80 [ 367.658197][ T7854] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 367.663874][ T7854] ? free_vm_area+0x50/0x50 [ 367.668376][ T7854] ? dvb_demux_do_ioctl+0x317/0x530 [ 367.673652][ T7854] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 367.679113][ T7854] ? mutex_lock_nested+0x20/0x20 [ 367.684048][ T7854] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 367.689854][ T7854] vmalloc+0x79/0x90 [ 367.693768][ T7854] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 367.699590][ T7854] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 367.705228][ T7854] dvb_demux_do_ioctl+0x454/0x530 [ 367.710257][ T7854] dvb_usercopy+0x195/0x2b0 [ 367.714760][ T7854] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 367.720322][ T7854] ? dvb_generic_ioctl+0xb0/0xb0 [ 367.725270][ T7854] ? dvb_demux_poll+0x210/0x210 [ 367.730118][ T7854] dvb_demux_ioctl+0x29/0x30 [ 367.734725][ T7854] __se_sys_ioctl+0xfd/0x170 [ 367.739375][ T7854] do_syscall_64+0x55/0xb0 [ 367.743792][ T7854] ? clear_bhb_loop+0x40/0x90 [ 367.748534][ T7854] ? clear_bhb_loop+0x40/0x90 [ 367.753212][ T7854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 367.759193][ T7854] RIP: 0033:0x7f15f4b9e159 [ 367.763633][ T7854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.783257][ T7854] RSP: 002b:00007f15f5b44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 367.791770][ T7854] RAX: ffffffffffffffda RBX: 00007f15f4e25fa0 RCX: 00007f15f4b9e159 [ 367.799738][ T7854] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000008 [ 367.807709][ T7854] RBP: 00007f15f4c3506b R08: 0000000000000000 R09: 0000000000000000 [ 367.815686][ T7854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.823665][ T7854] R13: 00007f15f4e26038 R14: 00007f15f4e25fa0 R15: 00007ffe6ef112e8 [ 367.831645][ T7854] [ 367.837891][ T7854] Mem-Info: [ 367.841058][ T7854] active_anon:8725 inactive_anon:0 isolated_anon:0 [ 367.841058][ T7854] active_file:18467 inactive_file:40391 isolated_file:0 [ 367.841058][ T7854] unevictable:768 dirty:237 writeback:0 [ 367.841058][ T7854] slab_reclaimable:10665 slab_unreclaimable:92744 [ 367.841058][ T7854] mapped:24534 shmem:4163 pagetables:655 [ 367.841058][ T7854] sec_pagetables:0 bounce:0 [ 367.841058][ T7854] kernel_misc_reclaimable:0 [ 367.841058][ T7854] free:1335945 free_pcp:12420 free_cma:0 [ 367.887010][ T7854] Node 0 active_anon:34900kB inactive_anon:0kB active_file:73868kB inactive_file:161364kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98136kB dirty:948kB writeback:0kB shmem:15116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11472kB pagetables:2620kB sec_pagetables:0kB all_unreclaimable? no [ 367.919595][ T7854] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 367.950053][ T7854] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 367.977697][ T7854] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 367.983550][ T7854] Node 0 DMA32 free:1424952kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:34860kB inactive_anon:0kB active_file:73868kB inactive_file:160536kB unevictable:1536kB writepending:940kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:37796kB local_pcp:37796kB free_cma:0kB [ 368.014460][ T7854] lowmem_reserve[]: 0 0 0 0 0 [ 368.019338][ T7854] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:8kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 368.046387][ T7854] lowmem_reserve[]: 0 0 0 0 0 [ 368.051140][ T7854] Node 1 Normal free:3903464kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:11884kB local_pcp:11884kB free_cma:0kB [ 368.081176][ T7854] lowmem_reserve[]: 0 0 0 0 0 [ 368.085972][ T7854] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 368.098825][ T7854] Node 0 DMA32: 2*4kB (ME) 2*8kB (UE) 6*16kB (U) 952*32kB (UM) 515*64kB (UM) 204*128kB (UME) 90*256kB (UM) 45*512kB (UME) 17*1024kB (ME) 15*2048kB (UM) 303*4096kB (M) = 1424952kB [ 368.116782][ T7854] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 368.128710][ T7854] Node 1 Normal: 222*4kB (UME) 48*8kB (UME) 43*16kB (UME) 196*32kB (UME) 51*64kB (UME) 14*128kB (UM) 4*256kB (UME) 0*512kB 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3903464kB [ 368.146584][ T7854] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 368.156228][ T7854] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 368.165905][ T7854] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 368.175549][ T7854] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 368.184972][ T7854] 63006 total pagecache pages [ 368.189785][ T7854] 0 pages in swap cache [ 368.193992][ T7854] Free swap = 124728kB [ 368.198173][ T7854] Total swap = 124996kB [ 368.202382][ T7854] 2097051 pages RAM [ 368.206321][ T7854] 0 pages HighMem/MovableOnly [ 368.211024][ T7854] 416965 pages reserved [ 368.215230][ T7854] 0 pages cma reserved [ 368.377656][ T7859] CIFS: VFS: Error connecting to socket. Aborting operation. [ 368.385313][ T7859] CIFS: VFS: cifs_mount failed w/return code = -4 [ 368.503588][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.443'. [ 368.512445][ T7862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.290607][ T7872] loop3: detected capacity change from 0 to 16 [ 372.735549][ T7872] erofs: (device loop3): mounted with root inode @ nid 36. [ 372.816498][ T7862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.046728][ T7880] CIFS: Attempting to mount //127.0.0.1/share [ 373.281928][ T7888] loop3: detected capacity change from 0 to 8 [ 373.441834][ T7888] SQUASHFS error: Failed to read block 0x8f: -5 [ 373.470104][ T27] audit: type=1800 audit(1790233389.746:16): pid=7888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.448" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 373.664085][ T5160] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 373.768313][ T7895] SQUASHFS error: Failed to read block 0x285: -5 [ 373.775060][ T7895] SQUASHFS error: Unable to read metadata cache entry [283] [ 373.782343][ T7895] SQUASHFS error: read_indexes: reading block [283:0] [ 373.789379][ T7895] SQUASHFS error: Failed to read block 0x0: -5 [ 373.795886][ T7895] SQUASHFS error: Unable to read metadata cache entry [283] [ 373.803376][ T7895] SQUASHFS error: read_indexes: reading block [283:0] [ 373.810211][ T7895] SQUASHFS error: Failed to read block 0x0: -5 [ 373.816471][ T7895] SQUASHFS error: Unable to read metadata cache entry [283] [ 373.823843][ T7895] SQUASHFS error: read_indexes: reading block [283:0] [ 373.830649][ T7895] SQUASHFS error: Failed to read block 0x0: -5 [ 373.836887][ T7895] SQUASHFS error: Unable to read metadata cache entry [283] [ 373.844217][ T7895] SQUASHFS error: read_indexes: reading block [283:0] [ 373.851005][ T7895] SQUASHFS error: Failed to read block 0x0: -5 [ 373.858617][ T7895] SQUASHFS error: Unable to read metadata cache entry [283] [ 373.865982][ T7895] SQUASHFS error: read_indexes: reading block [283:0] [ 373.872804][ T7895] SQUASHFS error: Failed to read block 0x0: -5 [ 373.878987][ T7895] SQUASHFS error: Unable to read metadata cache entry [283] [ 373.886314][ T7895] SQUASHFS error: read_indexes: reading block [283:0] [ 373.893203][ T7895] SQUASHFS error: Failed to read block 0x0: -5 [ 373.899681][ T7895] SQUASHFS error: Unable to read metadata cache entry [283] [ 373.907059][ T7895] SQUASHFS error: read_indexes: reading block [283:0] [ 373.913970][ T7895] SQUASHFS error: Failed to read block 0x0: -5 [ 373.920191][ T7895] SQUASHFS error: Unable to read metadata cache entry [283] [ 373.927551][ T7895] SQUASHFS error: read_indexes: reading block [283:0] [ 373.934431][ T7895] SQUASHFS error: Failed to read block 0x0: -5 [ 373.940647][ T7895] SQUASHFS error: Unable to read metadata cache entry [283] [ 373.948011][ T7895] SQUASHFS error: read_indexes: reading block [283:0] [ 373.954896][ T7895] SQUASHFS error: Failed to read block 0x0: -5 [ 373.961453][ T7895] SQUASHFS error: Unable to read metadata cache entry [283] [ 373.968896][ T7895] SQUASHFS error: read_indexes: reading block [283:0] [ 373.976021][ T7895] SQUASHFS error: Unable to read metadata cache entry [283] [ 373.983343][ T7895] SQUASHFS error: read_indexes: reading block [283:0] [ 373.990227][ T7895] SQUASHFS error: Unable to read metadata cache entry [283] [ 373.997830][ T7895] SQUASHFS error: read_indexes: reading block [283:0] [ 374.004766][ T7895] SQUASHFS error: Unable to read metadata cache entry [283] [ 374.012061][ T7895] SQUASHFS error: read_indexes: reading block [283:0] [ 374.019205][ T7895] SQUASHFS error: Unable to read metadata cache entry [283] [ 374.026526][ T7895] SQUASHFS error: read_indexes: reading block [283:0] [ 374.033416][ T7895] SQUASHFS error: Unable to read metadata cache entry [283] [ 374.040689][ T7895] SQUASHFS error: read_indexes: reading block [283:0] [ 374.047807][ T7895] SQUASHFS error: Unable to read metadata cache entry [283] [ 374.055180][ T7895] SQUASHFS error: read_indexes: reading block [283:0] [ 374.062063][ T7895] SQUASHFS error: Unable to read metadata cache entry [283] [ 374.069383][ T7895] SQUASHFS error: read_indexes: reading block [283:0] [ 374.076308][ T7895] SQUASHFS error: Unable to read metadata cache entry [283] [ 374.083639][ T7895] SQUASHFS error: read_indexes: reading block [283:0] [ 374.090501][ T7895] SQUASHFS error: Unable to read metadata cache entry [283] [ 374.097802][ T7895] SQUASHFS error: read_indexes: reading block [283:0] [ 374.105070][ T7895] SQUASHFS error: Unable to read metadata cache entry [283] [ 374.112410][ T7895] SQUASHFS error: read_indexes: reading block [283:0] [ 374.119369][ T7895] SQUASHFS error: Unable to read metadata cache entry [283] [ 374.126830][ T7895] SQUASHFS error: read_indexes: reading block [283:0] [ 374.133757][ T7895] SQUASHFS error: Unable to read metadata cache entry [283] [ 374.141040][ T7895] SQUASHFS error: read_indexes: reading block [283:0] [ 374.148059][ T7895] SQUASHFS error: Unable to read metadata cache entry [283] [ 374.204149][ T7895] SQUASHFS error: read_indexes: reading block [283:0] [ 374.252432][ T7880] CIFS: VFS: Error connecting to socket. Aborting operation. [ 374.260139][ T7880] CIFS: VFS: cifs_mount failed w/return code = -4 [ 374.275622][ T27] audit: type=1800 audit(1790233390.036:17): pid=7895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.448" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 374.303356][ T7893] SQUASHFS error: Unable to read metadata cache entry [283] [ 374.338209][ T7896] CIFS: Attempting to mount //127.0.0.1/share [ 374.348839][ T7893] SQUASHFS error: read_indexes: reading block [283:0] [ 374.362771][ T5160] usb 1-1: Using ep0 maxpacket: 32 [ 374.395061][ T7893] SQUASHFS error: Failed to read block 0x0: -5 [ 374.401313][ T7893] SQUASHFS error: Unable to read metadata cache entry [283] [ 374.441283][ T5160] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 374.462443][ T7893] SQUASHFS error: read_indexes: reading block [283:0] [ 374.477545][ T5160] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.498535][ T7893] SQUASHFS error: Failed to read block 0x0: -5 [ 374.510620][ T5160] usb 1-1: Product: syz [ 374.521211][ T7893] SQUASHFS error: Unable to read metadata cache entry [283] [ 374.540786][ T5160] usb 1-1: Manufacturer: syz [ 374.557409][ T5160] usb 1-1: SerialNumber: syz [ 374.563196][ T7893] SQUASHFS error: read_indexes: reading block [283:0] [ 374.650962][ T5160] usb 1-1: config 0 descriptor?? [ 374.664428][ T7893] SQUASHFS error: Failed to read block 0x0: -5 [ 374.692879][ T7893] SQUASHFS error: Unable to read metadata cache entry [283] [ 374.708457][ T5160] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 374.727831][ T7893] SQUASHFS error: read_indexes: reading block [283:0] [ 374.737153][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.453'. [ 374.785836][ T7893] SQUASHFS error: Failed to read block 0x0: -5 [ 374.810115][ T7893] SQUASHFS error: Unable to read metadata cache entry [283] [ 374.839610][ T7893] SQUASHFS error: read_indexes: reading block [283:0] [ 374.877515][ T7893] SQUASHFS error: Failed to read block 0x0: -5 [ 374.914825][ T7893] SQUASHFS error: Unable to read metadata cache entry [283] [ 374.944137][ T7893] SQUASHFS error: read_indexes: reading block [283:0] [ 375.115537][ T7893] SQUASHFS error: Failed to read block 0x0: -5 [ 375.133481][ T7893] SQUASHFS error: Unable to read metadata cache entry [283] [ 375.401991][ T7896] CIFS: VFS: Error connecting to socket. Aborting operation. [ 375.409565][ T7896] CIFS: VFS: cifs_mount failed w/return code = -4 [ 375.439114][ T7893] SQUASHFS error: read_indexes: reading block [283:0] [ 375.465883][ T7893] SQUASHFS error: Failed to read block 0x0: -5 [ 375.492414][ T7893] SQUASHFS error: Unable to read metadata cache entry [283] [ 375.530409][ T7893] SQUASHFS error: read_indexes: reading block [283:0] [ 375.561889][ T7893] SQUASHFS error: Failed to read block 0x0: -5 [ 375.586997][ T7893] SQUASHFS error: Unable to read metadata cache entry [283] [ 375.618302][ T7893] SQUASHFS error: read_indexes: reading block [283:0] [ 375.632083][ T5160] gspca_ov534_9: reg_w failed -71 [ 375.662004][ T7893] SQUASHFS error: Failed to read block 0x0: -5 [ 375.695664][ T7893] SQUASHFS error: Unable to read metadata cache entry [283] [ 375.737755][ T7893] SQUASHFS error: read_indexes: reading block [283:0] [ 376.082549][ T5160] gspca_ov534_9: Unknown sensor 0000 [ 376.082620][ T5160] ov534_9: probe of 1-1:0.0 failed with error -22 [ 378.216853][ T5160] usb 1-1: USB disconnect, device number 2 [ 378.454395][ T7916] CIFS: Attempting to mount //127.0.0.1/share [ 379.770810][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.777298][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.791711][ T7916] CIFS: VFS: Error connecting to socket. Aborting operation. [ 379.799268][ T7916] CIFS: VFS: cifs_mount failed w/return code = -4 [ 380.067958][ T7929] CIFS: Attempting to mount //127.0.0.1/share [ 380.967313][ T7929] CIFS: VFS: Error connecting to socket. Aborting operation. [ 380.974821][ T7929] CIFS: VFS: cifs_mount failed w/return code = -4 [ 383.715337][ T7959] CIFS: Attempting to mount //127.0.0.1/share [ 384.520269][ T7959] CIFS: VFS: Error connecting to socket. Aborting operation. [ 384.527860][ T7959] CIFS: VFS: cifs_mount failed w/return code = -4 [ 385.689573][ T7970] comedi comedi1: board detection failed [ 387.281926][ T7971] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 387.453260][ T7976] CIFS: Attempting to mount //127.0.0.1/share [ 387.761457][ T7980] syzkaller0: entered promiscuous mode [ 387.806151][ T7980] syzkaller0: entered allmulticast mode [ 387.855391][ T7980] tipc: Started in network mode [ 387.887749][ T7980] tipc: Node identity 0a91e530f2ed, cluster identity 4711 [ 387.922373][ T7980] tipc: Enabled bearer , priority 0 [ 387.989470][ T7980] tipc: Resetting bearer [ 388.061852][ T7979] tipc: Resetting bearer [ 388.157109][ T7979] tipc: Disabling bearer [ 388.201696][ T7984] Cannot find add_set index 2 as target [ 388.220030][ T7976] CIFS: VFS: Error connecting to socket. Aborting operation. [ 388.228047][ T7976] CIFS: VFS: cifs_mount failed w/return code = -4 [ 390.120077][ T7992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.831013][ T7999] CIFS: Attempting to mount //127.0.0.1/share [ 391.952618][ T5160] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 393.013460][ T7999] CIFS: VFS: Error connecting to socket. Aborting operation. [ 393.458194][ T7999] CIFS: VFS: cifs_mount failed w/return code = -4 [ 393.788895][ T8013] CIFS: Attempting to mount //127.0.0.1/share [ 393.863236][ T5160] usb 4-1: device not accepting address 2, error -71 [ 394.576075][ T8013] CIFS: VFS: Error connecting to socket. Aborting operation. [ 394.584040][ T8013] CIFS: VFS: cifs_mount failed w/return code = -4 [ 394.968946][ T8030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 395.272747][ T8034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 395.291458][ T8035] CIFS: Attempting to mount //127.0.0.1/share [ 396.661867][ T8035] CIFS: VFS: Error connecting to socket. Aborting operation. [ 397.153925][ T8035] CIFS: VFS: cifs_mount failed w/return code = -4 [ 397.326469][ T8052] CIFS: Attempting to mount //127.0.0.1/share [ 398.398829][ T8052] CIFS: VFS: Error connecting to socket. Aborting operation. [ 398.406649][ T8052] CIFS: VFS: cifs_mount failed w/return code = -4 [ 403.123096][ T8075] netlink: 84 bytes leftover after parsing attributes in process `syz.3.512'. [ 403.429431][ T8079] CIFS: Attempting to mount //127.0.0.1/share [ 405.286556][ T8079] CIFS: VFS: Error connecting to socket. Aborting operation. [ 405.294223][ T8079] CIFS: VFS: cifs_mount failed w/return code = -4 [ 407.069086][ T8085] /dev/sg0: Can't lookup blockdev [ 407.090085][ T27] audit: type=1800 audit(1790233423.366:18): pid=8085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.515" name="file0" dev="overlay" ino=848 res=0 errno=0 [ 408.346481][ T8098] netlink: 'syz.3.513': attribute type 12 has an invalid length. [ 414.035809][ T8113] syzkaller0: entered promiscuous mode [ 414.041309][ T8113] syzkaller0: entered allmulticast mode [ 414.113427][ T8113] tipc: Started in network mode [ 414.142633][ T8113] tipc: Node identity 464ca2abf332, cluster identity 4711 [ 414.150105][ T8113] tipc: Enabled bearer , priority 0 [ 414.223198][ T8114] tipc: Resetting bearer [ 414.302802][ T8112] tipc: Resetting bearer [ 414.393552][ T8112] tipc: Disabling bearer [ 415.908325][ T8117] x_tables: unsorted underflow at hook 3 [ 415.927507][ T8117] hub 8-0:1.0: USB hub found [ 415.933096][ T8117] hub 8-0:1.0: 1 port detected [ 417.472042][ T8124] CIFS: Attempting to mount //127.0.0.1/share [ 418.682821][ T8124] CIFS: VFS: Error connecting to socket. Aborting operation. [ 418.690504][ T8124] CIFS: VFS: cifs_mount failed w/return code = -4 [ 421.284403][ T8144] i2c i2c-0: new_device: Missing parameters [ 424.111468][ T8159] loop4: detected capacity change from 0 to 512 [ 424.189637][ T8156] bond0: (slave bond_slave_0): Releasing backup interface [ 424.199011][ T5829] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 424.222434][ T8159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.398798][ T8169] bond0: (slave bond_slave_1): Releasing backup interface [ 424.481319][ T5829] usb 1-1: Dual-Role OTG device on HNP port [ 424.570897][ T5829] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 424.654131][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.736893][ T6399] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.756530][ T5829] gspca_main: spca501-2.14.0 probing 0000:0000 [ 424.858255][ T5829] gspca_spca501: reg write: error -32 [ 424.898838][ T5829] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 424.955550][ T8167] tipc: Enabling of bearer rejected, failed to enable media [ 424.983190][ T5829] spca501: probe of 1-1:1.0 failed with error -22 [ 425.125791][ T8156] bond0: option mode: unable to set because the bond device is up [ 425.228712][ T5829] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 425.305340][ T8183] syzkaller0: entered promiscuous mode [ 425.310882][ T8183] syzkaller0: entered allmulticast mode [ 425.850209][ T8203] CIFS: Attempting to mount //127.0.0.1/share [ 427.091252][ T8203] CIFS: VFS: Error connecting to socket. Aborting operation. [ 427.098792][ T8203] CIFS: VFS: cifs_mount failed w/return code = -4 [ 431.989814][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 432.463370][ T8231] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.155968][ T8236] CIFS: Attempting to mount //127.0.0.1/share [ 433.973488][ T8236] CIFS: VFS: Error connecting to socket. Aborting operation. [ 433.980966][ T8236] CIFS: VFS: cifs_mount failed w/return code = -4 [ 433.987845][ T8241] CIFS: Attempting to mount //127.0.0.1/share [ 434.195392][ T8247] loop3: detected capacity change from 0 to 256 [ 434.220667][ T8248] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 434.247604][ T8247] FAT-fs (loop3): Directory bread(block 1285) failed [ 434.280844][ T8247] FAT-fs (loop3): Directory bread(block 1286) failed [ 434.340850][ T8247] FAT-fs (loop3): Directory bread(block 1287) failed [ 434.386775][ T8247] FAT-fs (loop3): Directory bread(block 1288) failed [ 434.503575][ T8247] FAT-fs (loop3): Directory bread(block 1285) failed [ 434.510727][ T8247] FAT-fs (loop3): Directory bread(block 1286) failed [ 434.517865][ T8247] FAT-fs (loop3): Directory bread(block 1287) failed [ 434.524755][ T8247] FAT-fs (loop3): Directory bread(block 1288) failed [ 434.717906][ T8241] CIFS: VFS: Error connecting to socket. Aborting operation. [ 434.725652][ T8241] CIFS: VFS: cifs_mount failed w/return code = -4 [ 435.700520][ T8260] ubi0: attaching mtd0 [ 435.707655][ T8260] ubi0: scanning is finished [ 435.712292][ T8260] ubi0: empty MTD device detected [ 435.767943][ T8260] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 435.775548][ T8260] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 435.782801][ T8260] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 435.789748][ T8260] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 435.797176][ T8260] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 435.804008][ T8260] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 435.812080][ T8260] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2740282611 [ 435.822162][ T8260] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 435.852032][ T8262] ubi0: background thread "ubi_bgt0d" started, PID 8262 [ 435.930416][ T8263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 436.282369][ T5160] usb 1-1: USB disconnect, device number 3 [ 436.929467][ T8274] trusted_key: encrypted_key: keylen parameter is missing [ 437.082801][ T8217] Bluetooth: hci4: command 0x0406 tx timeout [ 437.258393][ T8280] veth2: entered allmulticast mode [ 437.607533][ T8286] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 437.653056][ T8288] CIFS: Attempting to mount //127.0.0.1/share [ 437.720760][ T8289] tcpci: probe of 0-0002 failed with error -5 [ 438.729152][ T8286] i2c-slave-eeprom: probe of 0-1022 failed with error -95 [ 438.817455][ T8289] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 438.858665][ T8286] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 438.892363][ T8288] CIFS: VFS: Error connecting to socket. Aborting operation. [ 438.900317][ T8288] CIFS: VFS: cifs_mount failed w/return code = -4 [ 439.785666][ T8283] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 440.365687][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.465245][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.991110][ T8307] [ 440.993470][ T8307] ====================================================== [ 441.000478][ T8307] WARNING: possible circular locking dependency detected [ 441.007500][ T8307] syzkaller #0 Not tainted [ 441.011921][ T8307] ------------------------------------------------------ [ 441.018923][ T8307] syz.3.572/8307 is trying to acquire lock: [ 441.024802][ T8307] ffffffff8ddf43f0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: uvcg_streaming_header_allow_link+0x71/0x4a0 [ 441.036095][ T8307] [ 441.036095][ T8307] but task is already holding lock: [ 441.043446][ T8307] ffff888053dbb400 (&sb->s_type->i_mutex_key#20){++++}-{3:3}, at: configfs_symlink+0x47a/0xfe0 [ 441.053810][ T8307] [ 441.053810][ T8307] which lock already depends on the new lock. [ 441.053810][ T8307] [ 441.064199][ T8307] [ 441.064199][ T8307] the existing dependency chain (in reverse order) is: [ 441.073201][ T8307] [ 441.073201][ T8307] -> #3 (&sb->s_type->i_mutex_key#20){++++}-{3:3}: [ 441.081881][ T8307] down_write+0x97/0x200 [ 441.086641][ T8307] configfs_depend_item_unlocked+0x157/0x430 [ 441.093133][ T8307] usbg_make_tpg+0x1e1/0x550 [ 441.098287][ T8307] target_fabric_make_tpg+0xa4/0x6d0 [ 441.104108][ T8307] configfs_mkdir+0x515/0x9e0 [ 441.109310][ T8307] vfs_mkdir+0x2a5/0x470 [ 441.114081][ T8307] do_mkdirat+0x1dc/0x450 [ 441.118921][ T8307] __x64_sys_mkdirat+0x89/0xa0 [ 441.124202][ T8307] do_syscall_64+0x55/0xb0 [ 441.129132][ T8307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 441.135539][ T8307] [ 441.135539][ T8307] -> #2 (tpg_instances_lock){+.+.}-{3:3}: [ 441.143517][ T8307] __mutex_lock+0x135/0xc80 [ 441.148529][ T8307] tcm_alloc_inst+0x65/0x190 [ 441.153629][ T8307] usb_get_function_instance+0xdd/0x2e0 [ 441.159737][ T8307] function_make+0x11c/0x350 [ 441.164844][ T8307] configfs_mkdir+0x515/0x9e0 [ 441.170034][ T8307] vfs_mkdir+0x2a5/0x470 [ 441.174793][ T8307] do_mkdirat+0x1dc/0x450 [ 441.179635][ T8307] __x64_sys_mkdirat+0x89/0xa0 [ 441.184924][ T8307] do_syscall_64+0x55/0xb0 [ 441.189856][ T8307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 441.196265][ T8307] [ 441.196265][ T8307] -> #1 (func_lock){+.+.}-{3:3}: [ 441.203390][ T8307] __mutex_lock+0x135/0xc80 [ 441.208403][ T8307] usb_get_function_instance+0x2e/0x2e0 [ 441.214483][ T8307] function_make+0x11c/0x350 [ 441.219584][ T8307] configfs_mkdir+0x515/0x9e0 [ 441.224793][ T8307] vfs_mkdir+0x2a5/0x470 [ 441.229552][ T8307] do_mkdirat+0x1dc/0x450 [ 441.234394][ T8307] __x64_sys_mkdirat+0x89/0xa0 [ 441.239671][ T8307] do_syscall_64+0x55/0xb0 [ 441.244599][ T8307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 441.251006][ T8307] [ 441.251006][ T8307] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 441.259267][ T8307] __lock_acquire+0x37ef/0x7d80 [ 441.264633][ T8307] lock_acquire+0x19e/0x420 [ 441.269658][ T8307] __mutex_lock+0x135/0xc80 [ 441.274674][ T8307] uvcg_streaming_header_allow_link+0x71/0x4a0 [ 441.281358][ T8307] configfs_symlink+0x5a5/0xfe0 [ 441.286722][ T8307] vfs_symlink+0x138/0x2b0 [ 441.291650][ T8307] do_symlinkat+0x1ba/0x400 [ 441.296663][ T8307] __x64_sys_symlinkat+0x99/0xb0 [ 441.302115][ T8307] do_syscall_64+0x55/0xb0 [ 441.307048][ T8307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 441.313455][ T8307] [ 441.313455][ T8307] other info that might help us debug this: [ 441.313455][ T8307] [ 441.323691][ T8307] Chain exists of: [ 441.323691][ T8307] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#20 [ 441.323691][ T8307] [ 441.338626][ T8307] Possible unsafe locking scenario: [ 441.338626][ T8307] [ 441.346067][ T8307] CPU0 CPU1 [ 441.351435][ T8307] ---- ---- [ 441.356788][ T8307] lock(&sb->s_type->i_mutex_key#20); [ 441.362245][ T8307] lock(tpg_instances_lock); [ 441.369435][ T8307] lock(&sb->s_type->i_mutex_key#20); [ 441.377405][ T8307] lock(gadget_subsys.su_mutex); [ 441.382420][ T8307] [ 441.382420][ T8307] *** DEADLOCK *** [ 441.382420][ T8307] [ 441.390635][ T8307] 2 locks held by syz.3.572/8307: [ 441.395643][ T8307] #0: ffff888143688418 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 441.404863][ T8307] #1: ffff888053dbb400 (&sb->s_type->i_mutex_key#20){++++}-{3:3}, at: configfs_symlink+0x47a/0xfe0 [ 441.415640][ T8307] [ 441.415640][ T8307] stack backtrace: [ 441.421521][ T8307] CPU: 0 PID: 8307 Comm: syz.3.572 Not tainted syzkaller #0 [ 441.428793][ T8307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 441.438835][ T8307] Call Trace: [ 441.442122][ T8307] [ 441.445068][ T8307] dump_stack_lvl+0x18c/0x250 [ 441.449750][ T8307] ? load_image+0x420/0x420 [ 441.454246][ T8307] ? show_regs_print_info+0x20/0x20 [ 441.459439][ T8307] ? print_circular_bug+0x12b/0x1a0 [ 441.464642][ T8307] check_noncircular+0x2fc/0x400 [ 441.469579][ T8307] ? print_deadlock_bug+0x5d0/0x5d0 [ 441.474784][ T8307] ? lockdep_lock+0xf5/0x230 [ 441.479414][ T8307] ? _find_first_zero_bit+0xd6/0x100 [ 441.484835][ T8307] __lock_acquire+0x37ef/0x7d80 [ 441.489734][ T8307] ? __lock_acquire+0x1336/0x7d80 [ 441.494774][ T8307] ? verify_lock_unused+0x140/0x140 [ 441.499995][ T8307] lock_acquire+0x19e/0x420 [ 441.504498][ T8307] ? uvcg_streaming_header_allow_link+0x71/0x4a0 [ 441.510828][ T8307] ? __might_sleep+0xe0/0xe0 [ 441.515410][ T8307] ? read_lock_is_recursive+0x20/0x20 [ 441.520953][ T8307] __mutex_lock+0x135/0xc80 [ 441.525446][ T8307] ? uvcg_streaming_header_allow_link+0x71/0x4a0 [ 441.531772][ T8307] ? __might_sleep+0xe0/0xe0 [ 441.536350][ T8307] ? uvcg_streaming_header_allow_link+0x71/0x4a0 [ 441.542668][ T8307] ? read_lock_is_recursive+0x20/0x20 [ 441.548060][ T8307] ? mutex_lock_nested+0x20/0x20 [ 441.553007][ T8307] ? configfs_symlink+0x469/0xfe0 [ 441.558030][ T8307] ? make_vfsuid+0x67/0xb0 [ 441.562451][ T8307] ? generic_permission+0x1ed/0x590 [ 441.567640][ T8307] uvcg_streaming_header_allow_link+0x71/0x4a0 [ 441.573790][ T8307] ? inode_permission+0xf3/0x480 [ 441.578716][ T8307] ? bpf_lsm_inode_permission+0x9/0x10 [ 441.584183][ T8307] ? security_inode_permission+0xb0/0xf0 [ 441.589834][ T8307] configfs_symlink+0x5a5/0xfe0 [ 441.594678][ T8307] ? from_kgid+0x153/0x6a0 [ 441.599109][ T8307] ? generic_permission+0x1ed/0x590 [ 441.604295][ T8307] ? detach_groups+0x370/0x370 [ 441.609054][ T8307] ? inode_permission+0xf3/0x480 [ 441.613980][ T8307] ? bpf_lsm_inode_symlink+0x9/0x10 [ 441.619168][ T8307] ? security_inode_symlink+0xb6/0x100 [ 441.624641][ T8307] vfs_symlink+0x138/0x2b0 [ 441.629073][ T8307] do_symlinkat+0x1ba/0x400 [ 441.633588][ T8307] ? vfs_symlink+0x2b0/0x2b0 [ 441.638177][ T8307] __x64_sys_symlinkat+0x99/0xb0 [ 441.643109][ T8307] do_syscall_64+0x55/0xb0 [ 441.647526][ T8307] ? clear_bhb_loop+0x40/0x90 [ 441.652225][ T8307] ? clear_bhb_loop+0x40/0x90 [ 441.656919][ T8307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 441.662862][ T8307] RIP: 0033:0x7f9e9139e159 [ 441.667305][ T8307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.686916][ T8307] RSP: 002b:00007f9e9228e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 441.695436][ T8307] RAX: ffffffffffffffda RBX: 00007f9e91625fa0 RCX: 00007f9e9139e159 [ 441.703589][ T8307] RDX: 0000200000001600 RSI: ffffffffffffff9c RDI: 0000200000001500 [ 441.711570][ T8307] RBP: 00007f9e9143506b R08: 0000000000000000 R09: 0000000000000000 [ 441.719543][ T8307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.727521][ T8307] R13: 00007f9e91626038 R14: 00007f9e91625fa0 R15: 00007fff02ceeb38 [ 441.735494][ T8307] [ 442.021537][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.574'. [ 442.031194][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.574'. [ 442.101270][ T8315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.