last executing test programs: 4m14.701029599s ago: executing program 1 (id=4029): r0 = syz_io_uring_setup(0x2deb, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380), 0x4000}], 0x2) 4m14.532586958s ago: executing program 1 (id=4035): syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000440)='./file0\x00', 0xc0ed000e, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@lazytime}, {@abort}, {@noload}, {@noquota}, {@block_validity}, {@nouser_xattr}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0xfe, 0x454, &(0x7f00000009c0)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 4m14.056333667s ago: executing program 1 (id=4047): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x5e8d0d8a87ff1313, 0x0, 0x0, {}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) 4m13.942980336s ago: executing program 1 (id=4051): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@abort}, {@nombcache}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@lazytime}, {@barrier}, {@usrquota}, {@grpquota}]}, 0x2, 0x55d, &(0x7f0000000980)="$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") mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 4m13.503374554s ago: executing program 1 (id=4056): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="fc00000018000708ab092500090007000aab0700a90100001d60369321000180fc00000000000000000a000000039815fa2c1ec28656aaa79bb94b46fe000000bc00030005000000140000270400117c22ebc205214000000000008935d0730206001720d7d5bbc91a3e3280775e9ddefd5a32e280fc83ab820d9473decc9204d287f605f7029ddef2fe082038f4f8b29d3ef3d92c83170c5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd1a6b567b4d5715587e658a1ad0a4f01731d05b0310b0041f2d48a99c03f080548deac270e33429fd3000175e63fb8d38a87041bf29e", 0xfc) 4m11.535270547s ago: executing program 1 (id=4099): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x220080e, &(0x7f0000001900), 0x0, 0x4fa, &(0x7f0000000140)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000006c0)=@nullb, 0x0, &(0x7f0000000700)='./file0\x00') 4m11.432381787s ago: executing program 32 (id=4099): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x220080e, &(0x7f0000001900), 0x0, 0x4fa, &(0x7f0000000140)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000006c0)=@nullb, 0x0, &(0x7f0000000700)='./file0\x00') 3m37.954683308s ago: executing program 0 (id=4912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x26}]}, 0x24}}, 0x0) 3m37.873570457s ago: executing program 0 (id=4914): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000080)="96bc2b97341b", 0x6}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}, @ip_tos_u8={{0x11}}], 0x38}, 0x14) 3m37.754045827s ago: executing program 0 (id=4917): unshare(0x2040600) flock(0xffffffffffffffff, 0x2) 3m37.690096347s ago: executing program 0 (id=4919): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa5, 0x0, 0xe9, 0x40, 0x66b, 0x20f9, 0xff94, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3c, 0x6a, 0xba}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x40, 0xb, 0x2, "7ae1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m35.551372739s ago: executing program 0 (id=4981): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ext4\x00', 0x0, 0x0) 3m35.371575928s ago: executing program 0 (id=4985): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc) 3m22.588413623s ago: executing program 5 (id=5233): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 3m22.503129923s ago: executing program 5 (id=5238): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"/2665], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffca3, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x22, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x61, 0x60000000, 0x0, 0x7000000}, 0x2c) 3m22.335195602s ago: executing program 5 (id=5242): r0 = getpid() ptrace$setsig(0x10, r0, 0x0, 0x0) 3m22.271300832s ago: executing program 5 (id=5246): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x55b, &(0x7f0000000980)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 3m21.993472311s ago: executing program 5 (id=5256): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x44}}, 0x0) 3m21.75125782s ago: executing program 5 (id=5264): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) 3m21.617444849s ago: executing program 33 (id=5264): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) 3m19.318554251s ago: executing program 34 (id=4985): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc) 51.399360743s ago: executing program 4 (id=8066): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000000100)={[{@rodir}, {@shortname_win95}, {@utf8no}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@uni_xlateno}, {@rodir}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@rodir}, {@uni_xlate}]}, 0x1, 0x26c, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x3f00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 51.195313832s ago: executing program 4 (id=8068): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r0) close(r0) quotactl$Q_GETQUOTA(0x0, &(0x7f0000000040)=@filename='.\x00', 0xffffffffffffffff, 0x0) 51.194787232s ago: executing program 4 (id=8071): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000)=0x46, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000140)=""/2, &(0x7f0000000040)=0x2) 51.063347222s ago: executing program 4 (id=8074): unshare(0x20000400) chdir(0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) fgetxattr(r0, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 51.046793652s ago: executing program 4 (id=8077): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = dup2(r0, r1) sendmmsg$unix(r2, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000180)='/', 0x1}], 0x2}}], 0x1, 0x0) 50.967103901s ago: executing program 4 (id=8082): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x0, 0x0, 0x3, 0x3}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000ac0)=""/100, 0x64}], 0x1, 0x2, 0x0) 50.878334661s ago: executing program 35 (id=8082): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x0, 0x0, 0x3, 0x3}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000ac0)=""/100, 0x64}], 0x1, 0x2, 0x0) 2.77446996s ago: executing program 3 (id=9274): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x7}, @IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_FAST_LEAVE={0x5}]}}}]}, 0x54}}, 0x0) 2.704369089s ago: executing program 3 (id=9275): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2000080, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c726f6469722c696f636861727365743d63703836342c756e695f786c6174653d312c636f6465706167653d313235302c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c726f6469722c6e6f6e756d7461696c3d302c696f636861727365743d63703836322c726f6469722c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c002aa220cdeeb5ba33c93123800bef80e5155d8840d88fc461c6"], 0x25, 0x336, &(0x7f0000000500)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1c1042, 0x0) pwrite64(r0, &(0x7f0000000000)='+', 0x1, 0x4010000bffd) 2.466706969s ago: executing program 2 (id=9289): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f00000002c0)) 2.459218068s ago: executing program 3 (id=9290): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x250, 0x0, 0x1800}]}) 2.295294928s ago: executing program 3 (id=9292): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0xc, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffc}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0xffffffc2, @mcast1, 0x7}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x20}}}}}}, 0x0) 1.688981406s ago: executing program 2 (id=9281): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000000)=',', 0x1}], 0x1}, 0x8940) writev(r0, &(0x7f0000000cc0)=[{&(0x7f0000000100)="ebd53447b56a01c92e4c6a81a9402b73155062676ffd811ad50b682c3b368a09212cf327833dabbe7fa3431d6db67ffdb0da5938538b145e17d66a912aa0325531e76fadd57cede73d3490b669b318c6cb20bc858e681409f5566d9f9707744af612a7eba7e11e0d91141295f4a3a0c19bd940ce8881cf4bc31806c488d9575888a56b7582161ce4217a91280a4e04b616b971364c4c455c3ec0b044e2605172c2b0b9f432e1f0412e03ae3567304e2fcfb0ba545c79517f82830edc34d53bc9ece4c3f077ff3e51d98bd2da0b0255fe62311f1f4a9c30fd424ce1130def474d7e30b30ee07d069ce6ecc15e6cf8791621ca05d7d78b50", 0xf7}, {&(0x7f00000002c0)="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", 0x670}, {&(0x7f0000000940)="d0", 0x1}], 0x3) 1.664197786s ago: executing program 3 (id=9283): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') preadv(r1, &(0x7f0000000440)=[{&(0x7f00000041c0)=""/4096, 0x1000}], 0x1, 0x1e, 0x20704513) 1.657013725s ago: executing program 2 (id=9284): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYBLOB='b'], 0x27) 1.623321705s ago: executing program 2 (id=9285): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000004, 0x10012, r0, 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000), 0x0) 1.595135016s ago: executing program 2 (id=9286): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 1.594995785s ago: executing program 3 (id=9287): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ff1100001f79a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7040000050000006a0af2fe00000000850000001a000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffffffff55bb2007ee51050512da90b5b42128"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00222200000096231306e53f2b"], 0x0}, 0x0) 1.568266745s ago: executing program 2 (id=9288): openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000180)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES32=r1, @ANYRES64=r0], 0x0) 468.381101ms ago: executing program 7 (id=9300): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2000080, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c726f6469722c696f636861727365743d63703836342c756e695f786c6174653d312c636f6465706167653d313235302c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c726f6469722c6e6f6e756d7461696c3d302c696f636861727365743d63703836322c726f6469722c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c002aa220cdeeb5ba33c93123800bef80e5155d8840d88fc461c6"], 0x25, 0x336, &(0x7f0000000500)="$eJzs3T1sW9UXAPDjviROI/VvD3+pgsmwIaGqCWKAKVFVpIoMUGTxtWDRlI/YVIqFpTDE9QJiBLEgwcTWAcbOiAEhNgZWioQKiIVulVrxkP1e7OeP0BThlI/fb4iOzj3H976Xq/glSm5eWo/tC4tx8caN67G8XIqF9TPrcbMU1TgWSWQuBwDwb3IzTePXNHPn6vdX9qOlOa8LAJifwfv/KydGifK9XA0AcBQO+f3/UzOzl+a2LABgjqbe/x8cG574Mf/C8HcCAIB/rmeef+HJjc2I87XackTrnU69U4/HR+MbF+O1aMZWnI5K3I7IHhSyp4X+xyfObZ49Xev7sRr1fkenHtHqdurZk8JGMugvx2pUopr3p8P+pN+/OuivRcTl7mD+aJU69cVYyef/biW2Yi0q8f+p/ohzm2fXavkL1Fv7/d2IXizvX0R//aeiEt+8HJeiGRei3zta/95qrXYm3Rzr71wpD+oAAAAAAAAAAAAAAAAAAAAAAGAeTtWGqsPzb9JWt/P2+cmC6tj5OPVsOD8fqJedD5SW90/neTeZPB9o/HyeTn0hjt3TKwcAAAAAAAAAAAAAAAAAAIC/j/buUjSaza2d9u5b28WgW8i88dWnXxyPyZrXk1EmFrKXG6vJc1HoSmLYng7b02SsJg+SiFHxlavDFRdrysOrmGrvB+WpoVK+pkazeeKBHz6a1fXbKJPE1G0ZD0r5/IWh1v+y1B90HRys3aHmWpqmB7XvfTjdFaWIhalP3F8RfHn91fseaZ98dJD5PD/04aGHK89e++CTn7cbzchvTbO5tNO+nf7puZLC/inl97k0YyfMDnqjTG+nvdtIvv3lufvf+3qiOJm9f9Ji5s2D5/psMrOUBf1lHuZKF2ds/tnBi7eGu/fub+bJj9cbV/e+/+mwXYUvEg7qAAAAAAAAAAAAAAAAAACAI1H4W/G78NjT81sRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABy90f//LwS9qcxhglvdmB4qb+20D5z8+JFeKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2G/BwAA//9pxHjs") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1c1042, 0x0) pwrite64(r0, &(0x7f0000000000)='+', 0x1, 0x4010000bffd) 456.243531ms ago: executing program 8 (id=9301): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000010000b7000040"]) 314.182241ms ago: executing program 8 (id=9302): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4040ae9e, &(0x7f0000000500)={"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"}) 268.319441ms ago: executing program 7 (id=9303): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=@known='trusted.overlay.impure\x00', &(0x7f0000000640)='workdir\x86\x12d\xa5B\xc4\xa9-\xf9\xc0\x17lB\xe1\xbd=\x14zb\xe5.\x1c\xc4\xf3\xb8s)\xd49r2\xbaKk\x1d\xdd>\xa2\xf1\xf8/\xee\xf2\xea1\xe9(\xeeW\xcf\xdb\x97X\xa8\x84#:\xf3N\x1b#\xd0\x1d\x83\xd4v\x81\x00\x12\xf2b\xbb f\x01\xb7\xe4\xef\xbb\x9b\xcfq\xa2\x1a\x1f\xb0?\xb4\x18)\xa0\x17\xa4\x8d#,p\xb6\xe2\x83fm\xbb\xd5\x95\xea\x19\xd9/\xa1GIl\xeb|t\xd8\x81T\\E\xf5%\xb2\xde\xbbP7\x13\xac\xf6\xc8\x7f\xcd\x19\x88\xb6SMG\x0fM|GAN\x83\xfd\xa5\xd0\xb1\x11\xbcdbl\xec\xb91&\x86\xd7q}\xcf\x15G6\x1d}W\xcf\x93\xaa\x8c\x1b\xbd\xb2]V\xb2\x9d\nM\xf9=\xc0\xed\xd4(o{#P\xee\xba\x82\x7f\x0fn\xcc\xd5~\x8cf\xf64\x9a\x009cx\x89\x90\x10\xa5c\xc8\x10\x8bB\"w\x01g\xa8\x88\xfc\xb0\xd9\x90\xa6\x17 \xb8\x97EU],\xcc\x8d\xb3\xe5s\x16\xfc\xcb\xb5s`\x03\xeej\xaf\x12\xe0\x9bA\r\xe5Qe\x91\x0e\xb1F\xd81S4\xf6c\x97\xf2\x9f$\xd1\xcdx|\xa7`H]\x89\ft\x11DP\xd9\xb9\xedN\xf2\"\xca\x04\xe9I\bys\x90\x8e\xf4\x94\xf9kI\xf9\x15\xbdz\xab\x0eNn;\xb6C\xbd\x13p\xa3\x81\v\xf1\'\xdd\x95\xb7\xc7\xeb4(9\xb1\xe4\flD!\xf2D\x84\x94\xc7\xc0\xff\x86\xe5\xd3\xbaO\xfe\xcf\f\x17\xf0yv\x7f\xa9\xa9V\xfb\xe1\xf4\xaf \xb8w\x9c\x88\x8a\xa8\xea\xa8\x05\xe6\xffl\x0f=\xe7\xfad\xf6\x0f$cT\x89\xec\xee\x84\x01H\x8c\t\xd7\xa0G\xdf$\x92e\xbc,\xe9\xd8s\xf8\xc2x\xea\xa0\x13\x9d\xedU\xa2\xbb\x88\xfe\xc6x\xa66\xd5\xe8\x83\xe0\x92>\x1dAp\x9f9K~Am>\xe5\xa5\xe1\xca\x9d\n\xad\xa5X\x8b2\x81U\xec\x10$U\x1f7\xc4;I\xe1\xe8\xc8\xaekzb\x8dB\x97\x117\x84X\xf7\x1a@\xb1K\x89^\x0ffB\x13xS\xa0\xa4\xb0\x87\xea^#\x81\xf8\x88\xafZc\xee\xdf1\xab\x99\xb4y\xf6=\xe1\x00\x00\x00\x00\x00\x00\x00', 0x215, 0x0) mount$overlay(0x0, &(0x7f0000002240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 231.45508ms ago: executing program 6 (id=9304): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x26a, 0x0, 0x80000000000}]}) 198.919101ms ago: executing program 6 (id=9305): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) r2 = fcntl$dupfd(r0, 0x0, r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) 198.863881ms ago: executing program 8 (id=9306): unshare(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/mnt\x00') setns(r0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) 179.50834ms ago: executing program 7 (id=9307): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000140)="fc00000018003f03ab092500040007000a0700ffffff9e060000369321000100ff2500000005d00000000000000398996c92773411419da79bb94b46fe000000bc00020000036c6c256f1a272f2e117c22ebc205214000000000008934d07302ad031720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddefefe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e6aae52b6df78f472f464e86", 0xfc) socket$packet(0x11, 0x0, 0x300) 155.28715ms ago: executing program 6 (id=9308): creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x41800, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x80) lseek(r0, 0x17a, 0x0) 154.774671ms ago: executing program 8 (id=9309): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) 126.61545ms ago: executing program 7 (id=9310): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000100)={@link_local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0) 125.42632ms ago: executing program 6 (id=9311): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x5452, &(0x7f0000000180)={'veth0_to_bridge\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x100) close(r0) 110.51569ms ago: executing program 8 (id=9313): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x3, 0x8, 0xb, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000006c0), &(0x7f0000000580)='%ps \x00'}, 0x20) 65.86335ms ago: executing program 7 (id=9314): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x30, 0x1e, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x2}, [@FRA_DST={0x14, 0x1, @dev}]}, 0x30}}, 0x0) 40.94564ms ago: executing program 7 (id=9315): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x8, 0x4) 37.58333ms ago: executing program 8 (id=9316): unshare(0x22020600) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000401d1010140000000000010902"], 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 36.04933ms ago: executing program 6 (id=9317): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x7f, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000023b7040000000000008500000003000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) 0s ago: executing program 6 (id=9318): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): perblock, ret: 0 [ 432.036603][T19546] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 432.060458][T19567] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 432.075346][T19567] ext4 filesystem being mounted at /580/bus supports timestamps until (%ptR?) (0x7fffffff) [ 432.256721][ T390] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 432.546238][ T23] kauditd_printk_skb: 1143 callbacks suppressed [ 432.546265][ T23] audit: type=1400 audit(1738330024.351:37083): avc: denied { read write } for pid=19611 comm="syz.7.8155" name="loop7" dev="devtmpfs" ino=9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 432.577202][ T23] audit: type=1400 audit(1738330024.351:37084): avc: denied { open } for pid=19611 comm="syz.7.8155" path="/dev/loop7" dev="devtmpfs" ino=9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 432.601949][ T23] audit: type=1400 audit(1738330024.351:37085): avc: denied { ioctl } for pid=19611 comm="syz.7.8155" path="/dev/loop7" dev="devtmpfs" ino=9427 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 432.627977][T19614] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 432.630800][ T23] audit: type=1400 audit(1738330024.388:37086): avc: denied { ioctl } for pid=19560 comm="syz.8.8134" path="/dev/raw-gadget" dev="devtmpfs" ino=10754 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 432.661179][ T23] audit: type=1400 audit(1738330024.407:37087): avc: denied { mounton } for pid=19611 comm="syz.7.8155" path="/618/file0" dev="tmpfs" ino=172003 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 432.684424][ T23] audit: type=1400 audit(1738330024.407:37088): avc: denied { ioctl } for pid=19560 comm="syz.8.8134" path="/dev/raw-gadget" dev="devtmpfs" ino=10754 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 432.695360][ T390] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.709650][ T23] audit: type=1400 audit(1738330024.463:37089): avc: denied { ioctl } for pid=19560 comm="syz.8.8134" path="/dev/raw-gadget" dev="devtmpfs" ino=10754 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 432.722567][T19617] netlink: 112 bytes leftover after parsing attributes in process `syz.6.8156'. [ 432.750248][ T23] audit: type=1400 audit(1738330024.463:37090): avc: denied { read write } for pid=12476 comm="syz-executor" name="loop6" dev="devtmpfs" ino=9426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 432.757942][ T390] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 432.777854][ T23] audit: type=1400 audit(1738330024.463:37091): avc: denied { open } for pid=12476 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=9426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 432.789239][T19614] EXT4-fs (loop7): mounted filesystem without journal. Opts: sysvgroups,usrjquota=,errors=remount-ro,norecovery,bsddf,nomblk_io_submit,grpquota,barrier=0xfffffffffffffffe,user_xattr,jqfmt=vfsold, [ 432.810726][ T23] audit: type=1400 audit(1738330024.463:37092): avc: denied { ioctl } for pid=12476 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=9426 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 432.861053][T19614] EXT4-fs error (device loop7): ext4_validate_block_bitmap:418: comm syz.7.8155: bg 0: block 234: padding at end of block bitmap is not set [ 432.877683][T19614] EXT4-fs (loop7): Remounting filesystem read-only [ 432.930668][ T390] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 432.948346][ T390] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 432.960194][T19632] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 432.962443][ T390] usb 9-1: SerialNumber: syz [ 433.007696][T19631] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 433.035172][T19631] EXT4-fs (loop7): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x00000000000001ff,data_err=abort,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 433.144756][T19652] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 433.273024][ T390] usb 9-1: 0:2 : does not exist [ 433.288221][ T390] usb 9-1: USB disconnect, device number 2 [ 433.322663][T19673] input: syz0 as /devices/virtual/input/input22 [ 433.404981][T19680] binder: 19677:19680 ioctl c0306201 200001c0 returned -22 [ 433.429458][T19681] EXT4-fs (loop6): Ignoring removed orlov option [ 433.446858][T19681] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 433.488205][T19681] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 433.629107][T19669] F2FS-fs (loop3): invalid crc value [ 433.655495][T19669] F2FS-fs (loop3): Found nat_bits in checkpoint [ 433.722512][T19669] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 433.733975][T19669] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 433.862589][T19726] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 434.037347][T19743] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 434.044916][T19743] FAT-fs (loop8): Filesystem has been set read-only [ 434.458848][ T390] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 434.470137][T19771] xt_bpf: check failed: parse error [ 434.557708][T19775] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 434.580094][ T7] EXT4-fs error (device loop7): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 434.594641][ T7] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 434.606743][ T7] EXT4-fs (loop7): This should not happen!! Data will be lost [ 434.606743][ T7] [ 434.616189][ T7] EXT4-fs (loop7): Total free blocks count 0 [ 434.621995][ T7] EXT4-fs (loop7): Free/Dirty block details [ 434.627771][ T7] EXT4-fs (loop7): free_blocks=2415919104 [ 434.633394][ T7] EXT4-fs (loop7): dirty_blocks=48 [ 434.638389][ T7] EXT4-fs (loop7): Block reservation details [ 434.644393][ T7] EXT4-fs (loop7): i_reserved_data_blocks=3 [ 434.843815][ T390] usb 7-1: config index 0 descriptor too short (expected 274, got 18) [ 434.851973][ T390] usb 7-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 434.860910][ T390] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.870307][ T390] usb 7-1: config 0 descriptor?? [ 435.175346][T19798] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 435.195039][T19798] FAT-fs (loop8): FAT read failed (blocknr 128) [ 435.323782][T19818] bridge0: port 3(syz_tun) entered blocking state [ 435.330741][T19818] bridge0: port 3(syz_tun) entered disabled state [ 435.337833][T19818] device syz_tun entered promiscuous mode [ 435.350814][T19820] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 435.392792][T19822] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,data_err=ignore,max_batch_time=0x0000000000000007,sysvgroups,,errors=continue [ 435.408035][T19822] ext4 filesystem being mounted at /1645/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 435.425830][T19822] fs-verity: sha256 using implementation "sha256-avx2" [ 435.530834][T19833] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 435.617511][T19840] EXT4-fs (loop3): Ignoring removed bh option [ 435.623792][T19840] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 435.647135][T19840] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=a002e119, mo2=0000] [ 435.655012][T19840] EXT4-fs (loop3): failed to initialize system zone (-117) [ 435.663198][T19840] EXT4-fs (loop3): mount failed [ 435.668027][T19844] EXT4-fs (loop8): Test dummy encryption mode enabled [ 435.674831][T19844] EXT4-fs (loop8): Ignoring removed oldalloc option [ 435.683780][T19844] EXT4-fs (loop8): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,data_err=ignore,errors=remount-ro,test_dummy_encryption,nobarrier,noblock_validity,minixdf,oldalloc, [ 435.732468][T19844] EXT4-fs (loop8): re-mounted. Opts: [ 435.834828][ T390] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 435.846333][ T390] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 435.857222][ T390] asix: probe of 7-1:0.0 failed with error -71 [ 435.864167][ T390] usb 7-1: USB disconnect, device number 11 [ 435.904830][T19863] kvm [19862]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010007 data 0x0 [ 436.126637][ T5] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 436.308305][ T124] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 436.369405][T19881] netlink: 'syz.6.8263': attribute type 1 has an invalid length. [ 436.383147][ T5] usb 9-1: Using ep0 maxpacket: 16 [ 436.429032][T19887] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 436.436081][T19887] IPv6: NLM_F_CREATE should be set when creating new route [ 436.443140][T19887] IPv6: NLM_F_CREATE should be set when creating new route [ 436.511632][ T5] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.522783][ T5] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.532309][ T5] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 436.545085][ T5] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 436.553926][ T5] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.563748][ T5] usb 9-1: config 0 descriptor?? [ 436.703957][ T124] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.713896][ T124] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 436.728800][T19898] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 436.737824][T19898] ext4 filesystem being mounted at /1597/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 436.800156][ T124] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 436.809229][ T124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 436.817692][ T124] usb 4-1: SerialNumber: syz [ 437.079755][ T5] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 437.088305][ T5] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 437.095858][ T5] microsoft 0003:045E:07DA.000A: usage index exceeded [ 437.102584][ T5] microsoft 0003:045E:07DA.000A: item 0 0 2 2 parsing failed [ 437.109880][ T5] microsoft 0003:045E:07DA.000A: parse failed [ 437.115998][ T5] microsoft: probe of 0003:045E:07DA.000A failed with error -22 [ 437.124440][ T124] usb 4-1: 0:2 : does not exist [ 437.165931][ T124] usb 4-1: USB disconnect, device number 63 [ 437.281179][ T5] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 437.295346][ T1055] usb 9-1: USB disconnect, device number 3 [ 437.666107][ T5] usb 3-1: config 0 has no interfaces? [ 437.671460][ T5] usb 3-1: New USB device found, idVendor=101d, idProduct=1410, bcdDevice= 0.00 [ 437.680302][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.689526][ T5] usb 3-1: config 0 descriptor?? [ 437.903064][ T23] kauditd_printk_skb: 822 callbacks suppressed [ 437.903076][ T23] audit: type=1400 audit(1738330029.364:37915): avc: denied { unlink } for pid=19419 comm="syz-executor" name="file6" dev="tmpfs" ino=173952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 437.934270][ T23] audit: type=1400 audit(1738330029.374:37916): avc: denied { read } for pid=19921 comm="syz.3.8279" name="kvm" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 437.972666][ T23] audit: type=1400 audit(1738330029.374:37917): avc: denied { open } for pid=19921 comm="syz.3.8279" path="/dev/kvm" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 438.038592][ T23] audit: type=1400 audit(1738330029.374:37918): avc: denied { ioctl } for pid=19921 comm="syz.3.8279" path="/dev/kvm" dev="devtmpfs" ino=101 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 438.086586][ T23] audit: type=1400 audit(1738330029.392:37919): avc: denied { name_bind } for pid=19919 comm="syz.6.8278" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 438.103302][T19939] IPv6: NLM_F_REPLACE set, but no existing node found! [ 438.110684][ T23] audit: type=1400 audit(1738330029.392:37920): avc: denied { read write } for pid=19419 comm="syz-executor" name="loop8" dev="devtmpfs" ino=9428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 438.175772][ T23] audit: type=1400 audit(1738330029.392:37921): avc: denied { read write open } for pid=19419 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=9428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 438.201478][ T23] audit: type=1400 audit(1738330029.392:37922): avc: denied { ioctl } for pid=19419 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=9428 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 438.230628][ T23] audit: type=1400 audit(1738330029.430:37923): avc: denied { read write } for pid=12476 comm="syz-executor" name="loop6" dev="devtmpfs" ino=9426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 438.262190][ T23] audit: type=1400 audit(1738330029.430:37924): avc: denied { open } for pid=12476 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=9426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 438.447404][T19965] EXT4-fs (loop8): orphan cleanup on readonly fs [ 438.465974][T19965] EXT4-fs error (device loop8): ext4_validate_block_bitmap:418: comm syz.8.8299: bg 0: block 248: padding at end of block bitmap is not set [ 438.490525][T19965] EXT4-fs (loop8): 1 truncate cleaned up [ 438.499717][T19965] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 438.527852][ T107] usb 3-1: USB disconnect, device number 59 [ 438.531753][T19965] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 438.586524][T19973] EXT4-fs error (device loop8): ext4_lookup:1821: inode #2: comm syz.8.8299: deleted inode referenced: 12 [ 438.587150][T19965] EXT4-fs (loop8): re-mounted. Opts: (null) [ 438.657730][T19958] F2FS-fs (loop7): invalid crc value [ 438.667830][T19958] F2FS-fs (loop7): Found nat_bits in checkpoint [ 438.704514][T19958] F2FS-fs (loop7): Cannot turn on quotas: -2 on 1 [ 438.711969][T19958] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 438.736342][T19953] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 438.757177][T19953] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 438.775984][T19953] F2FS-fs (loop3): invalid crc value [ 438.792736][T12556] attempt to access beyond end of device [ 438.792736][T12556] loop7: rw=2049, want=45104, limit=40427 [ 438.821970][T19953] F2FS-fs (loop3): Found nat_bits in checkpoint [ 438.912539][T19953] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 438.921506][T19953] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 439.152080][ T107] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 439.314607][T20016] F2FS-fs (loop6): Invalid segment count (1) [ 439.323228][T20016] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 439.388274][T20016] F2FS-fs (loop6): Found nat_bits in checkpoint [ 439.466112][T20016] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 439.473545][T20016] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 439.504246][T12476] attempt to access beyond end of device [ 439.504246][T12476] loop6: rw=2049, want=45104, limit=40427 [ 439.547924][ T107] usb 9-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 439.557950][ T107] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 439.579663][ T107] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.623593][ T107] aiptek 9-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 439.757131][T20014] F2FS-fs (loop2): Found nat_bits in checkpoint [ 439.808588][T20014] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 439.838944][ T107] usb 9-1: USB disconnect, device number 4 [ 440.192376][T20064] erofs: (device loop6): mounted with opts: , root inode @ nid 36. [ 440.306591][T20072] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 440.446116][T20091] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8345'. [ 440.573269][T20095] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,dioread_lock,,errors=continue [ 440.595700][T20095] ext4 filesystem being mounted at /650/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 440.748425][T20085] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 440.754671][T20085] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 440.980241][ T1055] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 441.045753][T20133] loop3: p1 < > p2 < > p3 p4 < > [ 441.053210][T20133] loop3: partition table partially beyond EOD, truncated [ 441.060717][T20133] loop3: p1 start 2305 is beyond EOD, truncated [ 441.066973][T20133] loop3: p2 start 4294902784 is beyond EOD, truncated [ 441.073623][T20133] loop3: p3 start 4278191616 is beyond EOD, truncated [ 441.346516][T20139] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 441.358914][T20139] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 441.365050][ T1055] usb 9-1: config index 0 descriptor too short (expected 8228, got 36) [ 441.375771][ T1055] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.389859][T20139] F2FS-fs (loop6): invalid crc value [ 441.397059][ T1055] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.406610][ T1055] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 441.419318][ T1055] usb 9-1: New USB device found, idVendor=11c0, idProduct=0100, bcdDevice= 0.00 [ 441.428565][ T1055] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.430765][T20139] F2FS-fs (loop6): Found nat_bits in checkpoint [ 441.438440][ T1055] usb 9-1: config 0 descriptor?? [ 441.457623][T20141] F2FS-fs (loop3): Insane cp_payload (553648128 > 510) [ 441.468913][T20141] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 441.481414][T20141] F2FS-fs (loop3): invalid crc value [ 441.498994][T20141] F2FS-fs (loop3): Found nat_bits in checkpoint [ 441.501346][T20139] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 441.520299][T20139] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 441.590195][T20141] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 441.599560][T20141] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 441.630763][T20166] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 441.661459][T20166] ext4 filesystem being mounted at /1616/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 441.672814][ T366] attempt to access beyond end of device [ 441.672814][ T366] loop3: rw=2049, want=45104, limit=40427 [ 441.692256][T20166] EXT4-fs (loop2): shut down requested (2) [ 441.698679][T20166] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 441.709418][T20166] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 441.718419][T20166] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 441.744091][T20174] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 2178, start 8e210000) [ 441.771447][T20174] FAT-fs (loop7): Filesystem has been set read-only [ 441.966197][ T1055] hid-generic 0003:11C0:0100.000B: unknown main item tag 0xe [ 441.992584][ T1055] hid-generic 0003:11C0:0100.000B: hidraw0: USB HID v0.00 Device [HID 11c0:0100] on usb-dummy_hcd.8-1/input0 [ 442.034650][T20179] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 442.056146][T20179] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 442.078729][T20179] F2FS-fs (loop2): invalid crc value [ 442.081823][T20190] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8381'. [ 442.093610][T20190] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 442.112438][T20179] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 442.159163][T20186] FAT-fs (loop3): error, clusters badly computed (1 != 0) [ 442.166257][T20186] FAT-fs (loop3): Filesystem has been set read-only [ 442.174494][T20179] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 442.180728][ T13] usb 9-1: USB disconnect, device number 5 [ 442.181691][T20179] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 442.194329][T20186] 9pnet: p9_fd_create_unix (20186): problem connecting socket: ./file0: -30 [ 442.432654][T20211] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 442.559627][T20222] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 442.598180][T20222] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 442.598772][T20227] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 442.616220][T20227] EXT4-fs (loop6): orphan cleanup on readonly fs [ 442.624180][T20227] EXT4-fs error (device loop6): ext4_validate_block_bitmap:418: comm syz.6.8394: bg 0: block 40: padding at end of block bitmap is not set [ 442.638553][T20227] EXT4-fs error (device loop6) in ext4_free_blocks:5016: Corrupt filesystem [ 442.647529][T20227] EXT4-fs (loop6): 1 truncate cleaned up [ 442.653194][T20227] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 442.684822][T20227] EXT4-fs error (device loop6): ext4_xattr_block_get:544: inode #16: comm syz.6.8394: corrupted xattr block 31 [ 442.697292][T20227] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 442.706277][T20227] EXT4-fs error (device loop6): ext4_xattr_block_get:544: inode #16: comm syz.6.8394: corrupted xattr block 31 [ 442.718550][T20227] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 442.855562][T20237] EXT4-fs error (device loop8) in ext4_do_update_inode:5534: error 27 [ 442.864940][T20237] EXT4-fs error (device loop8) in ext4_do_update_inode:5534: error 27 [ 442.875097][T20237] EXT4-fs error (device loop8) in ext4_do_update_inode:5534: error 27 [ 442.884220][T20237] EXT4-fs error (device loop8) in ext4_do_update_inode:5534: error 27 [ 442.892931][T20237] EXT4-fs error (device loop8) in ext4_do_update_inode:5534: error 27 [ 442.903850][T20237] EXT4-fs error (device loop8) in ext4_orphan_del:3257: error 27 [ 442.919687][T20237] EXT4-fs error (device loop8) in ext4_do_update_inode:5534: error 27 [ 442.928571][T20237] EXT4-fs error (device loop8) in ext4_orphan_cleanup:2816: error 27 [ 442.930227][T20247] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 442.937141][T20237] EXT4-fs (loop8): 1 truncate cleaned up [ 442.950859][T20237] EXT4-fs (loop8): mounted filesystem without journal. Opts: usrquota,journal_ioprio=0x0000000000000000,,errors=continue [ 442.964132][T20237] ext4 filesystem being mounted at /50/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 442.977398][T20250] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 442.995446][T20255] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8402'. [ 443.002572][T20250] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 443.030223][ T180] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm kworker/u4:2: bg 0: block 234: padding at end of block bitmap is not set [ 443.034497][T20250] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 443.050697][ T180] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 443.052409][T20250] System zones: 1-12 [ 443.064501][ T180] EXT4-fs (loop2): This should not happen!! Data will be lost [ 443.064501][ T180] [ 443.079784][T20250] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2227: inode #15: comm syz.6.8401: corrupted in-inode xattr [ 443.092467][T20250] EXT4-fs error (device loop6): ext4_orphan_get:1242: comm syz.6.8401: couldn't read orphan inode 15 (err -117) [ 443.104375][T20250] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue [ 443.185853][T20257] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 443.195017][T20257] ext4 filesystem being mounted at /668/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 443.215706][T20257] EXT4-fs error (device loop7) in ext4_do_update_inode:5534: error 27 [ 443.230856][T20257] EXT4-fs error (device loop7) in ext4_do_update_inode:5534: error 27 [ 443.241940][T20257] EXT4-fs error (device loop7) in ext4_do_update_inode:5534: error 27 [ 443.251509][T20257] EXT4-fs error (device loop7) in ext4_do_update_inode:5534: error 27 [ 443.260236][T20257] EXT4-fs error (device loop7) in ext4_do_update_inode:5534: error 27 [ 443.270152][ T23] kauditd_printk_skb: 885 callbacks suppressed [ 443.270164][ T23] audit: type=1400 audit(1738330034.387:38783): avc: denied { write } for pid=20256 comm="syz.7.8403" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 443.271497][T20257] EXT4-fs error (device loop7) in ext4_do_update_inode:5534: error 27 [ 443.294582][ T23] audit: type=1400 audit(1738330034.387:38784): avc: denied { add_name } for pid=20256 comm="syz.7.8403" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 443.302890][T20272] netlink: 'syz.8.8407': attribute type 4 has an invalid length. [ 443.317170][T20269] raw_sendmsg: syz.6.8406 forgot to set AF_INET. Fix it! [ 443.342770][ T23] audit: type=1400 audit(1738330034.387:38785): avc: denied { create } for pid=20256 comm="syz.7.8403" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 443.346218][T20257] EXT4-fs error (device loop7) in ext4_do_update_inode:5534: error 27 [ 443.392821][ T23] audit: type=1400 audit(1738330034.397:38786): avc: denied { create } for pid=20268 comm="syz.6.8406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 443.420453][ T23] audit: type=1400 audit(1738330034.397:38787): avc: denied { connect } for pid=20268 comm="syz.6.8406" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 443.441713][ T23] audit: type=1400 audit(1738330034.397:38788): avc: denied { write } for pid=20268 comm="syz.6.8406" laddr=172.20.20.10 lport=255 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 443.467077][ T23] audit: type=1400 audit(1738330034.406:38789): avc: denied { execute } for pid=20267 comm="syz.3.8408" dev="tmpfs" ino=175840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 443.490409][ T23] audit: type=1400 audit(1738330034.406:38790): avc: denied { nosuid_transition } for pid=20267 comm="syz.3.8408" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 443.536459][ T23] audit: type=1400 audit(1738330034.406:38791): avc: denied { transition } for pid=20267 comm="syz.3.8408" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F5202864656C6574656429 dev="tmpfs" ino=175840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 443.575282][ T23] audit: type=1400 audit(1738330034.406:38792): avc: denied { entrypoint } for pid=20267 comm="syz.3.8408" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F5202864656C6574656429 dev="tmpfs" ino=175840 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 443.624521][T20295] binder: 20291:20295 ioctl 400c620e 200002c0 returned -22 [ 443.793695][T20309] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:455: comm syz.6.8425: Invalid block bitmap block 0 in block_group 0 [ 443.813276][T20309] EXT4-fs error (device loop6): ext4_free_blocks:4795: comm syz.6.8425: Freeing blocks not in datazone - block = 0, count = 4096 [ 443.827186][T20309] EXT4-fs error (device loop6): ext4_read_inode_bitmap:134: comm syz.6.8425: Invalid inode bitmap blk 0 in block_group 0 [ 443.840760][T20309] EXT4-fs error (device loop6) in ext4_free_inode:352: Corrupt filesystem [ 443.849716][T20309] EXT4-fs (loop6): 1 orphan inode deleted [ 443.855340][T20309] EXT4-fs (loop6): mounted filesystem without journal. Opts: €; ,errors=continue [ 443.957113][T20325] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 443.971338][T20325] ext4 filesystem being mounted at /1681/bus supports timestamps until (%ptR?) (0x7fffffff) [ 444.107522][T20342] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 444.138944][ T366] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 444.287967][ T390] hid-generic 0000:0000:0000.000C: unknown main item tag 0x3 [ 444.295968][ T390] hid-generic 0000:0000:0000.000C: unknown main item tag 0xd [ 444.304246][ T390] hid-generic 0000:0000:0000.000C: unknown main item tag 0xe [ 444.313123][ T390] hid-generic 0000:0000:0000.000C: item fetching failed at offset 25/83 [ 444.328298][ T390] hid-generic: probe of 0000:0000:0000.000C failed with error -22 [ 444.349187][ T13] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 444.413944][T20374] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 444.426550][T20374] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 444.483438][T20377] EXT4-fs (loop3): orphan cleanup on readonly fs [ 444.493206][T20377] EXT4-fs error (device loop3): ext4_find_extent:963: inode #4: comm syz.3.8451: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 444.516587][T20377] EXT4-fs warning (device loop3): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 444.531724][T20377] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 444.538289][T20377] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 444.614928][ T13] usb 7-1: Using ep0 maxpacket: 16 [ 444.663873][T20393] input: syz0 as /devices/virtual/input/input24 [ 444.708700][T20389] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nombcache,dioread_lock,norecovery,barrier=0x000000000000004c,lazytime,init_itable=0x0000000000000005,usrquota,errors=continue,,errors=continue [ 444.743377][ T13] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.754069][ T13] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 444.756175][T20399] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c118, mo2=0002] [ 444.765773][ T13] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 444.773465][T20399] System zones: 0-1, 3-12 [ 444.783820][ T13] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 444.791338][T20404] erofs: (device loop7): mounted with opts: , root inode @ nid 36. [ 444.798724][T20399] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,acl,debug,,errors=continue [ 444.819146][T20404] erofs: (device loop7): fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel [ 444.837015][T20404] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3604 @ nid 36 [ 444.855628][T20404] erofs: (device loop7): fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel [ 444.868991][T20404] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3603 @ nid 36 [ 444.873623][T20410] erofs: (device loop7): fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel [ 444.890856][T20410] erofs: (device loop7): z_erofs_vle_normalaccess_readpage: failed to read, err [-95] [ 444.891746][T20404] erofs: (device loop7): fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel [ 444.912898][T20404] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3602 @ nid 36 [ 444.923442][T20404] erofs: (device loop7): fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel [ 444.935133][T20404] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3601 @ nid 36 [ 444.945675][T20404] erofs: (device loop7): fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel [ 444.956774][T20404] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3600 @ nid 36 [ 444.967381][T20404] erofs: (device loop7): fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel [ 444.983234][ T13] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 444.997118][ T13] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.005870][T20404] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 3599 @ nid 36 [ 445.016667][ T13] usb 7-1: Product: syz [ 445.026020][ T13] usb 7-1: Manufacturer: syz [ 445.030441][ T13] usb 7-1: SerialNumber: syz [ 445.126310][T20433] bridge0: port 3(syz_tun) entered blocking state [ 445.135430][T20433] bridge0: port 3(syz_tun) entered disabled state [ 445.143481][T20433] device syz_tun entered promiscuous mode [ 445.149205][T20433] bridge0: port 3(syz_tun) entered blocking state [ 445.155505][T20433] bridge0: port 3(syz_tun) entered forwarding state [ 445.206655][T20437] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 445.218123][T20437] EXT4-fs (loop2): invalid journal inode [ 445.225019][T20437] EXT4-fs (loop2): can't get journal size [ 445.242162][T20437] EXT4-fs (loop2): 1 truncate cleaned up [ 445.255331][T20437] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 445.388605][T20465] erofs: (device loop7): mounted with opts: , root inode @ nid 36. [ 445.417288][T20465] attempt to access beyond end of device [ 445.417288][T20465] loop7: rw=0, want=24, limit=16 [ 445.545291][ T13] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 445.556312][ T13] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 445.717419][T20486] EXT4-fs (loop7): Ignoring removed orlov option [ 445.722545][T20488] loop8: p1 p2 p3 [ 445.729155][T20486] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 445.750395][T20486] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 445.782908][T20483] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 445.790696][T20483] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 445.802957][T20483] F2FS-fs (loop3): Found nat_bits in checkpoint [ 445.845409][T20483] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 445.852254][T20483] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 446.021940][ T13] usb 7-1: USB disconnect, device number 12 [ 446.268846][T20536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8514'. [ 446.337463][T20546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8519'. [ 446.346378][T20546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8519'. [ 446.415207][T20551] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 446.426422][T20551] ext4 filesystem being mounted at /1701/bus supports timestamps until (%ptR?) (0x7fffffff) [ 446.526548][T20570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8529'. [ 446.632349][T20576] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 446.656929][T20576] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 446.656938][T20576] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 446.663622][T20576] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 446.663636][T20576] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c000e118, mo2=0000] [ 446.664703][T20576] EXT4-fs (loop6): orphan cleanup on readonly fs [ 446.669686][T20576] EXT4-fs error (device loop6): ext4_validate_block_bitmap:418: comm syz.6.8532: bg 0: block 34: padding at end of block bitmap is not set [ 446.675233][T20576] EXT4-fs (loop6): 1 truncate cleaned up [ 446.675711][T20576] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,bsdgroups,nogrpid,noblock_validity,,errors=continue [ 446.681737][T20583] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 446.690226][T20583] EXT4-fs (loop7): orphan cleanup on readonly fs [ 446.692823][T20583] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:2998: comm syz.7.8534: Allocating blocks 41-42 which overlap fs metadata [ 446.699897][T20583] EXT4-fs error (device loop7): mb_free_blocks:1458: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 446.810399][T20583] EXT4-fs error (device loop7): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 18 vs 19 free clusters [ 446.825178][T20583] EXT4-fs (loop7): 1 truncate cleaned up [ 446.830846][T20583] EXT4-fs (loop7): pa ffff8881dd677540: logic 1, phys. 41, len 23 [ 446.838522][T20583] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:3895: group 0, free 22, pa_free 23 [ 446.848481][T20583] EXT4-fs (loop7): mounted filesystem without journal. Opts: stripe=0x0000000000000012,noblock_validity,max_dir_size_kb=0x0000000000000400,resgid=0x0000000020207374,nogrpid,errors=continue,sb=0x0000000000000006,nodiscard,resuid=0x00000000000000002,errors=continue [ 446.986074][T20600] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,nombcache,,errors=continue [ 447.004742][T20600] ext4 filesystem being mounted at /704/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 447.333047][T20615] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 447.340827][T20615] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 447.354067][T20615] F2FS-fs (loop3): invalid crc value [ 447.361435][T20615] F2FS-fs (loop3): Found nat_bits in checkpoint [ 447.411686][T20615] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 447.418640][T20615] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 447.758780][T20617] F2FS-fs (loop2): Found nat_bits in checkpoint [ 447.796088][T20617] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 447.822375][T20617] syz.2.8548 (pid 20617) is setting an IV_INO_LBLK_32 encryption policy. This should only be used if there are certain hardware limitations. [ 447.964957][T20671] option changes via remount are deprecated (pid=20670 comm=syz.8.8569) [ 448.175010][ T390] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 448.260387][ T24] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 448.277570][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.285567][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.294146][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.301550][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.309439][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.316786][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.324051][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.331723][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.339589][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.346875][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.356638][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.363943][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.371197][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.378479][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.385683][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.393128][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.400842][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.408146][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.415304][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.422583][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.429903][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.437332][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.444679][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.451938][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.452814][ T390] usb 4-1: Using ep0 maxpacket: 16 [ 448.459229][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.471384][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.478540][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.485912][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.493207][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.500723][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.508325][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.515692][ T13] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 448.524486][ T13] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 448.527915][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 448.570492][ T107] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 448.602762][ T390] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 448.610673][ T390] usb 4-1: config 0 has no interface number 0 [ 448.624379][ T23] kauditd_printk_skb: 1193 callbacks suppressed [ 448.624392][ T23] audit: type=1400 audit(1738330039.392:39978): avc: denied { ioctl } for pid=20656 comm="syz.6.8565" path="/dev/raw-gadget" dev="devtmpfs" ino=10754 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 448.624490][ T390] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.646513][ T23] audit: type=1400 audit(1738330039.392:39979): avc: denied { read write } for pid=368 comm="syz-executor" name="loop2" dev="devtmpfs" ino=9422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 448.656500][ T390] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.673381][ T23] audit: type=1400 audit(1738330039.429:39980): avc: denied { ioctl } for pid=20656 comm="syz.6.8565" path="/dev/raw-gadget" dev="devtmpfs" ino=10754 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 448.708942][ T390] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 448.726770][ T23] audit: type=1400 audit(1738330039.439:39981): avc: denied { read write open } for pid=368 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=9422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 448.736345][ T390] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.761346][ T23] audit: type=1400 audit(1738330039.439:39982): avc: denied { ioctl } for pid=368 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=9422 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 448.794394][ T23] audit: type=1400 audit(1738330039.457:39983): avc: denied { ioctl } for pid=20656 comm="syz.6.8565" path="/dev/raw-gadget" dev="devtmpfs" ino=10754 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 448.797745][ T390] usb 4-1: config 0 descriptor?? [ 448.820358][ T23] audit: type=1400 audit(1738330039.467:39984): avc: denied { read write } for pid=20712 comm="syz.2.8588" name="loop2" dev="devtmpfs" ino=9422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 448.828502][T20713] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,lazytime,data_err=abort,errors=remount-ro, [ 448.849749][ T23] audit: type=1400 audit(1738330039.467:39985): avc: denied { open } for pid=20712 comm="syz.2.8588" path="/dev/loop2" dev="devtmpfs" ino=9422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 448.873122][T20713] EXT4-fs error (device loop2): ext4_ext_precache:644: inode #2: comm syz.2.8588: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 448.885504][ T23] audit: type=1400 audit(1738330039.467:39986): avc: denied { ioctl } for pid=20712 comm="syz.2.8588" path="/dev/loop2" dev="devtmpfs" ino=9422 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 448.904531][T20713] EXT4-fs (loop2): Remounting filesystem read-only [ 448.934302][ T23] audit: type=1400 audit(1738330039.495:39987): avc: denied { ioctl } for pid=20656 comm="syz.6.8565" path="/dev/raw-gadget" dev="devtmpfs" ino=10754 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 448.934482][ T24] usb 7-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 448.968725][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.978029][ T24] usb 7-1: Product: syz [ 448.982338][ T24] usb 7-1: Manufacturer: syz [ 448.986927][ T24] usb 7-1: SerialNumber: syz [ 448.993155][ T24] usb 7-1: config 0 descriptor?? [ 449.051960][ T107] usb 9-1: config 0 has no interfaces? [ 449.057507][ T107] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 449.067022][ T107] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.076932][ T107] usb 9-1: config 0 descriptor?? [ 449.154511][T20729] devpts: called with bogus options [ 449.235565][T20735] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 449.246180][T20735] ext4 filesystem being mounted at /1667/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 449.262174][ T124] usb 7-1: USB disconnect, device number 13 [ 449.333150][ T13] usb 9-1: USB disconnect, device number 6 [ 449.438508][T20740] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 449.575416][ T390] uclogic 0003:28BD:0071.000E: failed retrieving string descriptor #100: -71 [ 449.585198][ T390] uclogic 0003:28BD:0071.000E: failed retrieving pen parameters: -71 [ 449.593338][ T390] uclogic 0003:28BD:0071.000E: pen probing failed: -71 [ 449.600325][ T390] uclogic 0003:28BD:0071.000E: failed probing parameters: -71 [ 449.607974][ T390] uclogic: probe of 0003:28BD:0071.000E failed with error -71 [ 449.618541][ T390] usb 4-1: USB disconnect, device number 64 [ 449.635927][T20757] tipc: Started in network mode [ 449.640669][T20757] tipc: Own node identity ac1414aa, cluster identity 4711 [ 449.647754][T20757] tipc: Enabling of bearer rejected, failed to enable media [ 450.061090][T20795] netlink: 'syz.8.8623': attribute type 4 has an invalid length. [ 450.086100][T20797] binder: 20796:20797 ioctl 400c620e 0 returned -14 [ 450.185343][ T13] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 450.441577][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 450.482137][T20825] FAT-fs (loop7): Directory bread(block 64) failed [ 450.489190][T20825] FAT-fs (loop7): Directory bread(block 65) failed [ 450.499956][T20825] FAT-fs (loop7): Directory bread(block 66) failed [ 450.510244][T20825] FAT-fs (loop7): Directory bread(block 67) failed [ 450.520021][T20825] FAT-fs (loop7): Directory bread(block 68) failed [ 450.526468][T20825] FAT-fs (loop7): Directory bread(block 69) failed [ 450.533700][T20825] FAT-fs (loop7): Directory bread(block 70) failed [ 450.540813][T20825] FAT-fs (loop7): Directory bread(block 71) failed [ 450.547419][T20825] FAT-fs (loop7): Directory bread(block 72) failed [ 450.554545][T20825] FAT-fs (loop7): Directory bread(block 73) failed [ 450.590332][ T7] attempt to access beyond end of device [ 450.590332][ T7] loop7: rw=1, want=1228, limit=256 [ 450.740729][ T13] usb 3-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 450.750456][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.760019][ T13] usb 3-1: Product: syz [ 450.764687][ T13] usb 3-1: Manufacturer: syz [ 450.769203][ T13] usb 3-1: SerialNumber: syz [ 450.783742][ T13] usb 3-1: config 0 descriptor?? [ 450.947958][T20833] F2FS-fs (loop7): Found nat_bits in checkpoint [ 451.021683][T20833] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 451.043764][ T13] usb 3-1: USB disconnect, device number 60 [ 451.082224][T12556] attempt to access beyond end of device [ 451.082224][T12556] loop7: rw=2049, want=45112, limit=40427 [ 451.322609][T20859] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 451.339399][T20859] EXT4-fs error (device loop8): ext4_check_all_de:657: inode #12: block 7: comm syz.8.8650: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 451.604229][T20883] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 451.671697][T20895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 451.756296][ T13] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 452.152156][ T13] usb 9-1: config 0 has an invalid interface number: 156 but max is 0 [ 452.175299][ T13] usb 9-1: config 0 has no interface number 0 [ 452.182777][T20948] IPv6: ADDRCONF(NETDEV_CHANGE): wg0: link becomes ready [ 452.189073][ T13] usb 9-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 452.201212][ T13] usb 9-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 452.232944][ T13] usb 9-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 452.242957][ T13] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.261263][ T13] usb 9-1: config 0 descriptor?? [ 452.312975][ T13] usb 9-1: MIDIStreaming interface descriptor not found [ 452.342945][T20959] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodiscard,bsddf,acl,errors=remount-ro,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,nodelalloc,auto_da_alloc,norecovery, [ 452.368263][T20961] EXT4-fs (loop2): Ignoring removed orlov option [ 452.401666][T20961] EXT4-fs (loop2): 1 orphan inode deleted [ 452.407982][T20961] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc,init_itable,stripe=0x000000000000007b,orlov,sysvgroups,delalloc,usrquota, [ 452.427602][T20961] ext4 filesystem being mounted at /1692/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 452.528738][ T13] usb 9-1: USB disconnect, device number 7 [ 452.556295][T20977] FAT-fs (loop3): Directory bread(block 64) failed [ 452.563752][T20977] FAT-fs (loop3): Directory bread(block 65) failed [ 452.570867][T20977] FAT-fs (loop3): Directory bread(block 66) failed [ 452.578100][T20977] FAT-fs (loop3): Directory bread(block 67) failed [ 452.585366][T20977] FAT-fs (loop3): Directory bread(block 68) failed [ 452.592747][T20977] FAT-fs (loop3): Directory bread(block 69) failed [ 452.599203][T20977] FAT-fs (loop3): Directory bread(block 70) failed [ 452.606659][T20977] FAT-fs (loop3): Directory bread(block 71) failed [ 452.613907][T20977] FAT-fs (loop3): Directory bread(block 72) failed [ 452.620455][T20977] FAT-fs (loop3): Directory bread(block 73) failed [ 452.686810][T20965] loop7: p1 p3 < p5 p6 > [ 452.755521][T20976] F2FS-fs (loop6): Found nat_bits in checkpoint [ 452.794371][T20976] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 452.868582][T12476] attempt to access beyond end of device [ 452.868582][T12476] loop6: rw=2049, want=45104, limit=40427 [ 453.010088][T20995] FAT-fs (loop7): Directory bread(block 64) failed [ 453.027369][T20995] FAT-fs (loop7): Directory bread(block 65) failed [ 453.044635][T20995] FAT-fs (loop7): Directory bread(block 66) failed [ 453.071340][T20995] FAT-fs (loop7): Directory bread(block 67) failed [ 453.078546][T20995] FAT-fs (loop7): Directory bread(block 68) failed [ 453.100339][T20995] FAT-fs (loop7): Directory bread(block 69) failed [ 453.124683][T20995] FAT-fs (loop7): Directory bread(block 70) failed [ 453.141574][T20995] FAT-fs (loop7): Directory bread(block 71) failed [ 453.148113][T20995] FAT-fs (loop7): Directory bread(block 72) failed [ 453.154519][T20995] FAT-fs (loop7): Directory bread(block 73) failed [ 453.278399][T20991] F2FS-fs (loop3): Found nat_bits in checkpoint [ 453.368934][T20991] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 453.405362][T21016] attempt to access beyond end of device [ 453.405362][T21016] loop7: rw=2049, want=4808, limit=256 [ 453.484146][ T366] attempt to access beyond end of device [ 453.484146][ T366] loop3: rw=2049, want=45104, limit=40427 [ 453.816195][T21033] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 453.855695][T21033] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2227: inode #15: comm syz.8.8718: corrupted in-inode xattr [ 453.868635][T21033] EXT4-fs error (device loop8): ext4_orphan_get:1242: comm syz.8.8718: couldn't read orphan inode 15 (err -117) [ 453.902750][T21033] EXT4-fs (loop8): mounted filesystem without journal. Opts: prjquota,noload,grpjquota=,resgid=0x000000000000ee00,min_batch_time=0x0000000000000005,usrjquota=,nombcache,noquota,grpquota,norecovery,,errors=continue [ 453.944197][T21033] EXT4-fs error (device loop8): ext4_inlinedir_to_tree:1437: inode #12: block 7: comm syz.8.8718: path /126/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=33554446, rec_len=0, size=60 fake=0 [ 453.945737][ T2850] attempt to access beyond end of device [ 453.945737][ T2850] loop7: rw=1, want=15960, limit=256 [ 453.979359][T20993] F2FS-fs (loop2): Found nat_bits in checkpoint [ 453.985582][ T23] kauditd_printk_skb: 844 callbacks suppressed [ 453.985593][ T23] audit: type=1400 audit(1738330044.406:40832): avc: denied { unmount } for pid=19419 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 454.004864][ T2850] attempt to access beyond end of device [ 454.004864][ T2850] loop7: rw=1, want=34376, limit=256 [ 454.033652][ T23] audit: type=1400 audit(1738330044.406:40833): avc: denied { ioctl } for pid=21047 comm="syz.3.8713" path="/dev/vhost-vsock" dev="devtmpfs" ino=9608 ioctlcmd=0xaf20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 454.060501][ T23] audit: type=1400 audit(1738330044.443:40834): avc: denied { watch } for pid=21044 comm="syz.6.8722" path="/706/file0" dev="tmpfs" ino=181393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 454.095266][ T23] audit: type=1400 audit(1738330044.452:40835): avc: denied { read write } for pid=366 comm="syz-executor" name="loop3" dev="devtmpfs" ino=9423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 454.095286][ T23] audit: type=1400 audit(1738330044.452:40836): avc: denied { open } for pid=366 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=9423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 454.095304][ T23] audit: type=1400 audit(1738330044.462:40837): avc: denied { read write } for pid=12476 comm="syz-executor" name="loop6" dev="devtmpfs" ino=9426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 454.095322][ T23] audit: type=1400 audit(1738330044.462:40838): avc: denied { read write open } for pid=12476 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=9426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 454.095341][ T23] audit: type=1400 audit(1738330044.490:40839): avc: denied { read write } for pid=19419 comm="syz-executor" name="loop8" dev="devtmpfs" ino=9428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 454.095359][ T23] audit: type=1400 audit(1738330044.490:40840): avc: denied { open } for pid=19419 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=9428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 454.095377][ T23] audit: type=1400 audit(1738330044.490:40841): avc: denied { ioctl } for pid=19419 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=9428 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 454.156881][T20993] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 454.423891][T21076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8732'. [ 454.468718][T21076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8732'. [ 454.487311][T21076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8732'. [ 454.602534][T21089] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 454.616006][T21089] EXT4-fs (loop3): shut down requested (2) [ 454.621939][T21089] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 454.630995][T21089] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 454.693049][T21093] FAT-fs (loop8): Directory bread(block 64) failed [ 454.719457][T21093] FAT-fs (loop8): Directory bread(block 65) failed [ 454.739007][T21093] FAT-fs (loop8): Directory bread(block 66) failed [ 454.750029][T21093] FAT-fs (loop8): Directory bread(block 67) failed [ 454.756438][T21093] FAT-fs (loop8): Directory bread(block 68) failed [ 454.780052][T21093] FAT-fs (loop8): Directory bread(block 69) failed [ 454.808930][T21093] FAT-fs (loop8): Directory bread(block 70) failed [ 454.820056][T21093] FAT-fs (loop8): Directory bread(block 71) failed [ 454.835330][T21093] FAT-fs (loop8): Directory bread(block 72) failed [ 454.841704][T21093] FAT-fs (loop8): Directory bread(block 73) failed [ 455.015919][T21113] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8740'. [ 455.025058][T21113] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8740'. [ 455.033862][T21113] netlink: 'syz.2.8740': attribute type 5 has an invalid length. [ 455.041387][T21113] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8740'. [ 455.073023][T21098] F2FS-fs (loop6): fault_injection options not supported [ 455.083592][T21098] F2FS-fs (loop6): invalid crc value [ 455.091572][T21098] F2FS-fs (loop6): Found nat_bits in checkpoint [ 455.174278][T21098] F2FS-fs (loop6): Start checkpoint disabled! [ 455.201600][T21098] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 455.218766][ T7] attempt to access beyond end of device [ 455.218766][ T7] loop8: rw=1, want=1256, limit=256 [ 455.236188][ T7] attempt to access beyond end of device [ 455.236188][ T7] loop8: rw=1, want=1832, limit=256 [ 455.262335][ T7] attempt to access beyond end of device [ 455.262335][ T7] loop8: rw=1, want=7208, limit=256 [ 455.279876][ T7] attempt to access beyond end of device [ 455.279876][ T7] loop8: rw=1, want=10688, limit=256 [ 455.293778][T21128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8754'. [ 455.408616][T21130] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,bsddf,,errors=continue [ 455.441577][T21130] ext4 filesystem being mounted at /1700/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 455.669101][T21163] incfs: iterate_incfs_dir / -22 [ 455.789027][T21171] EXT4-fs (loop2): Ignoring removed orlov option [ 455.822948][T21171] EXT4-fs (loop2): 1 orphan inode deleted [ 455.828641][T21171] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc,init_itable,stripe=0x000000000000007b,orlov,sysvgroups,delalloc,usrquota, [ 455.847209][T21171] ext4 filesystem being mounted at /1703/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 455.862743][T21177] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 455.874317][T21177] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 455.882528][T21177] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 455.892225][T21177] EXT4-fs (loop7): 1 truncate cleaned up [ 455.897889][T21177] EXT4-fs (loop7): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1, [ 455.966563][T21177] EXT4-fs error (device loop7): ext4_map_blocks:617: inode #2: block 4: comm syz.7.8772: lblock 0 mapped to illegal pblock 4 (length 1) [ 455.981958][T21177] EXT4-fs (loop7): Remounting filesystem read-only [ 455.988450][T21177] EXT4-fs error (device loop7) in ext4_evict_inode:276: Readonly filesystem [ 455.991805][T21164] F2FS-fs (loop8): Found nat_bits in checkpoint [ 455.999359][T21177] EXT4-fs error (device loop7): ext4_map_blocks:617: inode #2: block 4: comm syz.7.8772: lblock 0 mapped to illegal pblock 4 (length 1) [ 456.042248][T21164] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 456.812907][ T24] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 457.108761][T21233] EXT4-fs (loop2): Ignoring removed oldalloc option [ 457.110269][T21229] FAT-fs (loop7): Directory bread(block 64) failed [ 457.122582][T21229] FAT-fs (loop7): Directory bread(block 65) failed [ 457.130581][T21229] FAT-fs (loop7): Directory bread(block 66) failed [ 457.138842][T21229] FAT-fs (loop7): Directory bread(block 67) failed [ 457.146950][T21233] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2816c018, mo2=0002] [ 457.154711][T21233] System zones: 1-3, 19-19, 35-38 [ 457.160645][T21229] FAT-fs (loop7): Directory bread(block 68) failed [ 457.167685][T21229] FAT-fs (loop7): Directory bread(block 69) failed [ 457.175611][T21233] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,noinit_itable,barrier=0x0000000000000040,oldalloc,debug,usrjquota=,,errors=continue [ 457.176434][T21229] FAT-fs (loop7): Directory bread(block 70) failed [ 457.192358][T21233] ext4 filesystem being mounted at /1705/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 457.207899][T21229] FAT-fs (loop7): Directory bread(block 71) failed [ 457.209070][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.228560][T21229] FAT-fs (loop7): Directory bread(block 72) failed [ 457.235533][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.239641][T21229] FAT-fs (loop7): Directory bread(block 73) failed [ 457.248619][ T24] usb 9-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 457.260829][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.282658][ T24] usb 9-1: config 0 descriptor?? [ 457.593091][T21260] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8801'. [ 457.726142][T21273] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 457.733203][T21273] IPv6: NLM_F_CREATE should be set when creating new route [ 457.799379][ T24] holtek 0003:1241:5015.000F: collection stack underflow [ 457.806266][ T24] holtek 0003:1241:5015.000F: item 0 1 0 12 parsing failed [ 457.826194][ T24] holtek 0003:1241:5015.000F: parse failed [ 457.834405][ T24] holtek: probe of 0003:1241:5015.000F failed with error -22 [ 457.927467][T21236] F2FS-fs (loop3): invalid crc value [ 457.951670][T21294] EXT4-fs error (device loop2): ext4_fill_super:4612: inode #2: comm syz.2.8816: casefold flag without casefold feature [ 457.964535][T21294] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 457.975262][T21294] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 457.980671][T21236] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 457.984283][T21294] System zones: 0-2, 18-18, 34-35 [ 457.996626][T21294] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 458.010811][T21294] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz.2.8816: path /1720/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 458.053112][ T13] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 458.065332][ T1055] usb 9-1: USB disconnect, device number 8 [ 458.183681][T21300] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 458.193171][T21300] ext4 filesystem being mounted at /1721/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 458.248028][T21300] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 458.256794][T21300] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 458.448655][ T13] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.469136][ T13] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 458.491340][ T13] usb 7-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 458.512696][ T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.523260][ T13] usb 7-1: config 0 descriptor?? [ 458.624058][T21323] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 458.676874][T21305] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 458.679256][T21323] erofs: (device loop2): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 458.684627][T21305] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 458.694257][T21323] handle_bad_sector: 4 callbacks suppressed [ 458.694270][T21323] attempt to access beyond end of device [ 458.694270][T21323] loop2: rw=0, want=304, limit=16 [ 458.718315][T21323] erofs: (device loop2): z_erofs_vle_normalaccess_readpage: failed to read, err [-117] [ 458.720977][T21305] F2FS-fs (loop7): invalid crc_offset: 33558524 [ 458.749239][T21305] F2FS-fs (loop7): Found nat_bits in checkpoint [ 458.761372][T21327] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 458.790365][T21305] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 458.797447][T21305] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 458.820552][T21305] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 458.820561][T21305] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 458.828688][T21305] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 458.837345][T21305] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 458.845590][T21305] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 458.853626][T21305] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 458.862757][T21305] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 458.871729][T21305] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 458.881432][T21305] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 458.889744][T21305] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 459.028796][ T13] wacom 0003:056A:032C.0010: unknown main item tag 0x0 [ 459.049386][ T13] wacom 0003:056A:032C.0010: unknown main item tag 0x0 [ 459.056864][ T13] wacom 0003:056A:032C.0010: unknown main item tag 0x0 [ 459.064340][ T13] wacom 0003:056A:032C.0010: unknown main item tag 0x0 [ 459.071393][ T13] wacom 0003:056A:032C.0010: unknown main item tag 0x0 [ 459.080920][ T13] wacom 0003:056A:032C.0010: hidraw0: USB HID v0.00 Device [HID 056a:032c] on usb-dummy_hcd.6-1/input0 [ 459.247919][ T107] usb 7-1: USB disconnect, device number 14 [ 459.327741][T21369] EXT4-fs (loop3): 1 orphan inode deleted [ 459.333307][T21369] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 459.343211][ T23] kauditd_printk_skb: 827 callbacks suppressed [ 459.343221][ T23] audit: type=1400 audit(1738330049.419:41669): avc: denied { mount } for pid=21368 comm="syz.3.8841" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 459.375732][T21369] ext4 filesystem being mounted at /1776/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 459.406666][ T23] audit: type=1400 audit(1738330049.438:41670): avc: denied { read write } for pid=19419 comm="syz-executor" name="loop8" dev="devtmpfs" ino=9428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 459.431970][ T23] audit: type=1400 audit(1738330049.438:41671): avc: denied { open } for pid=19419 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=9428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 459.457012][ T23] audit: type=1400 audit(1738330049.438:41672): avc: denied { ioctl } for pid=19419 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=9428 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 459.489639][ T23] audit: type=1400 audit(1738330049.447:41673): avc: denied { read } for pid=21375 comm="syz.8.8842" name="kvm" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 459.513193][ T23] audit: type=1400 audit(1738330049.447:41674): avc: denied { read open } for pid=21375 comm="syz.8.8842" path="/dev/kvm" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 459.537619][ T23] audit: type=1400 audit(1738330049.447:41675): avc: denied { ioctl } for pid=21375 comm="syz.8.8842" path="/dev/kvm" dev="devtmpfs" ino=101 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 459.571577][ T23] audit: type=1400 audit(1738330049.466:41676): avc: denied { read write } for pid=21368 comm="syz.3.8841" name="loop3" dev="devtmpfs" ino=9423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 459.596581][ T23] audit: type=1400 audit(1738330049.466:41677): avc: denied { open } for pid=21368 comm="syz.3.8841" path="/dev/loop3" dev="devtmpfs" ino=9423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 459.621703][ T23] audit: type=1400 audit(1738330049.466:41678): avc: denied { ioctl } for pid=21368 comm="syz.3.8841" path="/dev/loop3" dev="devtmpfs" ino=9423 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 459.744033][T21388] FAT-fs (loop8): bogus logical sector size 2294 [ 459.750193][T21388] FAT-fs (loop8): Can't find a valid FAT filesystem [ 460.022072][T21413] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 460.032541][T21413] ext4 filesystem being mounted at /724/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 460.159855][T21422] loop3: p1 < > p3 < > p4 [ 460.164229][T21422] loop3: partition table partially beyond EOD, truncated [ 460.171756][T21422] loop3: p1 start 4294967040 is beyond EOD, truncated [ 460.179674][T21422] loop3: p4 size 50331776 extends beyond EOD, truncated [ 460.572288][T21477] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8887'. [ 460.680008][T21484] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 460.755723][T21491] EXT4-fs (loop6): Ignoring removed orlov option [ 460.782335][T21487] EXT4-fs (loop7): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,acl,noblock_validity,,errors=continue [ 460.798318][T21491] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,noquota,data_err=abort,norecovery,delalloc,orlov,abort,noauto_da_alloc,noquota,,errors=continue [ 460.812579][T21487] EXT4-fs (loop7): re-mounted. Opts: (null) [ 460.816050][ T107] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 460.855955][T21487] EXT4-fs (loop7): re-mounted. Opts: (null) [ 461.106791][T21520] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 461.119971][T21520] ext4 filesystem being mounted at /1790/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 461.206831][ T107] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 461.233124][T21540] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 461.240737][ T107] usb 9-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00 [ 461.267683][ T107] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.279421][ T107] usb 9-1: config 0 descriptor?? [ 461.325083][ T107] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 461.338100][T21551] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 461.347481][T21551] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 461.356844][ T24] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 461.508226][T21541] F2FS-fs (loop3): Invalid segment count (0) [ 461.514024][T21541] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 461.524588][T21541] F2FS-fs (loop3): invalid crc value [ 461.532490][T21541] F2FS-fs (loop3): Found nat_bits in checkpoint [ 461.541609][ T390] usb 9-1: USB disconnect, device number 9 [ 461.570176][T21541] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 461.577093][T21541] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 461.612753][ T366] attempt to access beyond end of device [ 461.612753][ T366] loop3: rw=2049, want=45104, limit=40427 [ 461.752473][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.766042][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 461.779648][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 461.789246][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.799656][ T24] usb 3-1: config 0 descriptor?? [ 461.921486][T21577] netlink: 'syz.3.8920': attribute type 8 has an invalid length. [ 462.103209][T21596] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 462.213304][T21607] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8937'. [ 462.229281][T21607] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8937'. [ 462.309431][ T24] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x6 [ 462.327554][ T24] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x7 [ 462.335898][ T24] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 462.355951][ T24] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 462.416973][T21602] F2FS-fs (loop8): fault_injection options not supported [ 462.424003][T21602] F2FS-fs (loop8): fault_type options not supported [ 462.433321][T21602] F2FS-fs (loop8): invalid crc value [ 462.441757][T21602] F2FS-fs (loop8): Found nat_bits in checkpoint [ 462.486180][T21602] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 462.515897][T21615] F2FS-fs (loop3): invalid crc value [ 462.528892][T21615] F2FS-fs (loop3): Found nat_bits in checkpoint [ 462.536393][ T24] usb 3-1: USB disconnect, device number 61 [ 462.585223][T21615] F2FS-fs (loop3): Start checkpoint disabled! [ 462.585257][ T2850] attempt to access beyond end of device [ 462.585257][ T2850] loop8: rw=2049, want=40976, limit=40427 [ 462.597599][T21615] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 462.609696][T21602] VFS:Filesystem freeze failed [ 462.898064][T21627] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002] [ 462.907330][T21627] System zones: 0-1, 3-12 [ 462.912234][T21627] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 463.077563][T21652] input: syz1 as /devices/virtual/input/input28 [ 463.130919][T21646] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 463.211700][T21654] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 463.220932][T21654] ext4 filesystem being mounted at /1741/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 463.312881][ T107] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 463.354443][T21666] EXT4-fs (loop2): error: could not find journal device path: error -2 [ 463.484466][T21672] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 463.494913][T21672] ext4 filesystem being mounted at /160/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 463.625916][T21687] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 463.697718][ T107] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.707700][ T107] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 463.793984][ T107] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 463.803224][ T107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 463.811255][ T390] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 463.820356][ T107] usb 4-1: SerialNumber: syz [ 463.833958][T21695] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8971'. [ 464.127319][ T107] usb 4-1: 0:2 : does not exist [ 464.136632][ T107] usb 4-1: USB disconnect, device number 65 [ 464.200150][ T390] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.210100][ T390] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 464.307100][ T390] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 464.315929][ T390] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 464.325390][ T390] usb 7-1: SerialNumber: syz [ 464.639694][ T390] usb 7-1: 0:2 : does not exist [ 464.650229][ T390] usb 7-1: USB disconnect, device number 15 [ 464.698527][ T23] kauditd_printk_skb: 890 callbacks suppressed [ 464.698540][ T23] audit: type=1400 audit(1738330054.424:42569): avc: denied { read write } for pid=21712 comm="syz.3.8978" name="loop3" dev="devtmpfs" ino=9423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 464.730120][ T23] audit: type=1400 audit(1738330054.433:42570): avc: denied { read write } for pid=21714 comm="syz.2.8979" name="loop2" dev="devtmpfs" ino=9422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 464.755934][ T23] audit: type=1400 audit(1738330054.433:42571): avc: denied { open } for pid=21714 comm="syz.2.8979" path="/dev/loop2" dev="devtmpfs" ino=9422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 464.781177][ T23] audit: type=1400 audit(1738330054.433:42572): avc: denied { ioctl } for pid=21714 comm="syz.2.8979" path="/dev/loop2" dev="devtmpfs" ino=9422 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 464.808129][ T23] audit: type=1400 audit(1738330054.498:42573): avc: denied { mounton } for pid=21714 comm="syz.2.8979" path="/1750/bus" dev="tmpfs" ino=185375 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 464.808148][T21715] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 2048 [ 464.831797][ T23] audit: type=1400 audit(1738330054.498:42574): avc: denied { ioctl } for pid=21712 comm="syz.3.8978" path="/dev/loop3" dev="devtmpfs" ino=9423 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 464.875045][ T23] audit: type=1400 audit(1738330054.592:42575): avc: denied { mounton } for pid=21712 comm="syz.3.8978" path="/1808/file0" dev="tmpfs" ino=185376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 464.876500][T21713] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 464.907889][T21713] EXT4-fs (loop3): failed to open journal device unknown-block(0,0): -6 [ 464.928105][ T23] audit: type=1400 audit(1738330054.648:42576): avc: denied { read write } for pid=21714 comm="syz.2.8979" name="loop2" dev="devtmpfs" ino=9422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 464.952362][ T23] audit: type=1400 audit(1738330054.648:42577): avc: denied { open } for pid=21714 comm="syz.2.8979" path="/dev/loop2" dev="devtmpfs" ino=9422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 464.977907][ T23] audit: type=1400 audit(1738330054.686:42578): avc: denied { ioctl } for pid=21714 comm="syz.2.8979" path="/dev/loop2" dev="devtmpfs" ino=9422 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 465.150278][T21715] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 465.163252][T21715] EXT4-fs (loop2): orphan cleanup on readonly fs [ 465.172117][T21715] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 465.186829][T21715] EXT4-fs (loop2): 1 truncate cleaned up [ 465.195048][T21715] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,noblock_validity,usrquota,barrier=0x0000000000000000,nogrpid,resgid=0x000000000000ee01,noinit_itable,inode_readahead_blks=0x0000000000000080,resgid=0x000000000000ee002,errors=continue [ 465.284308][T21733] mip6: mip6_rthdr_init_state: spi is not 0: 1310720 [ 465.477314][T21759] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 465.558488][T21765] xt_hashlimit: size too large, truncated to 1048576 [ 465.676848][T21764] EXT4-fs (loop6): Test dummy encryption mode enabled [ 465.699584][T21764] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 465.749439][T21782] netlink: 'syz.8.9005': attribute type 8 has an invalid length. [ 465.878372][T21785] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 465.892747][T21785] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (20904!=33349) [ 465.936811][T21785] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 465.955889][T21785] EXT4-fs (loop2): orphan cleanup on readonly fs [ 465.962921][T21785] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 4: comm syz.2.9006: lblock 0 mapped to illegal pblock 4 (length 1) [ 465.979760][T21785] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 465.990318][T21785] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,noquota,errors=continue,noload,init_itable=0x0000000000001000,usrjquota="init_itable=0x0000000000000601,max_dir_size_kb=0x0000000000000003,,errors=continue [ 465.991175][T21797] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 466.036500][T21785] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 4: comm syz.2.9006: lblock 0 mapped to illegal pblock 4 (length 1) [ 466.061684][T21785] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1049: inode #2: lblock 0: comm syz.2.9006: error -117 reading directory block [ 466.136600][T21801] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 466.157872][T21810] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21810 comm=syz.7.9016 [ 466.202484][T21801] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=46 [ 466.229622][T21801] overlayfs: failed to get xattr trusted.overlay.redirect: err=-117) [ 466.271722][T21816] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro, [ 466.316173][T21816] EXT4-fs error (device loop7): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 466.331920][T21816] EXT4-fs (loop7): Remounting filesystem read-only [ 466.377527][T21833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9026'. [ 466.479073][T21842] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 466.660548][T21863] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 466.670832][T21863] ext4 filesystem being mounted at /768/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 466.705403][T21874] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 466.716788][T21874] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 466.729841][T21874] EXT4-fs error (device loop2): ext4_get_journal_inode:4880: inode #5: comm syz.2.9044: unexpected bad inode w/o EXT4_IGET_BAD [ 466.737310][T21881] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9045'. [ 466.743506][T21874] EXT4-fs (loop2): no journal found [ 466.757568][T21874] EXT4-fs (loop2): can't get journal size [ 466.765530][T21874] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue [ 466.866852][T21874] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1437: inode #12: block 16: comm syz.2.9044: path /1764/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 467.005912][T21899] sch_tbf: peakrate 2646 is lower than or equals to rate 17014499898028217207 ! [ 467.281226][T21928] FAT-fs (loop6): Directory bread(block 64) failed [ 467.284075][T21934] tmpfs: Bad value for 'uid' [ 467.299305][T21928] FAT-fs (loop6): Directory bread(block 65) failed [ 467.313961][T21928] FAT-fs (loop6): Directory bread(block 66) failed [ 467.321003][T21928] FAT-fs (loop6): Directory bread(block 67) failed [ 467.329239][T21928] FAT-fs (loop6): Directory bread(block 68) failed [ 467.337074][T21928] FAT-fs (loop6): Directory bread(block 69) failed [ 467.362874][T21928] FAT-fs (loop6): Directory bread(block 70) failed [ 467.372642][T21928] FAT-fs (loop6): Directory bread(block 71) failed [ 467.384511][T21928] FAT-fs (loop6): Directory bread(block 72) failed [ 467.392931][T21928] FAT-fs (loop6): Directory bread(block 73) failed [ 467.437796][T21909] F2FS-fs (loop3): invalid crc value [ 467.482456][T21909] F2FS-fs (loop3): Found nat_bits in checkpoint [ 467.585307][T21909] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 467.620385][T21961] EXT4-fs error (device loop7) in ext4_do_update_inode:5534: error 27 [ 467.628990][T21961] EXT4-fs error (device loop7) in ext4_do_update_inode:5534: error 27 [ 467.640782][T21961] EXT4-fs (loop7): 1 orphan inode deleted [ 467.646816][T21961] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 467.669760][T21961] ext4 filesystem being mounted at /777/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 467.739095][ T366] attempt to access beyond end of device [ 467.739095][ T366] loop3: rw=2049, want=45104, limit=40427 [ 467.805880][T21973] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 467.837723][T21959] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 467.845467][T21959] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 467.858178][T21959] F2FS-fs (loop2): Found nat_bits in checkpoint [ 467.892199][T21959] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 467.907885][T21959] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 467.914885][T21959] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 467.922612][T21977] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 467.937998][T21977] ext4 filesystem being mounted at /190/bus supports timestamps until (%ptR?) (0x7fffffff) [ 468.321975][T21996] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 468.337519][T21996] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 468.348599][T22015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9090'. [ 468.361151][T21996] F2FS-fs (loop6): invalid crc value [ 468.393139][T21996] F2FS-fs (loop6): Found nat_bits in checkpoint [ 468.443352][T21996] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 468.450870][T21996] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 468.459101][T22025] EXT4-fs (loop2): Ignoring removed bh option [ 468.496306][T22025] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c118, mo2=0002] [ 468.508036][T22028] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 468.508561][T22025] System zones: 0-1, 3-12 [ 468.529857][T22025] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,nobarrier,barrier=0x0000000000000000,norecovery,bh,lazytime,nodelalloc,acl,debug,,errors=continue [ 468.650832][T22043] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 468.894572][T22059] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 468.916017][T22059] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 468.943801][T22059] EXT4-fs error (device loop3): ext4_get_journal_inode:4880: inode #5: comm syz.3.9112: unexpected bad inode w/o EXT4_IGET_BAD [ 468.985381][T22059] EXT4-fs (loop3): no journal found [ 468.999635][T22059] EXT4-fs (loop3): can't get journal size [ 469.012561][T22059] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue [ 469.042314][T22059] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1437: inode #12: block 16: comm syz.3.9112: path /1837/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 469.085194][T22055] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 469.091284][T22076] netlink: 112 bytes leftover after parsing attributes in process `syz.2.9118'. [ 469.094773][T22055] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 469.132568][T22055] F2FS-fs (loop7): Found nat_bits in checkpoint [ 469.173833][T22055] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 469.187886][T22055] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 469.195601][T22055] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 469.204171][T22083] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 469.217092][T22083] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,usrjquota=,errors=remount-ro,norecovery,bsddf,nomblk_io_submit,grpquota,barrier=0xfffffffffffffffe,user_xattr,jqfmt=vfsold, [ 469.247767][T22083] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz.3.9120: bg 0: block 234: padding at end of block bitmap is not set [ 469.263489][T22083] EXT4-fs (loop3): Remounting filesystem read-only [ 469.448605][T22100] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 469.458375][T22100] ext4 filesystem being mounted at /1780/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 469.527116][T22111] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 469.553197][T22103] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 469.563266][T22111] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x00000000000001ff,data_err=abort,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 469.739223][T22134] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 469.776692][T22138] input: syz0 as /devices/virtual/input/input30 [ 469.964126][T22137] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 469.971718][T22137] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 469.984469][T22137] F2FS-fs (loop8): Found nat_bits in checkpoint [ 470.014132][T22137] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 470.029201][T22137] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 470.036094][T22137] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 470.063223][ T23] kauditd_printk_skb: 1157 callbacks suppressed [ 470.063235][ T23] audit: type=1400 audit(1738330059.447:43730): avc: denied { write } for pid=22135 comm="syz.8.9137" name="/" dev="loop8" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 470.091958][ T23] audit: type=1400 audit(1738330059.447:43731): avc: denied { add_name } for pid=22135 comm="syz.8.9137" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 470.116399][ T23] audit: type=1400 audit(1738330059.447:43732): avc: denied { create } for pid=22135 comm="syz.8.9137" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 470.138173][ T23] audit: type=1400 audit(1738330059.447:43733): avc: denied { write open } for pid=22135 comm="syz.8.9137" path="/202/bus/file0" dev="loop8" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 470.182748][ T23] audit: type=1400 audit(1738330059.456:43734): avc: denied { read } for pid=22135 comm="syz.8.9137" name="file0" dev="loop8" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 470.210001][ T23] audit: type=1400 audit(1738330059.456:43735): avc: denied { open } for pid=22135 comm="syz.8.9137" path="/202/bus/file0" dev="loop8" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 470.237576][ T23] audit: type=1400 audit(1738330059.456:43736): avc: denied { ioctl } for pid=22135 comm="syz.8.9137" path="/202/bus/file0" dev="loop8" ino=10 ioctlcmd=0x6614 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 470.263799][ T23] audit: type=1400 audit(1738330059.475:43737): avc: denied { unmount } for pid=19419 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 470.297538][ T23] audit: type=1400 audit(1738330059.494:43738): avc: denied { read } for pid=22146 comm="syz.7.9151" name="kvm" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 470.328045][ T23] audit: type=1400 audit(1738330059.494:43739): avc: denied { open } for pid=22146 comm="syz.7.9151" path="/dev/kvm" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 470.552788][T22168] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 470.562414][T22168] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 470.573543][T22168] EXT4-fs error (device loop8): ext4_get_journal_inode:4880: inode #5: comm syz.8.9138: unexpected bad inode w/o EXT4_IGET_BAD [ 470.586897][T22168] EXT4-fs (loop8): no journal found [ 470.592010][T22168] EXT4-fs (loop8): can't get journal size [ 470.598799][T22168] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue [ 470.622471][T22168] EXT4-fs error (device loop8): ext4_inlinedir_to_tree:1437: inode #12: block 16: comm syz.8.9138: path /203/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 470.711956][T22177] binder: 22176:22177 ioctl c0306201 200001c0 returned -22 [ 470.780272][T22178] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 470.790047][T22178] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 470.800892][T22178] EXT4-fs error (device loop6): ext4_get_journal_inode:4880: inode #5: comm syz.6.9162: unexpected bad inode w/o EXT4_IGET_BAD [ 470.814141][T22178] EXT4-fs (loop6): no journal found [ 470.819199][T22178] EXT4-fs (loop6): can't get journal size [ 470.825833][T22178] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue [ 470.849244][T22178] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1437: inode #12: block 16: comm syz.6.9162: path /804/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 471.301914][T22194] EXT4-fs (loop8): Ignoring removed orlov option [ 471.319008][T22194] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 471.339561][T22192] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 471.364745][T22194] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 471.533884][ T531] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 471.918786][ T531] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.928688][ T531] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 472.015027][ T531] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 472.024071][ T531] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 472.031916][ T531] usb 7-1: SerialNumber: syz [ 472.336656][ T531] usb 7-1: 0:2 : does not exist [ 472.343564][ T531] usb 7-1: USB disconnect, device number 16 [ 472.915915][T22216] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 472.923082][T22216] EXT4-fs (loop3): Ignoring removed nobh option [ 472.974892][T22216] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,errors=remount-ro,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,minixdf,nobh, [ 473.011123][T22216] EXT4-fs error (device loop3): ext4_check_all_de:657: inode #12: block 5: comm syz.3.9165: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=7952, size=124 fake=0 [ 473.020435][T22229] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 473.050857][T22216] EXT4-fs (loop3): Remounting filesystem read-only [ 473.062974][T22229] ext4 filesystem being mounted at /1790/bus supports timestamps until (%ptR?) (0x7fffffff) [ 473.063784][T22216] EXT4-fs error (device loop3) in ext4_evict_inode:276: Readonly filesystem [ 473.298395][T22223] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 473.306843][T22223] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 473.338212][T22223] F2FS-fs (loop6): Found nat_bits in checkpoint [ 473.388943][T22223] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 473.414104][T22223] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 473.421055][T22223] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 473.467712][T22255] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 473.738661][T22280] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 473.747856][T22280] ext4 filesystem being mounted at /793/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 473.894347][T22262] F2FS-fs (loop8): invalid crc value [ 473.906245][T22262] F2FS-fs (loop8): Found nat_bits in checkpoint [ 473.915908][T22287] FAT-fs (loop3): Directory bread(block 64) failed [ 473.927293][T22287] FAT-fs (loop3): Directory bread(block 65) failed [ 473.941875][T22287] FAT-fs (loop3): Directory bread(block 66) failed [ 473.950475][T22287] FAT-fs (loop3): Directory bread(block 67) failed [ 473.959473][T22287] FAT-fs (loop3): Directory bread(block 68) failed [ 473.972912][T22262] F2FS-fs (loop8): Cannot turn on quotas: -2 on 1 [ 473.979390][T22287] FAT-fs (loop3): Directory bread(block 69) failed [ 473.987779][T22287] FAT-fs (loop3): Directory bread(block 70) failed [ 473.999238][T22262] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 474.007923][T22287] FAT-fs (loop3): Directory bread(block 71) failed [ 474.025859][T22287] FAT-fs (loop3): Directory bread(block 72) failed [ 474.043022][T22287] FAT-fs (loop3): Directory bread(block 73) failed [ 474.092310][T19419] attempt to access beyond end of device [ 474.092310][T19419] loop8: rw=2049, want=45104, limit=40427 [ 474.150779][T22303] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 474.295155][T22316] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 474.380473][T22321] EXT4-fs (loop8): Ignoring removed bh option [ 474.395353][T22321] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c118, mo2=0002] [ 474.403844][T22321] System zones: 0-1, 3-12 [ 474.408675][T22321] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsv1,nobarrier,barrier=0x0000000000000000,norecovery,bh,lazytime,nodelalloc,acl,debug,,errors=continue [ 474.475266][ T107] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 474.632903][T22330] F2FS-fs (loop6): invalid crc value [ 474.642996][T22330] F2FS-fs (loop6): Found nat_bits in checkpoint [ 474.725527][T22330] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 474.741193][ T107] usb 4-1: Using ep0 maxpacket: 16 [ 474.869457][ T107] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.880684][ T107] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.890226][ T107] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 474.903619][ T107] usb 4-1: config 0 interface 0 has no altsetting 0 [ 474.910034][ T107] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 474.918934][ T107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.928888][ T107] usb 4-1: config 0 descriptor?? [ 475.098932][T22373] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 475.119226][T22373] FAT-fs (loop6): FAT read failed (blocknr 128) [ 475.198619][T22376] FAT-fs (loop8): Directory bread(block 64) failed [ 475.205089][T22376] FAT-fs (loop8): Directory bread(block 65) failed [ 475.212342][T22376] FAT-fs (loop8): Directory bread(block 66) failed [ 475.218743][T22376] FAT-fs (loop8): Directory bread(block 67) failed [ 475.225891][T22376] FAT-fs (loop8): Directory bread(block 68) failed [ 475.232278][T22376] FAT-fs (loop8): Directory bread(block 69) failed [ 475.239338][T22376] FAT-fs (loop8): Directory bread(block 70) failed [ 475.246497][T22376] FAT-fs (loop8): Directory bread(block 71) failed [ 475.253076][T22376] FAT-fs (loop8): Directory bread(block 72) failed [ 475.260229][T22376] FAT-fs (loop8): Directory bread(block 73) failed [ 475.397326][T22379] F2FS-fs (loop6): invalid crc value [ 475.405183][T22379] F2FS-fs (loop6): Found nat_bits in checkpoint [ 475.426405][ T23] kauditd_printk_skb: 646 callbacks suppressed [ 475.426418][ T23] audit: type=1400 audit(1738330064.470:44386): avc: denied { ioctl } for pid=22307 comm="syz.3.9199" path="/dev/raw-gadget" dev="devtmpfs" ino=10754 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 475.449015][ T107] hid-generic 0003:045E:05DA.0012: unknown main item tag 0x0 [ 475.464892][ T107] hid-generic 0003:045E:05DA.0012: unbalanced collection at end of report description [ 475.471498][T22379] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1 [ 475.474999][ T107] hid-generic: probe of 0003:045E:05DA.0012 failed with error -22 [ 475.482920][T22379] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 475.496144][ T23] audit: type=1400 audit(1738330064.526:44387): avc: denied { mount } for pid=22378 comm="syz.6.9221" name="/" dev="loop6" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 475.518518][ T23] audit: type=1400 audit(1738330064.526:44388): avc: denied { read write } for pid=22378 comm="syz.6.9221" name="loop6" dev="devtmpfs" ino=9426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 475.543347][ T23] audit: type=1400 audit(1738330064.526:44389): avc: denied { read write open } for pid=22378 comm="syz.6.9221" path="/dev/loop6" dev="devtmpfs" ino=9426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 475.568777][ T23] audit: type=1400 audit(1738330064.526:44390): avc: denied { ioctl } for pid=22378 comm="syz.6.9221" path="/dev/loop6" dev="devtmpfs" ino=9426 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 475.569925][T12476] attempt to access beyond end of device [ 475.569925][T12476] loop6: rw=2049, want=45104, limit=40427 [ 475.594303][ T23] audit: type=1400 audit(1738330064.554:44391): avc: denied { write } for pid=22378 comm="syz.6.9221" name="/" dev="loop6" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 475.628727][ T23] audit: type=1400 audit(1738330064.554:44392): avc: denied { add_name } for pid=22378 comm="syz.6.9221" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 475.656079][ T23] audit: type=1400 audit(1738330064.563:44393): avc: denied { create } for pid=22378 comm="syz.6.9221" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 475.680910][ T23] audit: type=1400 audit(1738330064.563:44394): avc: denied { read open } for pid=22378 comm="syz.6.9221" path="/813/file1/bus" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 475.690567][ T13] usb 4-1: USB disconnect, device number 66 [ 475.707420][ T23] audit: type=1400 audit(1738330064.563:44395): avc: denied { ioctl } for pid=22378 comm="syz.6.9221" path="/813/file1/bus" dev="loop6" ino=10 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 475.810863][T22396] bridge0: port 3(syz_tun) entered blocking state [ 475.817392][T22396] bridge0: port 3(syz_tun) entered disabled state [ 475.824940][T22396] device syz_tun entered promiscuous mode [ 475.830680][T22396] bridge0: port 3(syz_tun) entered blocking state [ 475.836947][T22396] bridge0: port 3(syz_tun) entered forwarding state [ 475.844215][T22398] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 476.015700][T22404] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 476.027293][T22404] FAT-fs (loop6): Filesystem has been set read-only [ 476.133724][T22400] F2FS-fs (loop8): invalid crc value [ 476.144131][T22400] F2FS-fs (loop8): Found nat_bits in checkpoint [ 476.176221][T22400] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 476.498461][T22420] EXT4-fs (loop6): Ignoring removed bh option [ 476.505042][T22420] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 476.518851][T22420] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=a002e119, mo2=0000] [ 476.530991][T22422] F2FS-fs (loop3): invalid crc value [ 476.531258][T22428] FAT-fs (loop7): Directory bread(block 64) failed [ 476.537239][T22420] EXT4-fs (loop6): failed to initialize system zone (-117) [ 476.542589][T22428] FAT-fs (loop7): Directory bread(block 65) failed [ 476.556926][T22428] FAT-fs (loop7): Directory bread(block 66) failed [ 476.560371][T22420] EXT4-fs (loop6): mount failed [ 476.564043][T22428] FAT-fs (loop7): Directory bread(block 67) failed [ 476.575293][T22428] FAT-fs (loop7): Directory bread(block 68) failed [ 476.583313][T22428] FAT-fs (loop7): Directory bread(block 69) failed [ 476.584906][T22422] F2FS-fs (loop3): Found nat_bits in checkpoint [ 476.589800][T22428] FAT-fs (loop7): Directory bread(block 70) failed [ 476.602792][T22428] FAT-fs (loop7): Directory bread(block 71) failed [ 476.609167][T22428] FAT-fs (loop7): Directory bread(block 72) failed [ 476.616464][T22428] FAT-fs (loop7): Directory bread(block 73) failed [ 476.688786][T22422] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 476.701651][T22422] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 476.748284][T22438] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 476.792890][ T366] attempt to access beyond end of device [ 476.792890][ T366] loop3: rw=2049, want=45104, limit=40427 [ 476.857802][T22455] xt_bpf: check failed: parse error [ 476.886352][T22456] FAT-fs (loop7): Directory bread(block 64) failed [ 476.892866][T22456] FAT-fs (loop7): Directory bread(block 65) failed [ 476.899278][T22456] FAT-fs (loop7): Directory bread(block 66) failed [ 476.906057][T22456] FAT-fs (loop7): Directory bread(block 67) failed [ 476.914177][T22456] FAT-fs (loop7): Directory bread(block 68) failed [ 476.920966][T22456] FAT-fs (loop7): Directory bread(block 69) failed [ 476.944542][T22456] FAT-fs (loop7): Directory bread(block 70) failed [ 476.952570][T22456] FAT-fs (loop7): Directory bread(block 71) failed [ 476.959520][T22456] FAT-fs (loop7): Directory bread(block 72) failed [ 476.967322][T22456] FAT-fs (loop7): Directory bread(block 73) failed [ 477.033968][T22461] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 477.042042][T22461] EXT4-fs (loop8): Ignoring removed nobh option [ 477.053108][T22459] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 477.064643][T22461] EXT4-fs (loop8): mounted filesystem without journal. Opts: abort,errors=remount-ro,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,minixdf,nobh, [ 477.083360][T22464] EXT4-fs (loop6): Test dummy encryption mode enabled [ 477.090889][T22464] EXT4-fs (loop6): Ignoring removed oldalloc option [ 477.100783][T22464] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,data_err=ignore,errors=remount-ro,test_dummy_encryption,nobarrier,noblock_validity,minixdf,oldalloc, [ 477.139836][T22461] EXT4-fs error (device loop8): ext4_check_all_de:657: inode #12: block 5: comm syz.8.9260: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=7952, size=124 fake=0 [ 477.160113][T22461] EXT4-fs (loop8): Remounting filesystem read-only [ 477.166512][T22461] EXT4-fs error (device loop8) in ext4_evict_inode:276: Readonly filesystem [ 477.200446][T22464] EXT4-fs (loop6): re-mounted. Opts: [ 477.499420][T22502] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 477.521562][T22502] ext4 filesystem being mounted at /1861/bus supports timestamps until (%ptR?) (0x7fffffff) [ 477.570014][T22507] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 477.659564][ T531] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 477.683320][ T2850] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 477.700605][ T2850] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 477.709146][T22500] F2FS-fs (loop7): invalid crc value [ 477.718506][ T2850] EXT4-fs (loop2): This should not happen!! Data will be lost [ 477.718506][ T2850] [ 477.736094][ T2850] EXT4-fs (loop2): Total free blocks count 0 [ 477.748227][T22527] netlink: 'syz.3.9273': attribute type 1 has an invalid length. [ 477.753523][ T2850] EXT4-fs (loop2): Free/Dirty block details [ 477.764393][T22500] F2FS-fs (loop7): Found nat_bits in checkpoint [ 477.767809][ T2850] EXT4-fs (loop2): free_blocks=2415919104 [ 477.776012][ T2850] EXT4-fs (loop2): dirty_blocks=48 [ 477.781342][ T2850] EXT4-fs (loop2): Block reservation details [ 477.787133][ T2850] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 477.807751][T22500] F2FS-fs (loop7): Cannot turn on quotas: -2 on 1 [ 477.815391][T22500] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 477.866635][T22525] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,data_err=ignore,max_batch_time=0x0000000000000007,sysvgroups,,errors=continue [ 477.882406][T22525] ext4 filesystem being mounted at /825/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 477.896500][T12556] attempt to access beyond end of device [ 477.896500][T12556] loop7: rw=2049, want=45104, limit=40427 [ 477.916039][T22537] FAT-fs (loop3): Directory bread(block 64) failed [ 477.922565][T22537] FAT-fs (loop3): Directory bread(block 65) failed [ 477.929086][T22537] FAT-fs (loop3): Directory bread(block 66) failed [ 477.935429][T22537] FAT-fs (loop3): Directory bread(block 67) failed [ 477.942193][T22537] FAT-fs (loop3): Directory bread(block 68) failed [ 477.959385][T22537] FAT-fs (loop3): Directory bread(block 69) failed [ 477.968156][T22537] FAT-fs (loop3): Directory bread(block 70) failed [ 477.977828][T22537] FAT-fs (loop3): Directory bread(block 71) failed [ 477.986878][T22537] FAT-fs (loop3): Directory bread(block 72) failed [ 477.993979][T22537] FAT-fs (loop3): Directory bread(block 73) failed [ 478.068433][ T531] usb 9-1: config index 0 descriptor too short (expected 274, got 18) [ 478.082526][ T531] usb 9-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 478.092788][ T531] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.105398][ T531] usb 9-1: config 0 descriptor?? [ 478.293087][T22558] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 478.307392][T22558] ext4 filesystem being mounted at /815/bus supports timestamps until (%ptR?) (0x7fffffff) [ 478.386705][ T390] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 478.643195][ T390] usb 7-1: Using ep0 maxpacket: 16 [ 478.771539][ T390] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.782564][ T390] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.791996][ T390] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 478.804819][ T390] usb 7-1: config 0 interface 0 has no altsetting 0 [ 478.811174][ T390] usb 7-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 478.820076][ T390] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.829348][ T390] usb 7-1: config 0 descriptor?? [ 479.049418][ T531] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 479.059237][ T531] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 479.070038][ T531] asix: probe of 9-1:0.0 failed with error -71 [ 479.077167][ T531] usb 9-1: USB disconnect, device number 10 [ 479.127873][T22574] F2FS-fs (loop7): invalid crc value [ 479.136283][T22574] F2FS-fs (loop7): Found nat_bits in checkpoint [ 479.171618][T22574] F2FS-fs (loop7): Cannot turn on quotas: -2 on 1 [ 479.178736][T22574] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 479.216810][T12556] attempt to access beyond end of device [ 479.216810][T12556] loop7: rw=2049, want=45104, limit=40427 [ 479.241782][ T107] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 479.273887][ T13] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 479.339709][ T390] hid-generic 0003:045E:05DA.0013: unknown main item tag 0x0 [ 479.347270][ T390] hid-generic 0003:045E:05DA.0013: unbalanced collection at end of report description [ 479.358693][ T390] hid-generic: probe of 0003:045E:05DA.0013 failed with error -22 [ 479.509040][ T107] usb 4-1: Using ep0 maxpacket: 16 [ 479.557914][ T390] usb 7-1: USB disconnect, device number 17 [ 479.637445][ T107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.648579][ T107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.658485][ T107] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 479.658911][ T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.672875][ T107] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 479.681125][ T13] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 479.691025][ T107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.708326][ T107] usb 4-1: config 0 descriptor?? [ 479.715865][T22594] F2FS-fs (loop7): invalid crc value [ 479.724539][T22594] F2FS-fs (loop7): Found nat_bits in checkpoint [ 479.759722][T22594] F2FS-fs (loop7): Cannot turn on quotas: -2 on 0 [ 479.768121][T22594] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 479.777154][ T13] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 479.786025][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 479.794488][ T13] usb 3-1: SerialNumber: syz [ 480.060235][T22604] kvm [22602]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010007 data 0x0 [ 480.098425][ T13] usb 3-1: 0:2 : does not exist [ 480.119539][T22608] FAT-fs (loop7): Directory bread(block 64) failed [ 480.125933][T22608] FAT-fs (loop7): Directory bread(block 65) failed [ 480.132931][T22608] FAT-fs (loop7): Directory bread(block 66) failed [ 480.139343][T22608] FAT-fs (loop7): Directory bread(block 67) failed [ 480.146575][T22608] FAT-fs (loop7): Directory bread(block 68) failed [ 480.153098][T22608] FAT-fs (loop7): Directory bread(block 69) failed [ 480.158421][ T13] usb 3-1: USB disconnect, device number 62 [ 480.159502][T22608] FAT-fs (loop7): Directory bread(block 70) failed [ 480.172012][T22608] FAT-fs (loop7): Directory bread(block 71) failed [ 480.178415][T22608] FAT-fs (loop7): Directory bread(block 72) failed [ 480.184901][T22608] FAT-fs (loop7): Directory bread(block 73) failed [ 480.216169][ T107] microsoft 0003:045E:07DA.0014: ignoring exceeding usage max [ 480.228114][ T107] microsoft 0003:045E:07DA.0014: ignoring exceeding usage max [ 480.240464][ T107] microsoft 0003:045E:07DA.0014: usage index exceeded [ 480.250334][ T107] microsoft 0003:045E:07DA.0014: item 0 0 2 2 parsing failed [ 480.273248][ T107] microsoft 0003:045E:07DA.0014: parse failed [ 480.281433][ T107] microsoft: probe of 0003:045E:07DA.0014 failed with error -22 [ 480.384009][T22629] IPv6: NLM_F_REPLACE set, but no existing node found! [ 480.456823][ T107] usb 4-1: USB disconnect, device number 67 [ 480.674558][T17723] bridge0: port 3(syz_tun) entered disabled state [ 480.809206][T17723] device syz_tun left promiscuous mode [ 480.814988][ T531] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 480.823044][T17723] bridge0: port 3(syz_tun) entered disabled state [ 480.832022][T22576] device syz_tun left promiscuous mode [ 480.837392][T22576] bridge0: port 3(syz_tun) entered disabled state [ 480.849429][T22644] bridge0: port 3(syz_tun) entered disabled state [ 480.857663][T22644] device syz_tun left promiscuous mode [ 480.863530][T22644] bridge0: port 3(syz_tun) entered disabled state [ 480.932867][ T368] syz-executor (368) used greatest stack depth: 18840 bytes left [ 481.409265][ T23] kauditd_printk_skb: 755 callbacks suppressed [ 481.409277][ T23] audit: type=1400 audit(1738330070.054:45151): avc: denied { read } for pid=145 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 481.437367][ T23] audit: type=1400 audit(1738330070.054:45152): avc: denied { search } for pid=145 comm="syslogd" name="/" dev="tmpfs" ino=10873 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 481.459977][ T23] audit: type=1400 audit(1738330070.054:45153): avc: denied { append } for pid=145 comm="syslogd" name="messages" dev="tmpfs" ino=187241 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 481.484759][ T23] audit: type=1400 audit(1738330070.054:45154): avc: denied { append open } for pid=145 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=187241 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 481.511583][ T23] audit: type=1400 audit(1738330070.054:45155): avc: denied { getattr } for pid=145 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=187241 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 481.636489][ T2850] device bridge_slave_1 left promiscuous mode [ 481.642529][ T2850] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.649972][ T2850] device bridge_slave_0 left promiscuous mode [ 481.655942][ T2850] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.160565][ T2850] tipc: Left network mode [ 482.500806][ T23] audit: type=1400 audit(1738330071.083:45156): avc: denied { read } for pid=145 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 482.522794][ T23] audit: type=1400 audit(1738330071.083:45157): avc: denied { search } for pid=145 comm="syslogd" name="/" dev="tmpfs" ino=10873 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 482.544930][ T23] audit: type=1400 audit(1738330071.083:45158): avc: denied { append } for pid=145 comm="syslogd" name="messages" dev="tmpfs" ino=187241 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 482.567419][ T23] audit: type=1400 audit(1738330071.083:45159): avc: denied { open } for pid=145 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=187241 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 482.590199][ T23] audit: type=1400 audit(1738330071.083:45160): avc: denied { getattr } for pid=145 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=187241 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 483.250384][ T2850] device bridge_slave_1 left promiscuous mode [ 483.256384][ T2850] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.263706][ T2850] device bridge_slave_0 left promiscuous mode [ 483.269930][ T2850] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.277571][ T2850] device bridge_slave_1 left promiscuous mode [ 483.283602][ T2850] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.290789][ T2850] device bridge_slave_0 left promiscuous mode [ 483.296990][ T2850] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.304623][ T2850] device bridge_slave_1 left promiscuous mode [ 483.310550][ T2850] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.317846][ T2850] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.735868][ T2850] ================================================================== [ 484.743774][ T2850] BUG: KASAN: null-ptr-deref in tcf_idrinfo_destroy+0xe2/0x280 [ 484.751137][ T2850] Read of size 4 at addr 0000000000000010 by task kworker/u4:4/2850 [ 484.758932][ T2850] [ 484.761102][ T2850] CPU: 0 PID: 2850 Comm: kworker/u4:4 Tainted: G W 5.4.289-syzkaller-00025-g49530c73f82d #0 [ 484.772299][ T2850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 484.782461][ T2850] Workqueue: netns cleanup_net [ 484.787046][ T2850] Call Trace: [ 484.790197][ T2850] dump_stack+0x1d8/0x241 [ 484.794345][ T2850] ? panic+0x89d/0x89d [ 484.798249][ T2850] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 484.803896][ T2850] ? idr_get_next_ul+0x32a/0x3f0 [ 484.808668][ T2850] ? tcf_idrinfo_destroy+0xe2/0x280 [ 484.813705][ T2850] __kasan_report+0xe9/0x120 [ 484.818149][ T2850] ? tcf_idrinfo_destroy+0xe2/0x280 [ 484.823207][ T2850] kasan_report+0x30/0x60 [ 484.827327][ T2850] check_memory_region+0x272/0x280 [ 484.832470][ T2850] tcf_idrinfo_destroy+0xe2/0x280 [ 484.837317][ T2850] ? tcf_idr_check_alloc+0x5b0/0x5b0 [ 484.842428][ T2850] ? police_exit_net+0xef/0x140 [ 484.847118][ T2850] police_exit_net+0xd7/0x140 [ 484.851627][ T2850] ? police_init_net+0x1c0/0x1c0 [ 484.856407][ T2850] cleanup_net+0x6e2/0xc90 [ 484.860660][ T2850] ? ops_init+0x4a0/0x4a0 [ 484.864958][ T2850] ? read_word_at_a_time+0xe/0x20 [ 484.869815][ T2850] ? strscpy+0x89/0x220 [ 484.873798][ T2850] process_one_work+0x765/0xd20 [ 484.878488][ T2850] worker_thread+0xaef/0x1470 [ 484.882999][ T2850] kthread+0x2da/0x360 [ 484.886988][ T2850] ? worker_clr_flags+0x170/0x170 [ 484.891846][ T2850] ? kthread_blkcg+0xd0/0xd0 [ 484.896285][ T2850] ret_from_fork+0x1f/0x30 [ 484.900542][ T2850] ================================================================== [ 484.908543][ T2850] Disabling lock debugging due to kernel taint [ 484.914631][ T2850] kasan: CONFIG_KASAN_INLINE enabled [ 484.920684][ T2850] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 484.928561][ T2850] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 484.935325][ T2850] CPU: 0 PID: 2850 Comm: kworker/u4:4 Tainted: G B W 5.4.289-syzkaller-00025-g49530c73f82d #0 [ 484.946600][ T2850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 484.956505][ T2850] Workqueue: netns cleanup_net [ 484.961103][ T2850] RIP: 0010:tcf_idrinfo_destroy+0xe9/0x280 [ 484.966740][ T2850] Code: ee e8 9b 24 bb 00 48 85 c0 0f 84 54 01 00 00 49 89 c6 48 8d 58 20 48 89 df be 04 00 00 00 e8 fe e5 fe fd 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 f5 00 00 00 8b 1b 31 ff 89 de e8 3f 2b [ 484.986183][ T2850] RSP: 0018:ffff8881eb937b60 EFLAGS: 00010202 [ 484.992084][ T2850] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffff8881e2d88fc0 [ 484.999895][ T2850] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 00000000ffffffff [ 485.007705][ T2850] RBP: ffff8881eb937c30 R08: ffffffff813ae535 R09: 0000000000000003 [ 485.015601][ T2850] R10: ffffffffffffffff R11: dffffc0000000001 R12: 1ffff1103d726f78 [ 485.023415][ T2850] R13: ffff8881eb937bc0 R14: fffffffffffffff0 R15: dffffc0000000000 [ 485.031224][ T2850] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 485.039998][ T2850] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 485.046417][ T2850] CR2: 00007f5d87e7d6c0 CR3: 00000001ed836000 CR4: 00000000003406b0 [ 485.054237][ T2850] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 485.062073][ T2850] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 485.070126][ T2850] Call Trace: [ 485.073262][ T2850] ? __die+0xb4/0x100 [ 485.077084][ T2850] ? die+0x26/0x50 [ 485.080631][ T2850] ? do_general_protection+0x266/0x3c0 [ 485.085933][ T2850] ? do_trap+0x340/0x340 [ 485.090007][ T2850] ? check_panic_on_warn+0x5e/0xa0 [ 485.094946][ T2850] ? tcf_idrinfo_destroy+0xe2/0x280 [ 485.099982][ T2850] ? general_protection+0x28/0x30 [ 485.104846][ T2850] ? check_panic_on_warn+0x55/0xa0 [ 485.109790][ T2850] ? tcf_idrinfo_destroy+0xe9/0x280 [ 485.114840][ T2850] ? tcf_idr_check_alloc+0x5b0/0x5b0 [ 485.119955][ T2850] ? police_exit_net+0xef/0x140 [ 485.124812][ T2850] police_exit_net+0xd7/0x140 [ 485.129319][ T2850] ? police_init_net+0x1c0/0x1c0 [ 485.134106][ T2850] cleanup_net+0x6e2/0xc90 [ 485.138442][ T2850] ? ops_init+0x4a0/0x4a0 [ 485.142602][ T2850] ? read_word_at_a_time+0xe/0x20 [ 485.147458][ T2850] ? strscpy+0x89/0x220 [ 485.151540][ T2850] process_one_work+0x765/0xd20 [ 485.156232][ T2850] worker_thread+0xaef/0x1470 [ 485.160742][ T2850] kthread+0x2da/0x360 [ 485.164819][ T2850] ? worker_clr_flags+0x170/0x170 [ 485.169597][ T2850] ? kthread_blkcg+0xd0/0xd0 [ 485.174021][ T2850] ret_from_fork+0x1f/0x30 [ 485.178276][ T2850] Modules linked in: [ 485.182316][ T2850] ---[ end trace aaf55645e669e41e ]--- [ 485.187694][ T2850] RIP: 0010:tcf_idrinfo_destroy+0xe9/0x280 [ 485.193335][ T2850] Code: ee e8 9b 24 bb 00 48 85 c0 0f 84 54 01 00 00 49 89 c6 48 8d 58 20 48 89 df be 04 00 00 00 e8 fe e5 fe fd 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 f5 00 00 00 8b 1b 31 ff 89 de e8 3f 2b [ 485.212780][ T2850] RSP: 0018:ffff8881eb937b60 EFLAGS: 00010202 [ 485.218815][ T2850] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffff8881e2d88fc0 [ 485.226587][ T2850] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 00000000ffffffff [ 485.234433][ T2850] RBP: ffff8881eb937c30 R08: ffffffff813ae535 R09: 0000000000000003 [ 485.242241][ T2850] R10: ffffffffffffffff R11: dffffc0000000001 R12: 1ffff1103d726f78 [ 485.250150][ T2850] R13: ffff8881eb937bc0 R14: fffffffffffffff0 R15: dffffc0000000000 [ 485.258171][ T2850] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 485.266994][ T2850] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 485.273375][ T2850] CR2: 00007f5d87e7d6c0 CR3: 00000001ed836000 CR4: 00000000003406b0 [ 485.281155][ T2850] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 485.289013][ T2850] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 485.296822][ T2850] Kernel panic - not syncing: Fatal exception [ 485.302880][ T2850] Kernel Offset: disabled [ 485.306937][ T2850] Rebooting in 86400 seconds..