last executing test programs: 1m40.168548234s ago: executing program 4 (id=306): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 1m39.071024491s ago: executing program 4 (id=308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @pic={0x5, 0x8, 0x6, 0x1, 0x0, 0xff, 0x6a, 0x8, 0x4, 0xb, 0x0, 0x0, 0x4, 0x3, 0x0, 0x8}}) 1m38.633875279s ago: executing program 4 (id=313): socket$inet6_sctp(0xa, 0x1, 0x84) openat$rtc(0xffffff9c, &(0x7f0000000040), 0x42800, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x80, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000005f40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000005f00)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1m38.487975609s ago: executing program 4 (id=315): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x7}}, {@i_version}]}, 0x4, 0x504, &(0x7f0000019940)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1m37.711892966s ago: executing program 4 (id=322): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x4, 0x9, 0x9, @vifc_lcl_addr=@rand_addr=0x64010100, @loopback}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) 1m36.2582191s ago: executing program 4 (id=334): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x5366}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000006340)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x9}]}}}}}}}}, 0x0) 1m35.584295378s ago: executing program 32 (id=334): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x5366}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000006340)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x9}]}}}}}}}}, 0x0) 4.363210616s ago: executing program 0 (id=979): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}], 0x1, 0x10) 4.049209764s ago: executing program 2 (id=981): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0xfffc, {[@timestamp={0x8, 0xa, 0x2b24, 0xae2}]}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000300)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ce", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x1, 0xdd1}]}}}}}}}}, 0x0) 3.777443404s ago: executing program 2 (id=983): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) 3.753873813s ago: executing program 0 (id=985): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0016bf1f4ed7582c06c6fcb782cff7a2f78ebdc39b39ae16c775f06ea395d07e175b9cc35142cc0df3760a23804936b4a56df185184193"], 0x1, 0xa07, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r1, 0x2007ff3) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e459, 0x700000000000000) 2.74838989s ago: executing program 0 (id=990): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x8, 0x70bd29, 0x25dfdbfa}, 0x10}}, 0x20004010) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0xa, 0x0, 0x0) 2.74823036s ago: executing program 2 (id=991): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) syz_emit_ethernet(0xe, &(0x7f0000000580)={@remote, @broadcast, @void, {@generic={0xf9}}}, 0x0) 2.674486799s ago: executing program 2 (id=992): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r1, r0, 0x2}, 0x10) 2.551004859s ago: executing program 2 (id=993): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f00000003c0), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(0x0, r1, r1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000001600)={{r0}, 0x0, 0x2, @unused=[0x0, 0x31, 0x800000000000, 0x9], @subvolid=0x80}) 2.447952078s ago: executing program 3 (id=994): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0xfffc, {[@timestamp={0x8, 0xa, 0x2b24, 0xae2}]}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000300)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ce", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x1, 0xdd1}]}}}}}}}}, 0x0) 2.376864728s ago: executing program 0 (id=995): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x0) 2.177082278s ago: executing program 5 (id=997): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x12, 0x4}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009b02"]) 2.056995457s ago: executing program 0 (id=999): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x3ec0) close_range(r0, 0xffffffffffffffff, 0x0) 1.854582246s ago: executing program 1 (id=1000): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @pic={0x5, 0x8, 0x6, 0x1, 0x0, 0xff, 0x6a, 0x8, 0x4, 0xb, 0x0, 0x0, 0x4, 0x3, 0x0, 0x8}}) 1.819889146s ago: executing program 5 (id=1001): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r2 = dup(r0) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000001380)={&(0x7f0000000300)={0x1d, r1, 0xf5, {0x0, 0xf0, 0x4}, 0xfe}, 0x18, &(0x7f0000001340)={&(0x7f0000000340)="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", 0x6fa}, 0x1, 0x0, 0x0, 0x20000000}, 0x4011) 1.707692736s ago: executing program 3 (id=1002): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1.706661776s ago: executing program 0 (id=1012): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000540)={[{@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@extent_cache}, {@alloc_mode_def}, {@six_active_logs}, {@six_active_logs}, {@nodiscard}, {@jqfmt_vfsv1}, {@noacl}, {@checkpoint_diasble}, {@alloc_mode_def}, {@noextent_cache}, {@nouser_xattr}, {@jqfmt_vfsold}, {@fastboot}, {@memory_low}, {@inline_xattr_size={'inline_xattr_size', 0x3d, 0x9}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '*'}}, {@measure}, {@subj_user={'subj_user', 0x3d, 'dioread_nolock'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@euid_gt}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r1 = open(&(0x7f0000000040)='./file0\x00', 0x143082, 0x80) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000140)={0x0, 0x100000000}) 1.590891436s ago: executing program 5 (id=1003): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c) recvmmsg(r0, &(0x7f0000006640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x2, 0x0) recvmmsg$unix(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1.556187755s ago: executing program 1 (id=1004): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000780)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1}, 0x8850) 1.384947554s ago: executing program 3 (id=1005): unshare(0x20000400) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000400)=[{r0, 0x2c0}], 0x1, 0x0, 0x0, 0x0) 1.249789024s ago: executing program 1 (id=1006): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x8, 0x70bd29, 0x25dfdbfa}, 0x10}}, 0x20004010) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0xa, 0x0, 0x0) 939.023193ms ago: executing program 2 (id=1007): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000440)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value, 0x8) 938.867753ms ago: executing program 3 (id=1008): signalfd(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="757466383d312c726f6469722c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c636865636b3d7374726963742c756e695f786c6174653d302c6e6f636173652c616c6c6f775f7574696d653d30303030303030303030303030303030303030343030302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c71756965742c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c757466383d302c666c7573682c726f6469722c73686f72746e616d653d6d697865642c73686f77657865632c636865636b3d72656c617865642c726f6469722c726f6469722c007cbda5978eff1afd303a09806ce0c610fe00684c0c67004cdbbd0b9992b0bbea8911a2050000006311c61fb0edf19ed5b7f8d03bfbf22d5655a02f9c7e7307c4f0cbeda2b4e5b2821ba502f452ce09bae8f886c9b612847e26f9afb26c9805000000000000000bc8604552e1dcb75008cfdd8a85c302b83f5ba6d806e8f77268091776f01e8c0465aa4a0ac02f13f9daeab1932f5688fd0ba15f0fc0d94f21c352fe6bc02b893c57f77281db316d62c523025b2c545ab273f28000ba55a384f4ddaa65567a7eb6e51c9d5b69a84c1cec408643486d4c6a17a1fe12f05c1bf8b7494265dc0493bbc87c7f86f7e5e9ed79d5822adebabbe3c1e9320ad777219218ae6103ce6a392927ef866f4b0bcfecea44742736cfc57fe72eee93d416f6ff7da7641eb9865ee1f09a9b76f87189d2f0113ebf44794240ccdfdee8fa1eccb4abfa1d4d470623d6e1530497c7e64924d946272d4fa346cfecac39646cbbf431869c533429e09b"], 0x6, 0x2a7, &(0x7f00000011c0)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) creat(&(0x7f00000001c0)='./file1\x00', 0x0) ftruncate(r0, 0x4) 903.135373ms ago: executing program 1 (id=1009): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x4, 0xffffffff}, 0x8) bind$bt_sco(r0, &(0x7f0000000400), 0x8) listen(r0, 0x0) shutdown(r0, 0x0) 716.873442ms ago: executing program 5 (id=1010): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0xff, 0x6de, &(0x7f0000000180)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x64) rename(&(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 537.771972ms ago: executing program 1 (id=1011): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000440)='./file0\x00', 0x2020084c, &(0x7f0000000500)=ANY=[], 0x1, 0x151f, &(0x7f0000002ac0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) getdents(r0, 0x0, 0x0) 328.136281ms ago: executing program 5 (id=1013): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x17, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, r1, 0x12, 0x0, @val=@netfilter={0x0, 0x1}}, 0x20) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$cgroup_int(r2, 0x0, 0x0) 327.325871ms ago: executing program 3 (id=1014): unshare(0x22020600) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0x10001, r0}) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0xbf9, 0x1000, 0x0, 0x2000000000000, 0x0, 0x2}, &(0x7f0000000180)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0) 184.93942ms ago: executing program 1 (id=1015): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001840)={r0, r2, 0x25, 0x0, @val=@netfilter}, 0x40) syz_emit_ethernet(0xfe53, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0xb, 0x3, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast2}}}}}}, 0x0) 82.49766ms ago: executing program 5 (id=1016): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000800000003"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 0s ago: executing program 3 (id=1017): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0x7fff}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = dup(r2) write$cgroup_subtree(r3, &(0x7f00000002c0)={[{0x0, 'rdma'}]}, 0xfdef) kernel console output (not intermixed with test programs): 40.256867][ T5333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.288354][ T5333] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.351989][ T5333] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.379837][ T5333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.401407][ T5333] usb 2-1: config 0 descriptor?? [ 140.660427][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.687413][ T5468] loop0: detected capacity change from 0 to 16 [ 140.710884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.724444][ T5273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.753815][ T5468] erofs: (device loop0): mounted with root inode @ nid 36. [ 140.827743][ T5333] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 140.850681][ T5333] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 140.877451][ T5472] loop2: detected capacity change from 0 to 2048 [ 140.910972][ T5333] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 140.993033][ T5477] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.115349][ T4295] usb 2-1: USB disconnect, device number 6 [ 141.515876][ T5485] loop2: detected capacity change from 0 to 2048 [ 141.565757][ T5485] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 141.582239][ T5464] loop3: detected capacity change from 0 to 32768 [ 141.609502][ T5485] UDF-fs: Scanning with blocksize 512 failed [ 141.657084][ T5464] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.390 (5464) [ 141.678640][ T5485] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.725574][ T5464] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 141.769856][ T5464] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 141.799995][ T5464] BTRFS info (device loop3): using free space tree [ 141.954643][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 142.033384][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.112741][ T5515] "syz.0.396" (5515) uses obsolete ecb(arc4) skcipher [ 142.140825][ T5515] syz.0.396 sent an empty control message without MSG_MORE. [ 142.220964][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 142.237484][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 142.249252][ T5273] device veth0_vlan entered promiscuous mode [ 142.310260][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 142.318360][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.349605][ T5464] BTRFS info (device loop3): enabling ssd optimizations [ 142.426353][ T5273] device veth1_vlan entered promiscuous mode [ 142.452768][ T5530] loop0: detected capacity change from 0 to 2048 [ 142.552311][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 142.575355][ T5530] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 142.584203][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 142.599948][ T5530] UDF-fs: Scanning with blocksize 512 failed [ 142.630333][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.660549][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.697946][ T5273] device veth0_macvtap entered promiscuous mode [ 142.717771][ T5530] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.786910][ T5273] device veth1_macvtap entered promiscuous mode [ 142.893946][ T5273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.930007][ T5273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.959552][ T5273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.002082][ T5273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.030790][ T5273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.057503][ T5273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.079507][ T5273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.096850][ T5273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.142732][ T5273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.161961][ T4254] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.183448][ T5273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.219469][ T5273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.268476][ T5273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.300025][ T5273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.327446][ T5273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.352633][ T5273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.368342][ T5273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.395148][ T5273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.451297][ T5273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.467740][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 143.478130][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 143.508178][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.528871][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.546791][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.557532][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.601800][ T11] kworker/u4:1: attempt to access beyond end of device [ 143.601800][ T11] loop0: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 143.626579][ T5273] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.644440][ T5273] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.656330][ T11] Buffer I/O error on dev loop0, logical block 1024, lost async page write [ 143.666927][ T5273] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.676182][ T11] kworker/u4:1: attempt to access beyond end of device [ 143.676182][ T11] loop0: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 143.690717][ T5273] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.710969][ T11] Buffer I/O error on dev loop0, logical block 1024, lost async page write [ 143.760625][ T11] kworker/u4:1: attempt to access beyond end of device [ 143.760625][ T11] loop0: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 143.829508][ T11] Buffer I/O error on dev loop0, logical block 1024, lost async page write [ 143.859544][ T11] kworker/u4:1: attempt to access beyond end of device [ 143.859544][ T11] loop0: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 143.949978][ T11] Buffer I/O error on dev loop0, logical block 1024, lost async page write [ 143.991935][ T11] kworker/u4:1: attempt to access beyond end of device [ 143.991935][ T11] loop0: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 144.009593][ T4301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.038292][ T4301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.089974][ T11] Buffer I/O error on dev loop0, logical block 1025, lost async page write [ 144.099692][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.133533][ T11] kworker/u4:1: attempt to access beyond end of device [ 144.133533][ T11] loop0: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 144.140272][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.176750][ T11] Buffer I/O error on dev loop0, logical block 1025, lost async page write [ 144.237229][ T11] kworker/u4:1: attempt to access beyond end of device [ 144.237229][ T11] loop0: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 144.249462][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.280786][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.322901][ T11] Buffer I/O error on dev loop0, logical block 1025, lost async page write [ 144.371239][ T11] kworker/u4:1: attempt to access beyond end of device [ 144.371239][ T11] loop0: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 144.392667][ T5557] loop1: detected capacity change from 0 to 2048 [ 144.420950][ T11] Buffer I/O error on dev loop0, logical block 1025, lost async page write [ 144.469532][ T11] kworker/u4:1: attempt to access beyond end of device [ 144.469532][ T11] loop0: rw=1, sector=2052, nr_sectors = 2 limit=2048 [ 144.484746][ T5557] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.526965][ T11] Buffer I/O error on dev loop0, logical block 1026, lost async page write [ 144.569723][ T11] kworker/u4:1: attempt to access beyond end of device [ 144.569723][ T11] loop0: rw=1, sector=2052, nr_sectors = 2 limit=2048 [ 144.606694][ T11] Buffer I/O error on dev loop0, logical block 1026, lost async page write [ 144.909259][ T5542] loop2: detected capacity change from 0 to 40427 [ 144.978625][ T5542] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 145.014330][ T5542] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 145.048278][ T5542] F2FS-fs (loop2): invalid crc value [ 145.078937][ T5572] loop1: detected capacity change from 0 to 128 [ 145.119104][ T5542] F2FS-fs (loop2): Found nat_bits in checkpoint [ 145.217296][ T5572] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 145.241776][ T5572] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 145.301844][ T5542] F2FS-fs (loop2): Start checkpoint disabled! [ 145.350682][ T5542] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 145.371300][ T5542] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 145.461570][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 145.895560][ T5599] loop3: detected capacity change from 0 to 512 [ 145.923332][ T5599] EXT4-fs: Ignoring removed nobh option [ 145.965393][ T5599] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 146.149939][ T27] audit: type=1800 audit(1738162671.272:26): pid=5599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.420" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 146.218971][ T27] audit: type=1800 audit(1738162671.302:27): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.420" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 146.301554][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 146.425756][ T5590] loop5: detected capacity change from 0 to 32768 [ 146.505540][ T5590] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.415 (5590) [ 146.669477][ T5590] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 146.687823][ T5619] loop2: detected capacity change from 0 to 2048 [ 146.753666][ T5590] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 146.798404][ T5590] BTRFS info (device loop5): using free space tree [ 146.823412][ T5619] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 146.832929][ T5619] UDF-fs: Scanning with blocksize 512 failed [ 146.859342][ T5619] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.073126][ T5590] BTRFS info (device loop5): enabling ssd optimizations [ 147.396254][ T5273] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.657726][ T5662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.434'. [ 147.849211][ T5666] loop0: detected capacity change from 0 to 1024 [ 148.196755][ T4363] hfsplus: b-tree write err: -5, ino 3 [ 148.261771][ T4258] hfsplus: node 4:3 still has 1 user(s)! [ 148.518567][ T5682] loop3: detected capacity change from 0 to 2048 [ 148.585813][ T5682] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 148.630077][ T5682] UDF-fs: Scanning with blocksize 512 failed [ 148.668253][ T5682] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.044172][ T5700] loop0: detected capacity change from 0 to 256 [ 149.108617][ T5700] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x809ea061, utbl_chksum : 0x7319d30d) [ 149.268391][ T33] bio_check_eod: 12 callbacks suppressed [ 149.268413][ T33] kworker/u4:2: attempt to access beyond end of device [ 149.268413][ T33] loop3: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 149.368149][ T33] buffer_io_error: 10 callbacks suppressed [ 149.368166][ T33] Buffer I/O error on dev loop3, logical block 1024, lost async page write [ 149.445779][ T33] kworker/u4:2: attempt to access beyond end of device [ 149.445779][ T33] loop3: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 149.475236][ T5683] loop2: detected capacity change from 0 to 32768 [ 149.510059][ T33] Buffer I/O error on dev loop3, logical block 1024, lost async page write [ 149.518745][ T33] kworker/u4:2: attempt to access beyond end of device [ 149.518745][ T33] loop3: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 149.559137][ T5683] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.452 (5683) [ 149.594241][ T33] Buffer I/O error on dev loop3, logical block 1024, lost async page write [ 149.628108][ T33] kworker/u4:2: attempt to access beyond end of device [ 149.628108][ T33] loop3: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 149.649026][ T5683] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 149.699496][ T33] Buffer I/O error on dev loop3, logical block 1024, lost async page write [ 149.699748][ T5683] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 149.750324][ T33] kworker/u4:2: attempt to access beyond end of device [ 149.750324][ T33] loop3: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 149.764748][ T5683] BTRFS info (device loop2): enabling auto defrag [ 149.799512][ T33] Buffer I/O error on dev loop3, logical block 1025, lost async page write [ 149.803164][ T5683] BTRFS info (device loop2): doing ref verification [ 149.808225][ T33] kworker/u4:2: attempt to access beyond end of device [ 149.808225][ T33] loop3: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 149.873891][ T5683] BTRFS info (device loop2): max_inline at 0 [ 149.879596][ T33] Buffer I/O error on dev loop3, logical block 1025, lost async page write [ 149.899650][ T5683] BTRFS info (device loop2): force clearing of disk cache [ 149.916317][ T33] kworker/u4:2: attempt to access beyond end of device [ 149.916317][ T33] loop3: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 149.945274][ T5683] BTRFS info (device loop2): turning on sync discard [ 149.966435][ T33] Buffer I/O error on dev loop3, logical block 1025, lost async page write [ 150.007699][ T5683] BTRFS info (device loop2): disabling free space tree [ 150.015023][ T33] kworker/u4:2: attempt to access beyond end of device [ 150.015023][ T33] loop3: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 150.085890][ T33] Buffer I/O error on dev loop3, logical block 1025, lost async page write [ 150.091956][ T5703] loop1: detected capacity change from 0 to 32768 [ 150.126213][ T5703] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.446 (5703) [ 150.136613][ T33] kworker/u4:2: attempt to access beyond end of device [ 150.136613][ T33] loop3: rw=1, sector=2052, nr_sectors = 2 limit=2048 [ 150.211534][ T5731] loop5: detected capacity change from 0 to 64 [ 150.231469][ T33] Buffer I/O error on dev loop3, logical block 1026, lost async page write [ 150.244031][ T33] kworker/u4:2: attempt to access beyond end of device [ 150.244031][ T33] loop3: rw=1, sector=2052, nr_sectors = 2 limit=2048 [ 150.263511][ T33] Buffer I/O error on dev loop3, logical block 1026, lost async page write [ 150.321127][ T5683] BTRFS info (device loop2): enabling ssd optimizations [ 150.339028][ T5703] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 150.399879][ T5683] BTRFS info (device loop2): rebuilding free space tree [ 150.400173][ T5703] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 150.452101][ T5703] BTRFS info (device loop1): using free space tree [ 150.511753][ T27] audit: type=1800 audit(1738162675.632:28): pid=5731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.455" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 150.634967][ T27] audit: type=1800 audit(1738162675.632:29): pid=5731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.455" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 150.697435][ T5683] BTRFS info (device loop2): disabling free space tree [ 150.718217][ T5703] BTRFS info (device loop1): enabling ssd optimizations [ 150.763947][ T5683] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 150.820333][ T5683] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 150.983864][ T5703] BTRFS info (device loop1): balance: start [ 151.060096][ T5703] BTRFS info (device loop1): balance: ended with status: 0 [ 151.290023][ T4250] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 151.305043][ T4256] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 151.467839][ T5784] loop5: detected capacity change from 0 to 2048 [ 151.594101][ T5784] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 151.642159][ T5784] UDF-fs: Scanning with blocksize 512 failed [ 151.715960][ T5784] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.885880][ T4302] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 152.119744][ T4302] usb 1-1: Using ep0 maxpacket: 8 [ 152.136695][ T4302] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.202234][ T5781] loop3: detected capacity change from 0 to 32768 [ 152.256350][ T4302] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 152.299751][ T4268] Bluetooth: hci4: command 0x0405 tx timeout [ 152.351312][ T4302] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.399320][ T4302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.438681][ T5781] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 152.468612][ T4302] usb 1-1: Product: syz [ 152.522520][ T4302] usb 1-1: Manufacturer: syz [ 152.550632][ T4302] usb 1-1: SerialNumber: syz [ 152.601387][ T5812] loop1: detected capacity change from 0 to 2048 [ 152.683354][ T4254] ocfs2: Unmounting device (7,3) on (node local) [ 152.693745][ T5817] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 152.694052][ T5807] IPVS: Scheduler module ip_vs_sip not found [ 152.777159][ T5817] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 152.848420][ T5817] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 152.875311][ T5817] Remounting filesystem read-only [ 153.031500][ T4250] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 153.068549][ T4250] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 153.092891][ T4250] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 153.116281][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 153.189562][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 153.209828][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 153.238962][ T4250] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 153.269614][ T4250] NILFS (loop1): discard dirty block: blocknr=35, size=1024 [ 153.279243][ T4250] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 153.294902][ T4250] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 153.303073][ T4250] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 153.340962][ T4250] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 153.347974][ T4250] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 153.364440][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 153.385058][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 153.432746][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 153.452011][ T4250] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 153.466565][ T4250] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 153.475468][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 153.490319][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 153.499214][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 153.520637][ T4250] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 153.539898][ T4250] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 153.548619][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 153.564738][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 153.598225][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 153.602620][ T4302] cdc_ncm 1-1:1.0: bind() failure [ 153.613247][ T4250] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 153.621380][ T4250] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 153.628704][ T4250] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 153.642648][ T4302] usbtest: probe of 1-1:1.1 failed with error -71 [ 153.657629][ T4250] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 153.665314][ T4302] usb 1-1: USB disconnect, device number 6 [ 153.691465][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 153.709483][ T4250] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 153.714096][ T5838] loop2: detected capacity change from 0 to 1024 [ 153.716622][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 153.764113][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 153.793160][ T5840] loop5: detected capacity change from 0 to 256 [ 153.801806][ T4250] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 153.809247][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 153.824312][ T5838] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 153.830103][ T5840] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 153.928861][ T5840] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.995619][ T5846] loop1: detected capacity change from 0 to 64 [ 154.056721][ T27] audit: type=1800 audit(1738162679.172:30): pid=5846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.469" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 154.096728][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 154.109924][ T27] audit: type=1800 audit(1738162679.202:31): pid=5846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.469" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 154.314079][ T5831] loop3: detected capacity change from 0 to 32768 [ 154.347323][ T5831] XFS: ikeep mount option is deprecated. [ 154.367201][ T5853] loop0: detected capacity change from 0 to 128 [ 154.473601][ T4376] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 154.533043][ T5831] XFS (loop3): Mounting V5 Filesystem [ 154.657495][ T5831] XFS (loop3): Ending clean mount [ 154.696959][ T5831] XFS (loop3): Quotacheck needed: Please wait. [ 154.778317][ T5868] IPVS: Scheduler module ip_vs_sip not found [ 154.817588][ T5875] loop1: detected capacity change from 0 to 2048 [ 154.837998][ T5831] XFS (loop3): Quotacheck: Done. [ 154.911389][ T5875] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 154.919090][ T5875] UDF-fs: Scanning with blocksize 512 failed [ 154.996575][ T5875] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.087049][ T4254] XFS (loop3): Unmounting Filesystem [ 155.524987][ T4301] bio_check_eod: 10 callbacks suppressed [ 155.525017][ T4301] kworker/u4:5: attempt to access beyond end of device [ 155.525017][ T4301] loop1: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 155.564945][ T4301] buffer_io_error: 10 callbacks suppressed [ 155.564963][ T4301] Buffer I/O error on dev loop1, logical block 1024, lost async page write [ 155.606321][ T4301] kworker/u4:5: attempt to access beyond end of device [ 155.606321][ T4301] loop1: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 155.668556][ T4301] Buffer I/O error on dev loop1, logical block 1024, lost async page write [ 155.687745][ T4301] kworker/u4:5: attempt to access beyond end of device [ 155.687745][ T4301] loop1: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 155.720380][ T4301] Buffer I/O error on dev loop1, logical block 1024, lost async page write [ 155.749623][ T4301] kworker/u4:5: attempt to access beyond end of device [ 155.749623][ T4301] loop1: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 155.789494][ T4301] Buffer I/O error on dev loop1, logical block 1024, lost async page write [ 155.809890][ T5888] loop3: detected capacity change from 0 to 2048 [ 155.816694][ T4301] kworker/u4:5: attempt to access beyond end of device [ 155.816694][ T4301] loop1: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 155.839483][ T4301] Buffer I/O error on dev loop1, logical block 1025, lost async page write [ 155.854478][ T5883] loop5: detected capacity change from 0 to 32768 [ 155.858600][ T4301] kworker/u4:5: attempt to access beyond end of device [ 155.858600][ T4301] loop1: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 155.876149][ T5888] loop3: p1 < > p4 [ 155.883410][ T5888] loop3: p4 size 8388608 extends beyond EOD, truncated [ 155.894571][ T5882] loop2: detected capacity change from 0 to 32768 [ 155.903420][ T5883] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.485 (5883) [ 155.925786][ T4301] Buffer I/O error on dev loop1, logical block 1025, lost async page write [ 155.947378][ T4301] kworker/u4:5: attempt to access beyond end of device [ 155.947378][ T4301] loop1: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 155.987600][ T5882] XFS (loop2): Mounting V5 Filesystem [ 155.998219][ T5883] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 155.999994][ T4301] Buffer I/O error on dev loop1, logical block 1025, lost async page write [ 156.027631][ T5883] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 156.060200][ T5883] BTRFS info (device loop5): setting nodatacow, compression disabled [ 156.068361][ T5883] BTRFS info (device loop5): max_inline at 0 [ 156.079816][ T5883] BTRFS info (device loop5): enabling disk space caching [ 156.124494][ T5883] BTRFS info (device loop5): setting datasum, datacow enabled [ 156.189708][ T4301] kworker/u4:5: attempt to access beyond end of device [ 156.189708][ T4301] loop1: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 156.192761][ T5899] loop3: detected capacity change from 0 to 64 [ 156.226279][ T4376] udevd[4376]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 156.226518][ T4326] udevd[4326]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 156.237565][ T5883] BTRFS info (device loop5): turning on flush-on-commit [ 156.264120][ T5882] XFS (loop2): Ending clean mount [ 156.270625][ T27] audit: type=1800 audit(1738162681.392:32): pid=5899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.489" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 156.285786][ T5883] BTRFS info (device loop5): doing ref verification [ 156.317167][ T5882] XFS (loop2): Quotacheck needed: Please wait. [ 156.324550][ T4301] Buffer I/O error on dev loop1, logical block 1025, lost async page write [ 156.334005][ T5883] BTRFS info (device loop5): force clearing of disk cache [ 156.344062][ T4301] kworker/u4:5: attempt to access beyond end of device [ 156.344062][ T4301] loop1: rw=1, sector=2052, nr_sectors = 2 limit=2048 [ 156.377473][ T4326] udevd[4326]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 156.387966][ T27] audit: type=1800 audit(1738162681.392:33): pid=5899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.489" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 156.410552][ T4376] udevd[4376]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 156.429558][ T5883] BTRFS info (device loop5): enabling ssd optimizations [ 156.439731][ T4301] Buffer I/O error on dev loop1, logical block 1026, lost async page write [ 156.448458][ T5883] BTRFS info (device loop5): turning off barriers [ 156.449755][ T5882] XFS (loop2): Quotacheck: Done. [ 156.467067][ T5883] BTRFS info (device loop5): max_inline at 4096 [ 156.489840][ T4301] kworker/u4:5: attempt to access beyond end of device [ 156.489840][ T4301] loop1: rw=1, sector=2052, nr_sectors = 2 limit=2048 [ 156.509871][ T5883] BTRFS info (device loop5): disk space caching is enabled [ 156.550732][ T4301] Buffer I/O error on dev loop1, logical block 1026, lost async page write [ 156.560211][ T5886] loop0: detected capacity change from 0 to 32768 [ 156.637883][ T4256] XFS (loop2): Unmounting Filesystem [ 156.638061][ T5886] capability: warning: `syz.0.487' uses deprecated v2 capabilities in a way that may be insecure [ 156.963306][ T5883] BTRFS info (device loop5): rebuilding free space tree [ 157.049735][ T5883] BTRFS info (device loop5): disabling free space tree [ 157.067974][ T5883] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 157.104692][ T5883] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 157.640408][ T5933] loop3: detected capacity change from 0 to 128 [ 157.763108][ T5273] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 157.922589][ T5937] IPVS: Scheduler module ip_vs_sip not found [ 158.261427][ T5945] loop0: detected capacity change from 0 to 2048 [ 158.329014][ T5945] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 158.400170][ T5945] UDF-fs: Scanning with blocksize 512 failed [ 158.472464][ T5945] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.749734][ T5911] loop1: detected capacity change from 0 to 65536 [ 158.865352][ T5911] XFS (loop1): Mounting V5 Filesystem [ 158.939636][ T5949] loop2: detected capacity change from 0 to 32768 [ 158.941249][ T5911] XFS (loop1): Ending clean mount [ 158.947412][ T5949] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.500 (5949) [ 158.977305][ T5949] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 158.988276][ T5949] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 159.002462][ T5949] BTRFS info (device loop2): using free space tree [ 159.005616][ T5911] XFS (loop1): Quotacheck needed: Please wait. [ 159.058729][ T5911] XFS (loop1): Quotacheck: Done. [ 159.184147][ T4250] XFS (loop1): Unmounting Filesystem [ 159.190035][ T5949] BTRFS info (device loop2): enabling ssd optimizations [ 159.316800][ T4256] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 159.384777][ T5989] loop5: detected capacity change from 0 to 256 [ 159.410967][ T5987] loop0: detected capacity change from 0 to 2048 [ 159.552144][ T5987] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 159.564615][ T5987] UDF-fs: Scanning with blocksize 512 failed [ 159.644197][ T5987] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.727356][ T5992] input: syz1 as /devices/virtual/input/input11 [ 159.944542][ T5997] loop2: detected capacity change from 0 to 64 [ 159.990174][ T27] audit: type=1800 audit(1738162685.112:34): pid=5997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.501" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 160.026371][ T27] audit: type=1800 audit(1738162685.112:35): pid=5997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.501" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 160.273680][ T6000] Bluetooth: MGMT ver 1.22 [ 160.499450][ T5995] loop3: detected capacity change from 0 to 32768 [ 160.526728][ T5995] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.507 (5995) [ 160.576643][ T5995] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 160.594484][ T5995] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 160.628783][ T5995] BTRFS info (device loop3): setting nodatacow, compression disabled [ 160.649569][ T5995] BTRFS info (device loop3): max_inline at 0 [ 160.655629][ T5995] BTRFS info (device loop3): enabling disk space caching [ 160.684226][ T5995] BTRFS info (device loop3): setting datasum, datacow enabled [ 160.709739][ T5995] BTRFS info (device loop3): turning on flush-on-commit [ 160.716769][ T5995] BTRFS info (device loop3): doing ref verification [ 160.749509][ T5995] BTRFS info (device loop3): force clearing of disk cache [ 160.756880][ T5995] BTRFS info (device loop3): enabling ssd optimizations [ 160.769529][ T5995] BTRFS info (device loop3): turning off barriers [ 160.776026][ T5995] BTRFS info (device loop3): max_inline at 4096 [ 160.799533][ T5995] BTRFS info (device loop3): disk space caching is enabled [ 160.909628][ T5995] BTRFS info (device loop3): rebuilding free space tree [ 160.924700][ T5995] BTRFS info (device loop3): disabling free space tree [ 160.932525][ T5995] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 160.947720][ T5995] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 161.209726][ T4254] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 161.778192][ T6042] IPVS: Scheduler module ip_vs_sip not found [ 162.069655][ T4305] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 162.107387][ T6056] loop0: detected capacity change from 0 to 2048 [ 162.170092][ T6056] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 162.198279][ T6056] UDF-fs: Scanning with blocksize 512 failed [ 162.245544][ T6056] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.259711][ T4305] usb 3-1: Using ep0 maxpacket: 32 [ 162.267357][ T4305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.279623][ T5333] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 162.318359][ T4305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.359820][ T4305] usb 3-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 162.389844][ T4305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.416516][ T4305] usb 3-1: config 0 descriptor?? [ 162.466921][ T6036] loop1: detected capacity change from 0 to 32768 [ 162.481335][ T5333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.504600][ T5333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.538538][ T6036] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.514 (6036) [ 162.576571][ T5333] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 162.616255][ T5333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.636805][ T6048] loop5: detected capacity change from 0 to 32768 [ 162.644999][ T6036] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 162.668290][ T5333] usb 4-1: config 0 descriptor?? [ 162.673995][ T6036] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 162.700858][ T33] bio_check_eod: 20 callbacks suppressed [ 162.700875][ T33] kworker/u4:2: attempt to access beyond end of device [ 162.700875][ T33] loop0: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 162.721734][ T6036] BTRFS info (device loop1): using free space tree [ 162.774124][ T33] buffer_io_error: 20 callbacks suppressed [ 162.774142][ T33] Buffer I/O error on dev loop0, logical block 1024, lost async page write [ 162.816959][ T33] kworker/u4:2: attempt to access beyond end of device [ 162.816959][ T33] loop0: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 162.831816][ T33] Buffer I/O error on dev loop0, logical block 1024, lost async page write [ 162.851549][ T33] kworker/u4:2: attempt to access beyond end of device [ 162.851549][ T33] loop0: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 162.868015][ T4305] razer 0003:1532:010D.000D: hidraw0: USB HID v0.00 Device [HID 1532:010d] on usb-dummy_hcd.2-1/input0 [ 162.880060][ T33] Buffer I/O error on dev loop0, logical block 1024, lost async page write [ 162.888971][ T33] kworker/u4:2: attempt to access beyond end of device [ 162.888971][ T33] loop0: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 162.934843][ T33] Buffer I/O error on dev loop0, logical block 1024, lost async page write [ 162.952122][ T33] kworker/u4:2: attempt to access beyond end of device [ 162.952122][ T33] loop0: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 162.985693][ T33] Buffer I/O error on dev loop0, logical block 1025, lost async page write [ 163.024025][ T33] kworker/u4:2: attempt to access beyond end of device [ 163.024025][ T33] loop0: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 163.050952][ T33] Buffer I/O error on dev loop0, logical block 1025, lost async page write [ 163.051437][ T4305] usb 3-1: USB disconnect, device number 7 [ 163.066702][ T33] kworker/u4:2: attempt to access beyond end of device [ 163.066702][ T33] loop0: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 163.103173][ T5333] hid (null): bogus close delimiter [ 163.122926][ T6036] BTRFS info (device loop1): enabling ssd optimizations [ 163.169506][ T33] Buffer I/O error on dev loop0, logical block 1025, lost async page write [ 163.178204][ T33] kworker/u4:2: attempt to access beyond end of device [ 163.178204][ T33] loop0: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 163.229488][ T33] Buffer I/O error on dev loop0, logical block 1025, lost async page write [ 163.240672][ T33] kworker/u4:2: attempt to access beyond end of device [ 163.240672][ T33] loop0: rw=1, sector=2052, nr_sectors = 2 limit=2048 [ 163.265847][ T33] Buffer I/O error on dev loop0, logical block 1026, lost async page write [ 163.276226][ T33] kworker/u4:2: attempt to access beyond end of device [ 163.276226][ T33] loop0: rw=1, sector=2052, nr_sectors = 2 limit=2048 [ 163.298700][ T33] Buffer I/O error on dev loop0, logical block 1026, lost async page write [ 163.310699][ T5333] usb 4-1: string descriptor 0 read error: -22 [ 163.336345][ T4250] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 163.712509][ T5333] uclogic 0003:256C:006D.000E: failed retrieving string descriptor #100: -71 [ 163.731660][ T5333] uclogic 0003:256C:006D.000E: failed retrieving pen parameters: -71 [ 163.769625][ T5333] uclogic 0003:256C:006D.000E: failed probing pen v1 parameters: -71 [ 163.808326][ T5333] uclogic 0003:256C:006D.000E: failed probing parameters: -71 [ 163.854314][ T5333] uclogic: probe of 0003:256C:006D.000E failed with error -71 [ 163.882487][ T5333] usb 4-1: USB disconnect, device number 8 [ 163.953121][ T6095] loop5: detected capacity change from 0 to 4096 [ 163.990100][ T6095] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 164.096666][ T6095] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 164.776192][ T6092] loop0: detected capacity change from 0 to 32768 [ 164.834057][ T6092] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.524 (6092) [ 164.919473][ T6092] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 164.971100][ T6092] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 165.006518][ T6126] loop5: detected capacity change from 0 to 256 [ 165.013374][ T6092] BTRFS info (device loop0): setting nodatacow, compression disabled [ 165.044654][ T6092] BTRFS info (device loop0): max_inline at 0 [ 165.068092][ T6092] BTRFS info (device loop0): enabling disk space caching [ 165.091670][ T6126] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 165.114018][ T6092] BTRFS info (device loop0): setting datasum, datacow enabled [ 165.185299][ T6092] BTRFS info (device loop0): turning on flush-on-commit [ 165.222984][ T6092] BTRFS info (device loop0): doing ref verification [ 165.254023][ T6092] BTRFS info (device loop0): force clearing of disk cache [ 165.293949][ T6092] BTRFS info (device loop0): enabling ssd optimizations [ 165.319750][ T6092] BTRFS info (device loop0): turning off barriers [ 165.356816][ T6092] BTRFS info (device loop0): max_inline at 4096 [ 165.379013][ T6092] BTRFS info (device loop0): disk space caching is enabled [ 165.446195][ T6130] loop3: detected capacity change from 0 to 2048 [ 165.563232][ T6130] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 165.591716][ T6104] loop2: detected capacity change from 0 to 40427 [ 165.607415][ T6130] UDF-fs: Scanning with blocksize 512 failed [ 165.659722][ T6104] F2FS-fs (loop2): build fault injection attr: rate: 691, type: 0x3ffff [ 165.682356][ T6092] BTRFS info (device loop0): rebuilding free space tree [ 165.717515][ T6130] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.740063][ T6104] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 165.752253][ T6092] BTRFS info (device loop0): disabling free space tree [ 165.759192][ T6092] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 165.796180][ T6104] F2FS-fs (loop2): invalid crc value [ 165.830212][ T6092] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 165.841724][ T6104] F2FS-fs (loop2): Found nat_bits in checkpoint [ 166.073441][ T6104] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 166.319306][ T4258] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 166.978691][ T6178] loop1: detected capacity change from 0 to 64 [ 167.459205][ T6191] loop1: detected capacity change from 0 to 2048 [ 167.479907][ T5331] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 167.503350][ T27] audit: type=1326 audit(1738162692.622:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4278cda9 code=0x7ffc0000 [ 167.558374][ T6191] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 167.558415][ T27] audit: type=1326 audit(1738162692.652:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4278cda9 code=0x7ffc0000 [ 167.622857][ T27] audit: type=1326 audit(1738162692.652:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f6c4278cda9 code=0x7ffc0000 [ 167.675833][ T27] audit: type=1326 audit(1738162692.652:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4278cda9 code=0x7ffc0000 [ 167.699167][ T5331] usb 1-1: Using ep0 maxpacket: 32 [ 167.707652][ T5331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.749824][ T5331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.797387][ T5331] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 167.806936][ T27] audit: type=1326 audit(1738162692.652:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4278cda9 code=0x7ffc0000 [ 167.839640][ T5331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.864120][ T5331] usb 1-1: config 0 descriptor?? [ 167.885430][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 168.112898][ T6213] loop3: detected capacity change from 0 to 2048 [ 168.144601][ T6213] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.189351][ T6217] device ipvlan0 entered promiscuous mode [ 168.320793][ T5331] savu 0003:1E7D:2D5A.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 168.504170][ T6231] loop2: detected capacity change from 0 to 64 [ 168.607330][ T5331] usb 1-1: USB disconnect, device number 7 [ 168.762587][ T6237] loop1: detected capacity change from 0 to 128 [ 169.039551][ T5333] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 169.229682][ T5333] usb 3-1: Using ep0 maxpacket: 8 [ 169.244006][ T5333] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 169.273938][ T6251] loop3: detected capacity change from 0 to 1024 [ 169.280454][ T5333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.288465][ T5333] usb 3-1: Product: syz [ 169.333840][ T5333] usb 3-1: Manufacturer: syz [ 169.349285][ T5333] usb 3-1: SerialNumber: syz [ 169.369028][ T6251] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 169.385378][ T6257] loop0: detected capacity change from 0 to 2048 [ 169.426871][ T5333] usb 3-1: config 0 descriptor?? [ 169.540635][ T6257] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 169.607746][ T6263] loop5: detected capacity change from 0 to 8192 [ 169.617575][ T6263] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.638835][ T6257] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.561: bg 0: block 234: padding at end of block bitmap is not set [ 169.660122][ T27] audit: type=1800 audit(1738162694.782:41): pid=6263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.564" name="file1" dev="loop5" ino=1048613 res=0 errno=0 [ 169.709884][ T5333] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 169.726930][ T6257] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 30 with error 117 [ 169.759894][ T6257] EXT4-fs (loop0): This should not happen!! Data will be lost [ 169.759894][ T6257] [ 170.002661][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 170.027270][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 170.119491][ T22] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 170.191917][ T6279] loop3: detected capacity change from 0 to 64 [ 170.242732][ T6274] loop5: detected capacity change from 0 to 4096 [ 170.271152][ T6274] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 170.311397][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.331010][ T5333] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 170.346913][ T22] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 170.368318][ T5333] usb 3-1: USB disconnect, device number 8 [ 170.378729][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.387628][ T6274] ntfs: (device loop5): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 170.422901][ T6274] ntfs: (device loop5): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 170.426040][ T22] usb 2-1: config 0 descriptor?? [ 170.507838][ T6274] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 170.527028][ T6274] ntfs: volume version 3.1. [ 170.744318][ T22] usb 2-1: USB disconnect, device number 7 [ 170.875011][ T6290] loop0: detected capacity change from 0 to 2048 [ 171.079588][ T6290] loop0: p2 p3 p7 [ 171.684133][ T6285] loop3: detected capacity change from 0 to 32768 [ 171.970626][ T6285] XFS (loop3): Mounting V5 Filesystem [ 172.088258][ T6285] XFS (loop3): Ending clean mount [ 172.147726][ T6285] XFS (loop3): Quotacheck needed: Please wait. [ 172.241493][ T6285] XFS (loop3): Quotacheck: Done. [ 172.383724][ T4254] XFS (loop3): Unmounting Filesystem [ 172.449169][ T6335] loop0: detected capacity change from 0 to 1024 [ 172.569355][ T6339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.582'. [ 172.577597][ T6302] loop5: detected capacity change from 0 to 40427 [ 172.604070][ T6339] device vlan2 entered promiscuous mode [ 172.612335][ T6335] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 172.619606][ T6339] device bond_slave_0 entered promiscuous mode [ 172.644710][ T6339] device bond_slave_0 left promiscuous mode [ 172.674976][ T6302] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3ffff [ 172.687446][ T6302] F2FS-fs (loop5): invalid crc value [ 172.766248][ T6302] F2FS-fs (loop5): Found nat_bits in checkpoint [ 172.828101][ T6302] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 173.137309][ T5273] bio_check_eod: 9 callbacks suppressed [ 173.137328][ T5273] syz-executor: attempt to access beyond end of device [ 173.137328][ T5273] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 173.187350][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 173.197746][ T6350] loop1: detected capacity change from 0 to 4096 [ 173.274299][ T6350] __ntfs_warning: 20 callbacks suppressed [ 173.274315][ T6350] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 173.441069][ T6350] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 173.482224][ T6350] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 173.521115][ T6350] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 173.575782][ T6350] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 173.679568][ T6350] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 173.688325][ T6350] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 173.819365][ T6350] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 173.828165][ T6350] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 173.860693][ T6369] device syz_tun entered promiscuous mode [ 173.900116][ T6369] device syz_tun left promiscuous mode [ 173.919992][ T6350] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 173.988554][ T6350] ntfs: volume version 3.1. [ 174.189157][ T6384] loop0: detected capacity change from 0 to 1024 [ 174.279036][ T6384] hfsplus: xattr searching failed [ 174.322874][ T6384] hfsplus: xattr searching failed [ 174.734855][ T4268] Bluetooth: hci1: unexpected event for opcode 0x0c1c [ 174.992093][ T6409] loop2: detected capacity change from 0 to 1024 [ 175.009510][ T6411] loop3: detected capacity change from 0 to 128 [ 175.098493][ T6411] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 175.102586][ T6409] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 175.120092][ T6411] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 175.315488][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 175.382889][ T6396] loop0: detected capacity change from 0 to 40427 [ 175.416671][ T6396] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 175.455033][ T6396] F2FS-fs (loop0): invalid crc value [ 175.479055][ T6396] F2FS-fs (loop0): Found nat_bits in checkpoint [ 175.585408][ T6396] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 175.679530][ T5788] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 175.703178][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 175.831504][ T4258] syz-executor: attempt to access beyond end of device [ 175.831504][ T4258] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 175.871378][ T5788] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 175.899503][ T5788] usb 4-1: config 0 has no interface number 0 [ 175.900448][ T6425] loop2: detected capacity change from 0 to 2048 [ 175.918278][ T5788] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 175.969667][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.988014][ T5788] usb 4-1: Product: syz [ 175.998139][ T5788] usb 4-1: Manufacturer: syz [ 176.005963][ T5788] usb 4-1: SerialNumber: syz [ 176.014377][ T6425] loop2: p2 p3 p7 [ 176.023962][ T6417] loop5: detected capacity change from 0 to 32768 [ 176.034460][ T5788] usb 4-1: config 0 descriptor?? [ 176.078819][ T6427] device syz_tun entered promiscuous mode [ 176.098939][ T6427] device syz_tun left promiscuous mode [ 176.264453][ T5788] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 176.293458][ T5788] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 176.326806][ T5788] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 176.356810][ T5788] usb 4-1: media controller created [ 176.430015][ T5788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.555720][ T5788] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 176.666480][ T5788] usb 4-1: USB disconnect, device number 9 [ 176.896610][ T6434] loop1: detected capacity change from 0 to 1024 [ 176.913571][ T6435] loop0: detected capacity change from 0 to 256 [ 176.956719][ T6434] hfsplus: xattr searching failed [ 176.973425][ T6434] hfsplus: xattr searching failed [ 177.142593][ T6439] loop2: detected capacity change from 0 to 2048 [ 177.193525][ T6439] NILFS (loop2): invalid segment: Sequence number mismatch [ 177.229052][ T6439] NILFS (loop2): trying rollback from an earlier position [ 177.290581][ T6439] NILFS (loop2): recovery complete [ 177.312196][ T6444] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.499109][ T6448] loop1: detected capacity change from 0 to 512 [ 177.538777][ T6448] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 177.576448][ T6448] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 177.626419][ T6452] loop5: detected capacity change from 0 to 512 [ 177.637261][ T6448] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 177.647786][ T6448] System zones: 0-2, 18-18, 34-34 [ 177.677149][ T6448] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 177.776377][ T6452] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 177.799347][ T6448] EXT4-fs (loop1): 1 truncate cleaned up [ 177.821541][ T6443] loop3: detected capacity change from 0 to 32768 [ 177.850440][ T6443] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop3 scanned by syz.3.612 (6443) [ 177.859497][ T6448] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 177.864077][ T6452] EXT4-fs (loop5): 1 truncate cleaned up [ 177.893752][ T6452] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 177.894097][ T6443] BTRFS info (device loop3): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 177.931672][ T6452] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.616: corrupted in-inode xattr [ 177.980898][ T6443] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 177.990431][ T6443] BTRFS info (device loop3): using free space tree [ 178.019037][ T6452] EXT4-fs (loop5): Remounting filesystem read-only [ 178.040694][ T6452] EXT4-fs warning (device loop5): ext4_xattr_set_entry:1723: inode #15: comm syz.5.616: unable to update i_inline_off [ 178.179952][ T6451] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.616: corrupted in-inode xattr [ 178.196842][ T6451] EXT4-fs (loop5): Remounting filesystem read-only [ 178.204239][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 178.277932][ T6451] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.616: corrupted in-inode xattr [ 178.294022][ T6451] EXT4-fs (loop5): Remounting filesystem read-only [ 178.302711][ T6451] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.616: corrupted in-inode xattr [ 178.317620][ T6451] EXT4-fs (loop5): Remounting filesystem read-only [ 178.354375][ T6451] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.616: corrupted in-inode xattr [ 178.377935][ T6451] EXT4-fs (loop5): Remounting filesystem read-only [ 178.387388][ T6451] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.616: corrupted in-inode xattr [ 178.406487][ T6451] EXT4-fs (loop5): Remounting filesystem read-only [ 178.434687][ T6451] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.616: corrupted in-inode xattr [ 178.459044][ T6443] BTRFS info (device loop3): enabling ssd optimizations [ 178.468634][ T6451] EXT4-fs (loop5): Remounting filesystem read-only [ 178.519670][ T6451] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.616: corrupted in-inode xattr [ 178.583040][ T6451] EXT4-fs (loop5): Remounting filesystem read-only [ 178.599627][ T6451] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.616: corrupted in-inode xattr [ 178.634017][ T6451] EXT4-fs (loop5): Remounting filesystem read-only [ 178.679635][ T6451] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.616: corrupted in-inode xattr [ 178.680057][ T6463] loop0: detected capacity change from 0 to 32768 [ 178.755821][ T6463] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.618 (6463) [ 178.836304][ T6463] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 178.857142][ T4254] BTRFS info (device loop3): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 178.919609][ T6463] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 178.959235][ T6463] BTRFS info (device loop0): enabling ssd optimizations [ 179.032322][ T6463] BTRFS info (device loop0): turning off barriers [ 179.038843][ T6463] BTRFS info (device loop0): use no compression [ 179.065948][ T6463] BTRFS info (device loop0): using free space tree [ 179.096530][ T6490] device syz_tun entered promiscuous mode [ 179.412366][ T6490] device syz_tun left promiscuous mode [ 179.589376][ T6511] loop3: detected capacity change from 0 to 1024 [ 179.598978][ T4258] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 179.736281][ T6513] loop1: detected capacity change from 0 to 2048 [ 179.738555][ T6511] hfsplus: xattr searching failed [ 179.824838][ T6491] loop2: detected capacity change from 0 to 32768 [ 179.839312][ T6513] loop1: p2 p3 p7 [ 179.929116][ T6511] hfsplus: xattr searching failed [ 179.944428][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 179.944462][ T27] audit: type=1800 audit(1738162705.062:44): pid=6491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.625" name="file1" dev="loop2" ino=65 res=0 errno=0 [ 180.047067][ T3622] loop1: p2 p3 p7 [ 180.605135][ T5545] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 180.769621][ T4300] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 180.799543][ T5545] usb 6-1: Using ep0 maxpacket: 16 [ 180.806981][ T5545] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.833581][ T5545] usb 6-1: config 0 interface 0 has no altsetting 0 [ 180.847313][ T5545] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 180.897811][ T5545] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.919334][ T5545] usb 6-1: config 0 descriptor?? [ 180.968374][ T4300] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 180.981941][ T4300] usb 1-1: config 0 has no interface number 0 [ 181.003456][ T4300] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 181.023128][ T4300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.039584][ T4300] usb 1-1: Product: syz [ 181.049902][ T4300] usb 1-1: Manufacturer: syz [ 181.059767][ T4300] usb 1-1: SerialNumber: syz [ 181.083379][ T4300] usb 1-1: config 0 descriptor?? [ 181.161925][ T6520] loop3: detected capacity change from 0 to 32768 [ 181.269448][ T27] audit: type=1800 audit(1738162706.382:45): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.640" name="file1" dev="loop3" ino=65 res=0 errno=0 [ 181.289751][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.342918][ T5545] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x0 [ 181.350846][ T4300] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 181.371202][ T5545] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x0 [ 181.378907][ T4300] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 181.399370][ T5545] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x0 [ 181.406189][ T5545] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x0 [ 181.414600][ T4300] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 181.424140][ T4300] usb 1-1: media controller created [ 181.440205][ T5545] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x0 [ 181.459763][ T5545] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x0 [ 181.466504][ T5545] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x0 [ 181.486282][ T4300] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.505139][ T5545] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x0 [ 181.522641][ T5545] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x0 [ 181.533055][ T5545] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x0 [ 181.540509][ T5545] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x3 [ 181.547385][ T5545] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x4 [ 181.557943][ T5545] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x6 [ 181.565955][ T5545] lua 0003:1E7D:2C2E.0010: unexpected long global item [ 181.575956][ T4300] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 181.593924][ T5545] lua 0003:1E7D:2C2E.0010: parse failed [ 181.606116][ T5545] lua: probe of 0003:1E7D:2C2E.0010 failed with error -22 [ 181.640937][ T5545] usb 6-1: USB disconnect, device number 2 [ 181.690587][ T4300] usb 1-1: USB disconnect, device number 8 [ 182.132309][ T6535] loop1: detected capacity change from 0 to 40427 [ 182.145076][ T6533] loop2: detected capacity change from 0 to 32768 [ 182.160593][ T6535] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 182.168363][ T6535] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 182.195840][ T6533] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 scanned by syz.2.634 (6533) [ 182.257643][ T6533] BTRFS info (device loop2): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 182.285904][ T6533] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 182.304580][ T6535] F2FS-fs (loop1): Found nat_bits in checkpoint [ 182.369452][ T6533] BTRFS info (device loop2): using free space tree [ 182.459334][ T6535] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 182.510237][ T6535] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 182.553302][ T6535] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 182.654429][ T6533] BTRFS info (device loop2): enabling ssd optimizations [ 182.696833][ T6566] device syz_tun entered promiscuous mode [ 182.716067][ T6537] loop3: detected capacity change from 0 to 40427 [ 182.726091][ T6566] device syz_tun left promiscuous mode [ 182.827083][ T6537] F2FS-fs (loop3): invalid crc value [ 182.875947][ T6535] syz.1.635: attempt to access beyond end of device [ 182.875947][ T6535] loop1: rw=2049, sector=77824, nr_sectors = 536 limit=40427 [ 182.913662][ T6537] F2FS-fs (loop3): Found nat_bits in checkpoint [ 182.942390][ T4256] BTRFS info (device loop2): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 182.959157][ T6571] syz.1.635: attempt to access beyond end of device [ 182.959157][ T6571] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 183.102696][ T6576] loop0: detected capacity change from 0 to 256 [ 183.109159][ T6537] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 183.187567][ T6576] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 183.255285][ T27] audit: type=1804 audit(1738162708.372:46): pid=6537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.636" name="/newroot/116/file2/bus" dev="loop3" ino=10 res=1 errno=0 [ 183.276625][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.375085][ T4254] syz-executor: attempt to access beyond end of device [ 183.375085][ T4254] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 183.607964][ T6584] loop2: detected capacity change from 0 to 256 [ 183.673049][ T6584] FAT-fs (loop2): Directory bread(block 64) failed [ 183.681534][ T6584] FAT-fs (loop2): Directory bread(block 65) failed [ 183.688116][ T6584] FAT-fs (loop2): Directory bread(block 66) failed [ 183.694923][ T6584] FAT-fs (loop2): Directory bread(block 67) failed [ 183.701856][ T6584] FAT-fs (loop2): Directory bread(block 68) failed [ 183.708579][ T6584] FAT-fs (loop2): Directory bread(block 69) failed [ 183.715325][ T6584] FAT-fs (loop2): Directory bread(block 70) failed [ 183.722041][ T6584] FAT-fs (loop2): Directory bread(block 71) failed [ 183.728651][ T6584] FAT-fs (loop2): Directory bread(block 72) failed [ 183.735328][ T6584] FAT-fs (loop2): Directory bread(block 73) failed [ 184.026438][ T51] kworker/u4:3: attempt to access beyond end of device [ 184.026438][ T51] loop2: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 184.063855][ T6588] loop3: detected capacity change from 0 to 256 [ 184.533021][ T6592] loop5: detected capacity change from 0 to 2048 [ 184.644775][ T6592] loop5: p2 p3 p7 [ 185.074977][ T6606] device syz_tun entered promiscuous mode [ 185.102024][ T6606] device syz_tun left promiscuous mode [ 185.115602][ T6598] loop0: detected capacity change from 0 to 32768 [ 185.204212][ T27] audit: type=1800 audit(1738162710.322:47): pid=6598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.648" name="file1" dev="loop0" ino=65 res=0 errno=0 [ 185.224509][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.481557][ T6612] loop2: detected capacity change from 0 to 512 [ 185.519838][ T6612] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 185.605414][ T6612] EXT4-fs (loop2): 1 truncate cleaned up [ 185.647842][ T6614] loop3: detected capacity change from 0 to 2048 [ 185.670811][ T6612] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 185.721198][ T6622] device pim6reg1 entered promiscuous mode [ 185.754500][ T6614] NILFS (loop3): invalid segment: Sequence number mismatch [ 185.802638][ T27] audit: type=1800 audit(1738162710.922:48): pid=6612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.655" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 185.825979][ T6612] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.655: corrupted in-inode xattr [ 185.827972][ T6614] NILFS (loop3): trying rollback from an earlier position [ 185.862062][ T6612] EXT4-fs (loop2): Remounting filesystem read-only [ 185.874839][ T6612] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1723: inode #15: comm syz.2.655: unable to update i_inline_off [ 185.888304][ T6624] loop1: detected capacity change from 0 to 512 [ 185.896511][ T6624] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 185.918451][ T6611] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.655: corrupted in-inode xattr [ 185.934284][ T6611] EXT4-fs (loop2): Remounting filesystem read-only [ 185.943395][ T6624] EXT4-fs (loop1): 1 truncate cleaned up [ 185.949113][ T6624] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 185.959032][ T6611] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.655: corrupted in-inode xattr [ 185.965558][ T6614] NILFS (loop3): recovery complete [ 185.988353][ T6629] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 186.026371][ T6611] EXT4-fs (loop2): Remounting filesystem read-only [ 186.046834][ T6611] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.655: corrupted in-inode xattr [ 186.070206][ T6611] EXT4-fs (loop2): Remounting filesystem read-only [ 186.077473][ T6611] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.655: corrupted in-inode xattr [ 186.125951][ T6611] EXT4-fs (loop2): Remounting filesystem read-only [ 186.135867][ T6611] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.655: corrupted in-inode xattr [ 186.182409][ T6611] EXT4-fs (loop2): Remounting filesystem read-only [ 186.211515][ T6611] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.655: corrupted in-inode xattr [ 186.225703][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 186.252570][ T6611] EXT4-fs (loop2): Remounting filesystem read-only [ 186.275471][ T6611] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.655: corrupted in-inode xattr [ 186.308059][ T6611] EXT4-fs (loop2): Remounting filesystem read-only [ 186.315041][ T6611] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.655: corrupted in-inode xattr [ 186.337586][ T6611] EXT4-fs (loop2): Remounting filesystem read-only [ 186.344693][ T6611] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.655: corrupted in-inode xattr [ 186.697319][ T6642] loop1: detected capacity change from 0 to 64 [ 186.866696][ T6644] loop2: detected capacity change from 0 to 2048 [ 186.963052][ T6644] loop2: p2 p3 p7 [ 187.147952][ T6634] loop5: detected capacity change from 0 to 32768 [ 187.175979][ T6634] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop5 scanned by syz.5.664 (6634) [ 187.221650][ T6634] BTRFS info (device loop5): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 187.256965][ T6634] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 187.278521][ T6634] BTRFS info (device loop5): using free space tree [ 187.559019][ T6634] BTRFS info (device loop5): enabling ssd optimizations [ 187.625954][ T6638] loop3: detected capacity change from 0 to 40427 [ 187.647498][ T6638] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 187.659897][ T5546] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 187.665939][ T6638] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 187.715563][ T6638] F2FS-fs (loop3): Found nat_bits in checkpoint [ 187.814553][ T5273] BTRFS info (device loop5): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 187.853703][ T6638] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 187.869614][ T5546] usb 1-1: Using ep0 maxpacket: 16 [ 187.880524][ T5546] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 187.898187][ T6675] loop1: detected capacity change from 0 to 512 [ 187.907642][ T5546] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.908943][ T6638] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 187.940201][ T5546] usb 1-1: Product: syz [ 187.944450][ T5546] usb 1-1: Manufacturer: syz [ 187.949229][ T6675] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 187.959574][ T6638] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 187.979127][ T5546] usb 1-1: SerialNumber: syz [ 188.023973][ T5546] usb 1-1: config 0 descriptor?? [ 188.064292][ T5546] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 188.077679][ T5546] usb 1-1: Detected FT232H [ 188.083345][ T6675] EXT4-fs (loop1): 1 truncate cleaned up [ 188.088997][ T6675] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 188.107556][ T6638] syz.3.665: attempt to access beyond end of device [ 188.107556][ T6638] loop3: rw=2049, sector=77824, nr_sectors = 536 limit=40427 [ 188.134724][ T27] audit: type=1800 audit(1738162713.252:49): pid=6675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.683" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 188.137210][ T6675] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.683: corrupted in-inode xattr [ 188.173564][ T6675] EXT4-fs (loop1): Remounting filesystem read-only [ 188.186987][ T6638] syz.3.665: attempt to access beyond end of device [ 188.186987][ T6638] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 188.204624][ T6675] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1723: inode #15: comm syz.1.683: unable to update i_inline_off [ 188.228945][ T6674] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.683: corrupted in-inode xattr [ 188.237364][ T5546] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 188.259653][ T6674] EXT4-fs (loop1): Remounting filesystem read-only [ 188.270279][ T6674] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.683: corrupted in-inode xattr [ 188.308355][ T6674] EXT4-fs (loop1): Remounting filesystem read-only [ 188.328401][ T6674] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.683: corrupted in-inode xattr [ 188.358831][ T6674] EXT4-fs (loop1): Remounting filesystem read-only [ 188.386336][ T6674] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.683: corrupted in-inode xattr [ 188.427179][ T6674] EXT4-fs (loop1): Remounting filesystem read-only [ 188.480433][ T6674] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.683: corrupted in-inode xattr [ 188.506975][ T6682] loop2: detected capacity change from 0 to 512 [ 188.519639][ T6674] EXT4-fs (loop1): Remounting filesystem read-only [ 188.526753][ T6674] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.683: corrupted in-inode xattr [ 188.571573][ T6682] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 188.579923][ T6674] EXT4-fs (loop1): Remounting filesystem read-only [ 188.586007][ T6682] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.587228][ T6674] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.683: corrupted in-inode xattr [ 188.624925][ T6674] EXT4-fs (loop1): Remounting filesystem read-only [ 188.632240][ T6674] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.683: corrupted in-inode xattr [ 188.645067][ T6674] EXT4-fs (loop1): Remounting filesystem read-only [ 188.655597][ T6674] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.683: corrupted in-inode xattr [ 188.665087][ T6682] EXT4-fs error (device loop2): ext4_get_first_dir_block:3583: inode #12: comm syz.2.675: Directory hole found for htree leaf block 0 [ 188.688677][ T5546] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 188.755752][ T6682] EXT4-fs (loop2): Remounting filesystem read-only [ 188.861773][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 188.939628][ T5545] usb 1-1: USB disconnect, device number 9 [ 188.969263][ T5545] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 189.000210][ T5545] ftdi_sio 1-1:0.0: device disconnected [ 189.050762][ T6688] loop2: detected capacity change from 0 to 2048 [ 189.100357][ T6688] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 189.114875][ T6688] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.283566][ T6696] loop3: detected capacity change from 0 to 512 [ 189.291432][ T6696] EXT4-fs: Ignoring removed orlov option [ 189.324295][ T6696] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.677: casefold flag without casefold feature [ 189.332535][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.5.679'. [ 189.449610][ T6696] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.677: couldn't read orphan inode 15 (err -117) [ 189.529676][ T6696] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 189.564815][ T6703] loop5: detected capacity change from 0 to 2048 [ 189.598024][ T6703] NILFS (loop5): invalid segment: Sequence number mismatch [ 189.632930][ T6703] NILFS (loop5): trying rollback from an earlier position [ 189.675723][ T6703] NILFS (loop5): recovery complete [ 189.716777][ T6708] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.874275][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 190.102377][ T6688] fs-verity (loop2, inode 13): Error -4 building Merkle tree [ 190.387433][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 190.693948][ T6728] loop2: detected capacity change from 0 to 2048 [ 190.754396][ T6728] loop2: p2 p3 p7 [ 191.160394][ T6738] loop5: detected capacity change from 0 to 256 [ 191.229183][ T6723] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 191.246084][ T6723] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 191.258979][ T6738] FAT-fs (loop5): Directory bread(block 64) failed [ 191.266170][ T6723] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 191.284784][ T6740] loop1: detected capacity change from 0 to 8 [ 191.300180][ T6723] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 191.308694][ T6740] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 191.314363][ T6723] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 191.321640][ T6738] FAT-fs (loop5): Directory bread(block 65) failed [ 191.328323][ T6738] FAT-fs (loop5): Directory bread(block 66) failed [ 191.354706][ T6723] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 191.363356][ T6738] FAT-fs (loop5): Directory bread(block 67) failed [ 191.375344][ T6723] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 191.382807][ T6738] FAT-fs (loop5): Directory bread(block 68) failed [ 191.389614][ T6723] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 191.410355][ T6723] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 191.425865][ T6738] FAT-fs (loop5): Directory bread(block 69) failed [ 191.432706][ T6723] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 191.438847][ T6738] FAT-fs (loop5): Directory bread(block 70) failed [ 191.454927][ T6723] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 191.462841][ T6738] FAT-fs (loop5): Directory bread(block 71) failed [ 191.469544][ T6723] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 191.476869][ T6738] FAT-fs (loop5): Directory bread(block 72) failed [ 191.509926][ T6738] FAT-fs (loop5): Directory bread(block 73) failed [ 192.031378][ T6756] loop1: detected capacity change from 0 to 2048 [ 192.119240][ T6756] NILFS (loop1): invalid segment: Sequence number mismatch [ 192.139494][ T6756] NILFS (loop1): trying rollback from an earlier position [ 192.190138][ T6765] loop2: detected capacity change from 0 to 16 [ 192.206384][ T6756] NILFS (loop1): recovery complete [ 192.227781][ T6765] erofs: (device loop2): mounted with root inode @ nid 36. [ 192.231647][ T6766] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.266386][ T6768] loop0: detected capacity change from 0 to 256 [ 192.305909][ T6768] FAT-fs (loop0): Directory bread(block 64) failed [ 192.327456][ T6768] FAT-fs (loop0): Directory bread(block 65) failed [ 192.341310][ T6768] FAT-fs (loop0): Directory bread(block 66) failed [ 192.364000][ T6768] FAT-fs (loop0): Directory bread(block 67) failed [ 192.374644][ T6768] FAT-fs (loop0): Directory bread(block 68) failed [ 192.381927][ T6768] FAT-fs (loop0): Directory bread(block 69) failed [ 192.401123][ T6768] FAT-fs (loop0): Directory bread(block 70) failed [ 192.407855][ T6768] FAT-fs (loop0): Directory bread(block 71) failed [ 192.415157][ T6768] FAT-fs (loop0): Directory bread(block 72) failed [ 192.422272][ T6768] FAT-fs (loop0): Directory bread(block 73) failed [ 192.519539][ T5545] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 192.529556][ T4268] Bluetooth: hci1: command 0x0c1a tx timeout [ 192.587528][ T33] kworker/u4:2: attempt to access beyond end of device [ 192.587528][ T33] loop0: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 192.696394][ T6772] loop2: detected capacity change from 0 to 512 [ 192.729537][ T5545] usb 4-1: Using ep0 maxpacket: 8 [ 192.737011][ T5545] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 192.745956][ T6772] EXT4-fs: Ignoring removed orlov option [ 192.754470][ T5545] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 192.785249][ T5545] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 192.808395][ T6772] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.722: casefold flag without casefold feature [ 192.860671][ T6776] loop0: detected capacity change from 0 to 512 [ 192.864815][ T5545] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 192.879922][ T6776] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 192.895306][ T6772] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.722: couldn't read orphan inode 15 (err -117) [ 192.923756][ T5545] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.926395][ T6776] EXT4-fs (loop0): 1 truncate cleaned up [ 192.955600][ T6776] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 192.959939][ T5545] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 192.964922][ T6772] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 193.000094][ T5545] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.218148][ T5545] usb 4-1: GET_CAPABILITIES returned 0 [ 193.227092][ T5545] usbtmc 4-1:16.0: can't read capabilities [ 193.246525][ T6782] loop1: detected capacity change from 0 to 2048 [ 193.270836][ T6782] NILFS (loop1): invalid segment: Sequence number mismatch [ 193.278182][ T6782] NILFS (loop1): trying rollback from an earlier position [ 193.302837][ T6782] NILFS (loop1): recovery complete [ 193.329643][ T4268] Bluetooth: hci2: command 0x0c1a tx timeout [ 193.356549][ T6784] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 193.382280][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 193.419301][ T4268] Bluetooth: hci3: command 0x0c1a tx timeout [ 193.438393][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 193.459280][ T6763] loop3: detected capacity change from 0 to 2048 [ 193.490066][ T4268] Bluetooth: hci4: command 0x0c1a tx timeout [ 193.519666][ T6763] NILFS (loop3): error -2 reading inode: ino=2 [ 193.526649][ T6763] NILFS (loop3): error -2 getting root inode [ 193.601443][ T4375] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 193.612248][ T5546] usb 4-1: USB disconnect, device number 10 [ 193.767648][ T6791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.716'. [ 193.974488][ T6793] loop0: detected capacity change from 0 to 2048 [ 194.047602][ T6793] loop0: p2 p3 p7 [ 194.184938][ T6797] loop5: detected capacity change from 0 to 128 [ 194.256713][ T6797] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 194.293306][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.299711][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.344070][ T6797] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 194.396111][ T6802] loop2: detected capacity change from 0 to 4096 [ 194.422042][ T6802] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 194.492257][ T6802] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 194.559333][ T6802] ntfs3: loop2: ino=1e, "file1" attr_set_size [ 194.599326][ T5273] EXT4-fs (loop5): unmounting filesystem. [ 194.609719][ T4268] Bluetooth: hci1: command 0x0406 tx timeout [ 194.942319][ T5545] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 195.167128][ T5545] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 195.186640][ T5545] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.208705][ T5545] usb 4-1: config 0 descriptor?? [ 195.220163][ T5545] cp210x 4-1:0.0: cp210x converter detected [ 195.330112][ T6820] loop1: detected capacity change from 0 to 8192 [ 195.369334][ T6820] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 195.407577][ T6820] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 195.417553][ T4268] Bluetooth: hci2: command 0x0406 tx timeout [ 195.431517][ T6820] REISERFS (device loop1): using ordered data mode [ 195.438648][ T6820] reiserfs: using flush barriers [ 195.468931][ T6827] loop0: detected capacity change from 0 to 2048 [ 195.470657][ T6820] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 195.499632][ T4268] Bluetooth: hci3: command 0x0406 tx timeout [ 195.516897][ T6827] NILFS (loop0): invalid segment: Sequence number mismatch [ 195.517221][ T6820] REISERFS (device loop1): checking transaction log (loop1) [ 195.534943][ T6827] NILFS (loop0): trying rollback from an earlier position [ 195.569761][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 195.592607][ T6827] NILFS (loop0): recovery complete [ 195.631522][ T5545] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 195.638973][ T6832] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 195.738115][ T6820] REISERFS (device loop1): Using r5 hash to sort names [ 195.747514][ T6820] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 195.764024][ T6820] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 195.828207][ T6836] loop5: detected capacity change from 0 to 512 [ 195.853983][ T5545] usb 4-1: cp210x converter now attached to ttyUSB0 [ 195.877430][ T6820] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 195.901105][ T6836] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 195.938778][ T6820] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 196.054721][ T5545] usb 4-1: USB disconnect, device number 11 [ 196.077382][ T5545] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 196.093658][ T5545] cp210x 4-1:0.0: device disconnected [ 196.198027][ T5273] EXT4-fs (loop5): unmounting filesystem. [ 196.414708][ T6848] loop1: detected capacity change from 0 to 128 [ 196.425422][ T6844] loop5: detected capacity change from 0 to 2048 [ 196.447991][ T6844] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 196.491152][ T6844] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.749593][ T4758] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 196.949873][ T4758] usb 2-1: Using ep0 maxpacket: 16 [ 196.971204][ T4758] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.002461][ T4758] usb 2-1: config 0 interface 0 has no altsetting 0 [ 197.016792][ T4758] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 197.026938][ T4758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.043709][ T4758] usb 2-1: config 0 descriptor?? [ 197.349778][ T6846] loop2: detected capacity change from 0 to 40427 [ 197.358745][ T6868] loop0: detected capacity change from 0 to 1024 [ 197.393895][ T6846] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 197.421137][ T6868] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.444139][ T6846] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 197.470557][ T4758] hid (null): bogus close delimiter [ 197.478894][ T6846] F2FS-fs (loop2): invalid crc value [ 197.501376][ T4758] hid (null): unknown global tag 0x1e [ 197.522333][ T4758] cougar 0003:060B:500A.0011: unknown main item tag 0x0 [ 197.545704][ T4758] cougar 0003:060B:500A.0011: unknown main item tag 0x0 [ 197.555303][ T6846] F2FS-fs (loop2): Found nat_bits in checkpoint [ 197.557792][ T4758] cougar 0003:060B:500A.0011: unexpected long global item [ 197.576371][ T4758] cougar 0003:060B:500A.0011: parse failed [ 197.576753][ T6870] loop5: detected capacity change from 0 to 2048 [ 197.582880][ T4758] cougar: probe of 0003:060B:500A.0011 failed with error -22 [ 197.673711][ T6870] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.675562][ T4758] usb 2-1: USB disconnect, device number 8 [ 197.725766][ T6846] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 197.759463][ T6846] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 197.863367][ T6876] loop0: detected capacity change from 0 to 2048 [ 197.888304][ T6860] loop3: detected capacity change from 0 to 32768 [ 197.909732][ T4256] syz-executor: attempt to access beyond end of device [ 197.909732][ T4256] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 197.924085][ T6876] NILFS (loop0): invalid segment: Sequence number mismatch [ 197.984463][ T6860] XFS (loop3): Mounting V5 Filesystem [ 198.003870][ T6876] NILFS (loop0): trying rollback from an earlier position [ 198.026578][ T6876] NILFS (loop0): recovery complete [ 198.129634][ T6889] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.183870][ T6860] XFS (loop3): Ending clean mount [ 198.353467][ T4296] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x4 [ 198.401753][ T4296] XFS (loop3): Unmount and run xfs_repair [ 198.425074][ T4296] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 198.442928][ T4296] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 198.463319][ T4296] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 198.482344][ T4296] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 198.507282][ T4296] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 198.539321][ T4296] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 198.589464][ T4296] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 198.617733][ T4296] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 198.647177][ T4296] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 198.666658][ T6860] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x4 len 4 error 74 [ 198.715611][ T6860] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x6a5/0xb80 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 198.785074][ T6860] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 198.809604][ T4758] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 198.904007][ T4254] XFS (loop3): Unmounting Filesystem [ 199.001832][ T4758] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.019566][ T4758] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.049583][ T4758] usb 6-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 199.068906][ T4758] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.094218][ T4766] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 199.106536][ T4758] usb 6-1: config 0 descriptor?? [ 199.306616][ T4766] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.327627][ T4766] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.350556][ T4766] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 199.365701][ T4766] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.436133][ T4766] usb 3-1: config 0 descriptor?? [ 199.571829][ T4758] logitech-hidpp-device 0003:046D:C086.0012: item fetching failed at offset 4/5 [ 199.600118][ T4758] logitech-hidpp-device 0003:046D:C086.0012: hidpp_probe:parse failed [ 199.625594][ T4758] logitech-hidpp-device: probe of 0003:046D:C086.0012 failed with error -22 [ 199.650713][ T6918] netlink: 'syz.0.771': attribute type 3 has an invalid length. [ 199.778224][ T4296] usb 6-1: USB disconnect, device number 3 [ 199.864950][ T4766] hid-led 0003:0FC5:B080.0013: unknown main item tag 0x0 [ 199.887056][ T4766] hid-led 0003:0FC5:B080.0013: unknown main item tag 0x0 [ 199.887087][ T4766] hid-led 0003:0FC5:B080.0013: unknown main item tag 0x0 [ 200.263207][ T4766] hid-led: probe of 0003:0FC5:B080.0013 failed with error -71 [ 200.309645][ T4766] usb 3-1: USB disconnect, device number 9 [ 200.397279][ T6940] loop0: detected capacity change from 0 to 512 [ 200.443419][ T6940] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 200.474789][ T6940] EXT4-fs (loop0): orphan cleanup on readonly fs [ 200.505895][ T6947] loop5: detected capacity change from 0 to 2048 [ 200.535664][ T6940] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 200.567808][ T6940] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 200.568342][ T6947] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 200.578170][ T6940] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.782: Failed to acquire dquot type 1 [ 200.610791][ T6940] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.782: bg 0: block 40: padding at end of block bitmap is not set [ 200.658813][ T6940] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 200.695505][ T6940] EXT4-fs (loop0): 1 truncate cleaned up [ 200.707192][ T6940] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 200.747359][ T6955] loop1: detected capacity change from 0 to 2048 [ 200.759240][ T6955] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.913281][ T5273] EXT4-fs (loop5): unmounting filesystem. [ 201.022881][ T6957] loop3: detected capacity change from 0 to 4096 [ 201.051219][ T6957] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 201.088002][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 201.174644][ T27] audit: type=1326 audit(1738162726.292:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.5.788" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd87698cda9 code=0x0 [ 201.186961][ T6959] loop2: detected capacity change from 0 to 4096 [ 201.214171][ T6957] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 201.419498][ T6959] ntfs3: loop2: ino=21, "file1" attr_insert_range [ 201.489673][ T4268] Bluetooth: hci3: command 0x0406 tx timeout [ 201.495780][ T4268] Bluetooth: hci2: command 0x0406 tx timeout [ 201.500059][ T4264] Bluetooth: hci1: command 0x0406 tx timeout [ 201.508240][ T6972] vivid-003: disconnect [ 201.526258][ T6967] vivid-003: reconnect [ 201.791619][ T6978] netlink: 'syz.3.795': attribute type 8 has an invalid length. [ 201.833996][ T6978] netlink: 'syz.3.795': attribute type 7 has an invalid length. [ 201.853265][ T6978] netlink: 126196 bytes leftover after parsing attributes in process `syz.3.795'. [ 201.920317][ T4305] kernel read not supported for file /dsp1 (pid: 4305 comm: kworker/1:8) [ 202.156765][ T6993] loop5: detected capacity change from 0 to 512 [ 202.216285][ T6996] loop1: detected capacity change from 0 to 256 [ 202.241373][ T6993] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 202.260894][ T6993] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.365803][ T6996] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 202.447661][ T6993] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2925: inode #15: comm syz.5.802: corrupted xattr block 85 [ 202.494020][ T6993] EXT4-fs warning (device loop5): ext4_evict_inode:299: xattr delete (err -117) [ 202.562765][ T7007] loop3: detected capacity change from 0 to 512 [ 202.595367][ T7007] EXT4-fs (loop3): 1 truncate cleaned up [ 202.716819][ T7007] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 202.742912][ T5273] EXT4-fs (loop5): unmounting filesystem. [ 202.845815][ T7007] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz.3.818: Directory hole found for htree leaf block 0 [ 202.926595][ T7007] EXT4-fs (loop3): Remounting filesystem read-only [ 202.970411][ T7022] loop0: detected capacity change from 0 to 1024 [ 202.998528][ T7022] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c118, mo2=0002] [ 203.059621][ T7022] System zones: 0-1, 3-12 [ 203.065244][ T7022] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 203.166384][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 203.380544][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 203.599160][ T7039] loop5: detected capacity change from 0 to 2048 [ 203.657858][ T7039] NILFS (loop5): invalid segment: Sequence number mismatch [ 203.682965][ T7039] NILFS (loop5): trying rollback from an earlier position [ 203.783994][ T7039] NILFS (loop5): recovery complete [ 203.809853][ T7046] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.262245][ T4766] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 204.459517][ T4766] usb 4-1: Using ep0 maxpacket: 8 [ 204.466497][ T4766] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 204.509470][ T4766] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 204.549483][ T4766] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 204.575122][ T4766] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.635319][ T4766] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 204.663662][ T4766] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.770617][ T5546] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 204.898091][ T4766] usb 4-1: GET_CAPABILITIES returned 0 [ 204.903780][ T4766] usbtmc 4-1:16.0: can't read capabilities [ 204.995819][ T5546] usb 3-1: Using ep0 maxpacket: 32 [ 205.003293][ T5546] usb 3-1: config 0 has no interfaces? [ 205.029858][ T5546] usb 3-1: New USB device found, idVendor=ff7a, idProduct=007f, bcdDevice=a6.00 [ 205.030998][ T7048] loop0: detected capacity change from 0 to 40427 [ 205.069927][ T5546] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.078145][ T5546] usb 3-1: Product: syz [ 205.088608][ T5546] usb 3-1: Manufacturer: syz [ 205.094071][ T5546] usb 3-1: SerialNumber: syz [ 205.110985][ T5546] usb 3-1: config 0 descriptor?? [ 205.118377][ T7048] F2FS-fs (loop0): Found nat_bits in checkpoint [ 205.289557][ T7048] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 205.342367][ T5546] usb 3-1: USB disconnect, device number 10 [ 205.450403][ T4258] syz-executor: attempt to access beyond end of device [ 205.450403][ T4258] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 205.473747][ T7072] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -71 [ 205.666480][ T7076] netlink: 24 bytes leftover after parsing attributes in process `syz.5.833'. [ 206.098725][ T7085] loop5: detected capacity change from 0 to 64 [ 206.137450][ T7085] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 206.229756][ T7085] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 206.290542][ T7087] mmap: syz.0.832 (7087) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 206.357071][ T7089] loop2: detected capacity change from 0 to 2048 [ 206.411756][ T7089] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 206.433393][ T7089] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 206.453996][ T7089] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 13 with max blocks 1 with error 28 [ 206.474977][ T7089] EXT4-fs (loop2): This should not happen!! Data will be lost [ 206.474977][ T7089] [ 206.502569][ T7089] EXT4-fs (loop2): Total free blocks count 0 [ 206.597344][ T7095] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 206.600010][ T7089] EXT4-fs (loop2): Free/Dirty block details [ 206.649316][ T7095] EXT4-fs (loop2): This should not happen!! Data will be lost [ 206.649316][ T7095] [ 206.650661][ T7089] EXT4-fs (loop2): free_blocks=2415919104 [ 206.707481][ T7089] EXT4-fs (loop2): dirty_blocks=16 [ 206.723043][ T7089] EXT4-fs (loop2): Block reservation details [ 206.773107][ T7099] loop5: detected capacity change from 0 to 2048 [ 206.803046][ T7099] NILFS (loop5): invalid segment: Sequence number mismatch [ 206.829247][ T7099] NILFS (loop5): trying rollback from an earlier position [ 206.859646][ T7099] NILFS (loop5): recovery complete [ 206.890896][ T7100] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.891573][ T7074] loop1: detected capacity change from 0 to 65536 [ 207.025137][ T7104] loop2: detected capacity change from 0 to 128 [ 207.043905][ T4305] usb 4-1: USB disconnect, device number 12 [ 207.112828][ T7074] XFS (loop1): Mounting V5 Filesystem [ 207.256801][ T7074] XFS (loop1): Ending clean mount [ 207.311793][ T7097] loop0: detected capacity change from 0 to 32768 [ 207.331060][ T7074] XFS (loop1): Quotacheck needed: Please wait. [ 207.379491][ T7118] binder: 7116:7118 ioctl c018620b 20000400 returned -14 [ 207.415431][ T7074] XFS (loop1): Quotacheck: Done. [ 207.455571][ T7097] XFS (loop0): Mounting V5 Filesystem [ 207.552717][ T7097] XFS (loop0): Ending clean mount [ 207.594411][ T7097] XFS (loop0): Quotacheck needed: Please wait. [ 207.603238][ T4250] XFS (loop1): Unmounting Filesystem [ 207.671795][ T7097] XFS (loop0): Quotacheck: Done. [ 207.737012][ T7126] loop3: detected capacity change from 0 to 128 [ 207.853482][ T7126] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 207.938222][ T7126] ext4 filesystem being mounted at /150/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 208.094004][ T4258] XFS (loop0): Unmounting Filesystem [ 208.206952][ T7134] loop1: detected capacity change from 0 to 128 [ 208.280747][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 208.383527][ T7136] loop5: detected capacity change from 0 to 128 [ 208.501751][ T7136] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 208.544201][ T7136] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 208.760446][ T5273] EXT4-fs (loop5): unmounting filesystem. [ 208.905001][ T7151] loop5: detected capacity change from 0 to 1024 [ 208.918689][ T7145] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.940722][ T7151] EXT4-fs: Ignoring removed nobh option [ 208.946327][ T7151] EXT4-fs: Ignoring removed bh option [ 208.965911][ T7151] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 209.029860][ T7151] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 209.106203][ T7145] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.152935][ T7157] loop0: detected capacity change from 0 to 1024 [ 209.172796][ T7157] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.186742][ T7151] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3841: comm syz.5.857: Allocating blocks 497-513 which overlap fs metadata [ 209.209617][ T7157] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 209.246679][ T7159] loop2: detected capacity change from 0 to 256 [ 209.268253][ T7157] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 209.289286][ T4266] Bluetooth: hci4: link tx timeout [ 209.295423][ T4266] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 209.328816][ T7150] EXT4-fs (loop5): pa ffff88805ab6d8c0: logic 128, phys. 273, len 15 [ 209.337771][ T7150] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 209.390804][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 209.444750][ T5273] EXT4-fs (loop5): unmounting filesystem. [ 209.555271][ T7145] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.718262][ T7166] loop3: detected capacity change from 0 to 2048 [ 209.774907][ T7170] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 209.782301][ T7166] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 209.802969][ T7145] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.831417][ T4376] udevd[4376]: incorrect nilfs2 checksum on /dev/loop3 [ 209.856189][ T7171] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 209.950556][ T7171] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 209.979207][ T7174] loop0: detected capacity change from 0 to 2048 [ 209.986412][ T7171] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 210.017830][ T7174] NILFS (loop0): invalid segment: Sequence number mismatch [ 210.033592][ T7171] Remounting filesystem read-only [ 210.050096][ T7174] NILFS (loop0): trying rollback from an earlier position [ 210.092281][ T7145] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.105814][ T7174] NILFS (loop0): recovery complete [ 210.147954][ T7145] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.153075][ T7179] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.185478][ T7145] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.194350][ T4254] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 210.209497][ T4254] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 210.216226][ T4254] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 210.246670][ T4254] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 210.261455][ T4254] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 210.267551][ T7145] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.272551][ T4254] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 210.316708][ T4254] NILFS (loop3): discard dirty page: offset=0, ino=15 [ 210.359453][ T4254] NILFS (loop3): discard dirty block: blocknr=22, size=1024 [ 210.366897][ T4254] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 210.398671][ T4254] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 210.440897][ T4254] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 210.469900][ T4254] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 210.476652][ T4254] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 210.511216][ T4254] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 210.530245][ T4254] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 210.547766][ T4254] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 210.571254][ T4254] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 210.577998][ T4254] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 210.631976][ T4254] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 210.654045][ T4254] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 210.670165][ T4254] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 210.679898][ T4254] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 210.686619][ T4254] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 210.703516][ T4254] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 210.743832][ T4254] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 210.783339][ T7190] loop1: detected capacity change from 0 to 2048 [ 210.786534][ T4254] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 210.836941][ T7191] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.851728][ T4254] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 210.894208][ T4254] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 210.918219][ T4254] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 210.936175][ T4254] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 210.949331][ T4254] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 210.959868][ T4254] NILFS (loop3): discard dirty page: offset=229376, ino=3 [ 210.968815][ T4254] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 210.978614][ T4254] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 211.032642][ T4254] NILFS (loop3): discard dirty block: blocknr=50, size=1024 [ 211.047982][ T4254] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 211.285839][ T7203] loop5: detected capacity change from 0 to 16 [ 211.310381][ T7201] loop0: detected capacity change from 0 to 2048 [ 211.329725][ T4266] Bluetooth: hci4: command 0x0406 tx timeout [ 211.335622][ T7203] erofs: (device loop5): mounted with root inode @ nid 36. [ 211.338475][ T7201] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 211.420188][ T7201] UDF-fs: Scanning with blocksize 512 failed [ 211.483290][ T7201] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.809693][ T4268] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.886944][ T7221] "syz.5.885" (7221) uses obsolete ecb(arc4) skcipher [ 212.059693][ T4296] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 212.253289][ T4296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.291892][ T4296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.318727][ T4296] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 212.366339][ T4296] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 212.382372][ T4296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.423738][ T4296] usb 1-1: config 0 descriptor?? [ 212.478253][ T7240] loop1: detected capacity change from 0 to 2048 [ 212.494787][ T7240] NILFS (loop1): invalid segment: Sequence number mismatch [ 212.507139][ T7240] NILFS (loop1): trying rollback from an earlier position [ 212.557754][ T7240] NILFS (loop1): recovery complete [ 212.582384][ T7244] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.594868][ T7243] loop3: detected capacity change from 0 to 2048 [ 212.624540][ T7243] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.852578][ T4296] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 212.877842][ T4296] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 213.017595][ T7250] loop5: detected capacity change from 0 to 512 [ 213.114868][ T7250] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 213.132642][ T7257] loop2: detected capacity change from 0 to 128 [ 213.149288][ T7250] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.162870][ T5546] usb 1-1: USB disconnect, device number 10 [ 213.215020][ T7257] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 213.290937][ T7257] ext4 filesystem being mounted at /196/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 213.359917][ T5273] EXT4-fs (loop5): unmounting filesystem. [ 213.538284][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 214.286054][ T7266] loop5: detected capacity change from 0 to 32768 [ 214.561474][ T7266] XFS (loop5): Mounting V5 Filesystem [ 214.750385][ T7266] XFS (loop5): Ending clean mount [ 214.767638][ T7266] XFS (loop5): Quotacheck needed: Please wait. [ 214.857969][ T7266] XFS (loop5): Quotacheck: Done. [ 214.942610][ T7287] loop1: detected capacity change from 0 to 40427 [ 214.983710][ T7287] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 215.001547][ T7287] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 215.032893][ T7287] F2FS-fs (loop1): invalid crc value [ 215.066098][ T7287] F2FS-fs (loop1): Found nat_bits in checkpoint [ 215.141857][ T5273] XFS (loop5): Unmounting Filesystem [ 215.199486][ T7287] F2FS-fs (loop1): Start checkpoint disabled! [ 215.258887][ T7319] loop2: detected capacity change from 0 to 2048 [ 215.275869][ T7287] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 215.290025][ T7287] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 215.315355][ T7319] NILFS (loop2): invalid segment: Sequence number mismatch [ 215.349133][ T7319] NILFS (loop2): trying rollback from an earlier position [ 215.394088][ T7319] NILFS (loop2): recovery complete [ 215.422712][ T7321] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 215.476754][ T7287] syz.1.916: attempt to access beyond end of device [ 215.476754][ T7287] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 215.802341][ T11] kworker/u4:1: attempt to access beyond end of device [ 215.802341][ T11] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 216.238723][ T7337] loop5: detected capacity change from 0 to 1024 [ 216.456873][ T9] hfsplus: b-tree write err: -5, ino 3 [ 216.494268][ T5273] hfsplus: node 4:3 still has 1 user(s)! [ 217.167269][ T7340] loop0: detected capacity change from 0 to 32768 [ 217.220096][ T7340] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.936 (7340) [ 217.309471][ T7340] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 217.345625][ T7340] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 217.385332][ T7340] BTRFS info (device loop0): enabling auto defrag [ 217.448494][ T7340] BTRFS info (device loop0): doing ref verification [ 217.459950][ T7340] BTRFS info (device loop0): max_inline at 0 [ 217.489661][ T7340] BTRFS info (device loop0): force clearing of disk cache [ 217.509544][ T7340] BTRFS info (device loop0): turning on sync discard [ 217.549763][ T7340] BTRFS info (device loop0): disabling free space tree [ 217.672258][ T7381] loop2: detected capacity change from 0 to 1024 [ 217.680117][ T7381] EXT4-fs: Ignoring removed oldalloc option [ 217.730595][ T7381] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 217.959686][ T7340] BTRFS info (device loop0): enabling ssd optimizations [ 217.981817][ T7340] BTRFS info (device loop0): rebuilding free space tree [ 218.040442][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 218.052898][ T7340] BTRFS info (device loop0): disabling free space tree [ 218.144200][ T7340] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 218.209550][ T7340] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 218.245473][ T7410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.966'. [ 218.498307][ T4258] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 218.711886][ T7397] loop3: detected capacity change from 0 to 32768 [ 219.029698][ T4763] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 219.201928][ T7424] loop5: detected capacity change from 0 to 1024 [ 219.231202][ T4763] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.263265][ T4763] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.288670][ T4763] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 219.305545][ T7424] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 219.308196][ T4763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.332971][ T7417] loop1: detected capacity change from 0 to 32768 [ 219.341371][ T4763] usb 3-1: config 0 descriptor?? [ 219.418166][ T27] audit: type=1800 audit(1738162744.532:51): pid=7424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.973" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 219.483232][ T7417] XFS (loop1): Mounting V5 Filesystem [ 219.502634][ T7436] loop3: detected capacity change from 0 to 256 [ 219.636733][ T5273] EXT4-fs (loop5): unmounting filesystem. [ 219.766490][ T4763] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 219.799468][ T4763] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 219.806808][ T7417] XFS (loop1): Ending clean mount [ 219.815184][ T7417] XFS (loop1): Quotacheck needed: Please wait. [ 219.820530][ T7443] loop0: detected capacity change from 0 to 2048 [ 219.839590][ T4763] arvo 0003:1E7D:30D4.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 219.884258][ T7443] NILFS (loop0): invalid segment: Sequence number mismatch [ 219.897920][ T7417] XFS (loop1): Quotacheck: Done. [ 219.911111][ T7443] NILFS (loop0): trying rollback from an earlier position [ 219.988722][ T7443] NILFS (loop0): recovery complete [ 220.014167][ T7450] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 220.077706][ T4250] XFS (loop1): Unmounting Filesystem [ 220.194262][ T5546] usb 3-1: USB disconnect, device number 11 [ 220.535128][ T4305] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 220.729455][ T4305] usb 6-1: Using ep0 maxpacket: 8 [ 220.736613][ T4305] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.789556][ T4305] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 220.831124][ T4305] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 220.859503][ T4305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.870123][ T7462] loop3: detected capacity change from 0 to 512 [ 220.898119][ T4305] usb 6-1: Product: syz [ 220.903579][ T4305] usb 6-1: Manufacturer: syz [ 220.921367][ T4305] usb 6-1: SerialNumber: syz [ 220.927111][ T7462] EXT4-fs (loop3): Test dummy encryption mode enabled [ 220.957383][ T7462] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 221.002139][ T7462] EXT4-fs (loop3): 1 truncate cleaned up [ 221.007882][ T7462] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 221.162240][ T7457] loop1: detected capacity change from 0 to 32768 [ 221.187039][ T7457] XFS: ikeep mount option is deprecated. [ 221.222683][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 221.251449][ T7457] XFS (loop1): Mounting V5 Filesystem [ 221.334664][ T7457] XFS (loop1): Ending clean mount [ 221.347318][ T7457] XFS (loop1): Quotacheck needed: Please wait. [ 221.382168][ T7463] loop0: detected capacity change from 0 to 32768 [ 221.401223][ T7457] XFS (loop1): Quotacheck: Done. [ 221.487076][ T4250] XFS (loop1): Unmounting Filesystem [ 221.488064][ T7463] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 221.597665][ T4258] ocfs2: Unmounting device (7,0) on (node local) [ 221.821120][ T7481] ubi: mtd0 is already attached to ubi0 [ 221.958726][ T4305] cdc_ncm 6-1:1.0: bind() failure [ 221.977273][ T4305] usbtest: probe of 6-1:1.1 failed with error -71 [ 222.010920][ T4305] usb 6-1: USB disconnect, device number 4 [ 222.109073][ T7489] loop1: detected capacity change from 0 to 128 [ 222.153514][ T7489] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 222.236222][ T7489] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.303403][ T7498] loop0: detected capacity change from 0 to 2048 [ 222.328228][ T7498] NILFS (loop0): invalid segment: Sequence number mismatch [ 222.352505][ T7489] EXT4-fs (loop1): shut down requested (0) [ 222.356121][ T7498] NILFS (loop0): trying rollback from an earlier position [ 222.409689][ T7498] NILFS (loop0): recovery complete [ 222.426757][ T7502] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.570103][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 223.080249][ T7500] loop3: detected capacity change from 0 to 32768 [ 223.150357][ T7500] XFS (loop3): Mounting V5 Filesystem [ 223.288044][ T7500] XFS (loop3): Ending clean mount [ 223.327721][ T7500] XFS (loop3): Quotacheck needed: Please wait. [ 223.402189][ T7500] XFS (loop3): Quotacheck: Done. [ 223.485621][ T4254] XFS (loop3): Unmounting Filesystem [ 224.240785][ T7544] vxcan0: tx drop: invalid da for name 0x00000000000000f5 [ 224.324796][ T7526] loop2: detected capacity change from 0 to 32768 [ 224.341258][ T7526] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.993 (7526) [ 224.400201][ T7526] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 224.430815][ T7526] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 224.463342][ T7526] BTRFS info (device loop2): using free space tree [ 224.799286][ T7526] BTRFS info (device loop2): enabling ssd optimizations [ 224.962180][ T4256] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 225.032126][ T7582] loop3: detected capacity change from 0 to 256 [ 225.109226][ T7582] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 225.172090][ T7582] FAT-fs (loop3): Filesystem has been set read-only [ 225.320772][ T7546] loop0: detected capacity change from 0 to 40427 [ 225.383126][ T7587] loop5: detected capacity change from 0 to 1024 [ 225.416411][ T7546] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 225.456644][ T7546] F2FS-fs (loop0): invalid crc value [ 225.485748][ T7589] loop1: detected capacity change from 0 to 256 [ 225.513929][ T7546] F2FS-fs (loop0): Found nat_bits in checkpoint [ 225.546178][ T7589] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x809ea061, utbl_chksum : 0x7319d30d) [ 225.629780][ T5273] hfsplus: node 4:3 still has 1 user(s)! [ 225.725472][ T7546] F2FS-fs (loop0): Start checkpoint disabled! [ 225.806039][ T7546] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 225.983141][ T7600] ================================================================== [ 225.991273][ T7600] BUG: KASAN: use-after-free in dev_map_generic_redirect+0xa0/0x650 [ 225.995066][ T7597] sctp: [Deprecated]: syz.2.1007 (pid 7597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.995066][ T7597] Use struct sctp_sack_info instead [ 225.999297][ T7600] Read of size 8 at addr ffff888053dc9180 by task syz.1.1015/7600 [ 226.023370][ T7600] [ 226.025727][ T7600] CPU: 1 PID: 7600 Comm: syz.1.1015 Not tainted 6.1.127-syzkaller #0 [ 226.033903][ T7600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 226.044003][ T7600] Call Trace: [ 226.047316][ T7600] [ 226.050258][ T7600] dump_stack_lvl+0x1e3/0x2cb [ 226.054975][ T7600] ? nf_tcp_handle_invalid+0x642/0x642 [ 226.060458][ T7600] ? panic+0x764/0x764 [ 226.064536][ T7600] ? _printk+0xd1/0x111 [ 226.068708][ T7600] ? __virt_addr_valid+0x17f/0x530 [ 226.073832][ T7600] ? __virt_addr_valid+0x17f/0x530 [ 226.078959][ T7600] print_report+0x15f/0x4f0 [ 226.083468][ T7600] ? __virt_addr_valid+0x17f/0x530 [ 226.088608][ T7600] ? __virt_addr_valid+0x17f/0x530 [ 226.093742][ T7600] ? __virt_addr_valid+0x45b/0x530 [ 226.098867][ T7600] ? __phys_addr+0xb6/0x170 [ 226.103394][ T7600] ? dev_map_generic_redirect+0xa0/0x650 [ 226.109042][ T7600] kasan_report+0x136/0x160 [ 226.113557][ T7600] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 226.119479][ T7600] ? dev_map_generic_redirect+0xa0/0x650 [ 226.125129][ T7600] dev_map_generic_redirect+0xa0/0x650 [ 226.130607][ T7600] ? __cant_sleep+0x270/0x270 [ 226.135302][ T7600] ? bq_enqueue+0x3b0/0x3b0 [ 226.139814][ T7600] ? bpf_prog_run_generic_xdp+0x9e0/0x1160 [ 226.145636][ T7600] xdp_do_generic_redirect+0x4bf/0x850 [ 226.151108][ T7600] do_xdp_generic+0x50b/0x6d0 [ 226.155793][ T7600] ? trace_xdp_exception+0x280/0x280 [ 226.161098][ T7600] ? tun_get_user+0x24ee/0x42d0 [ 226.165960][ T7600] ? tun_get_user+0x24ee/0x42d0 [ 226.170815][ T7600] tun_get_user+0x261e/0x42d0 [ 226.175507][ T7600] ? rcu_read_unlock+0xa0/0xa0 [ 226.180283][ T7600] ? tun_get+0x1e/0x2f0 [ 226.184442][ T7600] ? __lock_acquire+0x1f80/0x1f80 [ 226.189481][ T7600] ? tun_get+0x1e/0x2f0 [ 226.193643][ T7600] ? tun_get+0x27d/0x2f0 [ 226.197891][ T7600] tun_chr_write_iter+0x10c/0x1f0 [ 226.202933][ T7600] vfs_write+0x857/0xbc0 [ 226.207184][ T7600] ? file_end_write+0x250/0x250 [ 226.212040][ T7600] ? __fget_files+0x28/0x4a0 [ 226.216636][ T7600] ? __fget_files+0x435/0x4a0 [ 226.221320][ T7600] ? __fdget_pos+0x1db/0x360 [ 226.225938][ T7600] ? ksys_write+0x77/0x2c0 [ 226.230354][ T7600] ksys_write+0x19c/0x2c0 [ 226.234694][ T7600] ? print_irqtrace_events+0x210/0x210 [ 226.240165][ T7600] ? __ia32_sys_read+0x80/0x80 [ 226.244930][ T7600] ? syscall_enter_from_user_mode+0x2e/0x230 [ 226.250918][ T7600] ? lockdep_hardirqs_on+0x94/0x130 [ 226.256118][ T7600] ? syscall_enter_from_user_mode+0x2e/0x230 [ 226.262101][ T7600] do_syscall_64+0x3b/0xb0 [ 226.266544][ T7600] ? clear_bhb_loop+0x45/0xa0 [ 226.271223][ T7600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.277126][ T7600] RIP: 0033:0x7f14e618b85f [ 226.281552][ T7600] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 226.301173][ T7600] RSP: 002b:00007f14e70ac000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 226.309586][ T7600] RAX: ffffffffffffffda RBX: 00007f14e63a5fa0 RCX: 00007f14e618b85f [ 226.317558][ T7600] RDX: 000000000000fe53 RSI: 0000000020000440 RDI: 00000000000000c8 [ 226.325526][ T7600] RBP: 00007f14e620e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 226.333497][ T7600] R10: 000000000000fe53 R11: 0000000000000293 R12: 0000000000000000 [ 226.341468][ T7600] R13: 0000000000000000 R14: 00007f14e63a5fa0 R15: 00007ffee1c46198 [ 226.349461][ T7600] [ 226.352479][ T7600] [ 226.354794][ T7600] Allocated by task 5273: [ 226.359112][ T7600] kasan_set_track+0x4b/0x70 [ 226.363704][ T7600] __kasan_kmalloc+0x97/0xb0 [ 226.368906][ T7600] __kmalloc_node+0xb3/0x230 [ 226.373498][ T7600] kvmalloc_node+0x6e/0x180 [ 226.378004][ T7600] alloc_fdtable+0x154/0x280 [ 226.382593][ T7600] dup_fd+0x95c/0xca0 [ 226.386572][ T7600] copy_files+0x72/0xe0 [ 226.390731][ T7600] copy_process+0x1873/0x4060 [ 226.395405][ T7600] kernel_clone+0x222/0x920 [ 226.399908][ T7600] __x64_sys_clone+0x231/0x280 [ 226.404668][ T7600] do_syscall_64+0x3b/0xb0 [ 226.409168][ T7600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.415067][ T7600] [ 226.417384][ T7600] The buggy address belongs to the object at ffff888053dc9180 [ 226.417384][ T7600] which belongs to the cache kmalloc-cg-96 of size 96 [ 226.431521][ T7600] The buggy address is located 0 bytes inside of [ 226.431521][ T7600] 96-byte region [ffff888053dc9180, ffff888053dc91e0) [ 226.444528][ T7600] [ 226.446856][ T7600] The buggy address belongs to the physical page: [ 226.453273][ T7600] page:ffffea00014f7240 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888053dc9e80 pfn:0x53dc9 [ 226.464737][ T7600] memcg:ffff88807a2eb401 [ 226.468978][ T7600] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 226.476543][ T7600] raw: 00fff00000000200 ffffea0001d01d80 dead000000000002 ffff888017c428c0 [ 226.485135][ T7600] raw: ffff888053dc9e80 000000008020000b 00000001ffffffff ffff88807a2eb401 [ 226.493719][ T7600] page dumped because: kasan: bad access detected [ 226.500312][ T7600] page_owner tracks the page as allocated [ 226.506021][ T7600] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4250, tgid 4250 (syz-executor), ts 88221135287, free_ts 87296880925 [ 226.524257][ T7600] post_alloc_hook+0x18d/0x1b0 [ 226.529024][ T7600] get_page_from_freelist+0x3731/0x38d0 [ 226.534608][ T7600] __alloc_pages+0x28d/0x770 [ 226.539197][ T7600] alloc_slab_page+0x6a/0x150 [ 226.543876][ T7600] new_slab+0x84/0x2d0 [ 226.547974][ T7600] ___slab_alloc+0xc20/0x1270 [ 226.552654][ T7600] __kmem_cache_alloc_node+0x19f/0x260 [ 226.558123][ T7600] __kmalloc_node+0xa2/0x230 [ 226.562716][ T7600] kvmalloc_node+0x6e/0x180 [ 226.567222][ T7600] alloc_fdtable+0x154/0x280 [ 226.571819][ T7600] dup_fd+0x95c/0xca0 [ 226.575802][ T7600] copy_files+0x72/0xe0 [ 226.579962][ T7600] copy_process+0x1873/0x4060 [ 226.584635][ T7600] kernel_clone+0x222/0x920 [ 226.589154][ T7600] __x64_sys_clone+0x231/0x280 [ 226.593945][ T7600] do_syscall_64+0x3b/0xb0 [ 226.598377][ T7600] page last free stack trace: [ 226.603047][ T7600] free_unref_page_prepare+0x12a6/0x15b0 [ 226.608696][ T7600] free_unref_page_list+0x663/0x900 [ 226.613904][ T7600] release_pages+0x24c4/0x27a0 [ 226.618676][ T7600] tlb_flush_mmu+0xfc/0x210 [ 226.623192][ T7600] tlb_finish_mmu+0xce/0x1f0 [ 226.627786][ T7600] exit_mmap+0x3b3/0x980 [ 226.632308][ T7600] __mmput+0x115/0x3c0 [ 226.636467][ T7600] exit_mm+0x226/0x300 [ 226.640551][ T7600] do_exit+0x9f1/0x26a0 [ 226.644716][ T7600] do_group_exit+0x202/0x2b0 [ 226.649316][ T7600] get_signal+0x16f7/0x17d0 [ 226.653842][ T7600] arch_do_signal_or_restart+0xb0/0x1a10 [ 226.659494][ T7600] exit_to_user_mode_loop+0x6a/0x100 [ 226.664785][ T7600] exit_to_user_mode_prepare+0xb1/0x140 [ 226.670341][ T7600] syscall_exit_to_user_mode+0x60/0x270 [ 226.675904][ T7600] do_syscall_64+0x47/0xb0 [ 226.680323][ T7600] [ 226.682672][ T7600] Memory state around the buggy address: [ 226.688297][ T7600] ffff888053dc9080: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 226.696537][ T7600] ffff888053dc9100: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 226.704606][ T7600] >ffff888053dc9180: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 226.712662][ T7600] ^ [ 226.716725][ T7600] ffff888053dc9200: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 226.724787][ T7600] ffff888053dc9280: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 226.732841][ T7600] ================================================================== [ 226.741028][ T7600] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 226.748235][ T7600] CPU: 1 PID: 7600 Comm: syz.1.1015 Not tainted 6.1.127-syzkaller #0 [ 226.756329][ T7600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 226.766406][ T7600] Call Trace: [ 226.769706][ T7600] [ 226.772658][ T7600] dump_stack_lvl+0x1e3/0x2cb [ 226.777376][ T7600] ? nf_tcp_handle_invalid+0x642/0x642 [ 226.782881][ T7600] ? panic+0x764/0x764 [ 226.786981][ T7600] ? rcu_is_watching+0x11/0xb0 [ 226.791775][ T7600] ? vscnprintf+0x59/0x80 [ 226.796131][ T7600] panic+0x318/0x764 [ 226.800037][ T7600] ? check_panic_on_warn+0x1d/0xa0 [ 226.805153][ T7600] ? memcpy_page_flushcache+0xfc/0xfc [ 226.810528][ T7600] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 226.816430][ T7600] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 226.822348][ T7600] ? _raw_spin_unlock+0x40/0x40 [ 226.827203][ T7600] ? print_report+0x4a3/0x4f0 [ 226.831890][ T7600] check_panic_on_warn+0x7e/0xa0 [ 226.836830][ T7600] ? dev_map_generic_redirect+0xa0/0x650 [ 226.842479][ T7600] end_report+0x66/0x110 [ 226.846727][ T7600] kasan_report+0x143/0x160 [ 226.851231][ T7600] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 226.857135][ T7600] ? dev_map_generic_redirect+0xa0/0x650 [ 226.862783][ T7600] dev_map_generic_redirect+0xa0/0x650 [ 226.868243][ T7600] ? __cant_sleep+0x270/0x270 [ 226.872925][ T7600] ? bq_enqueue+0x3b0/0x3b0 [ 226.877431][ T7600] ? bpf_prog_run_generic_xdp+0x9e0/0x1160 [ 226.883249][ T7600] xdp_do_generic_redirect+0x4bf/0x850 [ 226.888714][ T7600] do_xdp_generic+0x50b/0x6d0 [ 226.893392][ T7600] ? trace_xdp_exception+0x280/0x280 [ 226.898789][ T7600] ? tun_get_user+0x24ee/0x42d0 [ 226.903655][ T7600] ? tun_get_user+0x24ee/0x42d0 [ 226.908511][ T7600] tun_get_user+0x261e/0x42d0 [ 226.913202][ T7600] ? rcu_read_unlock+0xa0/0xa0 [ 226.917976][ T7600] ? tun_get+0x1e/0x2f0 [ 226.922136][ T7600] ? __lock_acquire+0x1f80/0x1f80 [ 226.927176][ T7600] ? tun_get+0x1e/0x2f0 [ 226.931335][ T7600] ? tun_get+0x27d/0x2f0 [ 226.935582][ T7600] tun_chr_write_iter+0x10c/0x1f0 [ 226.940630][ T7600] vfs_write+0x857/0xbc0 [ 226.944887][ T7600] ? file_end_write+0x250/0x250 [ 226.949743][ T7600] ? __fget_files+0x28/0x4a0 [ 226.954359][ T7600] ? __fget_files+0x435/0x4a0 [ 226.959046][ T7600] ? __fdget_pos+0x1db/0x360 [ 226.963639][ T7600] ? ksys_write+0x77/0x2c0 [ 226.968061][ T7600] ksys_write+0x19c/0x2c0 [ 226.972398][ T7600] ? print_irqtrace_events+0x210/0x210 [ 226.977884][ T7600] ? __ia32_sys_read+0x80/0x80 [ 226.982661][ T7600] ? syscall_enter_from_user_mode+0x2e/0x230 [ 226.988651][ T7600] ? lockdep_hardirqs_on+0x94/0x130 [ 226.993859][ T7600] ? syscall_enter_from_user_mode+0x2e/0x230 [ 226.999877][ T7600] do_syscall_64+0x3b/0xb0 [ 227.004296][ T7600] ? clear_bhb_loop+0x45/0xa0 [ 227.008972][ T7600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.014907][ T7600] RIP: 0033:0x7f14e618b85f [ 227.019323][ T7600] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 227.038933][ T7600] RSP: 002b:00007f14e70ac000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 227.047349][ T7600] RAX: ffffffffffffffda RBX: 00007f14e63a5fa0 RCX: 00007f14e618b85f [ 227.055320][ T7600] RDX: 000000000000fe53 RSI: 0000000020000440 RDI: 00000000000000c8 [ 227.063301][ T7600] RBP: 00007f14e620e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 227.071290][ T7600] R10: 000000000000fe53 R11: 0000000000000293 R12: 0000000000000000 [ 227.079265][ T7600] R13: 0000000000000000 R14: 00007f14e63a5fa0 R15: 00007ffee1c46198 [ 227.087248][ T7600] [ 227.090606][ T7600] Kernel Offset: disabled [ 227.094936][ T7600] Rebooting in 86400 seconds..