last executing test programs: 7m9.791919428s ago: executing program 3 (id=4135): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x85, 0xcf, &(0x7f0000000000)="fae68670fef1c45ff0634fe72a6253b4357c978887379648e34b8e43761f35000437ab851cde4821ce97abc68f6a1c3593e2a7a267f78fff0e9e1743899a7dc5c1d2ecae353bd4bcdb61c053b1d7b1223331d664596d93a54d408700062455bf71027a99387a4c190aa0098e4554990bc6fdfd4647aad6ed8951ff86c092399a8d11b76c5e", &(0x7f00000008c0)=""/206, 0x0, 0x0, 0x4c, 0x1e, 0xfffffffffffffffe, &(0x7f00000000c0)="d5231f25b5f85be12036902ce1a29123e3c1d41aa6d9c06ff230c473bf3c", 0x0, 0x8000}, 0x48) 7m9.624942725s ago: executing program 3 (id=4139): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fgetxattr(r0, 0x0, 0x0, 0x0) 7m9.29769274s ago: executing program 3 (id=4142): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x4}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) 7m8.80228789s ago: executing program 3 (id=4147): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000005c0)={[{@utf8}, {@keep_last_dots}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@gid}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@namecase}, {@errors_remount}, {@errors_continue}]}, 0x1, 0x1533, &(0x7f0000006800)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) 7m8.047187893s ago: executing program 3 (id=4152): mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2480, 0x1) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) 7m7.588528442s ago: executing program 3 (id=4156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x14, 0x4, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48840}, 0x0) 7m7.109227622s ago: executing program 32 (id=4156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x14, 0x4, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48840}, 0x0) 2.177380037s ago: executing program 0 (id=10251): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x4d) lseek(r0, 0x1, 0x0) 2.040466263s ago: executing program 1 (id=10252): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x1c, 0x14, 0x1, 0x800000, 0x0, "", [@nested={0x4}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="ecc032c4"]}]}, 0x1c}], 0x1}, 0x0) 2.040392453s ago: executing program 4 (id=10253): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x6, 0x6}) 2.033269914s ago: executing program 5 (id=10254): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xbe, &(0x7f0000000340), &(0x7f0000000080)=0x4) 1.862785571s ago: executing program 5 (id=10256): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$unix(r0, &(0x7f00000025c0)=@file={0x0, './file0\x00'}, 0x6e) 1.850928911s ago: executing program 4 (id=10257): r0 = socket$packet(0x11, 0x3, 0x300) pwrite64(r0, 0x0, 0x0, 0xa8) 1.822378052s ago: executing program 1 (id=10258): r0 = syz_open_dev$sndpcmc(&(0x7f00000002c0), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x40101, [[0x9ef8, 0x0, 0x0, 0x4], [0x10000, 0x0, 0x3, 0x0, 0x0, 0x2000], [0x6]], '\x00', [{}, {0x0, 0x500}, {0x8, 0x400}, {0x0, 0xffffff7f, 0x0, 0x1, 0x1}, {0x0, 0x7, 0x0, 0x1, 0x1}, {0x7ffb, 0xfffffffa}, {}, {0x0, 0x101}, {0x0, 0x1}, {0x0, 0x6}], '\x00', 0x1001}) 1.756969946s ago: executing program 0 (id=10259): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) 1.603967632s ago: executing program 5 (id=10261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x2c, 0x2, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40060}, 0x8810) 1.603883372s ago: executing program 4 (id=10262): r0 = syz_open_dev$dri(&(0x7f00000021c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={0x0, 0x45, 0x80000}) 1.603319122s ago: executing program 1 (id=10271): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r0, 0xb) 1.457857908s ago: executing program 4 (id=10263): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x20, 0x30, 0x107, 0xffffdffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@generic="c2671655a32e4664"]}]}, 0x20}}, 0x4c000) 1.425251629s ago: executing program 1 (id=10264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x38, 0x0, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x6c810) 1.330415323s ago: executing program 5 (id=10265): syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file1\x00', 0x208008de, &(0x7f0000000b40)=ANY=[], 0x80, 0x150a, &(0x7f0000001b80)="$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") creat(&(0x7f0000000100)='./file0\x00', 0xecf86c37d53049d0) 1.329733423s ago: executing program 2 (id=10276): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0x1, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x4}}) 1.279903976s ago: executing program 0 (id=10266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x60}}, 0x0) 1.230963398s ago: executing program 4 (id=10267): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000000000)=ANY=[@ANYBLOB='nfs=stale_rw,shortname=winnt,shortname=win95,iocharset=cp860,utf8=1,nonumtail=0,uni_xlate=1,uni_xlate=1,utf8=0,codepage=1251,gid=', @ANYRESHEX=0x0, @ANYRESOCT=0x0], 0x1, 0x362, &(0x7f0000000900)="$eJzs3U9oXFUXAPAzfUkmKfRLFh8UBeHpTtDQP7jQVUpJoTgblaHqQhxsqpKJhQwOpotO40ZcCi515UZc6MJF1yIo4s6FWytIVVxodwWLV2bmTeZNZpKmwrQWf7/FcHLuPe/eO3nJvLxkbl5eifXzs3Hhxo3rMT9fiZmV0ytxsxJLkcXAlRg3NyEHANwfbqYUf6S+A5ZUpjwlAGDKeq//rx4pZd7+ar/+yas/ANz3ip//F/brM79Xw8WpTAkAmLKx+/+PjDTPjf6qf6b0VwEAwP3quRdefPpULeLZPJ+P2HinXW/X46lh+6kL8Xo0Yy2OxWLciuhfKHQfKr3HM2drq8fyPO/Ez0tR71a06xEbnXa9f6VwKuvVV+N4LMZSUV9cbaSUsjOf11aP5z0RcaXTGz82Ku36bBwuxv/hcKzFicjj/2P1EWdrqyfy4gD1jUF9J2J7eN+iO//lWIzvXomL0YzzC+cipcFlTW318vE8P51qI/XtejXO7zwLe94BAQAAAAAAAAAAAAAAAAAAAACAf2Q537G0s/9NGu7fs7w8ob23P06/vtgfaLu/P1Cqpkjp97cer7+bxcj+QLv352nXZ+LQvV06AAAAAAAAAAAAAAAAAAAA/Gu0tuai0Wyubba2Lq2Xg85ma+tQRHQzb3zz6ZcLMd7nNsFMMUapKS9Sl9YbKRt0TtlInyLIuoMPMp9c3ZlxuU91ZxUTp1Hdu6nZPPLwTx8MMw9lgyP/NeyTxeQFZrumUQ42/tef0p08UZdOFsGJ23S+llLa6ziXXxqvikrEzJ1/4vYPUjf4+vprD5xsHX2il/ki9T362OK5a+9/9Ot6o9kduav58dxm61ZabxQfTz7Z9g6y0vlTiX5QKZ8JM/uVb49mGtn3vz3/4HvfHmz0VM68OaFP1l/OZ5utrUrxldJrmusH3dyuqoXm2Sxi13FmJ5z8UwiOfrjSuHr5x18OWlX6JmGjDgAAAAAAAAAAAAAAAAAAuCtK7xUvFG/2nd2v6slnpj8zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALh7hv//vxRsj2UOEvzZifGm6tpmK2LuXi8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/uL8DAAD//2Kpa7U=") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) 1.155942341s ago: executing program 2 (id=10268): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x1c, 0x14, 0x1, 0x800000, 0x0, "", [@nested={0x4}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="ecc032c4"]}]}, 0x1c}], 0x1}, 0x0) 1.155172051s ago: executing program 1 (id=10280): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0xe, 0x4, 0x0, 0x0, {}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xfe, "800100"}, 0x0, 0x2, {}, 0x20800}) 973.683319ms ago: executing program 1 (id=10269): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000680)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x5}}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 912.311921ms ago: executing program 2 (id=10270): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000010100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x10009) 882.065232ms ago: executing program 0 (id=10272): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/time\x00') setns(r0, 0x80) 843.120754ms ago: executing program 5 (id=10273): r0 = syz_open_dev$sg(&(0x7f0000000180), 0xaa, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000000)=0x1) 540.344977ms ago: executing program 5 (id=10274): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file0\x00', 0x180c850, &(0x7f0000000180)={[{@fat=@check_strict}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@utf8no}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@fat=@dos1xfloppy}, {@fat=@nfs}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@rodir}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}]}, 0x1, 0x371, &(0x7f0000002980)="$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") open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) 539.630257ms ago: executing program 2 (id=10286): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x809, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000240)=""/153}, 0x94) 447.712041ms ago: executing program 0 (id=10275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 360.119565ms ago: executing program 4 (id=10277): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}, {@orlov}]}, 0x1, 0x50b, &(0x7f0000000e80)="$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") creat(&(0x7f0000000e40)='./file1\x00', 0x18) 274.192409ms ago: executing program 2 (id=10278): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x14, 0x1, 0x3, "2742528909000000ce0198666a0084feea0be6b8a80052d763e61f9d13f019e3"}) 42.618758ms ago: executing program 0 (id=10279): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x301, 0x0) fadvise64(r0, 0x8000000000000001, 0x8, 0x3) 0s ago: executing program 2 (id=10291): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b000000000024001a8020000a8014000700ff02000000000000000000000000000105000800"], 0x4c}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) kernel console output (not intermixed with test programs): 8][ T5957] usb 1-1: USB disconnect, device number 29 [ 672.415038][ T5164] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 672.477131][ T22] usb 5-1: USB disconnect, device number 46 [ 672.521399][T22707] loop5: detected capacity change from 0 to 32768 [ 672.546218][T22707] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.8239 (22707) [ 672.623908][ T5164] usb 2-1: Using ep0 maxpacket: 16 [ 672.651637][ T5164] usb 2-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=41.ba [ 672.664450][ T5164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.677021][ T5164] usb 2-1: Product: syz [ 672.681438][ T5164] usb 2-1: Manufacturer: syz [ 672.697786][ T5164] usb 2-1: SerialNumber: syz [ 672.709611][T22707] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 672.724182][ T5164] usb 2-1: config 0 descriptor?? [ 672.733351][T22707] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 672.751397][T22707] BTRFS info (device loop5): using free space tree [ 672.834949][T22727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8246'. [ 672.945196][ T5164] snd-usb-hiface: probe of 2-1:0.0 failed with error -22 [ 672.997735][T22707] BTRFS info (device loop5): enabling ssd optimizations [ 673.039963][T22744] ieee802154 phy0 wpan0: encryption failed: -90 [ 673.162299][ T5164] usb 2-1: USB disconnect, device number 36 [ 673.223041][T13681] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 673.707636][T22758] loop0: detected capacity change from 0 to 64 [ 673.837132][ T4270] hfs: node 4:3 still has 1 user(s)! [ 674.041189][T22767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8258'. [ 674.107073][T22769] binder: 22768:22769 ioctl c018620c 200000001180 returned -22 [ 674.472817][T22779] loop4: detected capacity change from 0 to 256 [ 674.981199][T22764] loop1: detected capacity change from 0 to 32768 [ 675.082004][T22804] binder: 22802:22804 ioctl c018620c 200000001180 returned -22 [ 675.102205][T22764] XFS (loop1): Mounting V5 Filesystem [ 675.201368][T22764] XFS (loop1): Ending clean mount [ 675.234026][T22764] XFS (loop1): Quotacheck needed: Please wait. [ 675.380306][T22764] XFS (loop1): Quotacheck: Done. [ 675.415894][T22817] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 675.435912][T22813] loop0: detected capacity change from 0 to 4096 [ 675.516186][ T4271] XFS (loop1): Unmounting Filesystem [ 676.591150][T22853] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 676.609175][T22855] loop0: detected capacity change from 0 to 16 [ 676.642273][T22855] erofs: (device loop0): mounted with root inode @ nid 36. [ 676.786725][T22859] ip6t_srh: unknown srh invflags 4000 [ 676.880914][T22863] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 676.965698][ T26] audit: type=1326 audit(676.914:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22864 comm="syz.0.8302" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25839cdd9 code=0x7ffc0000 [ 677.080640][ T26] audit: type=1326 audit(676.914:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22864 comm="syz.0.8302" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25839cdd9 code=0x7ffc0000 [ 677.204848][ T26] audit: type=1326 audit(676.954:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22864 comm="syz.0.8302" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff25839cdd9 code=0x7ffc0000 [ 677.228267][ C1] vkms_vblank_simulate: vblank timer overrun [ 677.256664][ T26] audit: type=1326 audit(676.954:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22864 comm="syz.0.8302" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25839cdd9 code=0x7ffc0000 [ 677.280184][ C1] vkms_vblank_simulate: vblank timer overrun [ 677.361187][ T26] audit: type=1326 audit(676.954:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22864 comm="syz.0.8302" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25839cdd9 code=0x7ffc0000 [ 677.537272][T22889] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8312'. [ 677.565949][T22889] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8312'. [ 677.715860][T22896] loop4: detected capacity change from 0 to 764 [ 677.814914][ T6947] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 678.016946][ T6947] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 678.029370][ T6947] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 678.067641][ T6947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.092721][ T6947] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 678.122256][ T5154] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 678.355025][ T5154] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=33.00 [ 678.388143][ T5154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.402736][ T5154] usb 2-1: Product: syz [ 678.410236][ T5154] usb 2-1: Manufacturer: syz [ 678.422233][ T5154] usb 2-1: SerialNumber: syz [ 678.447016][ T5154] usb 2-1: config 0 descriptor?? [ 678.473108][ T5154] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 678.503657][ T5154] usb 2-1: Detected FT232HP [ 678.863527][ T5154] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 678.876050][ T5154] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 678.896742][ T5154] usb 2-1: USB disconnect, device number 37 [ 678.951529][ T5154] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 678.995439][ T5154] ftdi_sio 2-1:0.0: device disconnected [ 679.025282][T22943] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 679.044935][T22943] overlayfs: missing 'lowerdir' [ 679.357615][ T6947] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 679.373610][ T6947] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 679.382168][ T6947] stv0680 1-1:4.0: last error: 86, command = 0x78 [ 679.399358][ T6947] usb 1-1: USB disconnect, device number 30 [ 679.911953][T22966] loop1: detected capacity change from 0 to 4096 [ 680.204049][T22973] netlink: 'syz.5.8354': attribute type 2 has an invalid length. [ 680.542005][T22980] loop0: detected capacity change from 0 to 764 [ 680.552207][T22959] loop4: detected capacity change from 0 to 32768 [ 680.621833][T22959] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.8348 (22959) [ 680.650472][T22985] ip6t_srh: unknown srh invflags 4000 [ 680.691009][T22959] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 680.743292][T22959] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 680.793480][T22959] BTRFS info (device loop4): using free space tree [ 680.805256][ T26] audit: type=1326 audit(680.754:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22986 comm="syz.2.8372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128eb9cdd9 code=0x7ffc0000 [ 680.876071][T22991] netlink: 'syz.1.8364': attribute type 49 has an invalid length. [ 680.901898][ T26] audit: type=1326 audit(680.754:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22986 comm="syz.2.8372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f128eb9cdd9 code=0x7ffc0000 [ 680.936217][T22991] netlink: 'syz.1.8364': attribute type 49 has an invalid length. [ 681.058797][T23006] loop1: detected capacity change from 0 to 2048 [ 681.125266][ T26] audit: type=1326 audit(680.754:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22986 comm="syz.2.8372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128eb9cdd9 code=0x7ffc0000 [ 681.149815][ T26] audit: type=1326 audit(680.754:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22986 comm="syz.2.8372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128eb9cdd9 code=0x7ffc0000 [ 681.209329][T23006] loop1: p1 p2 < > p3 < p5 > p4 [ 681.224644][T23006] loop1: partition table partially beyond EOD, truncated [ 681.252599][T23006] loop1: p1 size 917504 extends beyond EOD, truncated [ 681.259694][T22959] BTRFS info (device loop4): enabling ssd optimizations [ 681.302047][T23006] loop1: p2 start 4278190080 is beyond EOD, truncated [ 681.365563][T23006] loop1: p4 start 150994949 is beyond EOD, truncated [ 681.379422][T23006] loop1: p5 size 917504 extends beyond EOD, truncated [ 681.401008][ T4281] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 682.017878][ T4263] udevd[4263]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 682.019285][ T4262] udevd[4262]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 682.042120][ T4595] udevd[4595]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 682.345532][T23044] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 682.372275][T23046] openvswitch: netlink: Message has 1 unknown bytes. [ 682.373712][T23044] overlayfs: missing 'lowerdir' [ 682.690835][T23060] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8387'. [ 682.720499][T23060] netlink: 252 bytes leftover after parsing attributes in process `syz.0.8387'. [ 683.012472][ T26] audit: type=1400 audit(682.954:465): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=23068 comm="syz.0.8394" [ 683.493035][T23088] loop1: detected capacity change from 0 to 1764 [ 683.577063][T23088] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 683.610460][T23096] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 683.837455][T23103] loop1: detected capacity change from 0 to 64 [ 684.365684][T23126] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8420'. [ 684.370874][T23127] openvswitch: netlink: Message has 1 unknown bytes. [ 684.414223][T23126] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8420'. [ 684.699410][T23139] loop0: detected capacity change from 0 to 64 [ 685.467978][T23170] loop0: detected capacity change from 0 to 24 [ 685.513877][T23170] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 685.571430][T23170] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 685.675815][T23175] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8444'. [ 685.887214][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.893595][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.948526][T23184] loop0: detected capacity change from 0 to 1024 [ 685.996962][T23184] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 686.230745][T23194] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 686.348773][ T8901] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 686.539893][ T5164] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 686.551250][ T8901] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 686.581089][ T8901] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.604876][ T8901] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 686.613811][ T8901] usb 6-1: config 1 has no interface number 0 [ 686.625252][T23040] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 686.629403][ T8901] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 686.665122][ T8901] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 686.707980][ T8901] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 686.724911][ T8901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.741273][ T8901] usb 6-1: Product: syz [ 686.745794][ T8901] usb 6-1: Manufacturer: syz [ 686.755341][ T5164] usb 5-1: Using ep0 maxpacket: 16 [ 686.764679][ T8901] usb 6-1: SerialNumber: syz [ 686.777763][ T5164] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 686.824699][ T5164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.833180][ T5164] usb 5-1: Product: syz [ 686.845245][T23040] usb 3-1: Using ep0 maxpacket: 16 [ 686.855727][T23040] usb 3-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 686.863080][ T5164] usb 5-1: Manufacturer: syz [ 686.869660][ T5164] usb 5-1: SerialNumber: syz [ 686.876754][T23040] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.904816][T23040] usb 3-1: Product: syz [ 686.912805][T23040] usb 3-1: Manufacturer: syz [ 686.926277][ T5164] usb 5-1: config 0 descriptor?? [ 686.929743][T23040] usb 3-1: SerialNumber: syz [ 686.967113][T23040] usb 3-1: config 0 descriptor?? [ 687.148751][ T5164] speedtch 5-1:0.0: speedtch_bind: data interface not found! [ 687.169940][ T5164] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 687.207627][ T5968] usb 6-1: USB disconnect, device number 23 [ 687.225722][T23040] usb-storage 3-1:0.0: USB Mass Storage device detected [ 687.243996][T23040] usb-storage 3-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 687.261788][T23040] usb-storage 3-1:0.0: This device (054c,002e,0500 S 04 P 5c) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 687.261788][T23040] Please send a copy of this message to and [ 687.344988][T23040] usb 3-1: USB disconnect, device number 33 [ 687.360776][ T4325] usb 5-1: USB disconnect, device number 47 [ 687.423505][T23234] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8473'. [ 687.441772][T23234] unsupported nlmsg_type 40 [ 687.504935][ T5164] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 687.706494][ T5164] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 687.720886][ T5164] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 687.730984][ T5164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.746574][ T5164] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 687.852602][T23248] netlink: 'syz.5.8479': attribute type 3 has an invalid length. [ 688.283134][T23263] PM: Enabling pm_trace changes system date and time during resume. [ 688.283134][T23263] PM: Correct system time has to be restored manually after resume. [ 688.312832][T23264] loop5: detected capacity change from 0 to 64 [ 688.666748][ T5154] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 688.874962][ T5154] usb 5-1: Using ep0 maxpacket: 16 [ 688.891792][ T5154] usb 5-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 688.930650][ T5154] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.957864][ T5154] usb 5-1: Product: syz [ 688.973567][ T5154] usb 5-1: Manufacturer: syz [ 688.981803][ T5154] usb 5-1: SerialNumber: syz [ 688.994601][ T5154] usb 5-1: config 0 descriptor?? [ 689.045361][ T5164] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 689.072930][ T5164] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 689.091780][ T5164] stv0680 2-1:4.0: last error: 86, command = 0x78 [ 689.093964][ T5164] usb 2-1: USB disconnect, device number 38 [ 689.200609][T23297] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8503'. [ 689.220169][ T5154] usb-storage 5-1:0.0: USB Mass Storage device detected [ 689.232012][ T5154] usb-storage 5-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 689.244349][ T5154] usb-storage 5-1:0.0: This device (054c,002e,0500 S 04 P 5c) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 689.244349][ T5154] Please send a copy of this message to and [ 689.329966][ T5154] usb 5-1: USB disconnect, device number 48 [ 689.484988][T23307] device netdevsim0 left promiscuous mode [ 689.491031][T23307] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 689.677674][T23313] netlink: 'syz.5.8510': attribute type 28 has an invalid length. [ 689.703809][T23315] netlink: 'syz.0.8512': attribute type 3 has an invalid length. [ 690.088442][T23331] netlink: 'syz.0.8529': attribute type 9 has an invalid length. [ 690.755537][ T5968] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 690.949889][ T5968] usb 6-1: Using ep0 maxpacket: 8 [ 690.960655][ T5968] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 691.017316][ T5968] usb 6-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 691.042962][ T5968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.081001][ T5968] usb 6-1: Product: syz [ 691.109549][ T5968] usb 6-1: Manufacturer: syz [ 691.114341][ T5968] usb 6-1: SerialNumber: syz [ 691.141719][ T5968] usb 6-1: config 0 descriptor?? [ 691.442255][ T5968] msi2500 6-1:0.0: Registered as swradio24 [ 691.491972][ T5968] msi2500 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 691.555796][ T5968] usb 6-1: USB disconnect, device number 24 [ 692.227960][T23389] device netdevsim0 left promiscuous mode [ 692.247634][T23389] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 692.384342][T23395] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.418975][T23395] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 692.464636][T23391] loop0: detected capacity change from 0 to 4096 [ 692.579303][T23391] ntfs3: loop0: ino=1e, "file1" attr_set_size [ 692.605922][T23391] ntfs3: loop0: ino=1e, "file1" attr_set_size [ 692.972612][T23414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8559'. [ 693.131686][ T26] audit: type=1326 audit(693.074:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23415 comm="syz.1.8560" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc75b9cdd9 code=0x7ffc0000 [ 693.203873][ T26] audit: type=1326 audit(693.074:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23415 comm="syz.1.8560" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fbc75b9cdd9 code=0x7ffc0000 [ 693.235039][ T5154] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 693.294994][ T26] audit: type=1326 audit(693.074:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23415 comm="syz.1.8560" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc75b9cdd9 code=0x7ffc0000 [ 693.318521][ C1] vkms_vblank_simulate: vblank timer overrun [ 693.360468][ T26] audit: type=1326 audit(693.074:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23415 comm="syz.1.8560" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc75b9cdd9 code=0x7ffc0000 [ 693.383993][ C1] vkms_vblank_simulate: vblank timer overrun [ 693.445036][ T5154] usb 3-1: Using ep0 maxpacket: 8 [ 693.459458][ T5154] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 693.535824][ T5154] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 693.554246][ T5154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.590915][ T5154] usb 3-1: Product: syz [ 693.604843][ T5154] usb 3-1: Manufacturer: syz [ 693.619807][ T5154] usb 3-1: SerialNumber: syz [ 693.643316][ T5154] usb 3-1: config 0 descriptor?? [ 693.704882][T23431] i2c i2c-0: Invalid block read size 255 [ 693.901671][ T5154] msi2500 3-1:0.0: Registered as swradio24 [ 693.911382][ T5154] msi2500 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 693.931118][ T5154] usb 3-1: USB disconnect, device number 34 [ 694.144930][ T5151] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 694.155170][T23040] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 694.294480][T23445] autofs4:pid:23445:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2), cmd(0xc0189374) [ 694.319329][T23445] autofs4:pid:23445:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 694.344808][T23040] usb 1-1: Using ep0 maxpacket: 16 [ 694.352602][T23040] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.355902][ T5151] usb 2-1: Using ep0 maxpacket: 16 [ 694.374376][T23040] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 694.388517][ T5151] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 694.419950][ T5151] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.424326][T23040] usb 1-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 694.451727][ T5151] usb 2-1: Product: syz [ 694.461382][T23040] usb 1-1: Product: syz [ 694.463559][ T5151] usb 2-1: Manufacturer: syz [ 694.480971][ T5151] usb 2-1: SerialNumber: syz [ 694.485594][T23040] usb 1-1: config 0 descriptor?? [ 694.501217][T23040] gspca_main: spca501-2.14.0 probing 0000:0000 [ 694.508896][ T5151] usb 2-1: config 0 descriptor?? [ 694.733825][ T5151] speedtch 2-1:0.0: speedtch_bind: data interface not found! [ 694.744869][ T5151] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 694.909840][T23458] i2c i2c-0: Invalid block read size 255 [ 694.959399][T23040] gspca_spca501: reg write: error -71 [ 694.964432][T23460] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 694.969641][T23040] spca501 1-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 695.013426][ T5151] usb 2-1: USB disconnect, device number 39 [ 695.021186][T23040] spca501: probe of 1-1:0.0 failed with error -22 [ 695.070521][T23465] netlink: 'syz.5.8582': attribute type 1 has an invalid length. [ 695.083663][T23040] usb 1-1: USB disconnect, device number 31 [ 695.245746][T23469] autofs4:pid:23469:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2), cmd(0xc0189374) [ 695.274523][T23469] autofs4:pid:23469:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 695.538410][T23477] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8589'. [ 695.553260][T23477] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8589'. [ 696.230720][T23505] loop0: detected capacity change from 0 to 1764 [ 696.340945][T23505] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 696.525032][T23040] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 696.644466][T23523] cgroup: none used incorrectly [ 696.711500][T23040] usb 6-1: Using ep0 maxpacket: 16 [ 696.720394][T23040] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.763793][T23040] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 696.819530][T23040] usb 6-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 696.865009][T23040] usb 6-1: Product: syz [ 696.893217][T23040] usb 6-1: config 0 descriptor?? [ 696.924442][T23040] gspca_main: spca501-2.14.0 probing 0000:0000 [ 696.949495][T23535] netlink: 'syz.0.8617': attribute type 1 has an invalid length. [ 696.994349][T23537] netlink: 408 bytes leftover after parsing attributes in process `syz.2.8618'. [ 697.340717][T23040] gspca_spca501: reg write: error -71 [ 697.350863][T23040] spca501 6-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 697.364960][T23040] spca501: probe of 6-1:0.0 failed with error -22 [ 697.402518][T23040] usb 6-1: USB disconnect, device number 25 [ 697.614644][T23559] loop4: detected capacity change from 0 to 64 [ 697.730236][T23563] netlink: 'syz.2.8630': attribute type 2 has an invalid length. [ 697.759469][T23563] netlink: 504 bytes leftover after parsing attributes in process `syz.2.8630'. [ 697.775043][ T5154] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 697.984818][ T5154] usb 2-1: Using ep0 maxpacket: 32 [ 697.987816][T23570] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8633'. [ 697.991741][ T5154] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 698.019132][T23570] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8633'. [ 698.042371][T23572] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614) [ 698.049045][ T5154] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 698.084129][ T5154] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 698.104843][T23572] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 698.112890][ T5154] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 698.153744][ T5154] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 698.196446][ T5154] usb 2-1: config 0 interface 0 has no altsetting 0 [ 698.210120][T23579] loop0: detected capacity change from 0 to 256 [ 698.220490][ T5154] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 698.249615][ T5154] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 698.287603][ T5154] usb 2-1: Product: syz [ 698.302036][ T5154] usb 2-1: Manufacturer: syz [ 698.315535][ T5154] usb 2-1: SerialNumber: syz [ 698.340587][ T5154] usb 2-1: config 0 descriptor?? [ 698.352306][T23579] FAT-fs (loop0): Directory bread(block 64) failed [ 698.359028][ T5154] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 698.372668][ T5154] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 698.415268][T23579] FAT-fs (loop0): Directory bread(block 65) failed [ 698.422096][T23579] FAT-fs (loop0): Directory bread(block 66) failed [ 698.465145][T23579] FAT-fs (loop0): Directory bread(block 67) failed [ 698.482454][T23579] FAT-fs (loop0): Directory bread(block 68) failed [ 698.500071][T23579] FAT-fs (loop0): Directory bread(block 69) failed [ 698.524553][T23579] FAT-fs (loop0): Directory bread(block 70) failed [ 698.531724][T23579] FAT-fs (loop0): Directory bread(block 71) failed [ 698.538614][T23579] FAT-fs (loop0): Directory bread(block 72) failed [ 698.575576][T23579] FAT-fs (loop0): Directory bread(block 73) failed [ 698.666602][T23555] ldusb 2-1:0.0: Couldn't submit interrupt_in_urb -90 [ 698.743839][ T5154] usb 2-1: USB disconnect, device number 40 [ 698.782419][ T5154] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 699.061395][T23602] netlink: 408 bytes leftover after parsing attributes in process `syz.4.8649'. [ 699.104696][T23600] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8648'. [ 699.114061][T23600] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8648'. [ 699.185227][T23604] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614) [ 699.214932][T23604] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 699.259960][T23606] loop4: detected capacity change from 0 to 64 [ 699.731465][T23620] netlink: 'syz.0.8658': attribute type 2 has an invalid length. [ 699.783596][T23620] netlink: 504 bytes leftover after parsing attributes in process `syz.0.8658'. [ 699.859516][T23622] cgroup: none used incorrectly [ 700.105296][T23626] loop4: detected capacity change from 0 to 4096 [ 700.205298][T23626] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 700.389262][T12083] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 700.403330][ T4281] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 700.422764][ T4281] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 700.474957][ T4281] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 700.485117][ T38] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 700.492362][ T4281] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 700.697246][T23647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.731402][T23647] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 700.766122][T23647] bond0: (slave sit0): Error -95 calling set_mac_address [ 701.757104][T23695] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 701.854424][T23695] bond0: (slave sit0): Error -95 calling set_mac_address [ 701.869207][T23699] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 702.295375][ T4325] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 702.498631][ T4325] usb 5-1: Using ep0 maxpacket: 32 [ 702.508444][ T4325] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 702.557728][ T4325] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 702.604994][ T4325] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 702.647243][ T4325] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 702.702034][ T4325] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 702.766422][ T4325] usb 5-1: config 0 interface 0 has no altsetting 0 [ 702.813848][ T4325] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 702.836258][ T4325] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 702.871467][ T4325] usb 5-1: Product: syz [ 702.886229][ T4325] usb 5-1: Manufacturer: syz [ 702.890934][ T4325] usb 5-1: SerialNumber: syz [ 702.967016][ T4325] usb 5-1: config 0 descriptor?? [ 703.003971][ T4325] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 703.041512][ T4325] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 703.269135][T23704] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90 [ 703.351501][T23743] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 703.355176][ T5154] usb 5-1: USB disconnect, device number 49 [ 703.382581][T23743] bond0: (slave sit0): Error -95 calling set_mac_address [ 703.406649][ T5154] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 703.634437][T23719] loop0: detected capacity change from 0 to 32768 [ 703.660251][T23752] loop5: detected capacity change from 0 to 256 [ 703.714217][T23719] JBD2: Ignoring recovery information on journal [ 703.859948][T23760] loop1: detected capacity change from 0 to 64 [ 703.859978][T23752] FAT-fs (loop5): Directory bread(block 64) failed [ 703.907091][T23719] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 703.966684][T23752] FAT-fs (loop5): Directory bread(block 65) failed [ 703.973505][T23752] FAT-fs (loop5): Directory bread(block 66) failed [ 704.010063][T23752] FAT-fs (loop5): Directory bread(block 67) failed [ 704.055168][T23752] FAT-fs (loop5): Directory bread(block 68) failed [ 704.061807][T23752] FAT-fs (loop5): Directory bread(block 69) failed [ 704.123564][T23752] FAT-fs (loop5): Directory bread(block 70) failed [ 704.140652][T23752] FAT-fs (loop5): Directory bread(block 71) failed [ 704.164939][T23768] netlink: 'syz.2.8719': attribute type 1 has an invalid length. [ 704.172880][T23768] __nla_validate_parse: 1 callbacks suppressed [ 704.172895][T23768] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8719'. [ 704.191840][ T4270] ocfs2: Unmounting device (7,0) on (node local) [ 704.194922][T23752] FAT-fs (loop5): Directory bread(block 72) failed [ 704.244853][T23752] FAT-fs (loop5): Directory bread(block 73) failed [ 705.255672][T23799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8732'. [ 705.593688][T23810] loop1: detected capacity change from 0 to 256 [ 705.666270][T23810] FAT-fs (loop1): Directory bread(block 64) failed [ 705.667862][ T26] audit: type=1326 audit(705.614:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23808 comm="syz.0.8735" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25839cdd9 code=0x7ffc0000 [ 705.689806][T23810] FAT-fs (loop1): Directory bread(block 65) failed [ 705.708767][T23764] loop4: detected capacity change from 0 to 40427 [ 705.764056][T23810] FAT-fs (loop1): Directory bread(block 66) failed [ 705.781793][T23764] F2FS-fs (loop4): Invalid log blocks per segment (4278190089) [ 705.781993][T23810] FAT-fs (loop1): Directory bread(block 67) failed [ 705.823576][T23764] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 705.833183][ T26] audit: type=1326 audit(705.644:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23808 comm="syz.0.8735" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7ff25839cdd9 code=0x7ffc0000 [ 705.847488][T23810] FAT-fs (loop1): Directory bread(block 68) failed [ 705.934180][T23764] F2FS-fs (loop4): invalid crc value [ 705.938060][T23810] FAT-fs (loop1): Directory bread(block 69) failed [ 705.977877][T23764] F2FS-fs (loop4): Found nat_bits in checkpoint [ 705.980301][T23810] FAT-fs (loop1): Directory bread(block 70) failed [ 706.033231][ T26] audit: type=1326 audit(705.644:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23808 comm="syz.0.8735" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25839cdd9 code=0x7ffc0000 [ 706.034818][T23810] FAT-fs (loop1): Directory bread(block 71) failed [ 706.056770][ C0] vkms_vblank_simulate: vblank timer overrun [ 706.154855][ T26] audit: type=1326 audit(705.644:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23808 comm="syz.0.8735" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25839cdd9 code=0x7ffc0000 [ 706.178205][T23764] F2FS-fs (loop4): recover fsync data on readonly fs [ 706.215414][T23764] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 706.222829][T23764] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 706.252268][T23810] FAT-fs (loop1): Directory bread(block 72) failed [ 706.267993][T23810] FAT-fs (loop1): Directory bread(block 73) failed [ 706.499576][T23764] F2FS-fs (loop4): Corrupted max_depth of 3: 255 [ 706.600302][T23764] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 706.879939][T23845] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 707.435931][T23863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8758'. [ 707.562198][T23866] tmpfs: Unknown parameter 'no' [ 707.789313][T23872] loop1: detected capacity change from 0 to 2048 [ 707.856753][T23872] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 707.893516][T23872] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 707.944828][T23872] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 707.955291][T23872] UDF-fs: Scanning with blocksize 512 failed [ 708.017843][T23872] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 708.333219][T23892] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 708.368279][T23894] tmpfs: Bad value for 'mpol' [ 708.451177][ T5151] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 708.582344][ T26] audit: type=1326 audit(708.524:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23899 comm="syz.5.8776" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68da99cdd9 code=0x7ffc0000 [ 708.640472][ T26] audit: type=1326 audit(708.524:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23899 comm="syz.5.8776" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68da99cdd9 code=0x7ffc0000 [ 708.664861][ T5151] usb 5-1: Using ep0 maxpacket: 32 [ 708.672426][ T5151] usb 5-1: unable to get BOS descriptor or descriptor too short [ 708.696916][ T5151] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 708.728727][ T26] audit: type=1326 audit(708.524:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23899 comm="syz.5.8776" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f68da99cdd9 code=0x7ffc0000 [ 708.732577][ T5151] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 708.801494][ T26] audit: type=1326 audit(708.524:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23899 comm="syz.5.8776" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68da99cdd9 code=0x7ffc0000 [ 708.844383][ T5151] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 708.874836][ T5151] usb 5-1: config 128 has no interface number 0 [ 708.881260][ T5151] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 708.915391][ T26] audit: type=1326 audit(708.524:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23899 comm="syz.5.8776" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68da99cdd9 code=0x7ffc0000 [ 708.923341][ T5151] usb 5-1: config 128 interface 127 has no altsetting 0 [ 708.975845][T23916] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8784'. [ 708.996816][ T5151] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 708.996881][ T5151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.996915][ T5151] usb 5-1: Product: syz [ 708.996942][ T5151] usb 5-1: Manufacturer: syz [ 708.996969][ T5151] usb 5-1: SerialNumber: syz [ 708.999853][T23886] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 709.149060][T23920] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 709.188261][T23922] loop5: detected capacity change from 0 to 2048 [ 709.257651][T23922] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 709.267237][ T5151] usb 5-1: USB disconnect, device number 50 [ 709.319921][T23925] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 709.356399][T23922] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=32, inode=11, rec_len=4096, name_len=0 [ 709.442652][T23922] Remounting filesystem read-only [ 709.525983][ T4262] udevd[4262]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 709.949837][T23943] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 710.020872][ T5154] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 710.204893][ T5154] usb 2-1: Using ep0 maxpacket: 8 [ 710.211852][ T5154] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 710.232979][ T5154] usb 2-1: config 0 has no interface number 0 [ 710.262346][ T5154] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 710.280663][ T5154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.289428][ T5154] usb 2-1: Product: syz [ 710.293667][ T5154] usb 2-1: Manufacturer: syz [ 710.298720][ T5154] usb 2-1: SerialNumber: syz [ 710.306305][ T5154] usb 2-1: config 0 descriptor?? [ 710.520392][ T5154] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 710.534906][ T5154] usb 2-1: No valid video chain found. [ 710.552494][ T5154] usb 2-1: USB disconnect, device number 41 [ 711.220967][T23993] tmpfs: Bad value for 'mpol' [ 711.446568][T24004] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8826'. [ 711.718365][T24015] syz.5.8832 (24015): /proc/24014/oom_adj is deprecated, please use /proc/24014/oom_score_adj instead. [ 711.900833][T24019] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 712.363749][T24040] ubi31: attaching mtd0 [ 712.388176][T24040] ubi31: scanning is finished [ 712.436705][T24040] ubi31: empty MTD device detected [ 712.573586][T24043] loop1: detected capacity change from 0 to 2048 [ 712.582334][T24043] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 712.598686][T24043] NILFS (loop1): mounting unchecked fs [ 712.661065][T24043] NILFS (loop1): recovery complete [ 712.695354][T24040] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 712.698573][T24049] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 712.735144][T24040] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 712.814940][T24040] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 712.822063][T24040] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 712.935012][T24040] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 712.941966][T24040] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 713.015598][T24040] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2935306449 [ 713.056713][T24040] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 713.110283][T24050] ubi31: background thread "ubi_bgt31d" started, PID 24050 [ 713.279058][T24057] loop0: detected capacity change from 0 to 4096 [ 713.329740][T24057] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 713.518220][T24057] ntfs3: loop0: ino=1e, "file1" encrypted i/o not supported [ 713.575185][ T26] audit: type=1800 audit(713.524:479): pid=24057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8851" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 714.082758][T24088] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 714.565044][T24068] loop5: detected capacity change from 0 to 32768 [ 715.118941][T24115] loop1: detected capacity change from 0 to 4096 [ 715.632017][T24135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8890'. [ 715.971853][T24140] loop5: detected capacity change from 0 to 4096 [ 716.013150][T24140] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 716.104166][T24140] ntfs3: loop5: failed to convert "c46c" to iso8859-3 [ 716.129859][T24152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8898'. [ 716.464579][T24156] loop4: detected capacity change from 0 to 4096 [ 717.486459][T24202] loop4: detected capacity change from 0 to 1024 [ 717.600638][T24202] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 717.870445][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 718.002160][T24225] netlink: 'syz.4.8934': attribute type 3 has an invalid length. [ 718.848327][T24253] netlink: 'syz.1.8948': attribute type 3 has an invalid length. [ 718.927644][T24219] loop0: detected capacity change from 0 to 32768 [ 719.099886][T24255] loop5: detected capacity change from 0 to 4096 [ 719.436692][T24263] loop4: detected capacity change from 0 to 4096 [ 719.466440][T24263] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 719.607701][T24263] ntfs3: loop4: ino=1e, "file1" encrypted i/o not supported [ 719.657959][ T26] audit: type=1800 audit(719.604:480): pid=24263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8953" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 719.786220][T24279] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 56142 - 0 [ 719.852998][T24279] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 56142 - 0 [ 719.894929][T24279] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 56142 - 0 [ 719.934467][T24279] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 56142 - 0 [ 719.965174][T24279] netdevsim netdevsim5 netdevsim0: set [1, 2] type 2 family 0 port 33427 - 0 [ 719.974073][T24279] netdevsim netdevsim5 netdevsim1: set [1, 2] type 2 family 0 port 33427 - 0 [ 720.013713][T24279] netdevsim netdevsim5 netdevsim2: set [1, 2] type 2 family 0 port 33427 - 0 [ 720.076295][T24279] netdevsim netdevsim5 netdevsim3: set [1, 2] type 2 family 0 port 33427 - 0 [ 720.104928][T24279] device geneve2 entered promiscuous mode [ 720.157620][T24289] loop1: detected capacity change from 0 to 1024 [ 720.284295][T24289] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 720.338060][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 720.589959][T24305] xt_CT: You must specify a L4 protocol and not use inversions on it [ 721.175173][T24329] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8984'. [ 721.428047][T24340] netlink: 180 bytes leftover after parsing attributes in process `syz.2.8989'. [ 721.718321][ T26] audit: type=1400 audit(721.664:481): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=24351 comm="syz.4.8996" [ 721.736263][T24355] ubi: mtd0 is already attached to ubi31 [ 721.796136][T24347] loop0: detected capacity change from 0 to 4096 [ 721.816330][T24347] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 722.001435][T24347] ntfs3: loop0: failed to convert "c46c" to iso8859-3 [ 722.234874][ T5154] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 722.361325][T24370] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 52311 - 0 [ 722.393203][T24370] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 52311 - 0 [ 722.415145][T24370] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 52311 - 0 [ 722.440433][T24370] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 52311 - 0 [ 722.445015][ T5154] usb 6-1: Using ep0 maxpacket: 8 [ 722.469650][T24370] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 57621 - 0 [ 722.490915][T24370] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 57621 - 0 [ 722.501336][ T5154] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 722.524811][ T5154] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 722.534682][T24370] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 57621 - 0 [ 722.547903][T24349] loop1: detected capacity change from 0 to 32768 [ 722.555135][T24370] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 57621 - 0 [ 722.566956][ T5154] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 722.577463][T24370] device geneve2 entered promiscuous mode [ 722.583278][ T5154] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.598126][ T5154] usb 6-1: Product: syz [ 722.614871][T24370] IPv6: ADDRCONF(NETDEV_CHANGE): geneve2: link becomes ready [ 722.622390][ T5154] usb 6-1: Manufacturer: syz [ 722.633497][T24349] JBD2: Ignoring recovery information on journal [ 722.647696][ T5154] usb 6-1: SerialNumber: syz [ 722.708282][ T5154] usb 6-1: config 0 descriptor?? [ 722.794058][T24381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9009'. [ 722.803521][T24381] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9009'. [ 722.834850][T24349] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 722.963136][ T26] audit: type=1800 audit(722.904:482): pid=24349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8995" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 723.118890][ T4271] ocfs2: Unmounting device (7,1) on (node local) [ 723.143045][ T5154] usb 6-1: USB disconnect, device number 26 [ 723.543445][T24403] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9014'. [ 723.902810][T24418] netlink: 180 bytes leftover after parsing attributes in process `syz.5.9027'. [ 724.014849][T23040] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 724.211285][T23040] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 724.225037][T23040] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 724.240038][T23040] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 724.250209][T23040] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.293963][T23040] usb 5-1: config 0 descriptor?? [ 724.304984][T24411] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 724.312411][T24411] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 724.331296][ T26] audit: type=1400 audit(724.274:483): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=24435 comm="syz.5.9037" [ 724.585029][T24440] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 724.783974][T23040] usb 5-1: USB disconnect, device number 51 [ 724.985904][T24458] netlink: 'syz.0.9045': attribute type 2 has an invalid length. [ 725.023697][T24458] netlink: 'syz.0.9045': attribute type 8 has an invalid length. [ 725.052083][T24458] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9045'. [ 725.096102][T24455] loop1: detected capacity change from 0 to 4096 [ 725.389438][ T26] audit: type=1400 audit(725.334:484): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=24471 comm="syz.2.9049" [ 725.973968][T24497] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9059'. [ 726.004900][T24497] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9059'. [ 726.240479][T24509] loop4: detected capacity change from 0 to 8 [ 726.434946][ T4277] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 726.714568][ T3933] device veth0_macvtap left promiscuous mode [ 726.762751][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 726.779842][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 726.825768][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 726.940243][T24532] CIFS mount error: No usable UNC path provided in device string! [ 726.940243][T24532] [ 726.987435][T24532] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 727.235859][T24544] netlink: 'syz.4.9081': attribute type 1 has an invalid length. [ 727.302746][T24549] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 727.816168][T24569] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 727.912303][T24572] loop5: detected capacity change from 0 to 2048 [ 727.943782][T24572] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 728.340907][T24594] dlm: no local IP address has been set [ 728.360516][T24594] dlm: cannot start dlm midcomms -107 [ 729.205891][T24616] loop5: detected capacity change from 0 to 4096 [ 729.969737][T24642] netlink: 'syz.2.9120': attribute type 1 has an invalid length. [ 729.986500][T24611] loop1: detected capacity change from 0 to 32768 [ 730.577696][T24665] CIFS mount error: No usable UNC path provided in device string! [ 730.577696][T24665] [ 730.630630][T24669] loop0: detected capacity change from 0 to 64 [ 730.638006][T24665] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 731.841240][T24717] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9156'. [ 732.020271][T24723] netlink: 348 bytes leftover after parsing attributes in process `syz.1.9159'. [ 732.048747][T24723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9159'. [ 732.305040][T24733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9164'. [ 732.339723][T24735] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 732.436089][T24741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9168'. [ 732.669783][T24748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9181'. [ 732.881834][T24759] loop4: detected capacity change from 0 to 256 [ 732.999341][T24759] FAT-fs (loop4): Directory bread(block 64) failed [ 733.006333][T24759] FAT-fs (loop4): Directory bread(block 65) failed [ 733.013015][T24759] FAT-fs (loop4): Directory bread(block 66) failed [ 733.019777][T24759] FAT-fs (loop4): Directory bread(block 67) failed [ 733.026841][T24759] FAT-fs (loop4): Directory bread(block 68) failed [ 733.033973][T24759] FAT-fs (loop4): Directory bread(block 69) failed [ 733.040759][T24759] FAT-fs (loop4): Directory bread(block 70) failed [ 733.055973][T24759] FAT-fs (loop4): Directory bread(block 71) failed [ 733.082696][T24759] FAT-fs (loop4): Directory bread(block 72) failed [ 733.131880][T24759] FAT-fs (loop4): Directory bread(block 73) failed [ 733.234092][T24770] autofs4:pid:24770:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 733.424038][T24771] loop0: detected capacity change from 0 to 4096 [ 733.463053][T24771] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 733.599115][T24771] ntfs3: loop0: mft corrupted [ 733.928070][T24793] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9191'. [ 734.131548][T24801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9197'. [ 734.272616][T24808] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9200'. [ 734.304572][T24808] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9200'. [ 734.531184][T24817] netlink: 'syz.4.9204': attribute type 21 has an invalid length. [ 734.711477][T24825] VFS: could not find a valid V7 on nullb0. [ 734.875756][T24829] loop1: detected capacity change from 0 to 128 [ 734.934099][T24829] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 734.974831][T24829] hpfs: filesystem error: improperly stopped [ 734.984037][T24829] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 735.037807][T24838] loop4: detected capacity change from 0 to 64 [ 735.043478][T24829] hpfs: You really don't want any checks? You are crazy... [ 735.067940][T24829] hpfs: hpfs_map_sector(): read error [ 735.093965][T24829] hpfs: code page support is disabled [ 735.118839][T24829] hpfs: hpfs_map_4sectors(): unaligned read [ 735.133482][T24838] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 735.154643][T24829] hpfs: hpfs_map_4sectors(): unaligned read [ 735.193339][T24829] hpfs: filesystem error: unable to find root dir [ 735.534972][T23040] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 735.728561][T23040] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 735.761043][T23040] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 735.814644][T23040] usb 6-1: Product: syz [ 735.837793][T23040] usb 6-1: SerialNumber: syz [ 735.861422][T23040] usb 6-1: config 0 descriptor?? [ 736.293091][ T5154] usb 6-1: USB disconnect, device number 27 [ 737.009694][T24904] loop5: detected capacity change from 0 to 1764 [ 737.082321][T24904] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 737.084927][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 737.144357][T24907] loop1: detected capacity change from 0 to 4096 [ 737.178100][T24907] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 737.332464][T24907] ntfs3: loop1: mft corrupted [ 738.399546][T24951] loop4: detected capacity change from 0 to 4096 [ 738.848298][T24971] loop1: detected capacity change from 0 to 1764 [ 738.931361][T24971] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 739.218340][T24981] loop1: detected capacity change from 0 to 1024 [ 739.618178][T24995] netlink: 'syz.0.9289': attribute type 27 has an invalid length. [ 739.826596][T24964] loop5: detected capacity change from 0 to 32768 [ 739.870175][T24964] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.9273 (24964) [ 739.919020][T24964] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 739.937869][T25003] __nla_validate_parse: 3 callbacks suppressed [ 739.937889][T25003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9293'. [ 739.953473][T24964] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 739.977500][T25007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9295'. [ 739.998388][T24964] BTRFS info (device loop5): using free space tree [ 740.320984][T24964] BTRFS info (device loop5): enabling ssd optimizations [ 740.533014][T13681] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 741.115186][T25054] loop1: detected capacity change from 0 to 4096 [ 741.825081][T25083] netlink: 'syz.4.9318': attribute type 27 has an invalid length. [ 742.271152][T25101] binder: 25098:25101 ioctl c018620c 0 returned -14 [ 742.744580][T25115] loop0: detected capacity change from 0 to 1024 [ 742.891763][T25113] device team0 entered promiscuous mode [ 742.902039][T25113] device team_slave_0 entered promiscuous mode [ 742.911643][T25113] device team_slave_1 entered promiscuous mode [ 742.914782][ T5159] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 742.926165][T25113] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 743.157568][ T5159] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 743.193277][ T5159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.231803][ T5159] usb 2-1: config 0 descriptor?? [ 743.415038][ T4338] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 743.456398][ T5159] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 743.471967][T25141] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 743.485379][ T5159] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 743.570531][T25145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9344'. [ 743.594969][T25145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9344'. [ 743.604279][T25145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9344'. [ 743.635247][ T4338] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 743.645369][T25145] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 743.671629][ T5159] [drm:udl_init] *ERROR* Selecting channel failed [ 743.679122][ T4338] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 743.709993][ T4338] usb 1-1: Product: syz [ 743.714322][ T4338] usb 1-1: SerialNumber: syz [ 743.750967][ T4338] usb 1-1: config 0 descriptor?? [ 743.756650][ T5159] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 743.764235][ T5159] [drm] Initialized udl on minor 2 [ 743.805648][ T5159] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 743.860843][ T5159] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 743.889913][ T5159] usb 2-1: USB disconnect, device number 42 [ 743.925215][ T5154] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 743.949940][ T5154] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 743.960473][ T5154] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 744.219741][ T4338] usb 1-1: USB disconnect, device number 32 [ 744.307388][T25162] wg1 speed is unknown, defaulting to 1000 [ 744.495738][T25166] loop4: detected capacity change from 0 to 4096 [ 744.653763][T25162] lo speed is unknown, defaulting to 1000 [ 745.016935][T25182] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 745.253468][T25189] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 745.525053][T25198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9364'. [ 745.551144][T25198] netlink: 'syz.1.9364': attribute type 1 has an invalid length. [ 745.653285][T25202] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9366'. [ 746.178310][T25222] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9376'. [ 746.190828][T25221] loop5: detected capacity change from 0 to 512 [ 746.200021][T25221] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 746.236789][T25221] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 746.278863][T25221] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856e01c, mo2=0102] [ 746.294981][ T5968] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 746.354961][T25221] System zones: 1-12 [ 746.393120][T25221] EXT4-fs (loop5): orphan cleanup on readonly fs [ 746.435472][T25221] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.9375: invalid indirect mapped block 2 (level 2) [ 746.497291][T25225] loop4: detected capacity change from 0 to 512 [ 746.504961][T25208] loop1: detected capacity change from 0 to 32768 [ 746.531674][T25221] EXT4-fs (loop5): 1 truncate cleaned up [ 746.548818][ T5968] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 746.555073][T25221] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 746.573571][ T5968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.611962][ T5968] usb 3-1: Product: syz [ 746.631473][ T5968] usb 3-1: Manufacturer: syz [ 746.652242][ T5968] usb 3-1: SerialNumber: syz [ 746.743850][T25225] Quota error (device loop4): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 746.785255][T25207] loop0: detected capacity change from 0 to 32768 [ 746.795272][T25225] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 746.814368][T25207] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.9369 (25207) [ 746.815855][ T5968] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 746.855808][T25225] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.9377: Failed to acquire dquot type 1 [ 746.868259][T25221] EXT4-fs (loop5): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 746.902690][T25225] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.9377: bg 0: block 495: padding at end of block bitmap is not set [ 746.930424][ T5960] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 746.958710][T25207] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 746.973556][T25225] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 747.018075][T25207] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 747.032251][T25225] EXT4-fs (loop4): 1 truncate cleaned up [ 747.062352][T25225] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 747.075061][T25207] BTRFS info (device loop0): using free space tree [ 747.115931][T25225] Quota error (device loop4): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 747.156398][T13681] EXT4-fs (loop5): unmounting filesystem. [ 747.210100][T25225] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 747.235159][T25225] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.9377: Failed to acquire dquot type 1 [ 747.317178][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.323647][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.332861][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 747.527394][ T5159] usb 3-1: USB disconnect, device number 35 [ 747.592842][T25207] BTRFS info (device loop0): enabling ssd optimizations [ 747.810592][ T4270] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 748.034871][ T5960] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 748.042005][ T5960] ath9k_htc: Failed to initialize the device [ 748.053169][T25266] loop4: detected capacity change from 0 to 4096 [ 748.093121][ T5159] usb 3-1: ath9k_htc: USB layer deinitialized [ 748.099705][T25266] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 748.256635][T25266] ntfs: volume version 3.1. [ 748.374523][T25266] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 748.468945][T25266] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 748.504901][ T4325] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 748.592790][T25282] program syz.0.9389 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 748.604836][T25281] xt_bpf: check failed: parse error [ 748.697287][ T4325] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 748.724925][ T4325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.754611][ T4325] usb 6-1: config 0 descriptor?? [ 748.833285][T25286] xt_ecn: cannot match TCP bits for non-tcp packets [ 748.996460][ T4325] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 749.015850][ T4325] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 749.222169][ T4325] [drm:udl_init] *ERROR* Selecting channel failed [ 749.266662][ T4325] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 749.285112][T25301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9405'. [ 749.314478][ T4325] [drm] Initialized udl on minor 2 [ 749.355642][ T4325] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 749.356304][T25301] netlink: 288 bytes leftover after parsing attributes in process `syz.2.9405'. [ 749.375503][ T4325] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 749.407468][ T4325] usb 6-1: USB disconnect, device number 28 [ 749.456411][ T5968] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 749.477385][ T5968] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 749.512993][ T5968] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 749.521683][T25299] loop4: detected capacity change from 0 to 4096 [ 749.634108][T25311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9409'. [ 749.634307][T25299] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 749.665382][T25299] ntfs3: loop4: Failed to load $Extend. [ 749.869371][T12069] ntfs3: loop4: ntfs3_write_inode r=9 failed, -22. [ 749.886923][ T4281] ntfs3: loop4: ntfs_sync_fs r=9 failed, -22. [ 749.931567][ T4281] ntfs3: loop4: ntfs_evict_inode r=9 failed, -22. [ 750.176429][T25330] loop1: detected capacity change from 0 to 512 [ 750.273019][T25330] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 750.280954][T25330] EXT4-fs (loop1): mount failed [ 751.075578][ T4325] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 751.286988][ T4325] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 751.320952][ T4325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.355848][ T4325] usb 5-1: config 0 descriptor?? [ 751.590371][ T4325] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 751.597559][T25379] loop1: detected capacity change from 0 to 4096 [ 751.604858][ T4325] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 751.624160][T25383] kAFS: unable to lookup cell ' [ 751.624160][T25383] $)-.ÌײfÍY¹Ç²a×ïÅ2sˆ [ 751.624160][T25383] ' [ 751.634090][T25379] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 751.709102][T25379] ntfs: volume version 3.1. [ 751.790378][T25385] wg1 speed is unknown, defaulting to 1000 [ 751.808921][ T4325] [drm:udl_init] *ERROR* Selecting channel failed [ 751.814801][T25379] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 751.863487][T25379] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 751.866500][ T4325] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 751.954442][ T4325] [drm] Initialized udl on minor 2 [ 751.981207][ T4325] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 751.999682][ T4325] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 752.026954][ T4325] usb 5-1: USB disconnect, device number 52 [ 752.047507][ T5960] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 752.067897][ T5960] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 752.085066][ T5960] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 752.224980][ T5163] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 752.286797][T25385] lo speed is unknown, defaulting to 1000 [ 752.418823][ T5163] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 752.433727][ T5163] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.456782][ T5163] usb 6-1: Product: syz [ 752.461023][ T5163] usb 6-1: Manufacturer: syz [ 752.476065][ T5163] usb 6-1: SerialNumber: syz [ 752.529285][ T5163] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 752.596917][ T5163] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 752.607259][T25398] loop1: detected capacity change from 0 to 256 [ 753.076288][ T5960] usb 6-1: USB disconnect, device number 29 [ 753.243523][T25396] loop0: detected capacity change from 0 to 32768 [ 753.388067][T25415] program syz.1.9458 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 753.534396][T25421] xt_ecn: cannot match TCP bits for non-tcp packets [ 753.714853][ T5163] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 753.752429][ T5163] ath9k_htc: Failed to initialize the device [ 753.773125][ T5960] usb 6-1: ath9k_htc: USB layer deinitialized [ 754.239520][T25434] wg1 speed is unknown, defaulting to 1000 [ 754.287667][T25439] kAFS: unable to lookup cell ' [ 754.287667][T25439] $)-.ÌײfÍY¹Ç²a×ïÅ2sˆ [ 754.287667][T25439] ' [ 754.593760][T25441] loop5: detected capacity change from 0 to 4096 [ 754.719582][T25441] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 754.737406][T25434] lo speed is unknown, defaulting to 1000 [ 754.756338][T25441] ntfs3: loop5: Failed to load $Extend. [ 754.948523][T12072] ntfs3: loop5: ntfs3_write_inode r=9 failed, -22. [ 754.956379][T13681] ntfs3: loop5: ntfs_sync_fs r=9 failed, -22. [ 754.963212][T13681] ntfs3: loop5: ntfs_evict_inode r=9 failed, -22. [ 755.021311][T25447] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9476'. [ 755.061414][T25447] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9476'. [ 755.100813][T25447] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9476'. [ 755.145460][T25432] loop1: detected capacity change from 0 to 32768 [ 755.176415][T25432] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.9470 (25432) [ 755.243876][T25432] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 755.291982][T25432] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 755.333685][T25432] BTRFS info (device loop1): using free space tree [ 755.653664][T25432] BTRFS info (device loop1): enabling ssd optimizations [ 756.005355][ T4271] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 756.395308][T25504] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9494'. [ 756.572199][T25501] xt_CT: No such helper "snmp" [ 757.542296][T25540] loop0: detected capacity change from 0 to 256 [ 757.615468][T25540] FAT-fs (loop0): Directory bread(block 64) failed [ 757.652785][T25540] FAT-fs (loop0): Directory bread(block 65) failed [ 757.685017][T25540] FAT-fs (loop0): Directory bread(block 66) failed [ 757.702389][T25540] FAT-fs (loop0): Directory bread(block 67) failed [ 757.735791][T25540] FAT-fs (loop0): Directory bread(block 68) failed [ 757.755576][T25540] FAT-fs (loop0): Directory bread(block 69) failed [ 757.762276][T25540] FAT-fs (loop0): Directory bread(block 70) failed [ 757.812609][T25540] FAT-fs (loop0): Directory bread(block 71) failed [ 757.847645][T25540] FAT-fs (loop0): Directory bread(block 72) failed [ 757.867877][T25540] FAT-fs (loop0): Directory bread(block 73) failed [ 758.147762][T25523] loop4: detected capacity change from 0 to 32768 [ 758.191491][T25523] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.9501 (25523) [ 758.307931][T25523] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 758.341132][T25523] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 758.383537][T25523] BTRFS info (device loop4): using free space tree [ 758.800795][T25523] BTRFS info (device loop4): enabling ssd optimizations [ 759.060785][ T4281] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 759.178063][T25613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9536'. [ 759.238564][T25607] xt_CT: No such helper "snmp" [ 759.645101][ T4325] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 759.672328][T25624] binfmt_misc: register: failed to install interpreter file ./file2 [ 759.837031][ T4325] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 759.868484][ T4325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.898167][ T4325] usb 3-1: config 0 descriptor?? [ 760.027912][T25616] loop5: detected capacity change from 0 to 32768 [ 760.112213][ T4325] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 760.142394][T25641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9548'. [ 760.144840][ T4325] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 760.247709][T25616] XFS (loop5): Mounting V5 Filesystem [ 760.334435][ T4325] [drm:udl_init] *ERROR* Selecting channel failed [ 760.336117][T25616] XFS (loop5): Ending clean mount [ 760.372978][ T4325] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 760.391027][ T4325] [drm] Initialized udl on minor 2 [ 760.418203][ T4325] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 760.436810][ T4325] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 760.462468][ T4325] usb 3-1: USB disconnect, device number 36 [ 760.475925][ T5960] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 760.484354][ T5960] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 760.494265][ T5960] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 760.536722][T25616] XFS (loop5): Quotacheck needed: Please wait. [ 760.566079][ T5968] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 760.615224][T25616] XFS (loop5): Quotacheck: Done. [ 760.745973][T13681] XFS (loop5): Unmounting Filesystem [ 760.768418][ T5968] usb 5-1: Using ep0 maxpacket: 16 [ 760.775147][ T5960] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 760.791400][ T5968] usb 5-1: config index 0 descriptor too short (expected 65532, got 18) [ 760.811005][ T5968] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 760.833228][ T5968] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 760.867302][ T5968] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 760.899569][ T5968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.921603][ T5968] usb 5-1: Product: syz [ 760.926205][ T5968] usb 5-1: Manufacturer: syz [ 760.930854][ T5968] usb 5-1: SerialNumber: syz [ 760.961779][ T5968] r8152-cfgselector 5-1: config 0 descriptor?? [ 760.989284][ T5960] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.010468][ T5960] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 761.030484][ T5960] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 761.055903][T25662] netlink: zone id is out of range [ 761.058177][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.100011][ T5960] usb 1-1: config 0 descriptor?? [ 761.249425][ T7] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 761.338240][ T5960] usb 1-1: USB disconnect, device number 33 [ 761.402623][ T5968] r8152-cfgselector 5-1: Unknown version 0x0000 [ 761.432067][ T5968] r8152-cfgselector 5-1: USB disconnect, device number 53 [ 761.454771][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 761.467471][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.525381][ T7] usb 2-1: New USB device found, idVendor=031b, idProduct=0201, bcdDevice=2a.d5 [ 761.534599][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.562183][ T7] usb 2-1: config 0 descriptor?? [ 761.565953][ T4263] udevd[4263]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 761.791079][ T7] usb 2-1: USB disconnect, device number 43 [ 762.007852][T25692] netlink: 'syz.5.9571': attribute type 1 has an invalid length. [ 762.046885][T25692] netlink: 'syz.5.9571': attribute type 3 has an invalid length. [ 762.065393][T25692] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9571'. [ 762.097246][T25696] netlink: 'syz.2.9573': attribute type 2 has an invalid length. [ 762.122431][T25696] netlink: 'syz.2.9573': attribute type 1 has an invalid length. [ 762.148246][T25696] netlink: 'syz.2.9573': attribute type 2 has an invalid length. [ 762.164913][T25698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9574'. [ 762.174188][T25696] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9573'. [ 762.511522][T25700] loop4: detected capacity change from 0 to 4096 [ 762.537074][T25700] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 762.557964][T25711] binfmt_misc: register: failed to install interpreter file ./file2 [ 762.709236][T25700] ntfs3: loop4: ino=5, "/" directory corrupted [ 762.755054][T25700] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 762.835065][ T5968] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 762.975011][ T7] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 763.031082][ T5968] usb 1-1: Using ep0 maxpacket: 8 [ 763.039038][ T5968] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.090064][ T5968] usb 1-1: New USB device found, idVendor=031b, idProduct=0201, bcdDevice=2a.d5 [ 763.135208][ T5968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.145226][ T8901] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 763.158617][ T5968] usb 1-1: config 0 descriptor?? [ 763.195592][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.219460][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 763.246074][ T7] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 763.268155][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.280968][ T7] usb 2-1: config 0 descriptor?? [ 763.347086][ T8901] usb 3-1: config 1 has an invalid interface number: 188 but max is 0 [ 763.364741][ T8901] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 763.376470][ T8901] usb 3-1: config 1 has no interface number 0 [ 763.382675][ T8901] usb 3-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 763.394452][ T5968] usb 1-1: USB disconnect, device number 34 [ 763.396710][ T8901] usb 3-1: config 1 interface 188 has no altsetting 0 [ 763.457721][ T8901] usb 3-1: New USB device found, idVendor=2040, idProduct=7200, bcdDevice=5b.6b [ 763.484833][ T8901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.522424][ T7] usb 2-1: USB disconnect, device number 44 [ 763.530260][ T8901] usb 3-1: Product: syz [ 763.543218][ T8901] usb 3-1: Manufacturer: syz [ 763.554351][ T8901] usb 3-1: SerialNumber: syz [ 763.596312][ T8901] usb 3-1: cannot find UAC_HEADER [ 763.615699][ T8901] snd-usb-audio: probe of 3-1:1.188 failed with error -22 [ 763.776265][ T4262] udevd[4262]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 763.822611][ T8901] usb 3-1: USB disconnect, device number 37 [ 763.891202][T25742] binfmt_misc: register: failed to install interpreter file ./file2 [ 764.035744][ T4263] udevd[4263]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 764.048721][T25746] netlink: 'syz.4.9597': attribute type 2 has an invalid length. [ 764.084856][T25746] netlink: 'syz.4.9597': attribute type 1 has an invalid length. [ 764.131831][T25746] netlink: 'syz.4.9597': attribute type 2 has an invalid length. [ 764.155948][T25746] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9597'. [ 764.304825][ T5968] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 764.494781][ T5968] usb 6-1: Using ep0 maxpacket: 16 [ 764.501887][ T5968] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 764.547464][ T5968] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 24929, setting to 1024 [ 764.589200][ T5968] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 764.650832][ T5968] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 764.682279][T25766] binfmt_misc: register: failed to install interpreter file ./file2 [ 764.690852][ T5968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 764.724917][ T5968] usb 6-1: SerialNumber: syz [ 764.753359][T25744] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 764.770864][T25744] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 764.833699][T25771] loop4: detected capacity change from 0 to 8 [ 765.005131][ T5968] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 765.038864][ T5968] usb 6-1: USB disconnect, device number 30 [ 765.351179][T25784] tmpfs: Bad value for 'mpol' [ 765.378149][T25785] loop1: detected capacity change from 0 to 512 [ 765.398251][T25785] EXT4-fs: Ignoring removed bh option [ 765.411754][T25754] loop0: detected capacity change from 0 to 32768 [ 765.425098][T25785] EXT4-fs (loop1): Test dummy encryption mode enabled [ 765.457025][T25785] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 765.519172][T25785] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 765.541465][T25785] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 765.699709][T25785] EXT4-fs: Ignoring removed bh option [ 765.756222][T25785] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 765.816622][T25791] loop4: detected capacity change from 0 to 4096 [ 765.891501][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 765.937660][T25791] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 766.358318][T25813] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9630'. [ 766.621780][T25821] netlink: 'syz.4.9634': attribute type 1 has an invalid length. [ 766.694860][ T5960] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 766.885146][ T5960] usb 3-1: Using ep0 maxpacket: 16 [ 766.900408][ T5960] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 766.946100][ T5960] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 24929, setting to 1024 [ 767.003145][ T5960] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 767.046760][ T5960] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 767.076338][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 767.084428][ T5960] usb 3-1: SerialNumber: syz [ 767.139949][T25817] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 767.156031][T25817] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 767.401452][ T5960] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 767.432377][ T5960] usb 3-1: USB disconnect, device number 38 [ 767.527852][T25855] netlink: 'syz.5.9650': attribute type 1 has an invalid length. [ 768.434218][T25882] wg1 speed is unknown, defaulting to 1000 [ 768.665086][ T5960] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 768.712272][T25882] lo speed is unknown, defaulting to 1000 [ 768.772114][T25869] loop1: detected capacity change from 0 to 32768 [ 768.855258][ T5960] usb 5-1: Using ep0 maxpacket: 32 [ 768.862816][ T5960] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 768.892263][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.930981][ T5960] usb 5-1: config 0 descriptor?? [ 768.957831][ T5960] gspca_main: sunplus-2.14.0 probing 041e:400b [ 769.111817][T25903] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9675'. [ 769.354139][ T5960] gspca_sunplus: reg_w_riv err -71 [ 769.361429][ T5960] sunplus: probe of 5-1:0.0 failed with error -71 [ 769.375518][T25911] vivid-007: disconnect [ 769.388507][ T5960] usb 5-1: USB disconnect, device number 54 [ 769.398244][T25908] vivid-007: reconnect [ 769.748941][T25918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9682'. [ 769.791203][T25918] netlink: 312 bytes leftover after parsing attributes in process `syz.0.9682'. [ 769.838374][T25918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9682'. [ 770.161708][T25907] loop5: detected capacity change from 0 to 32768 [ 770.215138][T25907] [ 770.215138][T25907] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 770.215138][T25907] [ 770.283386][T25907] ialloc: diAlloc returned -5! [ 770.392045][T25930] loop1: detected capacity change from 0 to 4096 [ 770.476329][T13681] [ 770.476329][T13681] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 770.476329][T13681] [ 770.522092][T25930] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 770.532683][T13681] [ 770.532683][T13681] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 770.532683][T13681] [ 771.035059][ T5960] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 771.232413][ T5960] usb 6-1: config 1 has an invalid interface number: 188 but max is 0 [ 771.251536][ T5960] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 771.302375][ T5960] usb 6-1: config 1 has no interface number 0 [ 771.313685][ T5960] usb 6-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 771.357881][ T5960] usb 6-1: config 1 interface 188 has no altsetting 0 [ 771.401462][ T5960] usb 6-1: New USB device found, idVendor=2040, idProduct=7200, bcdDevice=5b.6b [ 771.446986][ T5960] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.465598][ T5960] usb 6-1: Product: syz [ 771.469829][ T5960] usb 6-1: Manufacturer: syz [ 771.474459][ T5960] usb 6-1: SerialNumber: syz [ 771.549470][ T5960] usb 6-1: cannot find UAC_HEADER [ 771.579022][ T5960] snd-usb-audio: probe of 6-1:1.188 failed with error -22 [ 771.623607][ T4262] udevd[4262]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 771.800664][ T5960] usb 6-1: USB disconnect, device number 31 [ 772.413046][T25961] loop0: detected capacity change from 0 to 32768 [ 772.441452][T25961] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.9703 (25961) [ 772.503687][T25961] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 772.578849][T25961] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 772.640958][T25961] BTRFS info (device loop0): using free space tree [ 772.797363][T26008] loop5: detected capacity change from 0 to 256 [ 772.966593][T26008] FAT-fs (loop5): Directory bread(block 64) failed [ 772.994950][T25961] BTRFS info (device loop0): enabling ssd optimizations [ 773.003959][T26008] FAT-fs (loop5): Directory bread(block 65) failed [ 773.047068][T26008] FAT-fs (loop5): Directory bread(block 66) failed [ 773.064859][T26008] FAT-fs (loop5): Directory bread(block 67) failed [ 773.100596][T26008] FAT-fs (loop5): Directory bread(block 68) failed [ 773.134955][T26008] FAT-fs (loop5): Directory bread(block 69) failed [ 773.141708][T26008] FAT-fs (loop5): Directory bread(block 70) failed [ 773.152651][T26027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9726'. [ 773.185093][T26027] netlink: 312 bytes leftover after parsing attributes in process `syz.2.9726'. [ 773.204274][ T4270] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 773.204945][T26029] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 773.215096][T26008] FAT-fs (loop5): Directory bread(block 71) failed [ 773.244112][T26027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9726'. [ 773.310226][T26008] FAT-fs (loop5): Directory bread(block 72) failed [ 773.370996][T26008] FAT-fs (loop5): Directory bread(block 73) failed [ 773.529653][T26033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9731'. [ 773.900173][T26041] netlink: 'syz.1.9736': attribute type 1 has an invalid length. [ 774.397475][T26051] loop0: detected capacity change from 0 to 4096 [ 774.417520][T26061] loop1: detected capacity change from 0 to 16 [ 774.442788][T26061] erofs: (device loop1): mounted with root inode @ nid 36. [ 774.478148][T26051] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 774.513661][T26061] syz.1.9744: attempt to access beyond end of device [ 774.513661][T26061] loop1: rw=0, sector=48, nr_sectors = 16 limit=16 [ 775.279567][T26091] xt_TPROXY: Can be used only with -p tcp or -p udp [ 775.532162][T26097] netlink: 'syz.4.9764': attribute type 10 has an invalid length. [ 775.596152][T26102] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 775.629524][T26103] netlink: 'syz.5.9762': attribute type 4 has an invalid length. [ 775.892284][T26113] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9770'. [ 775.943661][T26108] loop4: detected capacity change from 0 to 4096 [ 776.044792][T26108] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 776.077184][T26121] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9774'. [ 776.191911][T26108] ntfs3: loop4: failed to convert "c46c" to macceltic [ 776.918894][T26147] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9786'. [ 777.211087][T26153] netlink: 'syz.5.9789': attribute type 25 has an invalid length. [ 777.249498][T26153] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9789'. [ 777.545410][T26163] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9795'. [ 777.561340][T26135] loop0: detected capacity change from 0 to 32768 [ 777.600437][T26135] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.9790 (26135) [ 777.709127][T26135] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 777.755797][T26135] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 777.787247][T26135] BTRFS info (device loop0): using free space tree [ 777.815637][T26167] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 777.859734][T26171] xt_TPROXY: Can be used only with -p tcp or -p udp [ 778.104479][T26135] BTRFS info (device loop0): enabling ssd optimizations [ 778.266313][ T4270] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 778.288658][T26199] netlink: 'syz.2.9803': attribute type 1 has an invalid length. [ 778.354761][ T14] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 778.398352][ T22] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 778.574893][ T14] usb 6-1: Using ep0 maxpacket: 16 [ 778.590869][ T14] usb 6-1: config 1 has an invalid descriptor of length 164, skipping remainder of the config [ 778.626638][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 778.631891][ T14] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 778.657990][ T22] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 778.685484][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.688017][ T14] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 778.720369][ T22] usb 5-1: config 0 descriptor?? [ 778.722682][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.736031][ T22] smsusb:smsusb_probe: board id=8, interface number 0 [ 778.748312][ T14] usb 6-1: Product: syz [ 778.752540][ T14] usb 6-1: Manufacturer: syz [ 778.758207][ T22] smsusb:smsusb_probe: Device initialized with return code -19 [ 778.782158][ T14] usb 6-1: SerialNumber: syz [ 779.008719][ T14] usb 6-1: 0:2 : does not exist [ 779.013787][ T14] usb 6-1: unit 9 not found! [ 779.045294][ T22] usb 5-1: USB disconnect, device number 55 [ 779.070448][ T14] usb 6-1: USB disconnect, device number 32 [ 779.152145][ T4262] udevd[4262]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 779.379534][T26224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9814'. [ 780.122437][T26248] loop0: detected capacity change from 0 to 2048 [ 780.255190][T26255] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 780.309227][T26248] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=18446744072317042688, rec_len=65535, name_len=255 [ 780.393134][T26248] Remounting filesystem read-only [ 780.575875][T26267] MPI: mpi too large (107144 bits) [ 781.327577][T26296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9852'. [ 781.365226][T26296] infiniband syz2: set active [ 781.405230][T26296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9852'. [ 781.430419][T26296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9852'. [ 781.480734][T26296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9852'. [ 781.505818][T26296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9852'. [ 781.528610][T26296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9852'. [ 781.575401][T26296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9852'. [ 781.610677][T26296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9852'. [ 781.623505][T26296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9852'. [ 781.667401][T26296] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 781.685689][T26296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 781.705498][T26296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 781.767399][T26296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 781.806702][T26296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 781.851232][ T4317] lo speed is unknown, defaulting to 1000 [ 781.881167][T26313] sctp: [Deprecated]: syz.0.9858 (pid 26313) Use of struct sctp_assoc_value in delayed_ack socket option. [ 781.881167][T26313] Use struct sctp_sack_info instead [ 782.692164][T26345] loop4: detected capacity change from 0 to 8 [ 782.718749][T26345] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 782.747360][ T4262] udevd[4262]: incorrect cramfs checksum on /dev/loop4 [ 782.775035][T26345] cramfs: empty filesystem [ 782.806264][ T5152] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 782.985091][ T14] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 783.016899][ T5152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 783.055587][ T5152] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 783.075605][ T5152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.096617][ T5152] usb 3-1: config 0 descriptor?? [ 783.126281][ T5152] smsusb:smsusb_probe: board id=8, interface number 0 [ 783.154137][ T5152] smsusb:smsusb_probe: Device initialized with return code -19 [ 783.186998][ T14] usb 1-1: unable to get BOS descriptor or descriptor too short [ 783.214450][ T14] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 783.254752][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.262825][ T14] usb 1-1: Product: syz [ 783.294785][ T14] usb 1-1: Manufacturer: syz [ 783.299459][ T14] usb 1-1: SerialNumber: syz [ 783.340725][ T14] usb 1-1: selecting invalid altsetting 1 [ 783.366008][ T14] usb 1-1: unit 6 not found! [ 783.388096][ T5152] usb 3-1: USB disconnect, device number 39 [ 783.756888][ T14] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 783.779336][ T14] usb 1-1: selecting invalid altsetting 1 [ 783.797083][ T14] usb 1-1: unit 6 not found! [ 783.806857][ T14] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 783.825300][ T14] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 783.855954][ T14] usb 1-1: selecting invalid altsetting 1 [ 783.884430][ T14] usb 1-1: unit 6 not found! [ 783.894018][ T14] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 783.953708][ T14] snd-usb-audio: probe of 1-1:1.2 failed with error -22 [ 783.994938][ T14] usb 1-1: USB disconnect, device number 35 [ 784.139991][T26368] loop4: detected capacity change from 0 to 32768 [ 784.143371][T26370] loop1: detected capacity change from 0 to 32768 [ 784.184854][T26368] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.9887 (26368) [ 784.242076][ T4263] udevd[4263]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 784.271559][T26368] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 784.271697][T26370] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.9888 (26370) [ 784.300375][T26368] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 784.346299][T26368] BTRFS info (device loop4): setting nodatasum [ 784.353121][T26368] BTRFS info (device loop4): using free space tree [ 784.572030][ T4595] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (4595) [ 784.699657][T26368] BTRFS info (device loop4): enabling ssd optimizations [ 784.750724][ T26] audit: type=1326 audit(784.694:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26412 comm="syz.5.9901" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68da99cdd9 code=0x7ffc0000 [ 784.759990][T26414] loop1: detected capacity change from 0 to 256 [ 784.795398][ T26] audit: type=1326 audit(784.724:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26412 comm="syz.5.9901" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f68da99cdd9 code=0x7ffc0000 [ 784.930920][ T26] audit: type=1326 audit(784.724:487): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=26412 comm="syz.5.9901" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68da99cdd9 code=0x7ffc0000 [ 785.002372][T26414] FAT-fs (loop1): Directory bread(block 64) failed [ 785.033766][ T4281] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 785.043677][T26414] FAT-fs (loop1): Directory bread(block 65) failed [ 785.083186][T26414] FAT-fs (loop1): Directory bread(block 66) failed [ 785.130027][T26414] FAT-fs (loop1): Directory bread(block 67) failed [ 785.147288][T26414] FAT-fs (loop1): Directory bread(block 68) failed [ 785.154011][T26414] FAT-fs (loop1): Directory bread(block 69) failed [ 785.197214][T26414] FAT-fs (loop1): Directory bread(block 70) failed [ 785.203820][T26414] FAT-fs (loop1): Directory bread(block 71) failed [ 785.274884][T26414] FAT-fs (loop1): Directory bread(block 72) failed [ 785.281495][T26414] FAT-fs (loop1): Directory bread(block 73) failed [ 785.304801][ T22] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 785.368019][T26426] netlink: 'syz.0.9908': attribute type 3 has an invalid length. [ 785.394772][T26426] __nla_validate_parse: 72 callbacks suppressed [ 785.394790][T26426] netlink: 766 bytes leftover after parsing attributes in process `syz.0.9908'. [ 785.515501][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 785.534977][ T22] usb 6-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 785.555074][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.578362][ T22] usb 6-1: config 0 descriptor?? [ 785.596438][ T22] smsusb:smsusb_probe: board id=8, interface number 0 [ 785.614958][ T22] smsusb:smsusb_probe: Device initialized with return code -19 [ 785.865932][T26434] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9911'. [ 785.871872][ T5152] usb 6-1: USB disconnect, device number 33 [ 786.064977][ T14] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 786.274482][ T14] usb 2-1: unable to get BOS descriptor or descriptor too short [ 786.295725][ T14] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 786.314985][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.332984][ T14] usb 2-1: Product: syz [ 786.347796][ T14] usb 2-1: Manufacturer: syz [ 786.362795][ T14] usb 2-1: SerialNumber: syz [ 786.387166][ T14] usb 2-1: selecting invalid altsetting 1 [ 786.428464][ T14] usb 2-1: unit 6 not found! [ 786.795510][ T14] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 786.810763][T26465] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9925'. [ 786.822833][ T14] usb 2-1: selecting invalid altsetting 1 [ 786.829315][ T14] usb 2-1: unit 6 not found! [ 786.844552][ T14] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 786.855217][ T14] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 786.881486][ T14] usb 2-1: selecting invalid altsetting 1 [ 786.908424][ T14] usb 2-1: unit 6 not found! [ 786.935421][ T14] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 786.980579][ T14] snd-usb-audio: probe of 2-1:1.2 failed with error -22 [ 787.058681][ T14] usb 2-1: USB disconnect, device number 45 [ 787.073817][ T4262] udevd[4262]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 787.255373][T26483] tmpfs: Bad value for 'mpol' [ 787.396510][T26487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9936'. [ 787.419334][T26487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9936'. [ 787.462917][ T26] audit: type=1326 audit(787.404:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26490 comm="syz.4.9939" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9db9cdd9 code=0x7ffc0000 [ 787.495861][T26487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9936'. [ 787.515615][ T26] audit: type=1326 audit(787.404:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26490 comm="syz.4.9939" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f6b9db9cdd9 code=0x7ffc0000 [ 787.545457][T26487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9936'. [ 787.565371][T26487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9936'. [ 787.584346][T26487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9936'. [ 787.614957][ T26] audit: type=1326 audit(787.404:490): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=26490 comm="syz.4.9939" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9db9cdd9 code=0x7ffc0000 [ 787.643000][T26487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9936'. [ 787.668142][T26487] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 787.700830][T26487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 787.716220][ T26] audit: type=1326 audit(787.404:491): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=26490 comm="syz.4.9939" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9db9cdd9 code=0x7ffc0000 [ 787.770728][T26487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 787.799376][T26487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 787.808144][T26487] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 788.696313][T26503] loop1: detected capacity change from 0 to 32768 [ 788.734839][ T5963] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 788.935069][ T5963] usb 6-1: Using ep0 maxpacket: 32 [ 788.944517][ T5963] usb 6-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 788.974366][ T5963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.023101][ T5963] usb 6-1: Product: syz [ 789.037620][ T5963] usb 6-1: Manufacturer: syz [ 789.042543][ T5963] usb 6-1: SerialNumber: syz [ 789.305585][ T5963] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 789.335175][ T5963] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 789.373232][ T5963] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 789.526699][ T14] usb 6-1: USB disconnect, device number 34 [ 789.573199][ T14] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 789.678627][ T14] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 789.733366][ T14] visor 6-1:1.0: device disconnected [ 789.992697][T26569] ./file0: Can't open blockdev [ 790.350286][T26561] loop4: detected capacity change from 0 to 32768 [ 790.374862][T26561] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.9974 (26561) [ 790.422406][T26561] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 790.450876][T26561] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 790.475793][T26561] BTRFS info (device loop4): using free space tree [ 790.514836][ T14] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 790.604070][T26602] xt_TPROXY: Can be used only with -p tcp or -p udp [ 790.711732][T26610] netlink: 'syz.2.9992': attribute type 12 has an invalid length. [ 790.725204][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 790.738764][ T14] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.765050][T26561] BTRFS info (device loop4): enabling ssd optimizations [ 790.804795][ T14] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.863042][ T14] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 790.913126][ T14] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 790.934898][ T14] usb 1-1: Product: syz [ 790.972507][ T14] usb 1-1: Manufacturer: syz [ 791.025814][ T14] hub 1-1:4.0: USB hub found [ 791.051344][ T4281] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 791.066094][T26621] loop5: detected capacity change from 0 to 64 [ 791.151551][T26621] Trying to free block not in datazone [ 791.191011][T26621] Trying to free block not in datazone [ 791.204343][T26621] Trying to free block not in datazone [ 791.210173][ T5963] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 791.219366][ T14] hub 1-1:4.0: 2 ports detected [ 791.229003][T26621] Trying to free block not in datazone [ 791.238464][T26621] minix_free_block (loop5:6): bit already cleared [ 791.272321][T26621] Trying to free block not in datazone [ 791.292165][T26621] Trying to free block not in datazone [ 791.404992][ T5963] usb 3-1: Using ep0 maxpacket: 32 [ 791.425993][ T14] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 791.433308][ T5963] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 791.434214][ T14] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 791.452550][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.461025][ T5963] usb 3-1: Product: syz [ 791.472341][ T5963] usb 3-1: Manufacturer: syz [ 791.495743][ T14] usb 1-1: USB disconnect, device number 36 [ 791.501621][ T5963] usb 3-1: SerialNumber: syz [ 791.732785][ T5963] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 791.766871][ T5963] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 791.788330][ T5963] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 791.930280][T26623] loop1: detected capacity change from 0 to 32768 [ 791.990015][T26623] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.9997 (26623) [ 792.021531][ T5963] usb 3-1: USB disconnect, device number 40 [ 792.046169][ T5963] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 792.057608][T26633] loop5: detected capacity change from 0 to 256 [ 792.109263][T26633] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 792.129232][ T5963] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 792.202781][ T5963] visor 3-1:1.0: device disconnected [ 792.228955][T26623] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 792.240282][T26635] __nla_validate_parse: 78 callbacks suppressed [ 792.240299][T26635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10002'. [ 792.284028][T26623] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 792.285150][T26635] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10002'. [ 792.308463][T26623] BTRFS info (device loop1): setting nodatasum [ 792.322491][T26623] BTRFS info (device loop1): using free space tree [ 792.334878][T26635] netlink: 'syz.0.10002': attribute type 1 has an invalid length. [ 792.615582][T26623] BTRFS info (device loop1): enabling ssd optimizations [ 792.699420][T26662] loop5: detected capacity change from 0 to 256 [ 792.765892][T26662] exfat: Deprecated parameter 'namecase' [ 792.771819][T26662] exfat: Deprecated parameter 'utf8' [ 792.865111][T26662] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe5fd08b, utbl_chksum : 0xe619d30d) [ 792.895542][ T4271] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 793.235739][ T4262] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (4262) [ 793.810901][T26659] loop4: detected capacity change from 0 to 32768 [ 794.529420][T26713] loop0: detected capacity change from 0 to 256 [ 794.653857][T26713] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 794.707113][T26719] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 794.883711][T26724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10034'. [ 794.913379][T26724] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10034'. [ 794.931565][T26724] netlink: 'syz.1.10034': attribute type 1 has an invalid length. [ 795.358386][T26742] loop5: detected capacity change from 0 to 256 [ 795.562542][T26749] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 796.057360][T26768] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.10056'. [ 796.701436][T26788] netlink: 'syz.4.10066': attribute type 21 has an invalid length. [ 796.987305][T26795] loop5: detected capacity change from 0 to 2048 [ 797.003841][T26770] loop1: detected capacity change from 0 to 32768 [ 797.031742][T26770] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 797.039191][T26795] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 797.044862][T26770] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 797.075012][T26770] BTRFS info (device loop1): using free space tree [ 797.433787][T26770] BTRFS info (device loop1): enabling ssd optimizations [ 797.526939][ T4271] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 797.774225][T26829] loop5: detected capacity change from 0 to 4096 [ 797.832809][T26829] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 797.912723][T26838] loop4: detected capacity change from 0 to 1024 [ 798.444919][ T124] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 798.458438][T26850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10086'. [ 798.487376][T26850] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10086'. [ 798.528777][T26850] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10086'. [ 798.656657][ T124] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 798.687359][ T124] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.730904][ T124] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 798.762904][ T124] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 798.802147][ T124] usb 1-1: Product: syz [ 798.819272][ T124] usb 1-1: Manufacturer: syz [ 798.845900][ T124] hub 1-1:4.0: USB hub found [ 799.059804][ T124] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 799.101988][T26870] loop4: detected capacity change from 0 to 16 [ 799.165733][T26870] erofs: (device loop4): mounted with root inode @ nid 36. [ 799.224241][T26870] erofs: (device loop4): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 799.299014][T26870] syz.4.10096: attempt to access beyond end of device [ 799.299014][T26870] loop4: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 799.406183][ T124] usb 1-1: USB disconnect, device number 37 [ 799.418542][T26870] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 799.448498][T26870] syz.4.10096: attempt to access beyond end of device [ 799.448498][T26870] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 799.480112][T26870] syz.4.10096: attempt to access beyond end of device [ 799.480112][T26870] loop4: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 799.503931][ T26] audit: type=1800 audit(799.444:492): pid=26870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.10096" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 800.330389][T26912] loop4: detected capacity change from 0 to 512 [ 800.368343][T26912] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 800.407773][T26916] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10118'. [ 800.441104][T26916] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10118'. [ 800.483291][T26912] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 800.514918][T26916] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10118'. [ 800.524359][T26912] Quota error (device loop4): write_blk: dquota write failed [ 800.571649][T26912] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 800.585180][T26912] Quota error (device loop4): write_blk: dquota write failed [ 800.645908][T26912] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 800.684849][T26912] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.10117: Failed to acquire dquot type 1 [ 800.755385][T26912] EXT4-fs (loop4): 1 truncate cleaned up [ 800.761449][T26912] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 800.846439][T26932] netlink: 'syz.1.10125': attribute type 32 has an invalid length. [ 800.918609][T26912] Quota error (device loop4): write_blk: dquota write failed [ 800.941922][T26912] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 800.977801][T26912] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.10117: Failed to acquire dquot type 1 [ 801.146117][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 802.394817][T26842] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 802.584750][T26842] usb 6-1: Using ep0 maxpacket: 32 [ 802.592362][T26842] usb 6-1: unable to get BOS descriptor or descriptor too short [ 802.642986][T26842] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 802.679731][T26842] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 802.731052][T26842] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 802.754886][T26842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.783454][T26842] usb 6-1: Product: syz [ 802.803710][T26842] usb 6-1: Manufacturer: syz [ 802.812275][T26842] usb 6-1: SerialNumber: syz [ 803.045633][T26842] usb 6-1: MIDIStreaming interface descriptor not found [ 803.102310][T26842] usb 6-1: USB disconnect, device number 35 [ 803.423101][T27031] netdevsim netdevsim2 netdevsim0: unset [1, 2] type 2 family 0 port 57621 - 0 [ 803.450677][T27031] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 52311 - 0 [ 803.467139][T27034] loop1: detected capacity change from 0 to 512 [ 803.487541][T27034] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 803.488418][T27031] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.549248][ T4260] udevd[4260]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 803.693460][T27034] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 803.805130][T27034] Quota error (device loop1): write_blk: dquota write failed [ 803.812583][T27034] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 803.885067][T27034] Quota error (device loop1): write_blk: dquota write failed [ 803.892743][T27034] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.10175: Failed to acquire dquot type 1 [ 803.925070][T27034] EXT4-fs (loop1): 1 truncate cleaned up [ 803.930799][T27034] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 804.025490][T27034] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.10175: Failed to acquire dquot type 1 [ 804.206089][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 804.392938][T27064] loop5: detected capacity change from 0 to 22 [ 804.434478][T27064] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 804.502016][T27064] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 804.610778][T27068] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.858283][T27046] loop4: detected capacity change from 0 to 32768 [ 804.871692][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 804.871715][ T26] audit: type=1400 audit(804.814:493): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=27074 comm="syz.1.10195" [ 804.907701][ C1] vkms_vblank_simulate: vblank timer overrun [ 804.934234][T27046] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.10181 (27046) [ 804.996112][T27046] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 805.046991][T27046] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 805.095589][T27046] BTRFS info (device loop4): setting nodatacow, compression disabled [ 805.132395][T27046] BTRFS info (device loop4): enabling auto defrag [ 805.175769][T27046] BTRFS info (device loop4): metadata ratio 5 [ 805.181945][T27046] BTRFS info (device loop4): max_inline at 0 [ 805.224816][T27046] BTRFS info (device loop4): using free space tree [ 805.302034][T27092] netlink: 120 bytes leftover after parsing attributes in process `syz.5.10202'. [ 805.745541][ T26] audit: type=1326 audit(805.694:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27115 comm="syz.0.10205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff25839cdd9 code=0x0 [ 805.825384][ T4281] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 806.784229][T27150] cgroup: Unknown subsys name 'pcr' [ 807.275507][T27170] netlink: 120 bytes leftover after parsing attributes in process `syz.1.10231'. [ 808.024983][T27201] netlink: 'syz.4.10247': attribute type 1 has an invalid length. [ 808.757300][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.763723][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.968731][T27237] netlink: 'syz.1.10264': attribute type 1 has an invalid length. [ 809.140633][T27242] loop5: detected capacity change from 0 to 256 [ 809.210903][T27242] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 809.228577][T27246] loop4: detected capacity change from 0 to 256 [ 809.383685][T27246] FAT-fs (loop4): Directory bread(block 64) failed [ 809.414850][T27246] FAT-fs (loop4): Directory bread(block 65) failed [ 809.421864][T27246] FAT-fs (loop4): Directory bread(block 66) failed [ 809.474857][T27246] FAT-fs (loop4): Directory bread(block 67) failed [ 809.481617][T27246] FAT-fs (loop4): Directory bread(block 68) failed [ 809.535295][T27246] FAT-fs (loop4): Directory bread(block 69) failed [ 809.541974][T27246] FAT-fs (loop4): Directory bread(block 70) failed [ 809.593595][T27246] FAT-fs (loop4): Directory bread(block 71) failed [ 809.600946][T27246] FAT-fs (loop4): Directory bread(block 72) failed [ 809.622405][T27246] FAT-fs (loop4): Directory bread(block 73) failed [ 809.875663][T27262] loop5: detected capacity change from 0 to 256 [ 809.976334][T27262] FAT-fs (loop5): Directory bread(block 64) failed [ 809.982983][T27262] FAT-fs (loop5): Directory bread(block 65) failed [ 810.073100][T27262] FAT-fs (loop5): Directory bread(block 66) failed [ 810.086783][T27262] FAT-fs (loop5): Directory bread(block 67) failed [ 810.100947][T27262] FAT-fs (loop5): Directory bread(block 68) failed [ 810.113953][T27262] FAT-fs (loop5): Directory bread(block 69) failed [ 810.145095][T27262] FAT-fs (loop5): Directory bread(block 70) failed [ 810.164078][T27267] loop4: detected capacity change from 0 to 512 [ 810.174922][T27262] FAT-fs (loop5): Directory bread(block 71) failed [ 810.181811][T27262] FAT-fs (loop5): Directory bread(block 72) failed [ 810.214547][T27267] EXT4-fs: Ignoring removed orlov option [ 810.223515][T27262] FAT-fs (loop5): Directory bread(block 73) failed [ 810.320188][T27267] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 810.396140][ T26] audit: type=1800 audit(810.344:495): pid=27262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.10274" name="file1" dev="loop5" ino=1048683 res=0 errno=0 [ 810.442108][T27275] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 810.443630][T27267] [ 810.459745][T27267] ====================================================== [ 810.466783][T27267] WARNING: possible circular locking dependency detected [ 810.466947][T27253] loop1: detected capacity change from 0 to 32768 [ 810.473805][T27267] syzkaller #0 Not tainted [ 810.473818][T27267] ------------------------------------------------------ [ 810.473826][T27267] syz.4.10277/27267 is trying to acquire lock: [ 810.473837][T27267] ffff888054cf55a8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 810.506830][T27267] [ 810.506830][T27267] but task is already holding lock: [ 810.514228][T27267] ffff888073763eb8 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x999/0x1240 [ 810.523707][T27267] [ 810.523707][T27267] which lock already depends on the new lock. [ 810.523707][T27267] [ 810.534143][T27267] [ 810.534143][T27267] the existing dependency chain (in reverse order) is: [ 810.543197][T27267] [ 810.543197][T27267] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 810.551101][T27267] down_write+0x36/0x60 [ 810.555841][T27267] ext4_map_blocks+0x910/0x1b70 [ 810.561263][T27267] ext4_getblk+0x1cc/0x6f0 [ 810.561910][T27253] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.10269 (27253) [ 810.566246][T27267] ext4_bread+0x26/0x170 [ 810.566267][T27267] ext4_quota_write+0x236/0x580 [ 810.566288][T27267] find_free_dqentry+0x673/0xc20 [ 810.594374][T27267] do_insert_tree+0x70d/0x1040 [ 810.599700][T27267] do_insert_tree+0x9ae/0x1040 [ 810.605020][T27267] do_insert_tree+0x9ae/0x1040 [ 810.610345][T27267] do_insert_tree+0x9ae/0x1040 [ 810.615671][T27267] qtree_write_dquot+0x49d/0x5d0 [ 810.621172][T27267] v2_write_dquot+0x108/0x190 [ 810.626403][T27267] dquot_acquire+0x2d5/0x520 [ 810.631552][T27267] ext4_acquire_dquot+0x2d9/0x4a0 [ 810.637114][T27267] dqget+0x778/0xeb0 [ 810.641538][T27267] __dquot_initialize+0x333/0xcd0 [ 810.647097][T27267] ext4_rename2+0x6c1/0x3180 [ 810.652235][T27267] vfs_rename+0xbe1/0x1100 [ 810.657195][T27267] do_renameat2+0x8e5/0xce0 [ 810.662241][T27267] __x64_sys_renameat2+0xce/0xe0 [ 810.667732][T27267] do_syscall_64+0x4c/0xa0 [ 810.672691][T27267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 810.679124][T27267] [ 810.679124][T27267] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 810.687305][T27267] down_read+0x42/0x2d0 [ 810.692004][T27267] v2_read_dquot+0x4a/0x110 [ 810.697124][T27267] dquot_acquire+0x152/0x520 [ 810.702365][T27267] ext4_acquire_dquot+0x2d9/0x4a0 [ 810.707954][T27267] dqget+0x778/0xeb0 [ 810.712376][T27267] __dquot_initialize+0x3c3/0xcd0 [ 810.717941][T27267] ext4_set_acl+0x14a/0x5a0 [ 810.723176][T27267] posix_acl_xattr_set+0x387/0x3f0 [ 810.728863][T27267] __vfs_setxattr+0x3e0/0x420 [ 810.734089][T27267] __vfs_setxattr_noperm+0x129/0x5e0 [ 810.739911][T27267] vfs_setxattr+0x167/0x2e0 [ 810.745045][T27267] setxattr+0x346/0x360 [ 810.749758][T27267] path_setxattr+0x147/0x290 [ 810.754908][T27267] __x64_sys_lsetxattr+0xb4/0xd0 [ 810.760404][T27267] do_syscall_64+0x4c/0xa0 [ 810.765415][T27267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 810.771859][T27267] [ 810.771859][T27267] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 810.779638][T27267] __lock_acquire+0x2d07/0x7d10 [ 810.785397][T27267] lock_acquire+0x1bb/0x4a0 [ 810.790452][T27267] __mutex_lock+0x12d/0xaf0 [ 810.795517][T27267] dquot_commit+0x5a/0x410 [ 810.801275][T27267] ext4_write_dquot+0x1f0/0x360 [ 810.806682][T27267] mark_all_dquot_dirty+0xf9/0x400 [ 810.812344][T27267] __dquot_free_space+0x7ec/0xbc0 [ 810.817920][T27267] ext4_free_blocks+0x1bf3/0x26a0 [ 810.823547][T27267] ext4_ext_remove_space+0x225f/0x44c0 [ 810.829555][T27267] ext4_ext_truncate+0x211/0x370 [ 810.835035][T27267] ext4_truncate+0xa23/0x1240 [ 810.840266][T27267] ext4_setattr+0x11f8/0x1b50 [ 810.845479][T27267] notify_change+0xc74/0xf40 [ 810.850609][T27267] do_truncate+0x1ac/0x240 [ 810.855561][T27267] path_openat+0x2861/0x2ee0 [ 810.860681][T27267] do_filp_open+0x1f1/0x430 [ 810.865725][T27267] do_sys_openat2+0x150/0x4b0 [ 810.870935][T27267] __x64_sys_creat+0x8c/0xb0 [ 810.876056][T27267] do_syscall_64+0x4c/0xa0 [ 810.881009][T27267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 810.887436][T27267] [ 810.887436][T27267] other info that might help us debug this: [ 810.887436][T27267] [ 810.897664][T27267] Chain exists of: [ 810.897664][T27267] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 810.897664][T27267] [ 810.911416][T27267] Possible unsafe locking scenario: [ 810.911416][T27267] [ 810.918964][T27267] CPU0 CPU1 [ 810.924420][T27267] ---- ---- [ 810.929789][T27267] lock(&ei->i_data_sem/2); [ 810.934390][T27267] lock(&s->s_dquot.dqio_sem); [ 810.941765][T27267] lock(&ei->i_data_sem/2); [ 810.948972][T27267] lock(&dquot->dq_lock); [ 810.953418][T27267] [ 810.953418][T27267] *** DEADLOCK *** [ 810.953418][T27267] [ 810.961591][T27267] 5 locks held by syz.4.10277/27267: [ 810.966892][T27267] #0: ffff888051dd2460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 810.976069][T27267] #1: ffff888073764030 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: do_truncate+0x198/0x240 [ 810.986361][T27267] #2: ffff8880737641d0 (mapping.invalidate_lock#2){++++}-{3:3}, at: ext4_setattr+0xfb3/0x1b50 [ 810.996730][T27267] #3: ffff888073763eb8 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x999/0x1240 [ 811.006497][T27267] #4: ffffffff8cc74a48 (dquot_srcu){....}-{0:0}, at: __dquot_free_space+0x174/0xbc0 [ 811.015998][T27267] [ 811.015998][T27267] stack backtrace: [ 811.021887][T27267] CPU: 1 PID: 27267 Comm: syz.4.10277 Not tainted syzkaller #0 [ 811.029436][T27267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 811.039504][T27267] Call Trace: [ 811.042881][T27267] [ 811.045820][T27267] dump_stack_lvl+0x188/0x24e [ 811.050514][T27267] ? load_image+0x400/0x400 [ 811.055049][T27267] ? show_regs_print_info+0x12/0x12 [ 811.060262][T27267] ? print_circular_bug+0x12b/0x1a0 [ 811.065482][T27267] check_noncircular+0x296/0x330 [ 811.070435][T27267] ? verify_lock_unused+0x140/0x140 [ 811.075646][T27267] ? add_chain_block+0x940/0x940 [ 811.080595][T27267] ? lockdep_lock+0xf1/0x1f0 [ 811.085241][T27267] ? _find_first_zero_bit+0xcf/0x100 [ 811.090541][T27267] __lock_acquire+0x2d07/0x7d10 [ 811.095497][T27267] ? check_path+0x21/0x40 [ 811.099843][T27267] ? check_noncircular+0x189/0x330 [ 811.104967][T27267] ? verify_lock_unused+0x140/0x140 [ 811.110175][T27267] ? add_chain_block+0x940/0x940 [ 811.115123][T27267] ? lockdep_lock+0xf1/0x1f0 [ 811.119731][T27267] ? lockdep_unlock+0x142/0x2e0 [ 811.124597][T27267] ? mark_lock+0x94/0x320 [ 811.128941][T27267] lock_acquire+0x1bb/0x4a0 [ 811.133454][T27267] ? dquot_commit+0x5a/0x410 [ 811.138062][T27267] ? __might_sleep+0xd0/0xd0 [ 811.142657][T27267] ? read_lock_is_recursive+0x10/0x10 [ 811.148042][T27267] __mutex_lock+0x12d/0xaf0 [ 811.152565][T27267] ? dquot_commit+0x5a/0x410 [ 811.157165][T27267] ? __might_sleep+0xd0/0xd0 [ 811.161758][T27267] ? dquot_commit+0x5a/0x410 [ 811.166358][T27267] ? mutex_lock_nested+0x10/0x10 [ 811.171311][T27267] ? ext4_journal_check_start+0x17e/0x240 [ 811.177040][T27267] dquot_commit+0x5a/0x410 [ 811.181465][T27267] ext4_write_dquot+0x1f0/0x360 [ 811.186325][T27267] mark_all_dquot_dirty+0xf9/0x400 [ 811.191442][T27267] __dquot_free_space+0x7ec/0xbc0 [ 811.196477][T27267] ? __dquot_free_space+0x174/0xbc0 [ 811.201681][T27267] ? ext4_free_blocks+0x18de/0x26a0 [ 811.206892][T27267] ext4_free_blocks+0x1bf3/0x26a0 [ 811.211950][T27267] ? ext4_mb_discard_preallocations_should_retry+0x710/0x710 [ 811.219345][T27267] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 811.225425][T27267] ? ext4_inode_journal_mode+0x18f/0x460 [ 811.231063][T27267] ext4_ext_remove_space+0x225f/0x44c0 [ 811.236544][T27267] ? ext4_da_release_space+0x133/0x5d0 [ 811.242009][T27267] ? ext4_ext_index_trans_blocks+0xf0/0xf0 [ 811.247824][T27267] ext4_ext_truncate+0x211/0x370 [ 811.252791][T27267] ext4_truncate+0xa23/0x1240 [ 811.257503][T27267] ? __ext4_mark_inode_dirty+0x770/0x770 [ 811.263171][T27267] ? unmap_mapping_range+0x91/0x100 [ 811.268390][T27267] ext4_setattr+0x11f8/0x1b50 [ 811.273087][T27267] ? ext4_write_inode+0x5e0/0x5e0 [ 811.278119][T27267] notify_change+0xc74/0xf40 [ 811.282731][T27267] do_truncate+0x1ac/0x240 [ 811.287161][T27267] ? put_page_bootmem+0x2c0/0x2c0 [ 811.292197][T27267] ? ima_bprm_check+0x200/0x200 [ 811.297052][T27267] ? bpf_lsm_path_truncate+0x5/0x10 [ 811.302263][T27267] path_openat+0x2861/0x2ee0 [ 811.306893][T27267] ? do_filp_open+0x430/0x430 [ 811.311584][T27267] do_filp_open+0x1f1/0x430 [ 811.316094][T27267] ? vfs_tmpfile+0x480/0x480 [ 811.320694][T27267] ? _raw_spin_unlock+0x24/0x40 [ 811.325556][T27267] ? alloc_fd+0x58f/0x630 [ 811.329898][T27267] do_sys_openat2+0x150/0x4b0 [ 811.334586][T27267] ? do_sys_open+0xe0/0xe0 [ 811.339013][T27267] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 811.345008][T27267] ? lock_chain_count+0x20/0x20 [ 811.349867][T27267] __x64_sys_creat+0x8c/0xb0 [ 811.354471][T27267] do_syscall_64+0x4c/0xa0 [ 811.358906][T27267] ? clear_bhb_loop+0x60/0xb0 [ 811.363600][T27267] ? clear_bhb_loop+0x60/0xb0 [ 811.368380][T27267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 811.374281][T27267] RIP: 0033:0x7f6b9db9cdd9 [ 811.378701][T27267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.398317][T27267] RSP: 002b:00007f6b9eacb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 811.406742][T27267] RAX: ffffffffffffffda RBX: 00007f6b9de15fa0 RCX: 00007f6b9db9cdd9 [ 811.414810][T27267] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 0000200000000e40 [ 811.422786][T27267] RBP: 00007f6b9dc32d69 R08: 0000000000000000 R09: 0000000000000000 [ 811.430761][T27267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 811.438738][T27267] R13: 00007f6b9de16038 R14: 00007f6b9de15fa0 R15: 00007fffb0343768 [ 811.446718][T27267] [ 811.449821][ C1] vkms_vblank_simulate: vblank timer overrun [ 811.528499][T27253] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 811.564803][T27253] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 811.593993][T27253] BTRFS info (device loop1): setting nodatacow, compression disabled [ 811.605549][T27253] BTRFS info (device loop1): enabling auto defrag [ 811.619658][T27253] BTRFS info (device loop1): metadata ratio 5 [ 811.628326][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 811.647002][T27253] BTRFS info (device loop1): max_inline at 0 [ 811.653063][T27253] BTRFS info (device loop1): using free space tree [ 811.815045][ T4271] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 811.912641][ T4262] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop1 scanned by udevd (4262)