last executing test programs: 4.129715954s ago: executing program 4 (id=837): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000004e80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000004f00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4000) recvmsg$kcm(r0, &(0x7f0000004fc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000005000)=""/43, 0x2b}, 0x202) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) 3.078956094s ago: executing program 0 (id=855): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x4c, r1, 0x1, 0x70bd29, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000500000014000180060001000a00000008000500010000005000028014000100000000000000000000000000000000010600020050000000080003000200000008000400010000000800050000000000080006000000000006000e004e21000005000d0009"], 0x78}, 0x1, 0x0, 0x0, 0x4806}, 0x0) 2.915256669s ago: executing program 0 (id=845): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fsopen(&(0x7f0000000000)='ceph\x00', 0x0) 2.768054278s ago: executing program 1 (id=849): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) 2.691524424s ago: executing program 1 (id=850): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc0145b0e, &(0x7f00000006c0)={0x2, 0x0, 0xfffffffc, 0x4, 0x10000}) 2.501654506s ago: executing program 2 (id=852): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) 2.021068333s ago: executing program 2 (id=854): syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x202) io_setup(0x7ff, &(0x7f0000000240)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 1.92532409s ago: executing program 0 (id=866): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000240)='binfmt_misc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)='1ha', 0x3) 1.510052206s ago: executing program 4 (id=857): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='atkbd', 0x5) 1.509295021s ago: executing program 0 (id=868): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7a}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000400)={r1, 0x6, 0x1, '3'}, 0x9) 1.506435639s ago: executing program 2 (id=869): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000033c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000003480)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0x4e, &(0x7f0000003640)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}}}}}}}, 0x0) 1.380027359s ago: executing program 0 (id=858): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x8a, &(0x7f0000000180)=0x800000, 0x4) 1.379886516s ago: executing program 3 (id=859): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@can_delroute={0x14, 0x19, 0x800, 0x70bd2c, 0x25dfdbff, {0x1d, 0x1, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x50010}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x300001e, &(0x7f0000001e80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0], 0xfe, 0x2b8, &(0x7f0000000740)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c8) 1.328212714s ago: executing program 2 (id=860): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001940)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x4}, 0x10}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000000c0)="9f", 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e24, 0x9, @remote, 0x3}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000280)="b0", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ECN_SUPPORTED(r0, 0x84, 0x82, &(0x7f0000000100)={0x0, 0x8}, 0x8) 1.195800767s ago: executing program 3 (id=861): prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\x04\xb3\x00\x00\x00\x00\x00\x00\x00\x00\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="0000ffffffffa000f2710263d2ac", 0x0, 0xe505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd}, 0x2e) 920.802555ms ago: executing program 4 (id=862): openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x40000, 0x0, 0xd7}, &(0x7f00000002c0)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 918.455732ms ago: executing program 1 (id=863): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x4000000000000009, 0x0) write$binfmt_script(r1, &(0x7f0000021180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x10009) 887.119623ms ago: executing program 3 (id=864): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000380)=@chain={'key_or_keyring:', r1}) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) 858.83881ms ago: executing program 2 (id=865): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000340)='./file0\x00', 0x300401a, &(0x7f0000000380)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB="2c007bd598141a550df33dd47ded539aef131d50bbd580000000000000000b9b0fa44661887a1633f523184b4e52fbab2783d4a8e4c913491c6800c959a6cba88690ccbce67e3919"], 0x1, 0x60f6, &(0x7f0000002580)="$eJzs3UuPHFfZB/Cn+jaXvEmsLKK8FkKTxFxCiK/BGAIkkYAFGxYoW2RrMoksHEC2QU5k4Ylmw4IPAUJiiRBLVnyALNiy4wNgyUYCZYFSqGbOGdd0ut0zGU9Xj8/vJ42rnj5V06f87+rLVFWfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADiB9//0bkqIi7/Mt1wIuL/oh/Ri1hp6rWIWFk7kZcfRMRzsd0cz0bEcCmiWX/7n6cjXo2Ij56KuHf/9npz8/l99uN7f/r773/8xA//9sfhmf/8+Wb/tWnL3br1m3//5c7hthkAAABKU9d1XaWP+SfT5/te150CAOYiv/7XSb59Vv3dAy6vVqvVarW6+7qtnuxOu4iIzfY6zXsGh+MB4JjZjI+77gIdkn/RBhHxRNedABZa1XUHOBL37t9er1K+Vfv1YG2nPZ8Lsif/zWr3+o5p01nGzzGZ1+NrK/rxzJT+rMypD4sk598bz//yTvsoLXfU+c/LtPxHO5c+FSfn3x/Pf8zjk39vYv6lyvkPDpR/X/4AAAAAALDA8t//T3R8/Hfp8JuyLw87/rs2pz4AAAAAAAAAwKN22PH/dhn/DwAAABZW81m98dunHtw27bvYmtvfqiKeHFseKEy6WGa1634AAAAAAAAAAAAAQEkGO+fwvlVFDCPiydXVuq6bn7bx+qAOu/5xV/r2Q8m6fpIHAIAdHz01di1/FbHcKoerq6t1vbyyWq/WK0v5/exoableaX2uzdPmtqXRPt4QD0Z188uWW+u1zfq8PKt9/Pc19zWq+/vo2Hx0EDQAtOy8Gt3zivSYqeuno+t3ORwP9v/Hj/2f/ej6cQoAAAAcvbqu6yp9nffJNL5fr+tOAQBzkV//x48LqB99/d8F649arVary6vb6snutIuI2Gyv07xnMBw/ABwzm/Fx112gQ/Iv2iAinuu6E8BCq7ruAEfi3v3b61XKt2q/HqTx3fO5IHvy36y218vrT5rOMn6OybweX1vRj2em9OfZOfVhkeT8e+P5X95pH6Xljjr/eZmWf7OdJzroT9dy/v3x/Mc8Pvn3JuZfqpz/4ED59+UPAAAAAAALLP/9/8RCHf8dfdbNmelhx3/XjuxeAQAAAAAAAOBo3bt/ez1f95qP/39uwnKu/3w85fwr+Rcp598by//LY8v1W/N333yQ/7/u317/w81//n+e7jf/pTxTpUdWlR4RVbqnapCmh9m6T9sa9kfNPQ2rXn+Qzvmph+/E1bgWG3F2z7K99P/xoP3cnvamp8Pt9rq/035+T/tgtz2vf2FP+zCd6VSv5PbTsR4/i2vx9nZ707Y0Y/uXZ7TXM9pz/n37f5Fy/oPWT5P/amqvxqaNux/2PrXft6eT7ueNq5//9dmj35yZtqK/u21tzfa90EF/tv9PnhjFL25sXD9968rNm9fPRZrsufV8pMkjlvMfpp/d5/8Xd9rz8357f7374ejA+S+KrRhMzf/F1nyzvS/NuW9dyPmP0k/O/+3UPnn/P875T9//X+6gPwAAAAAAAAAAAAAAAPAwdV1vXyL6RkRcTNf/dHVtJgAwX/n1v07y7fOq+3O+P7X6mNfVgvVnrvUn9WL1R60+jnVbPdnr7SIi/tpep3nP8KtJvwwAWFw7X+z1j667QWc+kX+58vf9NdNTXXcGmKsb73/wkyvXrm1cv9F1TwAAAAAAAACAzyqP/7nWGv/5VF3Xd8aW2zP+65uxdtjxPwd5ZneA0SkDVfcPvk0Ps9Ub9Xut4cafj2njfw935x42/vdgxv0NZ7SPZrQvzWhfntE+8UKPlpz/863xzk9FxMmx4ddLGP91fMz7EuT8X2g9npv8vzS2XDv/+nfHOf/envzP3Hzv52duvP/BK1ffu/LuxrsbP71w7tzZCxcvXrp06cw7V69tnN35t8MeH62cfx772nmgZcn558zlX5ac/xdSLf+y5Py/mGr5lyXnn9/vyb8sOf/82Uf+Zcn5v5Rq+Zcl5/+VVMu/LDn/l1Mt/7Lk/L+aavmXJef/SqrlX5ac/+lUy78sOf8zqd5n/itH3S/mI+efj3DZ/8uS889nNsi/LDn/86mWf1ly/hdSLf+y5PxfTbX8y5Lz/1qq5V+WnP/FVMu/LDn/r6da/mXJ+V9KtfzLkvP/RqrlX5ac/zdTLf+y5PxfS7X8y5Lz/1aq5V+WnP+3Uy3/suT8v5Nq+Zcl5/96quVflgff/2/GjBkzeabrZyYAAAAAAAAAAAAAYNw8TifuehsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgfO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrC3r3FyHXXdwA/e/XagcRASJ3UkLVjjHE22fUlvtC6mHBtuJVAKPSC7XrXZsE3vHYJNJKNAiUqRkUVbcNDW0CozUuFVfFAK0B5QK0qVYL2gb4gqko8RFVAAalSW0G2mnP+///OzJ6d2bUn9sw5n48U/7wzZ+acOXPm7H7X+c4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzba8Ye4zQ1mWNf7L/9iYZS9q/H395Mb8stfe7C0EAAAArtcv8j+fuy1dcHgVN2pa5p9e+d2vLy4uLmbvH/nTsS8sLqYrJrNsbF2W5ddFV//zA0PNywSPZxNDw01fD3dZ/UiX60e7XD/W5frxLtev63L9RJfrl+2AZdYXv4/J72xb/teNxS7Nbs/G8uu2ldzq8aF1w8Pxdzm5ofw2i2MnsvnsVDaXzbQsXyw7lC//zS2Ndb01i+sablrX5sYR8tPHjsdtGAr7eFvLupbuM/rx67PJn/30seN/feHZO8tm193Qcn/Fdu7Y2tjOT4VLim0dytalfRK3c7hpOzeXPCcjLds5lN+u8ff27Xxulds5srSZN1T7cz6RDed//16+n0abf62X9tPmcNn/3JNl2eWlzW5fZtm6suFsQ8slw0vPz0RxRDbuo3EovTQbXdNxumUVx2ljzm5rPU7bXxPx+d8Sbje6wjY0P00//uR40/P+88VrOU6jxqNe6bXSfgz2+rXSL8dgPC6+lz/oJ0qPwW3h8T+2feVjsPTYKTkG0+NuOga3djsGh8dH8m1OT8JQfpulY3BXy/Ij+ZqG8vnM9s7H4PSF0+emFz7+ifvmTx87OXdy7syeXbtm9uzbd+DAgekT86fmZoo/r3Fv978N2XB6DWwN+y6+Bl7dtmzzobr45fFl599rfR1OdHgdbmxbttevw9H2Bzd0Y16Qy4/p4rXx3sZOn7gynK3wGsufn53X/zpMj7vpdTja9Dos/Z5S8jocXcXrsLHMuZ2r+5lltOm/sm1Y+XvB9R2DG5uOwfafR9qPwV7/PNIvx+BEOC5+sHPl7wWbw/Y+MbXWn0dGlh2D6eGGc0/jkvTz/sSBfJQdl3c1rrhlPLu4MHf+/kePXbhwflcWxg3xsqZjpf143dD0mLJlx+vwmo/Xw/OvfOKukss3hn01cV/jj4kVn6vGMnvv7/xc5d/dyvdny6W7szB67Ebvz7Lv5o39OZ5lX/zOJx/+1mNffMOK+7ORNz81ff0/i6dc2nT+HVvh/Btz//PF+tJdPT4yNlq8fkfS3hlrOR+3PlWj+blrKF/3c9OrOx+Phf9u9Pn49g7n401ty/b6fDzW/uDi+Xio2287rk/78zkRjpNTM53Px41lNu1e6zE52vF8fE+YQ2H/vyYkhZSLmo6dlY7btK7R0bHwuEbjGlqP0z0ty4+FbNZY11O7r+043XFPcV8j6dEtuVHH6WTbsr0+TtPvvlY6Toe6/fbt2rQ/nxPhuLh9T+fjtLHM03uv/9y5Pv616dw53u0YHBsZb2zzWDoI8/N9trg+HoP3Z8ezs9mpbDa/djw/nobydU09sLpjcDz8d6PPlZs6HIM72pbt9TGYvo+tdOwNjS5/8D3Q/nxOhOPiyQc6H4ONZd64v7c/u+4Il6Rlmn52bf/92kq/87qrbTe9UMfKaNjO7+zv/LvZxjKnDqw1Z3beT/eGS24p2U/tr9+VXlOz2Y3ZT5vCdj57YOX91NiexjJfOLjK4+lwlmWXPvpg/vve8O8rf3fx+19v+XeXsn/TufTRB3/y4hP/uJbtB2DwPV+MDcX3uqZ/mVrNv/8DAAAAAyHm/uEwE/kfAAAAKiPm/vh/hSfyPwAAAFRGzP2jYSY1yf+b3vjs/POXstTMXwzi9Wk3PFQsFzuuM+HrycUljcsf/Orcf//DpdWtezjLsp8/9Aely296KG5XYTJs59U3tV6+zNfvW9W6jz5yKa23ub/+pXD/8fGs9jAoq+DOZFn2zds+l69n8gNX8vn0Q0fz+fDlJx5vLPPcweLrePtnXlYs/xeh/Hv4xLGW2z8T9sOPwpx5W/n+iLf72pXXbN7/vqX1xdsNbb01f9hPfrC43/g+OZ9/vFg+7ueVtv9bn33qa43lH31V+fZfGi7f/qfC/X41zP99RbF883PQ+Dre7tNh++P64u3u/8q3S7f/6meK5c+9uVjuaJhx/TvC19ve/Ox88/56dOhYy+PK3lIsF9c/8/0/zq+P9xfvv337J45cadkf7cfH0/9W3M902/Lx8rie6O/b1t+4n+bjM67/qT882rKfu63/6sPPvKJxv+3rv7dtuXMf3Zmvf+n+Wt+x6S8//bnS9cXtOfy351oez+F3h9dxWP+THwzHY7j+/64W99f+7gpH3916/onLf2njpZbHE731Z8X6r77uZD7XTazfcMuLXnzr5bsb+y7LvreuuL9u6z/5V2dbtv/LdxT7I14fO/rt619JXP/5j02dObtwcX427dXHbsvfO+ftxfbE7b0tnFvbvz5y9sKH5s5PzkzOZNlkdd9C75p9JcyfFOPyWm+/85HwfN7159/csP1fPxsv//f3FpdfeVvxfevVYbnPh8s3hufvetf/5JY78tf30NPF1y099h7YvO2/DqxqwfD4238uiMf7uZd/KN8Pjevy7xvxdX2d2//D2eJ+vhH262J4Z+atdyytr3n5+N4IV95TvN6ve/+F01x8Xv8mPN/v+FFx/3G74uP9Yfg55tubWs938fj4xqXh9vvP38XjcjifZJeL6+NScX9fee6O0s2L70OSXb4z//pP0v3cuaaHuZKFjy9Mn5o/c/HR6QtzCxemFz7+iSOnz148c+FI/l6eRz7c7fZL56cN+flpdm7f3iw/W50txgvsZm//uUeOz+6f2T47d+LYxRMXHjk3d/7k8YWF43OzC9uPnTgx97Fut5+fPbRr98E9+3dPnZyfPXTg4ME9B6fmz5xtbEaxUV3sm/nI1JnzR/KbLBzae3DXAw/snZk6fXZ27tD+mZmpi91un39vmmrc+venzs+dOnZh/vTc1ML8J+YO7Tq4b9/uru8GePrciYXJ6fMXz0xfXJg7P108lskL+cWN733dbk81LfxH8fNsu6Hijfiyd927L70/a8NXP7niXRWLtL2B6LPhvWj++SXnDqzm65j7x8JMapL/AQAAoA5i7h8PM5H/AQAAoDJi7l8XZiL/AwAAQGXE3D8RZlKT/F+5/v+mS6tav/6//n/z/qpp/3/xUl37/+/pt/5/cb7Q/+8N/f/O9P+70P/X/9f/1/+np/qt/x9z//osq2X+BwAAgDqIuX9DmIn8DwAAAJURc/8tYSbyPwAAAFRGzP0vCjOpSf7X/9f/1/+vbf+/vp//r/9fafr/nen/d7H6/v9QVtH+f1av/v/lXm6//r/+P8v1W/8/5v4Xh5nUJP8DAABAHcTcf2uYifwPAAAAlRFz/21hJvI/AAAAVEbM/RvDTGqS//X/9f/1//X/9f/L16//P5gq3/9vf4Gskf5/Fz7/3+f/6//r/7MGi+u6LdFv/f+Y+18SZlKT/A8AAAB1EHP/S8NM5H8AAADoP6PXdrOY+18WZrIs/1/jCgAAAICbLub+27O2InhN/v1f/1//X/9f/1//v3z9q+//j2T6//2j8v3/66T/34X+v/6//r/+Pz3Vb/3/PPdnE9nLw0xqkv8BAACgDmLuvyPMRP4HAACAyoi5/5fCTOR/AAAAqIyY+zeFmdQk/+v/6//r/+v/6/+Xr9/n/w8m/f/O9P+70P/X/+++/X9U9nNfpv+v/0+pfuv/x9x/Z5hJTfI/AAAA1EHM/XeFmcj/AAAAUBkx9/9ymIn8DwAAAJURc//mMJOa5H/9f/1//X/9f/3/8vXr/w8m/f/O9P+70P/X//f5//r/9FS/9f9j7n9FmElN8j8AAADUQcz9rwwzkf8BAACgMmLuvzvMRP4HAACAyoi5fzLMpCb5X/9f/1//X/9f/798/fr/g0n/vzP9/y70//X/9f/1/+mpfuv/x9y/JcykJvkfAAAA6iDm/q1hJvI/AAAAVEbM/feEmcj/AAAAUBkx928LM6lJ/tf/1//X/9f/1/8vX7/+/2DS/+9M/78L/X/9f/1//X96qt/6/zH3vyrMpCb5HwAAAOog5v7tYSbyPwAAAFRGzP2vDjOR/wEAAKAyYu7fEWZSk/yv/6//r/+v/6//X75+/f/BpP/fmf5/F/r/+v/6//r/9FS/9f9j7n9NmElN8j8AAADUQcz9O8NM5H8AAACojJj77w0zkf8BAACgMmLunwozqUn+1//X/9f/1//X/y9fv/7/YNL/70z/vwv9f/1//X/9f3qq3/r/MfffF2ZSk/wPAAAAVTK8wuUx998fZiL/AwAAQGXE3D8dZiL/AwAAQGXE3D8TZlKT/K//r/+v/6//v6b+/91L96v/X9D/7y/6/53p/3eh/6//f9P7/2P6/1RKv/X/Y+7fFWZSk/wPAAAAdRBz/+4wE/kfAAAAKiPm/j1hJvI/AAAAVEbM/XvDTGqS//X/9f/1//X/ff5/+fr1/weT/n9nve//x4eo/6//r//v8//1/1mu3/r/Mfc/EGZSk/wPAAAAdRBz/74wE/kfAAAAKiPm/v1hJvI/AAAAVEbM/QfCTGqS/6vc/19cXFxxSf1//f/m/aX/r/9ftn79/8Gk/9+Zz//vQv9f/1//X/+fnuq3/n/M/QfDTGqS/wEAAKAOYu5/bZiJ/A8AAACVEXP/r4SZyP8AAABQGTH3/2qYSU3yf5X7/53o/+v/N+8v/X/9/7L16/8PJv3/zvT/u9D/1//X/9f/p6f6rf8fc/+hMJOa5H8AAACog5j7fy3MRP4HAACAyoi5/3VhJvI/AAAAVEbM/YfDTGqS//X/9f/1//X/9f/L16//P5j0/zvT/+9C/1//v8/7/43j4/kVjmv9f/pRv/X/Y+5/fZhJTfI/AAAA1EHM/Q+Gmcj/AAAAUBkx978hzET+BwAAgMqIuf+NYSY1yf/6//r/+v/6//r/5evX/x9M+v+d6f93of+v/9/n/f9O9P/pR/3W/4+5/01hJjXJ/wAAAFAHMfe/OcxE/gcAAIDKiLn/LWEm8j8AAABURsz9bw0zqUn+1//X/9f/1//X/y9fv/7/YNL/70z/v4sa9P/v7nDdze7PX6+bvf36//r/LNdv/f+Y+389zKQm+R8AAADqIOb+h8JM5H8AAACojJj73xZmIv8DAABAZcTc//Ywk5rkf/1//X/9f/1//f/y9ev/Dyb9/84GrP//i1vD5fr/BZ//39/bP1j9/8V17bfX/+eF0G/9/5j73xFmUpP8DwAAAHUQc/87w0zkfwAAAKiMmPvfFWYi/wMAAEBlxNz/G2EmNcn/+v+N7VhqL+v/6//nF+j/6//r/w8s/f/OBqz/7/P/2+j/9/f2D1b/fzn9f14I/db/j7n/3WEmNcn/AAAAUAcx9z8cZiL/AwAAQGXE3P+eMBP5HwAAACoj5v73hpnUJP/r//v8f/1//X/9//L16/8PJv3/zvT/u9D/1//X/9f/p6f6rf8fc/8jYSY1yf8AAABQBzH3vy/MRP4HAACAyoi5/zfDTOR/AAAAqIyY+98fZlKT/K//Pyj9/0n9f/1//f+2x6P/r/9fRv+/M/3/LvT/9f/1//X/6al+6//H3P+BMJOa5H8AAACog5j7fyvMRP4HAACAyoi5/7fDTOR/AAAAqIyY+38nzKQm+V//f1D6/z7/P9P/1/9vezz6//r/ZW5c/z+eefT/9f/1/yP9f/1//X/a9Vv/P+b+3w0zqUn+BwAAgDqIuf+DYSbyPwAAAAyEsv8nu13M/UfCTOR/AAAAqIyY+4+GmdQk/+v/6//r//dp///Ptv7LD777zqO79P/1//X/1+SGfv5/48Xv8//1//X/k3R+urs4sen/6//r/9Nv/f+Y+4+FmdQk/wMAAEAdxNz/e2Em8j8AAABURsz9x8NM5H8AAACojJj7Z8NMapL/9f/1//X/+7T/P8Cf/x/3h/5/q571/+NJV/+/1A3t/79vqSeu/7/W/v946aX6/xXp//v8f/1//X+Cfuv/x9w/F2ZSk/wPAAAAdRBy//CJYi5dIf8DAABAZcTcfzLMRP4HAACAyoi5/0NhJjXJ//r/+v/6//r/Pv+/fP192//3+f8d6f931j/9/3L6//r/g7z9+v/6/yzXb/3/mPvnw0xqkv8BAACgDmLu/3CYifwPAAAAlRFz/0fCTOR/AAAAqIyY+0+FmdQk/+v/6//r/+v/6/+Xr1//fzD1ff9/ovP69f/1//X/B3f79f/1/1mu3/r/MfefDjOpSf4HAACAOoi5/0yYifwPAAAAlRFz/9kwE/kfAAAAKiPm/nP/z959NOlxV3scH/nK91rlF3AXbNjzEryANbwAFmxYQBXFAgpMTpbJ0eRgksnZBBuMSSYbsEkGkzE5Z0w2VIly6Zyj0UxPP5Lckvr5n89nc2DE0A+FkPlZ+lbHLU32v/5f/z9s/39P/f9Bz9f/6/9Htvr+fwP9v/5f/7+9n1//r/9nv7X1/7n7Hxa3NNn/AAAA0EHu/ofHLfY/AAAADCN3/6Vxi/0PAAAAw8jd/4i4pcn+39P/H9rp2f9nxqv/H6n/9/7/A5+v/9f/j+zc9v+X3/krn/5f/6//D/p//b/+n73W1v/n7n9k3NJk/wMAAEAHufsfFbfY/wAAADCM3P2PjlvsfwAAABhG7v7HxC1N9r/3/3v/v/5/qv8/ov/X/+v/t5T3/8/r1P9feuvFD7n9urtdfzrP1//r//X/+n+Wtbb+P3f/Y+OWJvsfAAAAOsjd/7i4xf4HAACAYeTuf3zcYv8DAADAMHL3PyFuabL/9f/6/6X7/6ND9P/e/6//1/9vK/3/vE79/5k8X/+v/9f/6/9Z1tr6/9z9T4xbmux/AAAA6CB3/5PiFvsfAAAAhpG7/7K4xf4HAACAYeTuPxq3NNn/+n/9v/f/6//1/9PP1/9vJ/3/PP3/Bvp//b/+X//PotbW/+fuvzxuabL/AQAAoIPc/U+OW+x/AAAAGEbu/qfELfY/AAAADCN3/1Pjlib7X/+v/9f/6//1/9PP1/9vJ/3/PP3/Bvr/u9rPX6j/1//r/9ntNPv/O2Z+2V6k/8/d/7S4pcn+BwAAgA5y9z89brH/AQAAYBi5+58Rt9j/AAAAMIzc/c+MW5rsf/2//l//r//X/08/X/+/nfT/81bT/x86PPll/f/W9//e/6//1/9zkrW9/z93/7Pilib7HwAAADrI3f/suMX+BwAAgGHk7n9O3GL/AwAAwDBy9z83bmmy//X/+n/9v/5f/z/9/Ln+//pdn0//vy76/3mr6f8PoP/X/2/z59f/6//Zb239f+7+58UtTfY/AAAAdJC7/4q4xf4HAACAYeTuf37cYv8DAADAMHL3vyBuabL/p/v/Ez+u/z81+v+TP7/+f/rnx1L9f/476v9n+/97ef9/T/r/efr/DfT/+n/9/0H9/5FN36//Z8ra+v/c/S+MW5rsfwAAAOggd/+L4hb7HwAAAIaRu//FcYv9DwAAAMPI3f+SuKXJ/vf+f/2//n/7+n/v/z/ufL7/f+ec9/+H9f+nSP8/T/+/gf5f/6//9/5/FrW2/j93/0vjlib7HwAAADrI3f+yuMX+BwAAgO2w+88O7P0DpSF3/8vjFvsfAAAAhpG7/xVxy1j7/4KDfkD/r//X/+v/19T/H5n427X6f+//Px36/3n6/w30/2ejnz88WP9/1UHfv4b+/zL9PytzUv9/w4mvn6/+P3f/lXHLWPsfAAAAWsvd/8q4xf4HAACAYeTuf1XcYv8DAADAMHL3vzpuabL/z3r/f+TgZ+v/9f/6f/2/9//r/5em/5+n/99A/+/9/97/r/9nUSf1/7ucr/4/d/9r4pYm+x8AAAA6yN3/2rjF/gcAAIBh5O6/Km6x/wEAAGAYuftfF7c02f/e/6//1//r//X/08/X/28n/f88/f8G+v9T7eevnPp+/b/+X//PXmvr/3P3vz5uabL/AQAAoIPc/W+IW+x/AAAAGEbu/jfGLfY/AAAADCN3/5vilib7X/9/dvv//Lr+X/+/o//X/+v/z4m2/f+hqb8S7XdA/3/zg47e5+Sv6P/1/97/r//X/7OAVfT/x078v8vc/W+OW5rsfwAAAOggd/9b4hb7HwAAAIaRu/+tcYv9DwAAAMPI3f+2uKXJ/tf/e/+//l//r/+ffr7+f7vkf49t+/9T5P3/G+j/9f/6f/0/i1pF/7/rn+fuf3vc0mT/AwAAQAe5+98Rt9j/AAAAMIzc/e+MW+x/AAAAGEbu/nfFLU32v/5f/6//1//r/6efr//fTvr/efr/DfT/+n/9v/6fRZ2F/v/Q7r+4nm7/n7v/6rilyf4HAACADnL3vztusf8BAABgGLn73xO32P8AAAAwjNz9741bmux//b/+X/+v/9f/Tz9f/7+d9P/z9P87OzvXzHyAqf7/2P/p/xft5/f+Kr8c/b/+n/VZ2/v/c/e/L25psv8BAACgg9z918Qt9j8AAAAMI3f/tXGL/Q8AAADDyN3//rilyf7X/+v/9f/6f/3/9PP1/9tJ/z9P/7+B9/97/7/+X//PotbW/+fu/0Dc0mT/AwAAQAe5+6+LW+x/AAAAGEbu/g/GLfY/AAAADCN3//VxS5P9r//X/+v/9f/6/+nn38X+f19zrP8/N85e/7+j/9f/6/830P/r//X/7LW2/j93/4filib7HwAAADrI3f/huMX+BwAAgGHk7v9I3GL/AwAAwDBy9380bmmy//X/+n/9v/5f/z/9fO//307e/z9P/7+B/l//377/v/NnqP6f5ayt/8/d/7G4pcn+BwAAgA5y998Qt9j/AAAAMIzc/R+PW+x/AAAAGEbu/k/ELU32v/5f/6//1//r/6effw76/4t29P+L0//P0/9voP8fs/+/YGeg/v/Igd/v/f+s0dr6/9z9n4xbmux/AAAA6CB3/6fiFvsfAAAAhpG7/9Nxi/0PAAAAw8jd/5m4pcn+1//r//X/+n/9//Tzvf9/O+n/5+n/N9D/j9n/e/+//p/zZm39f+7+z8YtTfY/AAAAdJC7/8a4xf4HAACAYeTu/1zcYv8DAADAMHL3fz5uabL/9f/6f/2//l//P/18/f920v/P0/9voP/X/+v/9f8sam39f+7+L8QtTfY/AAAAdJC7/6a4xf4HAACAYeTuvzlusf8BAABgGLn7vxi3NNn/+n/9/9no//d+Dv3/cUv2/xfp//X/+v9Ja+n/L7nk3rfo//X/+n/9v/5f/9/d2vr/3P1filua7H8AAADoIHf/l+MW+x8AAACGkbv/K3HT/563TwQAAAAsLXf/V+OWJr//v7//v3DneKF63FT/H42a/n8X/f/Jn9/7/6d/fnj/v/5f/3/2raX/9/7/M/v8+n/9/zZ//tPq/+++//v1/4xobf1/7v5b4pYm+x8AAAA6yN3/tbjF/gcAAIBh5O7/etxi/wMAAMAwcvffGrc02f/e/6//1//r//X/08/X/28n/f88/f8G+n/9v/f/P/QB/6P/Zzlr6/9z938jbmmy/wEAAKCD3P3fjFvsfwAAABhG7v5vxS32PwAAAAwjd/+345Ym+1//r//X/+v/9f/Tz9f/byf9/zz9/wb6f/3/qX/+G/d+YZj+3/v/WdDa+v/c/d+JW5rsfwAAAOggd/934xb7HwAAAIaRu/97cYv9DwAAAMPI3f/9uKXJ/tf/6//H7//vr//f83z9v/5/ZGfc38f/kEfo/y+c+TH9/wb6f/2/9//r/1nU2vr/3P23xS1N9j8AAAB0kLv/B3GL/Q8AAADDyN3/w7jF/gcAAIBh5O7/UdzSZP/r/3v1/4d2Ovb/3v+v/9f/d+L9//P0/xvo//X/+n/9P4taW/+fu//HcUuT/Q8AAADb6r73ePBtp/qvzd3/k7jF/gcAAIBh5O7/adxi/wMAAMAwcvf/LG5psv/1/736/57v/9f/6//1/53o/+fp/zfQ/+v/9f/6fxa1tv4/d//P45Zdw+/waf+nBAAAANYkd/8v4pYmv/8PAAAAHeTu/2Xcsm//HzvFP9UOAAAArE3u/l/FLU1+/1//v/L+f0f/r//X/+v/9f+nQ/8/7y72/8cO6f/1/zP0//p//T97ra3/z93/67ilyf4HAACAQZ30dxRy9/8mbrH/AQAAYBi5+38bt9j/AAAAMIzc/b+LW5rsf/3/yvv/M3r//5H6R/r/5v3/FRdNPl//r/8fmf5/nvf/b6D/1//r//X/LGpt/X/u/t/HLU32PwAAAHSQu/8PcYv9DwAAAMPI3f/HuMX+BwAAgGHk7v9T3NJk/+v/R+z/vf9f/z///HH6//+/+OhN93vgtVfr/znhXPb/+XNB/6//1/8fp//X/+v/2Wtt/X/u/j/HLU32PwAAAHSQu//2uMX+BwAAgGHk7v9L3GL/AwAAwDBy9/81bmmy//X/+n/9/zb2/9kUd+//vf9f/7+f9//P0/9voP/X/+v/9f8sam39f+7+v8UtTfY/AAAAdJC7/+9xi/0PAAAAw8jd/4+4xf4HAACAYeTu/2fc0mT/6//1//r/bez/vf9/R/+v/z+A/n+e/n8D/b/+X/+v/2dRa+v/c/f/K25psv8BAACgg9z9d8Qt9j8AAAAMI3f/v+MW+x8AAACGkbv/P3FLk/2v/9f/6//1//r/6efr/7eT/n+e/n8D/b/+X/+v/2dRa+v/c/f/NwAA//+xNYBL") chdir(&(0x7f0000008680)='./file0\x00') creat(&(0x7f00000086c0)='./file0\x00', 0x104) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000008740)='memory.events\x00', 0x275a, 0x0) 764.139054ms ago: executing program 4 (id=867): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 690.068383ms ago: executing program 3 (id=870): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000080)={0x8, 0x0, 0xfffffffd, 0xc, 0x0, 0x1000, &(0x7f0000002240)=""/4096, 0x0, 0x0}) 689.760691ms ago: executing program 1 (id=871): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7a}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000400)={r1, 0x6, 0x1, '3'}, 0x9) 565.376772ms ago: executing program 4 (id=872): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x4c, r1, 0x1, 0x70bd29, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000500000014000180060001000a00000008000500010000005000028014000100000000000000000000000000000000010600020050000000080003000200000008000400010000000800050000000000080006000000000006000e004e21000005000d0009"], 0x78}, 0x1, 0x0, 0x0, 0x4806}, 0x0) 556.438984ms ago: executing program 1 (id=873): mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./config\x00', &(0x7f0000001040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./config/nullb/features\x00', 0x0, 0x0) preadv(r0, &(0x7f00000010c0)=[{&(0x7f0000001100)=""/124, 0x7c}], 0x1, 0x1b6, 0x2) 526.68365ms ago: executing program 3 (id=874): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000008c0)={0xcf, 0xfffffffb, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000980)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x9, 0x3}, {0x1, 0x1}, 0xfffffffb, 0x2, 0x1}) 9.475013ms ago: executing program 2 (id=875): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) 9.405506ms ago: executing program 3 (id=876): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='atkbd', 0x5) 8.700502ms ago: executing program 4 (id=877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x20, 0x0, 0x1, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) 6.005282ms ago: executing program 0 (id=885): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) 0s ago: executing program 1 (id=878): prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\x04\xb3\x00\x00\x00\x00\x00\x00\x00\x00\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="0000ffffffffa000f2710263d2ac", 0x0, 0xe505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd}, 0x2e) kernel console output (not intermixed with test programs): ed with root inode @ nid 36. [ 122.337797][ T33] audit: type=1800 audit(1793828130.927:23): pid=6760 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.2.373" name="file1" dev="loop2" ino=86 res=0 errno=-22 [ 122.356214][ T6760] syz.2.373: attempt to access beyond end of device [ 122.356214][ T6760] loop2: rw=8423424, sector=1342177272, nr_sectors = 8 limit=16 [ 122.592027][ T6767]  [ 122.821624][ T6777] loop2: detected capacity change from 0 to 2048 [ 122.825268][ T6777] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 122.847927][ T6778] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.023497][ T6787] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 123.028549][ T6787] Remounting filesystem read-only [ 123.028676][ T6787] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 123.162435][ T6792] loop3: detected capacity change from 0 to 4096 [ 123.231981][ T6794] loop0: detected capacity change from 0 to 16 [ 123.284332][ T6794] erofs (device loop0): mounted with root inode @ nid 36. [ 123.289453][ T33] audit: type=1800 audit(1793828131.877:24): pid=6794 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.0.387" name="file1" dev="loop0" ino=86 res=0 errno=-22 [ 123.302016][ T6792] ntfs3(loop3): ino=9, mi_enum_attr [ 123.302045][ T6792] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 123.321263][ T6792] ntfs3(loop3): ino=9, mi_enum_attr [ 123.321370][ T6792] ntfs3(loop3): ino=b, mi_enum_attr [ 123.321442][ T6792] ntfs3(loop3): Failed to load $Extend (-22). [ 123.321458][ T6792] ntfs3(loop3): Failed to initialize $Extend. [ 123.601733][ T6803] netlink: 11 bytes leftover after parsing attributes in process `syz.4.395'. [ 123.662390][ T6808] loop2: detected capacity change from 0 to 512 [ 123.671373][ T6807]  [ 123.698327][ T33] audit: type=1800 audit(1793828132.287:25): pid=6808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.2.393" name="file1" dev="loop2" ino=8 res=0 errno=-22 [ 124.011981][ T6826] loop0: detected capacity change from 0 to 512 [ 124.042229][ T6829] loop4: detected capacity change from 0 to 16 [ 124.054212][ T6829] erofs (device loop4): mounted with root inode @ nid 36. [ 124.080834][ T6826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.080948][ T6826] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.081758][ T33] audit: type=1800 audit(1793828132.667:26): pid=6829 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.4.402" name="file1" dev="loop4" ino=86 res=0 errno=-22 [ 124.123701][ T6829] syz.4.402: attempt to access beyond end of device [ 124.123701][ T6829] loop4: rw=8423424, sector=1342177272, nr_sectors = 8 limit=16 [ 124.134555][ T33] audit: type=1800 audit(1793828132.687:27): pid=6826 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.0.399" name="file1" dev="loop0" ino=15 res=0 errno=-22 [ 124.590047][ T5638] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.859365][ T6848] loop0: detected capacity change from 0 to 512 [ 124.866480][ T6848] EXT4-fs: Ignoring removed bh option [ 124.947037][ T6848] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 124.968182][ T6838] loop1: detected capacity change from 0 to 32768 [ 124.972506][ T6838] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.404 (6838) [ 125.003956][ T6838] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 125.003991][ T6838] BTRFS info (device loop1): using sha256 checksum algorithm [ 125.044583][ T6848] EXT4-fs (loop0): 1 truncate cleaned up [ 125.089225][ T6848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.128025][ T33] audit: type=1800 audit(1793828133.717:28): pid=6848 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.0.408" name="bus" dev="loop0" ino=18 res=0 errno=-22 [ 125.128912][ T6838] BTRFS info (device loop1): rebuilding free space tree [ 125.182004][ T6838] BTRFS info (device loop1): disabling free space tree [ 125.182077][ T6838] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 125.182100][ T6838] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 125.213807][ T6848] Invalid ELF header magic: != ELF [ 125.255292][ T6838] BTRFS info (device loop1): setting nodatasum [ 125.255323][ T6838] BTRFS info (device loop1): setting nodatacow [ 125.255338][ T6838] BTRFS info (device loop1): enabling ssd optimizations [ 125.255353][ T6838] BTRFS info (device loop1): using spread ssd allocation scheme [ 125.255369][ T6838] BTRFS info (device loop1): turning off barriers [ 125.255385][ T6838] BTRFS info (device loop1): turning on flush-on-commit [ 125.255400][ T6838] BTRFS info (device loop1): turning on sync discard [ 125.255416][ T6838] BTRFS info (device loop1): force clearing of disk cache [ 125.421723][ T6867] profile_transition: unconfined exec no attachment [ 125.427681][ T5638] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.460026][ T5642] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 126.107762][ T6891] loop1: detected capacity change from 0 to 512 [ 126.131054][ T6891] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 126.131190][ T6891] System zones: 1-12 [ 126.142000][ T6894] loop3: detected capacity change from 0 to 512 [ 126.156661][ T6891] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.422: missing EA_INODE flag [ 126.156689][ T6891] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 126.161300][ T6891] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.422: error while reading EA inode 12 err=-117 [ 126.161332][ T6891] loop1: lost filesystem error report for type 5 error -117 [ 126.173981][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 126.174004][ C0] EXT4-fs (loop1): initial error at time 1793828134: ext4_xattr_inode_iget:437: inode 12 [ 126.174036][ C0] EXT4-fs (loop1): last error at time 1793828134: ext4_xattr_inode_iget:442 [ 126.174499][ T6891] EXT4-fs (loop1): 1 orphan inode deleted [ 126.246448][ T6894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.246573][ T6894] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.248736][ T6891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.346948][ T33] audit: type=1800 audit(1793828134.937:29): pid=6894 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.3.421" name="file1" dev="loop3" ino=15 res=0 errno=-22 [ 126.361347][ T6891] fscrypt (loop1, inode 15): Unsupported encryption flags (0x10) [ 126.538128][ T5642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.671839][ T6905] i2c i2c-0: Failed to register i2c client fsa4480 at 0x42 (-16) [ 126.803031][ T6907] loop0: detected capacity change from 0 to 164 [ 126.838216][ T6910] loop1: detected capacity change from 0 to 256 [ 126.934373][ T6910] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 126.934406][ T6910] FAT-fs (loop1): Filesystem has been set read-only [ 126.936516][ T6910] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 127.108167][ T5647] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.241004][ T6919] loop0: detected capacity change from 0 to 256 [ 127.274689][ T6919] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 127.455633][ T1018] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 127.516970][ T6925] loop3: detected capacity change from 0 to 256 [ 127.588292][ T6925] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 127.614664][ T6930] aa_policy_admin_capable: cap_mac_admin? 1 [ 127.614754][ T6930] aa_policy_admin_capable: policy locked? 0 [ 127.614822][ T6930] aa_parse_debug_params: unknown debug type '' [ 127.702883][ T189] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 127.769896][ T6934] netlink: 248 bytes leftover after parsing attributes in process `syz.0.439'. [ 127.769931][ T6934] netlink: 7 bytes leftover after parsing attributes in process `syz.0.439'. [ 128.040888][ T6945] loop1: detected capacity change from 0 to 164 [ 128.382573][ T6957] profile_transition: unconfined exec no attachment [ 128.502486][ T6962] aa_policy_admin_capable: cap_mac_admin? 1 [ 128.502509][ T6962] aa_policy_admin_capable: policy locked? 0 [ 128.502525][ T6962] aa_parse_debug_params: unknown debug type '' [ 128.916903][ T5829] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 129.063499][ T5829] usb 2-1: Using ep0 maxpacket: 16 [ 129.066151][ T5829] usb 2-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 129.068667][ T5829] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 129.068689][ T5829] usb 2-1: config 0 has no interface number 0 [ 129.068736][ T5829] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 129.068759][ T5829] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 129.104842][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.104871][ T5829] usb 2-1: Product: syz [ 129.104885][ T5829] usb 2-1: Manufacturer: syz [ 129.104900][ T5829] usb 2-1: SerialNumber: syz [ 129.162870][ T6975] loop2: detected capacity change from 0 to 512 [ 129.199892][ T6975] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 129.200033][ T6975] System zones: 1-12 [ 129.221221][ T6975] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.467: missing EA_INODE flag [ 129.221247][ T6975] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 129.223139][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 129.223161][ C1] EXT4-fs (loop2): initial error at time 1793828137: ext4_xattr_inode_iget:437: inode 12 [ 129.223194][ C1] EXT4-fs (loop2): last error at time 1793828137: ext4_xattr_inode_iget:437: inode 12 [ 129.285163][ T6975] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.467: error while reading EA inode 12 err=-117 [ 129.285200][ T6975] loop2: lost filesystem error report for type 5 error -117 [ 129.289791][ T6975] EXT4-fs (loop2): 1 orphan inode deleted [ 129.327182][ T6975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.328104][ T5829] usb 2-1: config 0 descriptor?? [ 129.331617][ T6968] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 129.331780][ T6968] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 129.458271][ T6975] fscrypt (loop2, inode 18): Unsupported encryption flags (0x10) [ 129.657217][ T5639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.682669][ T6968] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 129.682819][ T6968] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 129.823608][ T6971] loop0: detected capacity change from 0 to 131072 [ 129.824368][ T6971] xfs: Deprecated parameter 'ikeep' [ 129.824386][ T6971] XFS: ikeep mount option is deprecated. [ 129.889383][ T6971] XFS (loop0): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 129.912476][ T5829] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 130.040849][ T6971] XFS (loop0): Starting recovery (logdev: internal) [ 130.080235][ T6971] XFS (loop0): Ending recovery (logdev: internal) [ 130.088741][ T6971] XFS (loop0): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 130.112780][ T5829] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 57 [ 130.261505][ T6984] loop4: detected capacity change from 0 to 32768 [ 130.299616][ T6984] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 130.302198][ T6984] XFS (loop4): Mounting V5 filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a in no-recovery mode. Filesystem will be inconsistent. [ 130.327282][ T5829] usb 2-1: USB disconnect, device number 3 [ 130.385847][ T6984] XFS (loop4): ro->rw transition prohibited on norecovery mount [ 130.496744][ T5637] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 130.714189][ T11] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 130.865170][ T11] usb 3-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 130.866774][ T11] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 130.866801][ T11] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 130.866820][ T11] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 130.866867][ T11] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 130.866891][ T11] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 130.868873][ T11] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 130.868896][ T11] usb 3-1: Product: syz [ 130.868910][ T11] usb 3-1: Manufacturer: syz [ 130.960004][ T11] cdc_wdm 3-1:1.0: skipping garbage [ 130.960026][ T11] cdc_wdm 3-1:1.0: skipping garbage [ 130.977171][ T7014] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.978376][ T11] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 130.978395][ T11] cdc_wdm 3-1:1.0: Unknown control protocol [ 131.044421][ T7014] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.044542][ T7014] ext4 filesystem being mounted at /87/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.148922][ T5638] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.183599][ T7018] set_capacity_and_notify: 1 callbacks suppressed [ 131.183617][ T7018] loop4: detected capacity change from 0 to 1024 [ 131.266514][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 131.266626][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 131.266856][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 131.266876][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 131.267093][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 131.267112][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 131.267329][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 131.267348][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 131.267568][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 131.267587][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 131.267800][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 131.267819][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 131.268034][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 131.268052][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 131.268263][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 131.268282][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 131.268491][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 131.268511][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 131.268832][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 131.268851][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 131.279910][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 131.279943][ T27] usb 3-1: USB disconnect, device number 2 [ 131.288574][ T33] audit: type=1800 audit(1793828139.877:30): pid=7018 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.4.464" name="file1" dev="loop4" ino=20 res=0 errno=-22 [ 131.388178][ T7022] loop5: detected capacity change from 0 to 7 [ 131.402776][ T7018] syz.4.464: attempt to access beyond end of device [ 131.402776][ T7018] loop4: rw=34817, sector=5778, nr_sectors = 2 limit=1024 [ 131.420426][ T5652] Buffer I/O error on dev loop5, logical block 0, async page read [ 131.420972][ T5652] Buffer I/O error on dev loop5, logical block 0, async page read [ 131.421444][ T5652] Buffer I/O error on dev loop5, logical block 0, async page read [ 131.437135][ T5652] Buffer I/O error on dev loop5, logical block 0, async page read [ 131.437730][ T5652] Buffer I/O error on dev loop5, logical block 0, async page read [ 131.811464][ T7028] loop4: detected capacity change from 0 to 4096 [ 131.910960][ T7028] ntfs3(loop4): ino=b, Correct links count -> 1. [ 131.912379][ T7028] ntfs3(loop4): ino=18, mi_enum_attr [ 131.912407][ T7028] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 132.096339][ T33] audit: type=1800 audit(1793828140.677:31): pid=7028 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.4.473" name="bus" dev="loop4" ino=33 res=0 errno=-22 [ 132.692011][ T7043] loop1: detected capacity change from 0 to 32768 [ 132.728626][ T7043] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 132.819529][ T7043] XFS (loop1): Ending clean mount [ 132.890503][ T7079] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 132.970736][ T5642] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 133.172949][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.173030][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.204614][ T7086] loop1: detected capacity change from 0 to 1024 [ 133.307431][ T33] audit: type=1800 audit(1793828141.897:32): pid=7086 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.1.496" name="file1" dev="loop1" ino=20 res=0 errno=-22 [ 133.341679][ T7090] loop2: detected capacity change from 0 to 512 [ 133.346987][ T7086] syz.1.496: attempt to access beyond end of device [ 133.346987][ T7086] loop1: rw=34817, sector=5778, nr_sectors = 2 limit=1024 [ 133.367540][ T7090] EXT4-fs: Ignoring removed mblk_io_submit option [ 133.408174][ T7090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.408300][ T7090] ext4 filesystem being mounted at /102/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.588964][ T5639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.796169][ T7101] loop1: detected capacity change from 0 to 512 [ 133.828825][ T7101] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 133.828847][ T7101] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 133.850947][ T7101] EXT4-fs error (device loop1): ext4_iget_extra_inode:6027: inode #15: comm syz.1.501: corrupted in-inode xattr: overlapping e_value [ 133.850979][ T7101] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 133.853152][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 133.853172][ C1] EXT4-fs (loop1): initial error at time 1793828142: ext4_iget_extra_inode:6027: inode 15 [ 133.853200][ C1] EXT4-fs (loop1): last error at time 1793828142: ext4_iget_extra_inode:6027: inode 15 [ 133.860776][ T7105] loop2: detected capacity change from 0 to 128 [ 133.867233][ T7105] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 133.867278][ T7105] hpfs: filesystem error: improperly stopped [ 133.867291][ T7105] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 133.867304][ T7105] hpfs: You really don't want any checks? You are crazy... [ 133.867313][ T7105] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 133.867323][ T7105] hpfs: code page support is disabled [ 133.867585][ T7105] hpfs: hpfs_map_4sectors(): unaligned read [ 133.867651][ T7105] hpfs: hpfs_map_4sectors(): unaligned read [ 133.867660][ T7105] hpfs: filesystem error: unable to find root dir [ 133.876159][ T7101] EXT4-fs (loop1): Remounting filesystem read-only [ 133.897190][ T7101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.908516][ T7105] hpfs: hpfs_map_4sectors(): unaligned read [ 133.908625][ T7105] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 133.955584][ T7101] EXT4-fs (loop1): shut down requested (1) [ 134.068815][ T7088] loop0: detected capacity change from 0 to 32768 [ 134.112287][ T7088] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 134.152972][ T5642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.337771][ T7088] XFS (loop0): Ending clean mount [ 134.363724][ T7088] XFS (loop0): Quotacheck needed: Please wait. [ 134.472557][ T7088] XFS (loop0): Quotacheck: Done. [ 134.729609][ T5638] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 135.200386][ T7133] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 135.414095][ T7138] ima: policy update failed [ 135.414802][ T33] audit: type=1804 audit(1793828144.007:33): pid=7139 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=measuring_policy cause=store_entry comm="syz.0.511" name="ima_policy_written" res=0 errno=-17 [ 135.414852][ T33] audit: type=1807 audit(1793828144.007:34): action=measure uid>+L'f&vd¹Kuì\|¤RÑ>(/:}ùÆ”Šîö~A\poÜ%kèÎéEâCgIƒídä1°»wï@‘GGyÁP0E‹eìÆG9C]4ðÖ²M\AýlôpGõø¢ŸbŽžÖ res=0 [ 135.414891][ T33] audit: type=1802 audit(1793828144.007:35): pid=7139 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=update_policy cause=invalid-policy comm="syz.0.511" res=0 errno=-22 [ 135.414928][ T33] audit: type=1802 audit(1793828144.007:36): pid=7138 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=policy_update cause=failed comm="syz.0.511" res=0 errno=-22 [ 135.598471][ T7129] loop2: detected capacity change from 0 to 32768 [ 135.656578][ T7129] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 135.829674][ T7141] ntfs3(loop1): ino=b, Correct links count -> 1. [ 135.842410][ T7141] ntfs3(loop1): ino=18, mi_enum_attr [ 135.842439][ T7141] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 135.995370][ T33] audit: type=1800 audit(1793828144.587:37): pid=7141 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.1.512" name="bus" dev="loop1" ino=33 res=0 errno=-22 [ 136.039688][ T5639] ocfs2: Unmounting device (7,2) on (node local) [ 136.077948][ T7152] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 136.078009][ T7152] hpfs: filesystem error: improperly stopped [ 136.078024][ T7152] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 136.078038][ T7152] hpfs: You really don't want any checks? You are crazy... [ 136.078080][ T7152] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 136.078093][ T7152] hpfs: code page support is disabled [ 136.078469][ T7152] hpfs: hpfs_map_4sectors(): unaligned read [ 136.078548][ T7152] hpfs: hpfs_map_4sectors(): unaligned read [ 136.078557][ T7152] hpfs: filesystem error: unable to find root dir [ 136.151392][ T7152] hpfs: hpfs_map_4sectors(): unaligned read [ 136.151501][ T7152] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 136.367777][ T7161] set_capacity_and_notify: 2 callbacks suppressed [ 136.367797][ T7161] loop3: detected capacity change from 0 to 512 [ 136.381751][ T7161] EXT4-fs: Ignoring removed bh option [ 136.401007][ T7161] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 136.516567][ T7161] EXT4-fs (loop3): 1 truncate cleaned up [ 136.562837][ T7161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.612632][ T7161] Invalid ELF header magic: != ELF [ 136.663315][ T33] audit: type=1800 audit(1793828145.187:38): pid=7161 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.3.522" name="bus" dev="loop3" ino=18 res=0 errno=-22 [ 137.392623][ T5647] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.696994][ T33] audit: type=1804 audit(1793828146.287:39): pid=7182 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=measuring_policy cause=store_entry comm="syz.4.530" name="ima_policy_written" res=0 errno=-17 [ 137.697241][ T33] audit: type=1807 audit(1793828146.287:40): action=measure uid>+L'f&vd¹Kuì\|¤RÑ>(/:}ùÆ”Šîö~A\poÜ%kèÎéEâCgIƒídä1°»wï@‘GGyÁP0E‹eìÆG9C]4ðÖ²M\AýlôpGõø¢ŸbŽžÖ res=0 [ 137.697835][ T33] audit: type=1802 audit(1793828146.287:41): pid=7182 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=update_policy cause=invalid-policy comm="syz.4.530" res=0 errno=-22 [ 137.698525][ T7180] ima: policy update failed [ 137.698687][ T33] audit: type=1802 audit(1793828146.287:42): pid=7180 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=policy_update cause=failed comm="syz.4.530" res=0 errno=-22 [ 137.763248][ T7170] loop1: detected capacity change from 0 to 131072 [ 137.763954][ T7170] xfs: Deprecated parameter 'ikeep' [ 137.763971][ T7170] XFS: ikeep mount option is deprecated. [ 137.822373][ T7170] XFS (loop1): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 137.926792][ T7170] XFS (loop1): Starting recovery (logdev: internal) [ 137.981459][ T7170] XFS (loop1): Ending recovery (logdev: internal) [ 137.996364][ T7170] XFS (loop1): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 138.299923][ T7200] random: crng reseeded on system resumption [ 138.356701][ T7203] profile_transition: unconfined exec no attachment [ 138.895347][ T7212] loop1: detected capacity change from 0 to 128 [ 138.925284][ T7212] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 138.925343][ T7212] hpfs: filesystem error: improperly stopped [ 138.925358][ T7212] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 138.925372][ T7212] hpfs: You really don't want any checks? You are crazy... [ 138.925382][ T7212] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 138.925393][ T7212] hpfs: code page support is disabled [ 138.925736][ T7212] hpfs: hpfs_map_4sectors(): unaligned read [ 138.925813][ T7212] hpfs: hpfs_map_4sectors(): unaligned read [ 138.925822][ T7212] hpfs: filesystem error: unable to find root dir [ 138.971795][ T7212] hpfs: hpfs_map_4sectors(): unaligned read [ 138.971927][ T7212] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 139.278471][ T7216] loop1: detected capacity change from 0 to 512 [ 139.294905][ T7216] EXT4-fs: Ignoring removed bh option [ 139.321944][ T7216] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 139.351213][ T7216] EXT4-fs (loop1): 1 truncate cleaned up [ 139.374310][ T7216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.414202][ T7224] loop4: detected capacity change from 0 to 256 [ 139.415198][ T33] audit: type=1800 audit(1793828148.007:43): pid=7216 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.1.539" name="bus" dev="loop1" ino=18 res=0 errno=-22 [ 139.469577][ T7216] Invalid ELF header magic: != ELF [ 139.599457][ T5642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.909734][ T7226] loop3: detected capacity change from 0 to 32768 [ 139.981367][ T7226] JBD2: Ignoring recovery information on journal [ 140.066196][ T7238] loop0: detected capacity change from 0 to 256 [ 140.091319][ T7226] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 140.391700][ T5647] ocfs2: Unmounting device (7,3) on (node local) [ 140.812631][ T7235] loop4: detected capacity change from 0 to 40427 [ 140.827526][ T7235] F2FS-fs (loop4): Wrong SSA boundary, start(3584) end(4096) blocks(301990400) [ 140.827572][ T7235] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 140.830506][ T7235] F2FS-fs (loop4): build fault injection rate: 174 [ 140.830527][ T7235] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 140.877295][ T7235] F2FS-fs (loop4): invalid crc value [ 141.012480][ T7232] mmap: syz.2.547 (7232) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 141.172490][ T7235] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 141.205732][ T7235] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 141.206099][ T7235] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 141.260582][ T7235] F2FS-fs (loop4): inject no more block in inc_valid_block_count of f2fs_map_blocks+0x17cb/0x4c40 [ 141.298544][ T5637] syz-executor: attempt to access beyond end of device [ 141.298544][ T5637] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 141.324834][ T5637] CPU: 1 UID: 0 PID: 5637 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 141.324871][ T5637] Tainted: [L]=SOFTLOCKUP [ 141.324879][ T5637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 141.324891][ T5637] Call Trace: [ 141.324899][ T5637] [ 141.324908][ T5637] dump_stack_lvl+0xe8/0x150 [ 141.324945][ T5637] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 141.324983][ T5637] f2fs_write_end_bio+0xf7d/0x1310 [ 141.325034][ T5637] __submit_merged_bio+0x258/0x6a0 [ 141.325054][ T5637] ? rcu_is_watching+0x16/0xb0 [ 141.325090][ T5637] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 141.325125][ T5637] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 141.325184][ T5637] __f2fs_write_data_pages+0x2cd0/0x72b0 [ 141.325235][ T5637] ? __lock_acquire+0x747/0x2de0 [ 141.325292][ T5637] ? __lock_acquire+0x747/0x2de0 [ 141.325320][ T5637] ? __lock_acquire+0x747/0x2de0 [ 141.325344][ T5637] ? __pfx___f2fs_write_data_pages+0x10/0x10 [ 141.325425][ T5637] ? rcu_is_watching+0x16/0xb0 [ 141.325457][ T5637] ? rcu_is_watching+0x16/0xb0 [ 141.325482][ T5637] ? __kasan_check_byte+0x12/0x40 [ 141.325529][ T5637] ? is_bpf_text_address+0x292/0x2b0 [ 141.325550][ T5637] ? is_bpf_text_address+0x26/0x2b0 [ 141.325574][ T5637] ? kernel_text_address+0xa5/0xe0 [ 141.325600][ T5637] ? __kernel_text_address+0xd/0x30 [ 141.325624][ T5637] ? unwind_get_return_address+0x4d/0x90 [ 141.325649][ T5637] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 141.325673][ T5637] ? arch_stack_walk+0xfb/0x150 [ 141.325719][ T5637] ? stack_trace_save+0xa9/0x100 [ 141.325743][ T5637] ? __pfx_stack_trace_save+0x10/0x10 [ 141.325771][ T5637] ? check_path+0x21/0x40 [ 141.325804][ T5637] ? add_lock_to_list+0xc7/0x100 [ 141.325834][ T5637] ? lockdep_unlock+0x5c/0xd0 [ 141.325854][ T5637] ? __lock_acquire+0x1511/0x2de0 [ 141.325912][ T5637] ? do_raw_spin_lock+0x12b/0x2f0 [ 141.325946][ T5637] ? do_raw_spin_unlock+0xf5/0x200 [ 141.325966][ T5637] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 141.325992][ T5637] do_writepages+0x338/0x560 [ 141.326028][ T5637] ? do_raw_spin_unlock+0xf5/0x200 [ 141.326054][ T5637] filemap_fdatawrite+0x1e9/0x2f0 [ 141.326082][ T5637] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 141.326160][ T5637] ? do_raw_spin_unlock+0xf5/0x200 [ 141.326186][ T5637] f2fs_sync_dirty_inodes+0x471/0x970 [ 141.326231][ T5637] f2fs_write_checkpoint+0x867/0x24d0 [ 141.326308][ T5637] kill_f2fs_super+0x2df/0x700 [ 141.326338][ T5637] ? rcu_do_enqueue+0x616/0x870 [ 141.326362][ T5637] ? lockdep_hardirqs_on+0x7b/0x110 [ 141.326386][ T5637] ? __pfx_kill_f2fs_super+0x10/0x10 [ 141.326430][ T5637] ? __pfx_call_rcu+0x10/0x10 [ 141.326456][ T5637] ? shrinker_free+0x2a7/0x3b0 [ 141.326483][ T5637] deactivate_locked_super+0xbe/0x110 [ 141.326512][ T5637] cleanup_mnt+0x204/0x2a0 [ 141.326547][ T5637] task_work_run+0x1d9/0x260 [ 141.326576][ T5637] ? __pfx_task_work_run+0x10/0x10 [ 141.326613][ T5637] exit_to_user_mode_loop+0x204/0x770 [ 141.326639][ T5637] ? rcu_is_watching+0x16/0xb0 [ 141.326673][ T5637] do_syscall_64+0x32c/0x530 [ 141.326695][ T5637] ? trace_irq_disable+0x3b/0x140 [ 141.326719][ T5637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.326739][ T5637] ? clear_bhb_loop+0x70/0xc0 [ 141.326763][ T5637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.326782][ T5637] RIP: 0033:0x00007f2f98ba0d57 [ 141.326804][ T5637] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 141.326819][ T5637] RSP: 002b:00007ffe6c409f68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 141.326842][ T5637] RAX: 0000000000000000 RBX: 00007f2f98c36fb3 RCX: 00007f2f98ba0d57 [ 141.326854][ T5637] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe6c40a020 [ 141.326867][ T5637] RBP: 00007ffe6c40a020 R08: 00007ffe6c40b020 R09: 00000000ffffffff [ 141.326880][ T5637] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe6c40b0b0 [ 141.326892][ T5637] R13: 00007f2f98c36fb3 R14: 00000000000227b2 R15: 00007ffe6c40b0f0 [ 141.326928][ T5637] [ 141.330026][ T5637] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 142.051879][ T7265] loop4: detected capacity change from 0 to 128 [ 142.080519][ T7265] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 142.080573][ T7265] hpfs: filesystem error: improperly stopped [ 142.080588][ T7265] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 142.080602][ T7265] hpfs: You really don't want any checks? You are crazy... [ 142.080611][ T7265] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 142.080623][ T7265] hpfs: code page support is disabled [ 142.080816][ T7265] hpfs: hpfs_map_4sectors(): unaligned read [ 142.080891][ T7265] hpfs: hpfs_map_4sectors(): unaligned read [ 142.080901][ T7265] hpfs: filesystem error: unable to find root dir [ 142.177706][ T7265] hpfs: hpfs_map_4sectors(): unaligned read [ 142.177863][ T7265] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 142.475960][ T7250] loop3: detected capacity change from 0 to 32768 [ 142.483686][ T7250] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.552 (7250) [ 142.529387][ T7250] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 142.529424][ T7250] BTRFS info (device loop3): using sha256 checksum algorithm [ 142.707895][ T7250] BTRFS info (device loop3): rebuilding free space tree [ 142.812104][ T7274] loop4: detected capacity change from 0 to 32768 [ 142.842982][ T7250] BTRFS info (device loop3): disabling free space tree [ 142.843054][ T7250] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 142.843608][ T7250] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 142.907884][ T7250] BTRFS info (device loop3): setting nodatasum [ 142.907913][ T7250] BTRFS info (device loop3): setting nodatacow [ 142.907930][ T7250] BTRFS info (device loop3): enabling ssd optimizations [ 142.907945][ T7250] BTRFS info (device loop3): using spread ssd allocation scheme [ 142.907961][ T7250] BTRFS info (device loop3): turning off barriers [ 142.907976][ T7250] BTRFS info (device loop3): turning on flush-on-commit [ 142.907992][ T7250] BTRFS info (device loop3): turning on sync discard [ 142.908008][ T7250] BTRFS info (device loop3): force clearing of disk cache [ 142.947640][ T7290] profile_transition: unconfined exec no attachment [ 142.980227][ T7274] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 143.331261][ T5637] ocfs2: Unmounting device (7,4) on (node local) [ 143.366884][ T5647] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 143.827578][ T7300] loop4: detected capacity change from 0 to 2048 [ 143.888446][ T7302] profile_transition: unconfined exec no attachment [ 143.954395][ T7300] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.321267][ T7311] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 144.321296][ T7311] CPU: 1 UID: 0 PID: 7311 Comm: syz.0.568 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.321322][ T7311] Tainted: [L]=SOFTLOCKUP [ 144.321329][ T7311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 144.321341][ T7311] Call Trace: [ 144.321350][ T7311] [ 144.321359][ T7311] dump_stack_lvl+0xe8/0x150 [ 144.321400][ T7311] sysfs_create_dir_ns+0x271/0x2a0 [ 144.321425][ T7311] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 144.321451][ T7311] ? do_raw_spin_unlock+0xf5/0x200 [ 144.321479][ T7311] kobject_add_internal+0x622/0xcd0 [ 144.321521][ T7311] kobject_add+0x163/0x240 [ 144.321550][ T7311] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 144.321588][ T7311] ? __pfx_kobject_add+0x10/0x10 [ 144.321624][ T7311] ? get_device_parent+0x366/0x3a0 [ 144.321657][ T7311] device_add+0x3fa/0xb80 [ 144.321688][ T7311] tty_register_device_attr+0x428/0x9b0 [ 144.321716][ T7311] ? __pfx_tty_register_device_attr+0x10/0x10 [ 144.321746][ T7311] ? tty_port_init+0x136/0x1a0 [ 144.321766][ T7311] ? gsm_dlci_alloc+0x330/0x640 [ 144.321792][ T7311] gsm_activate_mux+0x110/0x2a0 [ 144.321820][ T7311] gsmld_ioctl+0x12d3/0x1930 [ 144.321847][ T7311] ? __pfx_gsmld_ioctl+0x10/0x10 [ 144.321881][ T7311] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 144.321916][ T7311] ? ldsem_down_read+0x12/0x40 [ 144.321941][ T7311] ? __pfx_gsmld_ioctl+0x10/0x10 [ 144.321958][ T7311] tty_ioctl+0x9bd/0xde0 [ 144.321988][ T7311] ? __pfx_tty_ioctl+0x10/0x10 [ 144.322015][ T7311] __se_sys_ioctl+0xfc/0x170 [ 144.322037][ T7311] do_syscall_64+0x16a/0x530 [ 144.322058][ T7311] ? trace_irq_disable+0x3b/0x140 [ 144.322082][ T7311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.322102][ T7311] ? clear_bhb_loop+0x70/0xc0 [ 144.322126][ T7311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.322145][ T7311] RIP: 0033:0x00007f5ba599fb19 [ 144.322166][ T7311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.322182][ T7311] RSP: 002b:00007f5ba67b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 144.322204][ T7311] RAX: ffffffffffffffda RBX: 00007f5ba5c26090 RCX: 00007f5ba599fb19 [ 144.322217][ T7311] RDX: 00002000000000c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 144.322229][ T7311] RBP: 00007f5ba5a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 144.322242][ T7311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.322254][ T7311] R13: 00007f5ba5c26128 R14: 00007f5ba5c26090 R15: 00007ffe5ba234f8 [ 144.322290][ T7311] [ 144.357812][ T7311] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 145.192615][ T7324] loop2: detected capacity change from 0 to 512 [ 145.313236][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 145.350603][ T7324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.350723][ T7324] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.446411][ T33] audit: type=1800 audit(1793828154.037:44): pid=7324 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.2.572" name="file1" dev="loop2" ino=15 res=0 errno=-22 [ 145.466641][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 145.469262][ T27] usb 4-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 145.475619][ T27] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 145.475642][ T27] usb 4-1: config 0 has no interface number 0 [ 145.475680][ T27] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 145.475700][ T27] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 145.487816][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.487838][ T27] usb 4-1: Product: syz [ 145.487851][ T27] usb 4-1: Manufacturer: syz [ 145.487863][ T27] usb 4-1: SerialNumber: syz [ 145.525340][ T27] usb 4-1: config 0 descriptor?? [ 145.530653][ T7322] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 145.530787][ T7322] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 145.795179][ T7322] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 145.795304][ T7322] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 145.870339][ T7334] loop4: detected capacity change from 0 to 256 [ 145.871538][ T7334] exfat: Deprecated parameter 'utf8' [ 145.871557][ T7334] exfat: Deprecated parameter 'utf8' [ 145.925096][ T7334] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x30348f56, utbl_chksum : 0xe619d30d) [ 145.999092][ T5639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.007815][ T27] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 146.208334][ T27] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 57 [ 146.246829][ T5748] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 146.334498][ T7344] loop0: detected capacity change from 0 to 4096 [ 146.393193][ T5748] usb 5-1: Using ep0 maxpacket: 16 [ 146.395097][ T5748] usb 5-1: New USB device found: idVendor=056a, idProduct=0331, bcdDevice=0.00 [ 146.397598][ T5748] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.397628][ T5748] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.397650][ T5748] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 146.397676][ T5748] usb 5-1: config 0 interface 0 has no altsetting 0 [ 146.397710][ T5748] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.406765][ T5748] usb 5-1: config 0 descriptor?? [ 146.431501][ T7344] ntfs3(loop0): Failed to load $Extend (-22). [ 146.431523][ T7344] ntfs3(loop0): Failed to initialize $Extend. [ 146.463778][ T27] usb 4-1: USB disconnect, device number 3 [ 146.837602][ T7358] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 146.850532][ T5748] hid (null): invalid report_count 2075921239 [ 146.850564][ T5748] hid (null): unknown global tag 0xd [ 146.850586][ T5748] hid (null): invalid report_count 38340 [ 146.850828][ T5748] hid (null): invalid report_size 48260 [ 146.850840][ T5748] hid (null): unknown global tag 0xe [ 146.863003][ T5748] hid (null): unknown global tag 0xc [ 146.864107][ T5748] hid (null): unknown global tag 0xe [ 146.867856][ T5748] hid (null): unknown global tag 0x55 [ 147.094325][ T5829] usb 5-1: USB disconnect, device number 6 [ 147.421489][ T7360] loop1: detected capacity change from 0 to 32768 [ 147.450475][ T7360] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 147.477619][ T7363] loop0: detected capacity change from 0 to 32768 [ 147.486487][ T7363] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.589 (7363) [ 147.521766][ T7363] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 147.521805][ T7363] BTRFS info (device loop0): using blake2b checksum algorithm [ 147.559149][ T7360] XFS (loop1): Ending clean mount [ 147.567212][ T7360] XFS (loop1): Quotacheck needed: Please wait. [ 147.632383][ T7363] BTRFS info (device loop0): enabling ssd optimizations [ 147.632412][ T7363] BTRFS info (device loop0): turning on async discard [ 147.632428][ T7363] BTRFS info (device loop0): enabling free space tree [ 147.695474][ T7386] profile_transition: unconfined exec no attachment [ 147.722802][ T7360] XFS (loop1): Quotacheck: Done. [ 147.879858][ T5638] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 147.932350][ T7392] loop4: detected capacity change from 0 to 512 [ 148.041411][ T7392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.041527][ T7392] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.119306][ T33] audit: type=1800 audit(1793828156.707:45): pid=7392 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.4.590" name="file1" dev="loop4" ino=15 res=0 errno=-22 [ 148.175714][ T5642] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 148.699146][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.176843][ T7390] loop3: detected capacity change from 0 to 40427 [ 149.194075][ T7390] F2FS-fs (loop3): invalid crc value [ 149.348375][ T7390] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 149.355156][ T5829] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 149.365300][ T7390] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 149.450350][ T5647] syz-executor: attempt to access beyond end of device [ 149.450350][ T5647] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 149.465934][ T5647] CPU: 1 UID: 0 PID: 5647 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 149.465966][ T5647] Tainted: [L]=SOFTLOCKUP [ 149.465972][ T5647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 149.465982][ T5647] Call Trace: [ 149.465990][ T5647] [ 149.465998][ T5647] dump_stack_lvl+0xe8/0x150 [ 149.466032][ T5647] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 149.466068][ T5647] f2fs_write_end_bio+0xf7d/0x1310 [ 149.466109][ T5647] __submit_merged_bio+0x258/0x6a0 [ 149.466127][ T5647] ? rcu_is_watching+0x16/0xb0 [ 149.466158][ T5647] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 149.466189][ T5647] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 149.466241][ T5647] __f2fs_write_data_pages+0x2cd0/0x72b0 [ 149.466285][ T5647] ? __lock_acquire+0x747/0x2de0 [ 149.466327][ T5647] ? __lock_acquire+0x747/0x2de0 [ 149.466351][ T5647] ? __lock_acquire+0x747/0x2de0 [ 149.466372][ T5647] ? __pfx___f2fs_write_data_pages+0x10/0x10 [ 149.466443][ T5647] ? rcu_is_watching+0x16/0xb0 [ 149.466470][ T5647] ? rcu_is_watching+0x16/0xb0 [ 149.466492][ T5647] ? __kasan_check_byte+0x12/0x40 [ 149.466534][ T5647] ? is_bpf_text_address+0x292/0x2b0 [ 149.466561][ T5647] ? is_bpf_text_address+0x26/0x2b0 [ 149.466582][ T5647] ? kernel_text_address+0xa5/0xe0 [ 149.466606][ T5647] ? __kernel_text_address+0xd/0x30 [ 149.466626][ T5647] ? unwind_get_return_address+0x4d/0x90 [ 149.466649][ T5647] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 149.466670][ T5647] ? arch_stack_walk+0xfb/0x150 [ 149.466706][ T5647] ? stack_trace_save+0xa9/0x100 [ 149.466727][ T5647] ? __pfx_stack_trace_save+0x10/0x10 [ 149.466753][ T5647] ? check_path+0x21/0x40 [ 149.466781][ T5647] ? add_lock_to_list+0xc7/0x100 [ 149.466808][ T5647] ? lockdep_unlock+0x5c/0xd0 [ 149.466825][ T5647] ? __lock_acquire+0x1511/0x2de0 [ 149.466875][ T5647] ? do_raw_spin_lock+0x12b/0x2f0 [ 149.466904][ T5647] ? do_raw_spin_unlock+0xf5/0x200 [ 149.466923][ T5647] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 149.466946][ T5647] do_writepages+0x338/0x560 [ 149.466977][ T5647] ? do_raw_spin_unlock+0xf5/0x200 [ 149.467000][ T5647] filemap_fdatawrite+0x1e9/0x2f0 [ 149.467025][ T5647] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 149.467093][ T5647] ? do_raw_spin_unlock+0xf5/0x200 [ 149.467115][ T5647] f2fs_sync_dirty_inodes+0x471/0x970 [ 149.467154][ T5647] f2fs_write_checkpoint+0x867/0x24d0 [ 149.467218][ T5647] kill_f2fs_super+0x2df/0x700 [ 149.467245][ T5647] ? rcu_do_enqueue+0x616/0x870 [ 149.467266][ T5647] ? lockdep_hardirqs_on+0x7b/0x110 [ 149.467286][ T5647] ? __pfx_kill_f2fs_super+0x10/0x10 [ 149.467325][ T5647] ? __pfx_call_rcu+0x10/0x10 [ 149.467348][ T5647] ? shrinker_free+0x2a7/0x3b0 [ 149.467372][ T5647] deactivate_locked_super+0xbe/0x110 [ 149.467398][ T5647] cleanup_mnt+0x204/0x2a0 [ 149.467428][ T5647] task_work_run+0x1d9/0x260 [ 149.467453][ T5647] ? __pfx_task_work_run+0x10/0x10 [ 149.467486][ T5647] exit_to_user_mode_loop+0x204/0x770 [ 149.467508][ T5647] ? rcu_is_watching+0x16/0xb0 [ 149.467538][ T5647] do_syscall_64+0x32c/0x530 [ 149.467563][ T5647] ? trace_irq_disable+0x3b/0x140 [ 149.467586][ T5647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.467604][ T5647] ? clear_bhb_loop+0x70/0xc0 [ 149.467627][ T5647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.467643][ T5647] RIP: 0033:0x00007f1966da0d57 [ 149.467663][ T5647] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 149.467677][ T5647] RSP: 002b:00007ffe7399a0d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 149.467697][ T5647] RAX: 0000000000000000 RBX: 00007f1966e36fb3 RCX: 00007f1966da0d57 [ 149.467709][ T5647] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7399a190 [ 149.467719][ T5647] RBP: 00007ffe7399a190 R08: 00007ffe7399b190 R09: 00000000ffffffff [ 149.467730][ T5647] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe7399b220 [ 149.467741][ T5647] R13: 00007f1966e36fb3 R14: 000000000002477d R15: 00007ffe7399b260 [ 149.467772][ T5647] [ 149.469206][ T5647] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 149.503249][ T5829] usb 3-1: Using ep0 maxpacket: 16 [ 149.503951][ T5829] usb 3-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 149.509822][ T5829] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 149.509844][ T5829] usb 3-1: config 0 has no interface number 0 [ 149.509883][ T5829] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 149.509904][ T5829] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 149.515381][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.515404][ T5829] usb 3-1: Product: syz [ 149.515416][ T5829] usb 3-1: Manufacturer: syz [ 149.515428][ T5829] usb 3-1: SerialNumber: syz [ 149.521257][ T5829] usb 3-1: config 0 descriptor?? [ 149.521982][ T7413] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 149.522111][ T7413] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 149.777699][ T7413] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 149.777836][ T7413] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 149.994789][ T5829] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 150.208254][ T7422] loop0: detected capacity change from 0 to 32768 [ 150.209882][ T5829] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 57 [ 150.304815][ T7422] JBD2: Ignoring recovery information on journal [ 150.419856][ T7422] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 150.429703][ T5829] usb 3-1: USB disconnect, device number 3 [ 150.508983][ T7436] loop3: detected capacity change from 0 to 256 [ 150.524396][ T7436] exfat: Deprecated parameter 'utf8' [ 150.524420][ T7436] exfat: Deprecated parameter 'utf8' [ 150.556647][ T5638] ocfs2: Unmounting device (7,0) on (node local) [ 150.599204][ T7436] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x30348f56, utbl_chksum : 0xe619d30d) [ 150.873416][ T5748] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 151.023383][ T5748] usb 4-1: Using ep0 maxpacket: 16 [ 151.023915][ T7441] loop0: detected capacity change from 0 to 256 [ 151.028074][ T5748] usb 4-1: New USB device found: idVendor=056a, idProduct=0331, bcdDevice=0.00 [ 151.029556][ T5748] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.029582][ T5748] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.029609][ T5748] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 151.029630][ T5748] usb 4-1: config 0 interface 0 has no altsetting 0 [ 151.029660][ T5748] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.040115][ T5748] usb 4-1: config 0 descriptor?? [ 151.190740][ T7433] loop4: detected capacity change from 0 to 32768 [ 151.245918][ T7433] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 151.349645][ T7433] XFS (loop4): Ending clean mount [ 151.461689][ T5637] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 151.521053][ T5748] hid (null): invalid report_count 2075921239 [ 151.521090][ T5748] hid (null): unknown global tag 0xd [ 151.521115][ T5748] hid (null): invalid report_count 38340 [ 151.521412][ T5748] hid (null): invalid report_size 48260 [ 151.521427][ T5748] hid (null): unknown global tag 0xe [ 151.545597][ T5748] hid (null): unknown global tag 0xc [ 151.546565][ T5748] hid (null): unknown global tag 0xe [ 151.551860][ T5748] hid (null): unknown global tag 0x55 [ 151.778143][ T977] usb 4-1: USB disconnect, device number 4 [ 151.845269][ T7459] loop0: detected capacity change from 0 to 512 [ 151.928021][ T7459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.928245][ T7459] ext4 filesystem being mounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.979523][ T33] audit: type=1800 audit(1793828160.567:46): pid=7459 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.0.625" name="file1" dev="loop0" ino=15 res=0 errno=-22 [ 152.280505][ T5638] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.568695][ T7474] loop4: detected capacity change from 0 to 2048 [ 152.612820][ T7474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.612955][ T7474] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.709451][ T7477] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.617: bg 0: block 345: padding at end of block bitmap is not set [ 152.713541][ T7477] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 117 [ 152.713573][ T7477] EXT4-fs (loop4): This should not happen!! Data will be lost [ 152.713573][ T7477] [ 152.731187][ T7474] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 152.731219][ T7474] EXT4-fs (loop4): This should not happen!! Data will be lost [ 152.731219][ T7474] [ 152.731233][ T7474] EXT4-fs (loop4): Total free blocks count 0 [ 152.731245][ T7474] EXT4-fs (loop4): Free/Dirty block details [ 152.731257][ T7474] EXT4-fs (loop4): free_blocks=0 [ 152.731270][ T7474] EXT4-fs (loop4): dirty_blocks=96 [ 152.731282][ T7474] EXT4-fs (loop4): Block reservation details [ 152.986048][ T7470] loop1: detected capacity change from 0 to 40427 [ 153.019836][ T7470] F2FS-fs (loop1): invalid crc value [ 153.194781][ T5741] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 153.335819][ T7470] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 153.355136][ T5741] usb 1-1: New USB device found: idVendor=06b9, idProduct=4061, bcdDevice=1.00 [ 153.355866][ T7470] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 153.374802][ T5741] usb 1-1: config 1 has an invalid interface number: 27 but max is 1 [ 153.374830][ T5741] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.374849][ T5741] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 153.374869][ T5741] usb 1-1: config 1 has no interface number 2 [ 153.374933][ T5741] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 153.374956][ T5741] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.374982][ T5741] usb 1-1: config 1 interface 1 has no altsetting 0 [ 153.379515][ T5741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.379542][ T5741] usb 1-1: Product: syz [ 153.379555][ T5741] usb 1-1: Manufacturer: syz [ 153.379568][ T5741] usb 1-1: SerialNumber: syz [ 153.522721][ T5642] syz-executor: attempt to access beyond end of device [ 153.522721][ T5642] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 153.533071][ T5642] CPU: 1 UID: 0 PID: 5642 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 153.533103][ T5642] Tainted: [L]=SOFTLOCKUP [ 153.533110][ T5642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 153.533120][ T5642] Call Trace: [ 153.533128][ T5642] [ 153.533136][ T5642] dump_stack_lvl+0xe8/0x150 [ 153.533170][ T5642] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 153.533205][ T5642] f2fs_write_end_bio+0xf7d/0x1310 [ 153.533246][ T5642] __submit_merged_bio+0x258/0x6a0 [ 153.533265][ T5642] ? rcu_is_watching+0x16/0xb0 [ 153.533296][ T5642] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 153.533327][ T5642] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 153.533380][ T5642] __f2fs_write_data_pages+0x2cd0/0x72b0 [ 153.533435][ T5642] ? ktime_get+0x45/0x220 [ 153.533467][ T5642] ? clockevents_program_event+0x491/0x630 [ 153.533493][ T5642] ? __pfx___f2fs_write_data_pages+0x10/0x10 [ 153.533516][ T5642] ? __lock_acquire+0x747/0x2de0 [ 153.533583][ T5642] ? rcu_is_watching+0x16/0xb0 [ 153.533611][ T5642] ? rcu_is_watching+0x16/0xb0 [ 153.533633][ T5642] ? __kasan_check_byte+0x12/0x40 [ 153.533675][ T5642] ? is_bpf_text_address+0x292/0x2b0 [ 153.533694][ T5642] ? is_bpf_text_address+0x26/0x2b0 [ 153.533716][ T5642] ? kernel_text_address+0xa5/0xe0 [ 153.533739][ T5642] ? __kernel_text_address+0xd/0x30 [ 153.533760][ T5642] ? unwind_get_return_address+0x4d/0x90 [ 153.533783][ T5642] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 153.533805][ T5642] ? arch_stack_walk+0xfb/0x150 [ 153.533840][ T5642] ? stack_trace_save+0xa9/0x100 [ 153.533861][ T5642] ? __pfx_stack_trace_save+0x10/0x10 [ 153.533887][ T5642] ? check_path+0x21/0x40 [ 153.533916][ T5642] ? add_lock_to_list+0xc7/0x100 [ 153.533952][ T5642] ? lockdep_unlock+0x5c/0xd0 [ 153.533970][ T5642] ? __lock_acquire+0x1511/0x2de0 [ 153.534027][ T5642] ? do_raw_spin_lock+0x12b/0x2f0 [ 153.534057][ T5642] ? do_raw_spin_unlock+0xf5/0x200 [ 153.534076][ T5642] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 153.534100][ T5642] do_writepages+0x338/0x560 [ 153.534131][ T5642] ? do_raw_spin_unlock+0xf5/0x200 [ 153.534154][ T5642] filemap_fdatawrite+0x1e9/0x2f0 [ 153.534179][ T5642] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 153.534246][ T5642] ? do_raw_spin_unlock+0xf5/0x200 [ 153.534269][ T5642] f2fs_sync_dirty_inodes+0x471/0x970 [ 153.534309][ T5642] f2fs_write_checkpoint+0x867/0x24d0 [ 153.534369][ T5642] kill_f2fs_super+0x2df/0x700 [ 153.534397][ T5642] ? rcu_do_enqueue+0x616/0x870 [ 153.534418][ T5642] ? lockdep_hardirqs_on+0x7b/0x110 [ 153.534439][ T5642] ? __pfx_kill_f2fs_super+0x10/0x10 [ 153.534478][ T5642] ? __pfx_call_rcu+0x10/0x10 [ 153.534501][ T5642] ? shrinker_free+0x2a7/0x3b0 [ 153.534524][ T5642] deactivate_locked_super+0xbe/0x110 [ 153.534550][ T5642] cleanup_mnt+0x204/0x2a0 [ 153.534581][ T5642] task_work_run+0x1d9/0x260 [ 153.534606][ T5642] ? __pfx_task_work_run+0x10/0x10 [ 153.534639][ T5642] exit_to_user_mode_loop+0x204/0x770 [ 153.534661][ T5642] ? rcu_is_watching+0x16/0xb0 [ 153.534691][ T5642] do_syscall_64+0x32c/0x530 [ 153.534710][ T5642] ? trace_irq_disable+0x3b/0x140 [ 153.534733][ T5642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.534751][ T5642] ? clear_bhb_loop+0x70/0xc0 [ 153.534773][ T5642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.534790][ T5642] RIP: 0033:0x00007fa77c5a0d57 [ 153.534809][ T5642] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 153.534824][ T5642] RSP: 002b:00007ffe45a4d6f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 153.534845][ T5642] RAX: 0000000000000000 RBX: 00007fa77c636fb3 RCX: 00007fa77c5a0d57 [ 153.534857][ T5642] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe45a4d7b0 [ 153.534868][ T5642] RBP: 00007ffe45a4d7b0 R08: 00007ffe45a4e7b0 R09: 00000000ffffffff [ 153.534880][ T5642] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe45a4e840 [ 153.534891][ T5642] R13: 00007fa77c636fb3 R14: 0000000000025756 R15: 00007ffe45a4e880 [ 153.534923][ T5642] [ 153.540656][ T5642] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 153.767306][ T7499] program syz.2.628 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.935301][ T7481] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 153.999323][ T7501] loop2: detected capacity change from 0 to 512 [ 154.053018][ T7501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.055181][ T7501] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.102929][ T33] audit: type=1800 audit(1793828162.687:47): pid=7501 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.2.629" name="file1" dev="loop2" ino=15 res=0 errno=-22 [ 154.164848][ T7489] loop4: detected capacity change from 0 to 32768 [ 154.230148][ T7489] JBD2: Ignoring recovery information on journal [ 154.330525][ T7506] loop1: detected capacity change from 0 to 256 [ 154.353584][ T5741] ATM dev 0: failed to start ADSL synchronisation: -71 [ 154.353865][ C0] ATM dev 0: usbatm_complete: urb 0xffff88802a788400 failed (-71)! [ 154.353932][ C0] ATM dev 0: usbatm_complete: urb 0xffff88802a788f00 failed (-71)! [ 154.353996][ C0] ATM dev 0: usbatm_complete: urb 0xffff88802a788a00 failed (-71)! [ 154.354052][ C0] ATM dev 0: usbatm_complete: urb 0xffff88802a788600 failed (-71)! [ 154.367082][ T7489] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 154.413589][ T5741] speedtch 1-1:1.27: speedtch_bind: failed to claim interface 0 (-16)! [ 154.413618][ T5741] speedtch 1-1:1.27: usbatm_usb_probe: bind failed: -16! [ 154.413677][ T5741] speedtch 1-1:1.27: probe with driver speedtch failed with error -16 [ 154.438711][ T5741] usb 1-1: USB disconnect, device number 3 [ 154.607209][ T7509] overlayfs: upper fs does not support tmpfile. [ 154.618010][ T5639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.694928][ T5637] ocfs2: Unmounting device (7,4) on (node local) [ 154.778632][ T7514] loop2: detected capacity change from 0 to 1024 [ 154.844887][ T7514] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 154.844942][ T7514] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 154.844960][ T7514] EXT4-fs error (device loop2): ext4_acquire_dquot:7120: comm syz.2.633: Failed to acquire dquot type 0 [ 154.844981][ T7514] loop2: lost filesystem error report for type 5 error -117 [ 154.846542][ T7514] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 154.846635][ T7514] EXT4-fs error (device loop2): ext4_do_update_inode:6707: inode #13: comm syz.2.633: corrupted inode contents [ 154.846656][ T7514] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 154.849744][ T7514] EXT4-fs error (device loop2): ext4_dirty_inode:7679: inode #13: comm syz.2.633: mark_inode_dirty error [ 154.849771][ T7514] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 154.853113][ C1] EXT4-fs (loop2): error count since last fsck: 4 [ 154.853135][ C1] EXT4-fs (loop2): initial error at time 1793828163: ext4_acquire_dquot:7120 [ 154.853157][ C1] EXT4-fs (loop2): last error at time 1793828163: ext4_dirty_inode:7679: inode 13 [ 154.856670][ T7514] EXT4-fs error (device loop2): ext4_do_update_inode:6707: inode #13: comm syz.2.633: corrupted inode contents [ 154.856696][ T7514] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 154.857588][ T7514] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.633: mark_inode_dirty error [ 154.857611][ T7514] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 154.858802][ T7514] EXT4-fs error (device loop2): ext4_do_update_inode:6707: inode #13: comm syz.2.633: corrupted inode contents [ 154.858826][ T7514] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 154.861744][ T7514] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem [ 154.861763][ T7514] loop2: lost filesystem error report for type 5 error -117 [ 154.863570][ T7514] EXT4-fs error (device loop2): ext4_do_update_inode:6707: inode #13: comm syz.2.633: corrupted inode contents [ 154.863595][ T7514] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 154.863923][ T7514] EXT4-fs error (device loop2): ext4_truncate:5538: inode #13: comm syz.2.633: mark_inode_dirty error [ 154.863946][ T7514] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 154.865016][ T7514] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem [ 154.865035][ T7514] loop2: lost filesystem error report for type 5 error -117 [ 154.866570][ T7514] EXT4-fs (loop2): 1 truncate cleaned up [ 154.876273][ T7514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.113430][ T5639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.362626][ T7515] loop1: detected capacity change from 0 to 32768 [ 155.446234][ T7515] JBD2: Ignoring recovery information on journal [ 155.543474][ T7526] loop4: detected capacity change from 0 to 256 [ 155.599528][ T7515] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 155.824071][ T7518] loop3: detected capacity change from 0 to 32768 [ 155.858258][ T5642] ocfs2: Unmounting device (7,1) on (node local) [ 155.917362][ T7518] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 156.019951][ T7537] loop4: detected capacity change from 0 to 512 [ 156.040116][ T7537] EXT4-fs error (device loop4): ext4_iget_extra_inode:6027: inode #15: comm syz.4.639: corrupted in-inode xattr: invalid ea_ino [ 156.040152][ T7537] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 156.040746][ T7537] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.639: couldn't read orphan inode 15 (err -117) [ 156.040776][ T7537] loop4: lost filesystem error report for type 5 error -117 [ 156.102157][ T7537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.341409][ T5647] ocfs2: Unmounting device (7,3) on (node local) [ 156.361035][ T7520] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.636 (7520) [ 156.438929][ T7520] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 156.438968][ T7520] BTRFS info (device loop0): using sha256 checksum algorithm [ 156.638944][ T7520] BTRFS info (device loop0): rebuilding free space tree [ 156.708232][ T7520] BTRFS info (device loop0): disabling free space tree [ 156.708308][ T7520] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 156.708332][ T7520] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 156.725037][ T7520] BTRFS info (device loop0): setting nodatasum [ 156.725061][ T7520] BTRFS info (device loop0): setting nodatacow [ 156.725075][ T7520] BTRFS info (device loop0): enabling ssd optimizations [ 156.725088][ T7520] BTRFS info (device loop0): using spread ssd allocation scheme [ 156.725103][ T7520] BTRFS info (device loop0): turning off barriers [ 156.725117][ T7520] BTRFS info (device loop0): turning on flush-on-commit [ 156.725130][ T7520] BTRFS info (device loop0): turning on sync discard [ 156.725144][ T7520] BTRFS info (device loop0): force clearing of disk cache [ 156.847952][ T7557] profile_transition: unconfined exec no attachment [ 156.920730][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.156797][ T5638] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 157.262150][ T7560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.262276][ T7560] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.368379][ T33] audit: type=1800 audit(1793828165.947:48): pid=7560 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.4.644" name="file1" dev="loop4" ino=15 res=0 errno=-22 [ 157.507030][ T977] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 157.665262][ T977] usb 3-1: New USB device found: idVendor=06b9, idProduct=4061, bcdDevice=1.00 [ 157.669361][ T977] usb 3-1: config 1 has an invalid interface number: 27 but max is 1 [ 157.669388][ T977] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.669407][ T977] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 157.669427][ T977] usb 3-1: config 1 has no interface number 2 [ 157.669494][ T977] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 157.669519][ T977] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.669545][ T977] usb 3-1: config 1 interface 1 has no altsetting 0 [ 157.672292][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.672316][ T977] usb 3-1: Product: syz [ 157.672330][ T977] usb 3-1: Manufacturer: syz [ 157.672344][ T977] usb 3-1: SerialNumber: syz [ 157.695519][ T7576] profile_transition: unconfined exec no attachment [ 157.837270][ T7577] set_capacity_and_notify: 2 callbacks suppressed [ 157.837294][ T7577] loop1: detected capacity change from 0 to 2048 [ 157.864262][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.925471][ T7577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.117884][ T7567] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 158.157342][ T7572] loop3: detected capacity change from 0 to 32768 [ 158.180950][ T5642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.220673][ T7572] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 158.330769][ T7572] XFS (loop3): Ending clean mount [ 158.340763][ T7572] XFS (loop3): Quotacheck needed: Please wait. [ 158.389439][ T7572] XFS (loop3): Quotacheck: Done. [ 158.446749][ T5647] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 158.539170][ T977] ATM dev 0: failed to start ADSL synchronisation: -71 [ 158.539471][ C0] ATM dev 0: usbatm_complete: urb 0xffff88803727ae00 failed (-71)! [ 158.539537][ C0] ATM dev 0: usbatm_complete: urb 0xffff88803727a500 failed (-71)! [ 158.539593][ C0] ATM dev 0: usbatm_complete: urb 0xffff88802b6df100 failed (-71)! [ 158.539648][ C0] ATM dev 0: usbatm_complete: urb 0xffff888037543600 failed (-71)! [ 158.586406][ T977] speedtch 3-1:1.27: speedtch_bind: failed to claim interface 0 (-16)! [ 158.586436][ T977] speedtch 3-1:1.27: usbatm_usb_probe: bind failed: -16! [ 158.586489][ T977] speedtch 3-1:1.27: probe with driver speedtch failed with error -16 [ 158.620296][ T977] usb 3-1: USB disconnect, device number 4 [ 159.207166][ T7597] loop0: detected capacity change from 0 to 256 [ 159.711563][ T7600] loop4: detected capacity change from 0 to 32768 [ 159.720724][ T7594] loop2: detected capacity change from 0 to 32768 [ 159.734650][ T7600] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.655 (7600) [ 159.751077][ T7594] JBD2: Ignoring recovery information on journal [ 159.755378][ T7600] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 159.755407][ T7600] BTRFS info (device loop4): using blake2b checksum algorithm [ 159.840542][ T7594] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 159.878462][ T7600] BTRFS info (device loop4): enabling ssd optimizations [ 159.878496][ T7600] BTRFS info (device loop4): turning on async discard [ 159.878512][ T7600] BTRFS info (device loop4): enabling free space tree [ 159.948110][ T5639] ocfs2: Unmounting device (7,2) on (node local) [ 159.972177][ T7621] profile_transition: unconfined exec no attachment [ 160.036587][ T5637] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 160.335791][ T7631] loop2: detected capacity change from 0 to 256 [ 160.336825][ T7631] exfat: Deprecated parameter 'utf8' [ 160.336878][ T7631] exfat: Deprecated parameter 'utf8' [ 160.519731][ T7631] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x30348f56, utbl_chksum : 0xe619d30d) [ 160.813195][ T5829] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 160.964026][ T5829] usb 3-1: Using ep0 maxpacket: 16 [ 160.964961][ T5829] usb 3-1: New USB device found: idVendor=056a, idProduct=0331, bcdDevice=0.00 [ 160.970156][ T5829] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.970177][ T5829] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.970190][ T5829] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 160.970205][ T5829] usb 3-1: config 0 interface 0 has no altsetting 0 [ 160.970225][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.988383][ T5829] usb 3-1: config 0 descriptor?? [ 161.024338][ T7629] loop4: detected capacity change from 0 to 32768 [ 161.054287][ T7629] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.657 (7629) [ 161.116992][ T7629] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 161.117030][ T7629] BTRFS info (device loop4): using sha256 checksum algorithm [ 161.266406][ T7629] BTRFS info (device loop4): rebuilding free space tree [ 161.304143][ T7629] BTRFS info (device loop4): disabling free space tree [ 161.311583][ T7629] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 161.311606][ T7629] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 161.351122][ T7629] BTRFS info (device loop4): setting nodatasum [ 161.351152][ T7629] BTRFS info (device loop4): setting nodatacow [ 161.351168][ T7629] BTRFS info (device loop4): enabling ssd optimizations [ 161.351211][ T7629] BTRFS info (device loop4): using spread ssd allocation scheme [ 161.351228][ T7629] BTRFS info (device loop4): turning off barriers [ 161.351244][ T7629] BTRFS info (device loop4): turning on flush-on-commit [ 161.351259][ T7629] BTRFS info (device loop4): turning on sync discard [ 161.351275][ T7629] BTRFS info (device loop4): force clearing of disk cache [ 161.449330][ T5829] hid (null): invalid report_count 2075921239 [ 161.449356][ T5829] hid (null): unknown global tag 0xd [ 161.449371][ T5829] hid (null): invalid report_count 38340 [ 161.449539][ T5829] hid (null): invalid report_size 48260 [ 161.449548][ T5829] hid (null): unknown global tag 0xe [ 161.477034][ T5829] hid (null): unknown global tag 0xc [ 161.492565][ T5829] hid (null): unknown global tag 0xe [ 161.492758][ T5829] hid (null): unknown global tag 0x55 [ 161.649276][ T7649] profile_transition: unconfined exec no attachment [ 161.750812][ T7626] loop0: detected capacity change from 0 to 32768 [ 161.811357][ T5829] usb 3-1: USB disconnect, device number 5 [ 161.863571][ T7626] JBD2: Ignoring recovery information on journal [ 161.887529][ T5637] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 161.998243][ T7626] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 162.222206][ T5638] ocfs2: Unmounting device (7,0) on (node local) [ 162.268721][ T7661] profile_transition: unconfined exec no attachment [ 162.334278][ T5748] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 162.480517][ T7665] bonding: no command found in bonding_masters - use +ifname or -ifname [ 162.495417][ T5748] usb 5-1: New USB device found: idVendor=06b9, idProduct=4061, bcdDevice=1.00 [ 162.496620][ T5748] usb 5-1: config 1 has an invalid interface number: 27 but max is 1 [ 162.496646][ T5748] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.496663][ T5748] usb 5-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 162.496682][ T5748] usb 5-1: config 1 has no interface number 2 [ 162.496760][ T5748] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 162.496783][ T5748] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.496808][ T5748] usb 5-1: config 1 interface 1 has no altsetting 0 [ 162.499347][ T5748] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.499372][ T5748] usb 5-1: Product: syz [ 162.499386][ T5748] usb 5-1: Manufacturer: syz [ 162.499400][ T5748] usb 5-1: SerialNumber: syz [ 162.769156][ T7671] loop0: detected capacity change from 0 to 2048 [ 162.816137][ T7671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.816262][ T7671] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.947242][ T7680] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.676: bg 0: block 345: padding at end of block bitmap is not set [ 162.961311][ T7680] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 117 [ 162.961344][ T7680] EXT4-fs (loop0): This should not happen!! Data will be lost [ 162.961344][ T7680] [ 162.993748][ T7671] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 162.993779][ T7671] EXT4-fs (loop0): This should not happen!! Data will be lost [ 162.993779][ T7671] [ 162.993793][ T7671] EXT4-fs (loop0): Total free blocks count 0 [ 162.993805][ T7671] EXT4-fs (loop0): Free/Dirty block details [ 162.993817][ T7671] EXT4-fs (loop0): free_blocks=0 [ 162.993830][ T7671] EXT4-fs (loop0): dirty_blocks=96 [ 162.993842][ T7671] EXT4-fs (loop0): Block reservation details [ 163.053968][ T7682] profile_transition: unconfined exec no attachment [ 163.069297][ T7658] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 163.473306][ T5748] ATM dev 0: failed to start ADSL synchronisation: -71 [ 163.474963][ C1] ATM dev 0: usbatm_complete: urb 0xffff888036603600 failed (-71)! [ 163.475032][ C1] ATM dev 0: usbatm_complete: urb 0xffff888036603800 failed (-71)! [ 163.475091][ C1] ATM dev 0: usbatm_complete: urb 0xffff888036603500 failed (-71)! [ 163.475145][ C1] ATM dev 0: usbatm_complete: urb 0xffff888036603000 failed (-71)! [ 163.537475][ T7692] loop3: detected capacity change from 0 to 512 [ 163.539841][ T5748] speedtch 5-1:1.27: speedtch_bind: failed to claim interface 0 (-16)! [ 163.539869][ T5748] speedtch 5-1:1.27: usbatm_usb_probe: bind failed: -16! [ 163.539933][ T5748] speedtch 5-1:1.27: probe with driver speedtch failed with error -16 [ 163.583593][ C1] ATM dev 0: usbatm_complete: urb 0xffff888036603600 failed (-71)! [ 163.583652][ C1] ATM dev 0: usbatm_complete: urb 0xffff888036603800 failed (-71)! [ 163.583693][ C1] ATM dev 0: usbatm_complete: urb 0xffff888036603500 failed (-71)! [ 163.583732][ C1] ATM dev 0: usbatm_complete: urb 0xffff888036603000 failed (-71)! [ 163.594210][ T7692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.594317][ T7692] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.632764][ T33] audit: type=1800 audit(1793828172.217:49): pid=7692 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.3.683" name="file1" dev="loop3" ino=15 res=0 errno=-22 [ 163.693370][ C1] ATM dev 0: usbatm_complete: urb 0xffff888036603600 failed (-71)! [ 163.718017][ T5748] usb 5-1: USB disconnect, device number 7 [ 163.970562][ T7696] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 163.970644][ T7696] block device autoloading is deprecated and will be removed. [ 164.070563][ T5647] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.085034][ T7701] kvm_intel: kvm [7700]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x8001 [ 164.379301][ T7708] loop2: detected capacity change from 0 to 512 [ 164.410182][ T7708] EXT4-fs error (device loop2): ext4_iget_extra_inode:6027: inode #15: comm syz.2.687: corrupted in-inode xattr: invalid ea_ino [ 164.410223][ T7708] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 164.410503][ T7708] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.687: couldn't read orphan inode 15 (err -117) [ 164.410533][ T7708] loop2: lost filesystem error report for type 5 error -117 [ 164.419221][ T7708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.432087][ T7711] loop1: detected capacity change from 0 to 256 [ 164.479909][ T7711] exfat: Deprecated parameter 'utf8' [ 164.479933][ T7711] exfat: Deprecated parameter 'utf8' [ 164.508147][ T7711] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x30348f56, utbl_chksum : 0xe619d30d) [ 164.674811][ T5639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.785304][ T5741] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 164.933241][ T5741] usb 2-1: Using ep0 maxpacket: 16 [ 164.934986][ T5741] usb 2-1: New USB device found: idVendor=056a, idProduct=0331, bcdDevice=0.00 [ 164.936490][ T5741] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.936520][ T5741] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.936543][ T5741] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 164.936569][ T5741] usb 2-1: config 0 interface 0 has no altsetting 0 [ 164.936604][ T5741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.941920][ T5741] usb 2-1: config 0 descriptor?? [ 165.367242][ T7710] loop0: detected capacity change from 0 to 131072 [ 165.371973][ T7710] F2FS-fs (loop0): Test dummy encryption mode enabled [ 165.373594][ T7710] F2FS-fs (loop0): invalid crc value [ 165.440569][ T5741] hid (null): invalid report_count 2075921239 [ 165.440605][ T5741] hid (null): unknown global tag 0xd [ 165.440629][ T5741] hid (null): invalid report_count 38340 [ 165.440931][ T5741] hid (null): invalid report_size 48260 [ 165.440945][ T5741] hid (null): unknown global tag 0xe [ 165.473809][ T7710] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 165.479406][ T7710] loop0: lost filesystem error report for type 5 error -117 [ 165.486268][ T7710] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 165.489975][ T7710] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0 [ 165.489997][ T7710] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 165.490063][ T7710] F2FS-fs (loop0): Start checkpoint disabled! [ 165.523253][ T5829] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 165.538325][ T5741] hid (null): unknown global tag 0xc [ 165.541173][ T5741] hid (null): unknown global tag 0xe [ 165.541522][ T5741] hid (null): unknown global tag 0x55 [ 165.544215][ T7710] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0 [ 165.555243][ T7710] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 165.726174][ T5829] usb 4-1: New USB device found: idVendor=16e3, idProduct=f9e9, bcdDevice=0.58 [ 165.730676][ T5829] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 165.730705][ T5829] usb 4-1: config 0 has no interface number 0 [ 165.730747][ T5829] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 165.730774][ T5829] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 255, setting to 64 [ 165.730818][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.744613][ T5829] usb 4-1: config 0 descriptor?? [ 165.746851][ T7709] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 165.782636][ T5829] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input8 [ 165.843220][ T27] usb 2-1: USB disconnect, device number 4 [ 166.052713][ T5829] usb 4-1: USB disconnect, device number 5 [ 166.052725][ C0] usbtouchscreen 4-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -19 [ 166.276167][ T7729] loop0: detected capacity change from 0 to 16 [ 166.293561][ T7729] erofs (device loop0): mounted with root inode @ nid 36. [ 167.270529][ T7740] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 167.991848][ T7746] loop3: detected capacity change from 0 to 32768 [ 168.002090][ T7744] loop1: detected capacity change from 0 to 32768 [ 168.011173][ T7744] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.701 (7744) [ 168.039951][ T7744] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 168.039987][ T7744] BTRFS info (device loop1): using sha256 checksum algorithm [ 168.046191][ T7746] JBD2: Ignoring recovery information on journal [ 168.106434][ T7746] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 168.166946][ T7744] BTRFS info (device loop1): rebuilding free space tree [ 168.220123][ T7744] BTRFS info (device loop1): disabling free space tree [ 168.220204][ T7744] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 168.220230][ T7744] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 168.266191][ T7744] BTRFS info (device loop1): setting nodatasum [ 168.266220][ T7744] BTRFS info (device loop1): setting nodatacow [ 168.266238][ T7744] BTRFS info (device loop1): enabling ssd optimizations [ 168.266254][ T7744] BTRFS info (device loop1): using spread ssd allocation scheme [ 168.266270][ T7744] BTRFS info (device loop1): turning off barriers [ 168.266286][ T7744] BTRFS info (device loop1): turning on flush-on-commit [ 168.266302][ T7744] BTRFS info (device loop1): turning on sync discard [ 168.266318][ T7744] BTRFS info (device loop1): force clearing of disk cache [ 168.440200][ T7763] profile_transition: unconfined exec no attachment [ 168.442990][ T5647] ocfs2: Unmounting device (7,3) on (node local) [ 168.545846][ T7766] loop2: detected capacity change from 0 to 2048 [ 168.636146][ T7766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.665355][ T5642] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 168.857141][ T5639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.178269][ T7777] loop3: detected capacity change from 0 to 512 [ 169.278044][ T7777] EXT4-fs error (device loop3): ext4_iget_extra_inode:6027: inode #15: comm syz.3.703: corrupted in-inode xattr: invalid ea_ino [ 169.278071][ T7777] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 169.283141][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 169.283162][ C0] EXT4-fs (loop3): initial error at time 1793828177: ext4_iget_extra_inode:6027: inode 15 [ 169.283181][ C0] EXT4-fs (loop3): last error at time 1793828177: ext4_iget_extra_inode:6027: inode 15 [ 169.316819][ T7777] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.703: couldn't read orphan inode 15 (err -117) [ 169.316858][ T7777] loop3: lost filesystem error report for type 5 error -117 [ 169.367805][ T7777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.703014][ T5647] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.824531][ T7790] loop1: detected capacity change from 0 to 16 [ 169.847597][ T7790] erofs (device loop1): mounted with root inode @ nid 36. [ 169.887089][ T33] kauditd_printk_skb: 4 callbacks suppressed [ 169.887109][ T33] audit: type=1800 audit(1793828178.477:51): pid=7790 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.1.711" name="file1" dev="loop1" ino=86 res=0 errno=-22 [ 170.265375][ T7803] loop2: detected capacity change from 0 to 2048 [ 170.310103][ T7803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.310217][ T7803] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.404081][ T7811] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.718: bg 0: block 345: padding at end of block bitmap is not set [ 170.423328][ T7811] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 117 [ 170.423364][ T7811] EXT4-fs (loop2): This should not happen!! Data will be lost [ 170.423364][ T7811] [ 170.439376][ T7803] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 170.439490][ T7803] EXT4-fs (loop2): This should not happen!! Data will be lost [ 170.439490][ T7803] [ 170.439506][ T7803] EXT4-fs (loop2): Total free blocks count 0 [ 170.439519][ T7803] EXT4-fs (loop2): Free/Dirty block details [ 170.439530][ T7803] EXT4-fs (loop2): free_blocks=0 [ 170.439543][ T7803] EXT4-fs (loop2): dirty_blocks=160 [ 170.439555][ T7803] EXT4-fs (loop2): Block reservation details [ 170.666583][ T5639] EXT4-fs warning (device loop2): ext4_evict_inode:261: inode #15: comm syz-executor: data will be lost [ 170.943181][ T5829] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 171.037513][ T7819] netlink: 16 bytes leftover after parsing attributes in process `syz.3.727'. [ 171.093916][ T5829] usb 1-1: New USB device found: idVendor=16e3, idProduct=f9e9, bcdDevice=0.58 [ 171.095186][ T5829] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 171.095212][ T5829] usb 1-1: config 0 has no interface number 0 [ 171.095255][ T5829] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 171.095282][ T5829] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 255, setting to 64 [ 171.095325][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.104838][ T5829] usb 1-1: config 0 descriptor?? [ 171.106171][ T7817] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 171.138640][ T7823] loop1: detected capacity change from 0 to 512 [ 171.142532][ T5829] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input10 [ 171.195468][ T7823] EXT4-fs error (device loop1): ext4_iget_extra_inode:6027: inode #15: comm syz.1.725: corrupted in-inode xattr: invalid ea_ino [ 171.195505][ T7823] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 171.200902][ T7823] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.725: couldn't read orphan inode 15 (err -117) [ 171.200937][ T7823] loop1: lost filesystem error report for type 5 error -117 [ 171.216537][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 171.216564][ C0] EXT4-fs (loop1): initial error at time 1793828179: ext4_iget_extra_inode:6027: inode 15 [ 171.216597][ C0] EXT4-fs (loop1): last error at time 1793828179: ext4_orphan_get:1409 [ 171.240434][ T7823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.412445][ T5829] usb 1-1: USB disconnect, device number 4 [ 171.621310][ T5642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.694871][ T5741] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 172.830940][ T7833] loop3: detected capacity change from 0 to 131072 [ 172.844812][ T5741] usb 2-1: Using ep0 maxpacket: 32 [ 172.845081][ T7833] F2FS-fs (loop3): Test dummy encryption mode enabled [ 172.846073][ T7833] F2FS-fs (loop3): invalid crc value [ 172.857751][ T5741] usb 2-1: New USB device found: idVendor=0499, idProduct=1010, bcdDevice=a.f5 [ 172.873592][ T5741] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 172.877235][ T5741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.877259][ T5741] usb 2-1: Product: syz [ 172.877280][ T5741] usb 2-1: Manufacturer: syz [ 172.877295][ T5741] usb 2-1: SerialNumber: syz [ 172.912003][ T7833] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 172.912057][ T7833] loop3: lost filesystem error report for type 5 error -117 [ 172.931271][ T7833] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 172.938673][ T7833] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0 [ 172.938697][ T7833] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 172.938718][ T7833] F2FS-fs (loop3): Start checkpoint disabled! [ 172.944969][ T7833] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0 [ 172.950546][ T7833] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 172.971071][ T5741] usb 2-1: config 0 descriptor?? [ 172.998120][ T7842] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 173.013902][ T5741] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 173.259264][ T5741] usb 2-1: USB disconnect, device number 5 [ 173.330910][ T5650] udevd[5650]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.762848][ T7849] loop3: detected capacity change from 0 to 16 [ 173.771898][ T7849] erofs (device loop3): mounted with root inode @ nid 36. [ 173.807905][ T33] audit: type=1800 audit(1793828182.397:52): pid=7849 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.3.737" name="file1" dev="loop3" ino=86 res=0 errno=-22 [ 173.899404][ T7856] loop1: detected capacity change from 0 to 2048 [ 173.959898][ T7856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.960017][ T7856] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.102282][ T7863] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.735: bg 0: block 345: padding at end of block bitmap is not set [ 174.129428][ T7863] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 117 [ 174.129466][ T7863] EXT4-fs (loop1): This should not happen!! Data will be lost [ 174.129466][ T7863] [ 174.142898][ T7856] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 174.142928][ T7856] EXT4-fs (loop1): This should not happen!! Data will be lost [ 174.142928][ T7856] [ 174.142942][ T7856] EXT4-fs (loop1): Total free blocks count 0 [ 174.142955][ T7856] EXT4-fs (loop1): Free/Dirty block details [ 174.142967][ T7856] EXT4-fs (loop1): free_blocks=0 [ 174.142979][ T7856] EXT4-fs (loop1): dirty_blocks=80 [ 174.142991][ T7856] EXT4-fs (loop1): Block reservation details [ 174.434329][ T7851] loop2: detected capacity change from 0 to 32768 [ 174.484496][ T7851] JBD2: Ignoring recovery information on journal [ 174.504575][ T5748] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 174.569370][ T7851] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 174.665277][ T5748] usb 1-1: Using ep0 maxpacket: 16 [ 174.669032][ T5748] usb 1-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 174.673230][ T5748] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.673297][ T5748] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.673324][ T5748] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 174.673345][ T5748] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 174.673366][ T5748] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.681497][ T5748] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 174.681520][ T5748] usb 1-1: Manufacturer: syz [ 174.692183][ T5748] usb 1-1: config 0 descriptor?? [ 174.833027][ T5639] ocfs2: Unmounting device (7,2) on (node local) [ 174.838958][ T7875] loop1: detected capacity change from 0 to 256 [ 174.934035][ T7876] profile_transition: unconfined exec no attachment [ 174.960942][ T7875] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xb2f9d067, utbl_chksum : 0xe619d30d) [ 175.194735][ T5748] rc_core: IR keymap rc-hauppauge not found [ 175.194758][ T5748] Registered IR keymap rc-empty [ 175.195304][ T5748] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 175.226763][ T5748] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 175.248082][ T5748] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 175.265091][ T5748] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11 [ 175.287692][ T5748] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 175.304924][ T5748] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 175.328313][ T5748] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 175.343841][ T5748] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 175.365162][ T5748] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 175.385198][ T5748] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 175.403444][ T5748] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 175.423294][ T5748] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 175.457048][ T5748] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 175.475025][ T5748] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 175.509851][ T5748] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 175.509877][ T5748] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 175.561315][ T11] usb 1-1: USB disconnect, device number 5 [ 175.771047][ T7891] loop1: detected capacity change from 0 to 8192 [ 175.777692][ T7891] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 175.793598][ T7891] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 175.793625][ T7891] FAT-fs (loop1): Filesystem has been set read-only [ 176.233546][ T7901] loop0: detected capacity change from 0 to 512 [ 176.242953][ T7903] loop4: detected capacity change from 0 to 2048 [ 176.290345][ T7901] EXT4-fs error (device loop0): ext4_iget_extra_inode:6027: inode #15: comm syz.0.752: corrupted in-inode xattr: invalid ea_ino [ 176.290383][ T7901] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 176.291487][ T7901] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.752: couldn't read orphan inode 15 (err -117) [ 176.291517][ T7901] loop0: lost filesystem error report for type 5 error -117 [ 176.343533][ T7903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.344537][ T7901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.413253][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 176.500795][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.576792][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 176.577708][ T27] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 176.579186][ T27] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 176.579244][ T27] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 176.579266][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 176.579290][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 176.579314][ T27] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.579357][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.610406][ T5638] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.630733][ T7902] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 176.697371][ T11] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 176.847319][ T11] usb 3-1: New USB device found: idVendor=0eef, idProduct=72c4, bcdDevice=0.00 [ 176.851377][ T11] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.851412][ T11] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.851437][ T11] usb 3-1: config 0 interface 0 has no altsetting 0 [ 176.851472][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.877847][ T11] usb 3-1: config 0 descriptor?? [ 176.936196][ T27] usb 4-1: GET_CAPABILITIES returned 0 [ 176.936245][ T27] usbtmc 4-1:16.0: can't read capabilities [ 176.984228][ T7921] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 176.984254][ T7921] block device autoloading is deprecated and will be removed. [ 177.148142][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 177.159975][ T5768] usb 4-1: USB disconnect, device number 6 [ 177.308693][ T11] hid-multitouch 0003:0EEF:72C4.0006: unbalanced delimiter at end of report description [ 177.317362][ T11] hid-multitouch 0003:0EEF:72C4.0006: probe with driver hid-multitouch failed with error -22 [ 177.518676][ T5768] usb 3-1: USB disconnect, device number 6 [ 178.150782][ T7943] loop2: detected capacity change from 0 to 512 [ 178.165486][ T7943] EXT4-fs error (device loop2): ext4_iget_extra_inode:6027: inode #15: comm syz.2.771: corrupted in-inode xattr: invalid ea_ino [ 178.165522][ T7943] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 178.169355][ T7943] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.771: couldn't read orphan inode 15 (err -117) [ 178.169388][ T7943] loop2: lost filesystem error report for type 5 error -117 [ 178.175569][ T7943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.294410][ T27] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 178.324653][ T5639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.442503][ T7954] netlink: 87 bytes leftover after parsing attributes in process `syz.2.775'. [ 178.443296][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 178.459795][ T27] usb 5-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 178.471007][ T27] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.471059][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 178.471087][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 178.471106][ T27] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 178.471125][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.483916][ T27] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 178.483942][ T27] usb 5-1: Manufacturer: syz [ 178.548072][ T27] usb 5-1: config 0 descriptor?? [ 178.593018][ T7946] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 178.773802][ T7960] profile_transition: unconfined exec no attachment [ 178.883172][ T27] rc_core: IR keymap rc-hauppauge not found [ 178.883196][ T27] Registered IR keymap rc-empty [ 178.883357][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 178.918107][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 178.934474][ T27] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 178.941510][ T27] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input14 [ 178.978212][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 178.993313][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 179.013941][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 179.033362][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 179.053856][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 179.073238][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 179.093367][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 179.113551][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 179.133233][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 179.156978][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 179.183803][ T27] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 179.183863][ T27] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 179.346454][ T7959] loop2: detected capacity change from 0 to 32768 [ 179.356540][ T5768] usb 5-1: USB disconnect, device number 8 [ 179.397347][ T7959] JBD2: Ignoring recovery information on journal [ 179.507255][ T7959] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 179.702880][ T5639] ocfs2: Unmounting device (7,2) on (node local) [ 180.043673][ T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 180.196452][ T27] usb 1-1: New USB device found: idVendor=0eef, idProduct=72c4, bcdDevice=0.00 [ 180.197802][ T27] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.197832][ T27] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.197859][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 180.197893][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.204073][ T27] usb 1-1: config 0 descriptor?? [ 180.397940][ T7979] loop2: detected capacity change from 0 to 32768 [ 180.401493][ T7979] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.781 (7979) [ 180.437707][ T7979] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 180.437744][ T7979] BTRFS info (device loop2): using blake2b checksum algorithm [ 180.543398][ T7979] BTRFS info (device loop2): enabling ssd optimizations [ 180.543461][ T7979] BTRFS info (device loop2): turning on async discard [ 180.543477][ T7979] BTRFS info (device loop2): enabling free space tree [ 180.543496][ T7979] BTRFS info (device loop2): use zlib compression, level 3 [ 180.620534][ T33] audit: type=1800 audit(1793828189.207:53): pid=7979 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.2.781" name="file1" dev="loop2" ino=260 res=0 errno=-22 [ 180.649794][ T8003] profile_transition: unconfined exec no attachment [ 180.730941][ T27] hid-multitouch 0003:0EEF:72C4.0007: unbalanced delimiter at end of report description [ 180.755487][ T27] hid-multitouch 0003:0EEF:72C4.0007: probe with driver hid-multitouch failed with error -22 [ 180.884943][ T5639] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 180.927170][ T27] usb 1-1: USB disconnect, device number 6 [ 180.993546][ T8011] loop4: detected capacity change from 0 to 256 [ 181.020965][ T5741] kernel read not supported for file /adsp1 (pid: 5741 comm: kworker/0:4) [ 181.077406][ T8011] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xb2f9d067, utbl_chksum : 0xe619d30d) [ 181.434322][ T8021] netlink: 87 bytes leftover after parsing attributes in process `syz.1.792'. [ 181.641145][ T8027] loop2: detected capacity change from 0 to 256 [ 181.679099][ T8027] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 181.704799][ T27] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 181.834967][ T5768] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 181.853809][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 181.854570][ T27] usb 5-1: New USB device found: idVendor=0499, idProduct=1010, bcdDevice=a.f5 [ 181.856680][ T27] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 181.888606][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.888632][ T27] usb 5-1: Product: syz [ 181.888646][ T27] usb 5-1: Manufacturer: syz [ 181.888659][ T27] usb 5-1: SerialNumber: syz [ 181.908333][ T8034] loop2: detected capacity change from 0 to 512 [ 181.926089][ T27] usb 5-1: config 0 descriptor?? [ 181.928741][ T8022] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 181.949332][ T8034] EXT4-fs error (device loop2): ext4_iget_extra_inode:6027: inode #15: comm syz.2.801: corrupted in-inode xattr: invalid ea_ino [ 181.949366][ T8034] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 181.949708][ T8034] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.801: couldn't read orphan inode 15 (err -117) [ 181.949736][ T8034] loop2: lost filesystem error report for type 5 error -117 [ 181.956004][ T8034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.003218][ T5768] usb 2-1: Using ep0 maxpacket: 16 [ 182.006649][ T5768] usb 2-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 182.008108][ T5768] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.008154][ T5768] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 182.008178][ T5768] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 182.008197][ T5768] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 182.008216][ T5768] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.011570][ T5768] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 182.011592][ T5768] usb 2-1: Manufacturer: syz [ 182.020477][ T5768] usb 2-1: config 0 descriptor?? [ 182.059168][ T8036] aa_policy_admin_capable: cap_mac_admin? 1 [ 182.059214][ T8036] aa_policy_admin_capable: policy locked? 0 [ 182.059570][ T8036] unpack_pdb: unpacking tags [ 182.059660][ T8036] unpack_pdb: done unpacking tags [ 182.059719][ T8036] unpack_pdb: unpacking tags [ 182.059728][ T8036] unpack_pdb: done unpacking tags [ 182.062011][ T33] audit: type=1400 audit(1793828190.647:54): apparmor="STATUS" info="missing required dfa" error=-71 profile="unconfined" name="p" pid=8032 comm="syz.0.800" name="p" offset=92 [ 182.084905][ T8036] aa_free_profile: aa_free_profile(ffff88807aaa5800) [ 182.160168][ T27] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 182.235630][ T5639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.283969][ T8040] profile_transition: unconfined exec no attachment [ 182.300120][ T27] usb 5-1: USB disconnect, device number 9 [ 182.459162][ T5650] udevd[5650]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.486340][ T5768] rc_core: IR keymap rc-hauppauge not found [ 182.486359][ T5768] Registered IR keymap rc-empty [ 182.486506][ T5768] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.513225][ T5768] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.538096][ T5768] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 182.550111][ T5768] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input15 [ 182.565249][ T5768] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.587291][ T5768] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.603387][ T5768] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.623215][ T5768] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.644599][ T5768] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.648031][ T27] kernel read not supported for file /adsp1 (pid: 27 comm: kworker/1:0) [ 182.673309][ T5768] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.694948][ T5768] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.714574][ T5768] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.733779][ T5768] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.754298][ T5768] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.788514][ T5768] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 182.788543][ T5768] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 182.883879][ T5768] usb 2-1: USB disconnect, device number 6 [ 183.117577][ T8062] profile_transition: name lookup ix on error [ 183.434181][ T27] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 183.583758][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 183.589651][ T27] usb 4-1: New USB device found: idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 183.590691][ T27] usb 4-1: config index 0 descriptor too short (expected 27632, got 27) [ 183.590715][ T27] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 183.590735][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 183.590755][ T27] usb 4-1: config 1 has no interface number 0 [ 183.590781][ T27] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 183.590795][ T27] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 183.590820][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.678195][ T27] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 183.763177][ T5768] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 183.882543][ T27] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 183.913230][ T5768] usb 3-1: Using ep0 maxpacket: 32 [ 183.916260][ T5768] usb 3-1: New USB device found: idVendor=0499, idProduct=1010, bcdDevice=a.f5 [ 183.917504][ T5768] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 183.919392][ T5768] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.919413][ T5768] usb 3-1: Product: syz [ 183.919427][ T5768] usb 3-1: Manufacturer: syz [ 183.919441][ T5768] usb 3-1: SerialNumber: syz [ 183.922024][ T5768] usb 3-1: config 0 descriptor?? [ 183.922893][ T8078] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 183.986441][ T5768] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 184.151779][ T5768] usb 3-1: USB disconnect, device number 7 [ 184.301204][ T11] usb 4-1: USB disconnect, device number 7 [ 184.309953][ T11] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 185.195190][ T5829] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 185.261280][ T8098] loop0: detected capacity change from 0 to 256 [ 185.339031][ T8098] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 185.345218][ T5829] usb 2-1: Using ep0 maxpacket: 32 [ 185.348875][ T5829] usb 2-1: unable to get BOS descriptor or descriptor too short [ 185.348923][ T5829] usb 2-1: New USB device found: idVendor=4a23, idProduct=9034, bcdDevice=52.23 [ 185.353197][ T5829] usb 2-1: config 5 has an invalid interface number: 156 but max is 1 [ 185.353220][ T5829] usb 2-1: config 5 has an invalid interface number: 93 but max is 1 [ 185.353237][ T5829] usb 2-1: config 5 has no interface number 0 [ 185.353250][ T5829] usb 2-1: config 5 has no interface number 1 [ 185.353287][ T5829] usb 2-1: config 5 interface 156 has no altsetting 0 [ 185.353303][ T5829] usb 2-1: config 5 interface 93 has no altsetting 0 [ 185.360901][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.360922][ T5829] usb 2-1: Product: syz [ 185.360934][ T5829] usb 2-1: Manufacturer: syz [ 185.360946][ T5829] usb 2-1: SerialNumber: syz [ 185.637441][ T5829] hub 2-1:5.156: Invalid hub with more than one config or interface [ 185.637475][ T5829] hub 2-1:5.156: probe with driver hub failed with error -22 [ 185.642626][ T5829] hub 2-1:5.93: Invalid hub with more than one config or interface [ 185.642654][ T5829] hub 2-1:5.93: probe with driver hub failed with error -22 [ 185.660841][ T5829] usb 2-1: USB disconnect, device number 7 [ 185.865243][ T8114] loop0: detected capacity change from 0 to 128 [ 185.871494][ T8114] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 185.876968][ T8114] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.885014][ T5748] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 186.033223][ T5748] usb 3-1: Using ep0 maxpacket: 16 [ 186.035088][ T5748] usb 3-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 186.036586][ T5748] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.036639][ T5748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 186.036676][ T5748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 186.036697][ T5748] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 186.036719][ T5748] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.038953][ T5748] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 186.038977][ T5748] usb 3-1: Manufacturer: syz [ 186.047577][ T5748] usb 3-1: config 0 descriptor?? [ 186.135692][ T8122] loop0: detected capacity change from 0 to 1024 [ 186.142733][ T8122] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 186.215542][ T8122] EXT4-fs error (device loop0): ext4_map_blocks:951: inode #3: block 1: comm syz.0.847: lblock 1 mapped to illegal pblock 1 (length 1) [ 186.216854][ T8122] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 186.223094][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 186.223117][ C0] EXT4-fs (loop0): initial error at time 1793828194: ext4_map_blocks:951: inode 3: block 1 [ 186.223154][ C0] EXT4-fs (loop0): last error at time 1793828194: ext4_map_blocks:951: inode 3: block 1 [ 186.275158][ T8122] EXT4-fs (loop0): Remounting filesystem read-only [ 186.275183][ T8122] Quota error (device loop0): write_blk: dquota write failed [ 186.275222][ T8122] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 186.275333][ T8122] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 186.275452][ T8122] EXT4-fs (loop0): 1 orphan inode deleted [ 186.277252][ T8122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.310276][ T8128] profile_transition: unconfined exec no attachment [ 186.490825][ T5638] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.556191][ T5748] rc_core: IR keymap rc-hauppauge not found [ 186.556212][ T5748] Registered IR keymap rc-empty [ 186.556371][ T5748] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 186.573856][ T5748] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 186.595778][ T5748] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 186.607335][ T5748] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16 [ 186.634251][ T5748] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 186.654296][ T5748] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 186.675305][ T5748] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 186.695689][ T5748] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 186.713414][ T5748] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 186.733498][ T5748] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 186.753439][ T5748] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 186.773444][ T5748] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 186.794294][ T5748] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 186.813473][ T5748] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 186.842452][ T8139] loop1: detected capacity change from 0 to 256 [ 186.868726][ T5748] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 186.868756][ T5748] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 186.896371][ T8139] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 186.909197][ T5748] usb 3-1: USB disconnect, device number 8 [ 187.178256][ T3398] IPVS: starting estimator thread 0... [ 187.266183][ T8144] IPVS: using max 35 ests per chain, 84000 per kthread [ 187.763360][ T5741] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 187.827090][ T8151] loop3: detected capacity change from 0 to 32768 [ 187.836048][ T8151] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.844 (8151) [ 187.857859][ T8151] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 187.857897][ T8151] BTRFS info (device loop3): using blake2b checksum algorithm [ 187.913154][ T5741] usb 2-1: Using ep0 maxpacket: 8 [ 187.913891][ T5741] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 187.915984][ T5741] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 187.916038][ T5741] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 187.916061][ T5741] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 187.916082][ T5741] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 187.916105][ T5741] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.916165][ T5741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.018251][ T8151] BTRFS info (device loop3): enabling ssd optimizations [ 188.018282][ T8151] BTRFS info (device loop3): turning on async discard [ 188.018298][ T8151] BTRFS info (device loop3): enabling free space tree [ 188.018315][ T8151] BTRFS info (device loop3): use zlib compression, level 3 [ 188.070263][ T33] audit: type=1800 audit(1793828196.657:55): pid=8151 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.3.844" name="file1" dev="loop3" ino=260 res=0 errno=-22 [ 188.147108][ T8179] profile_transition: unconfined exec no attachment [ 188.225531][ T5741] usb 2-1: GET_CAPABILITIES returned 0 [ 188.225596][ T5741] usbtmc 2-1:16.0: can't read capabilities [ 188.271603][ T5647] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 188.447538][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 188.464639][ T5741] usb 2-1: USB disconnect, device number 8 [ 188.515458][ T8186] loop3: detected capacity change from 0 to 256 [ 188.531898][ T8186] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 188.824455][ T8194] loop3: detected capacity change from 0 to 256 [ 189.082058][ T8192] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 189.683024][ T41] IPVS: starting estimator thread 0... [ 189.773244][ T8224] IPVS: using max 26 ests per chain, 62400 per kthread [ 189.958047][ T8211] loop2: detected capacity change from 0 to 32768 [ 190.061663][ T8211] read_mapping_page failed! [ 190.061815][ T8211] ERROR: (device loop2): txCommit: [ 190.061815][ T8211] [ 190.070249][ T8211] ERROR: (device loop2): remounting filesystem as read-only [ 190.138239][ T125] BUG at fs/jfs/jfs_txnmgr.c:933 assert(mp->nohomeok > 0) [ 190.138634][ T125] ------------[ cut here ]------------ [ 190.138644][ T125] kernel BUG at fs/jfs/jfs_txnmgr.c:933! [ 190.138664][ T125] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 190.163159][ T125] CPU: 0 UID: 0 PID: 125 Comm: jfsCommit Tainted: G L syzkaller #0 PREEMPT(full) [ 190.173858][ T125] Tainted: [L]=SOFTLOCKUP [ 190.178194][ T125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 190.188265][ T125] RIP: 0010:txUnlock+0xd95/0xde0 [ 190.193231][ T125] Code: a5 fd 90 0f 0b e8 ab 9f 46 fe 48 c7 c7 20 d6 6e 8c 48 c7 c6 19 d2 6e 8c ba a5 03 00 00 48 c7 c1 20 e3 6e 8c e8 3c 2f a5 fd 90 <0f> 0b e8 84 9f 46 fe 48 c7 c7 20 d6 6e 8c 48 c7 c6 19 d2 6e 8c ba [ 190.212851][ T125] RSP: 0018:ffffc90002e6fc48 EFLAGS: 00010246 [ 190.218935][ T125] RAX: 0000000000000037 RBX: ffff88801ff8df30 RCX: b218cba5eecf0000 [ 190.226930][ T125] RDX: 0000000000000000 RSI: 8000000000000000 RDI: 0000000000000000 [ 190.234906][ T125] RBP: 1ffff11003ff1be6 R08: ffffc90002e6f9c7 R09: 1ffff920005cdf38 [ 190.242878][ T125] R10: dffffc0000000000 R11: fffff520005cdf39 R12: ffffc900029e2090 [ 190.250847][ T125] R13: dffffc0000000000 R14: 0000000000000012 R15: 0000000000000000 [ 190.258822][ T125] FS: 0000000000000000(0000) GS:ffff8881233f9000(0000) knlGS:0000000000000000 [ 190.267751][ T125] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 190.274333][ T125] CR2: 00007fb6d0877000 CR3: 0000000076422000 CR4: 00000000003526f0 [ 190.282305][ T125] Call Trace: [ 190.285587][ T125] [ 190.288524][ T125] ? _raw_spin_unlock_irq+0x23/0x50 [ 190.293732][ T125] jfs_lazycommit+0x59f/0xac0 [ 190.298422][ T125] ? __pfx_jfs_lazycommit+0x10/0x10 [ 190.303623][ T125] ? __pfx_default_wake_function+0x10/0x10 [ 190.309433][ T125] ? __kthread_parkme+0x71/0x1f0 [ 190.314369][ T125] ? __kthread_parkme+0x199/0x1f0 [ 190.319394][ T125] kthread+0x38b/0x480 [ 190.323469][ T125] ? __pfx_jfs_lazycommit+0x10/0x10 [ 190.328670][ T125] ? __pfx_kthread+0x10/0x10 [ 190.333260][ T125] ret_from_fork+0x514/0xb70 [ 190.337852][ T125] ? __pfx_ret_from_fork+0x10/0x10 [ 190.342962][ T125] ? __switch_to+0xc78/0x1410 [ 190.347636][ T125] ? __pfx_kthread+0x10/0x10 [ 190.352230][ T125] ret_from_fork_asm+0x1a/0x30 [ 190.356997][ T125] [ 190.360016][ T125] Modules linked in: [ 190.364277][ T125] ---[ end trace 0000000000000000 ]--- [ 190.379681][ T125] RIP: 0010:txUnlock+0xd95/0xde0 [ 190.379719][ T125] Code: a5 fd 90 0f 0b e8 ab 9f 46 fe 48 c7 c7 20 d6 6e 8c 48 c7 c6 19 d2 6e 8c ba a5 03 00 00 48 c7 c1 20 e3 6e 8c e8 3c 2f a5 fd 90 <0f> 0b e8 84 9f 46 fe 48 c7 c7 20 d6 6e 8c 48 c7 c6 19 d2 6e 8c ba [ 190.379735][ T125] RSP: 0018:ffffc90002e6fc48 EFLAGS: 00010246 [ 190.379755][ T125] RAX: 0000000000000037 RBX: ffff88801ff8df30 RCX: b218cba5eecf0000 [ 190.379769][ T125] RDX: 0000000000000000 RSI: 8000000000000000 RDI: 0000000000000000 [ 190.379782][ T125] RBP: 1ffff11003ff1be6 R08: ffffc90002e6f9c7 R09: 1ffff920005cdf38 [ 190.379795][ T125] R10: dffffc0000000000 R11: fffff520005cdf39 R12: ffffc900029e2090 [ 190.379809][ T125] R13: dffffc0000000000 R14: 0000000000000012 R15: 0000000000000000 [ 190.379821][ T125] FS: 0000000000000000(0000) GS:ffff8881234f9000(0000) knlGS:0000000000000000 [ 190.379835][ T125] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 190.379849][ T125] CR2: 00007fa77d35da08 CR3: 000000007f578000 CR4: 00000000003526f0 [ 190.379870][ T125] Kernel panic - not syncing: Fatal exception [ 190.479988][ T125] Kernel Offset: disabled [ 190.484312][ T125] Rebooting in 86400 seconds..