last executing test programs:

1m23.118339362s ago: executing program 0 (id=405):
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0413"], 0xc)

1m23.047967931s ago: executing program 0 (id=406):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r1, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc)
write$vga_arbiter(r1, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd)
close_range(r0, 0xffffffffffffffff, 0x0)

1m22.926331019s ago: executing program 0 (id=408):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080)

1m22.776218965s ago: executing program 0 (id=409):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000140), 0x3, 0x4cd, &(0x7f0000000c80)="$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")
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x60)
getdents64(r0, 0x0, 0x22)

1m22.399884303s ago: executing program 0 (id=411):
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000ce34000000000000000000850000002f00000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x200, 0x7}, 0x4)
setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)

1m22.027429989s ago: executing program 0 (id=413):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r1=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0xd, &(0x7f00000003c0)=@raw=[@snprintf], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r0, 0x0, 0x0, 0x0, 0x10, 0xd9}, 0x94)

1m21.605827965s ago: executing program 32 (id=413):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r1=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0xd, &(0x7f00000003c0)=@raw=[@snprintf], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r0, 0x0, 0x0, 0x0, 0x10, 0xd9}, 0x94)

1m8.53516597s ago: executing program 3 (id=525):
r0 = syz_open_dev$sndctrl(&(0x7f00000003c0), 0x0, 0x2900)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000180)=0x1)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0xa2e65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0xc0844123, &(0x7f0000000080)=0x5)

1m5.493995719s ago: executing program 3 (id=560):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x19)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)='\x00', 0x1}, {0x0}], 0x2)

1m5.411911245s ago: executing program 3 (id=562):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="18000000181401000000000000000000080011"], 0x18}}, 0x400c044)

1m5.342238155s ago: executing program 3 (id=565):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0)

1m4.973539415s ago: executing program 3 (id=569):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x14318}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)

1m4.633483206s ago: executing program 3 (id=572):
r0 = syz_open_dev$video4linux(&(0x7f0000002900), 0xbfbc, 0x80180)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000002940)={0x2, 0x0, 0x3012, 0x0, 0x8, {0x10000, 0xfffff001}, 0x1})

1m4.474138791s ago: executing program 33 (id=572):
r0 = syz_open_dev$video4linux(&(0x7f0000002900), 0xbfbc, 0x80180)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000002940)={0x2, 0x0, 0x3012, 0x0, 0x8, {0x10000, 0xfffff001}, 0x1})

3.310546396s ago: executing program 1 (id=1149):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201009000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0)

3.219834597s ago: executing program 4 (id=1150):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r3, 0x0, 0x9}, 0x18)
r4 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102)
write$bt_hci(r4, 0x0, 0x20000)

3.054231461s ago: executing program 4 (id=1152):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101242, 0x15)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})

2.870132667s ago: executing program 4 (id=1153):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.745806258s ago: executing program 2 (id=1157):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x1, 0xf518}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6e, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xce4f3a02d7ef616c}}}, &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000240)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)

1.667747806s ago: executing program 2 (id=1158):
r0 = syz_io_uring_setup(0x102, &(0x7f0000000300)={0x0, 0xebe0, 0x10, 0x3, 0x200008d}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x14, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x480}, &(0x7f0000010180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18, 0x0, 0x12345})
io_uring_enter(r0, 0x3516, 0x7723, 0x2, 0x0, 0x0)

1.620411562s ago: executing program 1 (id=1159):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

1.549825938s ago: executing program 2 (id=1160):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = fcntl$getown(0xffffffffffffffff, 0x9)
sched_setscheduler(r0, 0x3, &(0x7f0000000080)=0x9)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f022})
r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x870}})

1.488666241s ago: executing program 2 (id=1161):
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
r0 = syz_io_uring_setup(0x7d0, 0x0, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8)
syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
r2 = syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000700)={0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)

915.648579ms ago: executing program 4 (id=1162):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x40000, 0x2d)
lseek(r0, 0xffffffff, 0x3)

618.293586ms ago: executing program 4 (id=1163):
futex_waitv(&(0x7f0000001c00)=[{0xb, 0x0, 0x82}, {0x1, 0x0, 0x82}, {0xffffffffffffff56, 0x0, 0x82}, {0x9, 0x0, 0x82}, {0x1ff, 0x0, 0x2}, {0x9, 0x0, 0x727a8ceebb554379}, {0x6, 0x0, 0x82}, {0x7, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x4c8, 0x0}, {0x401, 0x0, 0x2}, {0x100000000, 0x0, 0x2}, {0x7, 0x0, 0x82}, {0x8, 0x0, 0x2}, {0x5, 0x0, 0x2}, {0x7, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0xffff, 0x0, 0x2}, {0x7fffffff, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0x3, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0xf, 0x0, 0x2}, {0x2, 0x0, 0x82}, {0x2, 0x0, 0x2}, {0x4, 0x0}, {0x8, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x9, 0x0, 0x2}, {0x8, 0x0, 0x80}, {0x80, 0x0, 0x2}, {0x7fffffffffffffff, 0x0, 0x82}, {0x8000000000000000, 0x0, 0x82}, {0x1, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x6, 0x0, 0x2}, {0xd, 0x0, 0x2}, {0x1, 0x0, 0x82}, {0x1, 0x0, 0x82}, {0x1a0c, 0x0, 0x2}, {0x4, 0x0, 0x82}, {0x3, 0x0, 0x2}, {0x9, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0x1, 0x0, 0x82}, {0x7, 0x0, 0x82}, {0x73, 0x0, 0x82}, {0x1000, 0x0, 0x82}, {0xaeb8, 0x0, 0x2}, {0x1, 0x0, 0x2}, {0x9, 0x0, 0x82}, {0x2, 0x0, 0x82}, {0x100000001, 0x0, 0x2}, {0x6, 0x0, 0x82}, {0xffffffff, 0x0, 0x2}, {0x27, 0x0, 0x82}, {0x2e, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x7fffffff, 0x0, 0x82}], 0x3d, 0x0, &(0x7f00000024c0), 0x1)

418.441762ms ago: executing program 4 (id=1164):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x4000, &(0x7f0000000440)=ANY=[@ANYBLOB="636f686572656e63793d62756666657265642c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c646174613d77726974656261636b2c6c6f63616c666c6f636b732c6c6f63616c666c6f636b732c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030302c009c6412f1db53c6a2953ca9d4787a9d18370222bb30e413161c6fc232084b5e6ef9a5512a2d2a2c03651c23"], 0x9, 0x4430, &(0x7f00000088c0)="$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")
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@private2, @in=@broadcast, 0x4e22, 0x2000, 0x2, 0xd1e4, 0xa, 0xa0, 0x0, 0x75}, {0xfffffffffffffffe, 0x0, 0x5, 0x6, 0x0, 0x7, 0x100002000, 0x3}, {0x3, 0xfffffffffffffffc, 0x0, 0xffffffffffff3826}, 0x0, 0x6e6bb8, 0x1, 0x1, 0x2, 0x1}, {{@in=@empty, 0xfffffffd, 0x33}, 0x2, @in=@multicast1, 0xfffffffd, 0x4, 0x3, 0xfd, 0x3, 0x7}}, 0xe8)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
fallocate(r0, 0x0, 0x7351, 0x8001)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180)={0x2, 0x8}, 0x2)
ioctl$FITRIM(r0, 0x40406f06, &(0x7f00000000c0)={0x86, 0x7e4000, 0x20})

264.964055ms ago: executing program 1 (id=1165):
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0))

107.62906ms ago: executing program 2 (id=1166):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x2a}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0x40, 0xfffffffffffffff0}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

107.390249ms ago: executing program 1 (id=1167):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000001680)={@desc={0x1, 0x0, @desc4}})

49.412195ms ago: executing program 2 (id=1168):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000200)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {@space_cache_v2}, {@compress_force}, {@nossd}, {@barrier}, {@autodefrag}, {@nodiscard}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x67, 0x37, 0x74, 0x65, 0x36, 0x32]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2000, 0x32)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xca289435, &(0x7f0000000400)={0x0, 0x0, {0x1, @struct, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @usage, 0x4}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @usage, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}})

49.014694ms ago: executing program 1 (id=1169):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180))
ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000640)="42ec5c9d34ae", 0x0, 0x5, 0x0, 0x1, 0x0})

0s ago: executing program 1 (id=1170):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)
ioperm(0x0, 0x9, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x29, 0x0}}, 0x10)

kernel console output (not intermixed with test programs):

 input: syz1 as /devices/virtual/input/input5
[   89.413958][ T1273] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   89.609356][ T1273] usb 3-1: config 128 has an invalid interface number: 138 but max is 0
[   89.612637][ T1273] usb 3-1: config 128 has no interface number 0
[   89.616443][ T1273] usb 3-1: config 128 interface 138 has no altsetting 0
[   89.622496][ T1273] usb 3-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=c1.78
[   89.627364][ T1273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.630534][ T1273] usb 3-1: Product: syz
[   89.633407][ T1273] usb 3-1: Manufacturer: syz
[   89.636483][ T1273] usb 3-1: SerialNumber: syz
[   90.225725][ T1273] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.138/input/input6
[   90.239167][ T5282] bcm5974 3-1:128.138: could not read from device
[   90.247622][ T5282] bcm5974 3-1:128.138: could not read from device
[   90.255159][ T1273] usb 3-1: USB disconnect, device number 3
[   90.257260][ T5282] bcm5974 3-1:128.138: could not read from device
[   90.798763][ T6473] netlink: 96 bytes leftover after parsing attributes in process `syz.2.277'.
[   90.907822][ T6480] netlink: 16 bytes leftover after parsing attributes in process `syz.2.280'.
[   91.010128][ T6482] netlink: 60 bytes leftover after parsing attributes in process `syz.0.278'.
[   91.018808][ T6482] unsupported nlmsg_type 40
[   91.147015][ T6488] loop2: detected capacity change from 0 to 2048
[   91.158232][ T6488] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   91.545471][  T792] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   91.694892][  T792] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[   91.698005][  T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.724135][  T792] usb 3-1: config 0 descriptor??
[   92.699878][ T6523] loop1: detected capacity change from 0 to 1024
[   92.892150][ T6523] hfsplus: xattr search failed
[   92.955008][   T68] hfsplus: b-tree write err: -5, ino 3
[   92.988200][  T792] pegasus 3-1:0.0: can't reset MAC
[   92.990566][  T792] pegasus 3-1:0.0: probe with driver pegasus failed with error -5
[   93.008032][  T792] usb 3-1: USB disconnect, device number 4
[   93.127786][ T6533] netlink: 161716 bytes leftover after parsing attributes in process `syz.0.300'.
[   93.288583][ T6541] netlink: 'syz.1.304': attribute type 10 has an invalid length.
[   93.291821][ T6541] netlink: 40 bytes leftover after parsing attributes in process `syz.1.304'.
[   93.309311][ T6541] team0: Port device geneve0 added
[   93.329805][ T6541] syz.1.304 (6541) used greatest stack depth: 19544 bytes left
[   93.455464][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   93.633167][    T9] usb 1-1: Using ep0 maxpacket: 16
[   93.639568][    T9] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[   93.643843][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.652926][    T9] usb 1-1: Product: syz
[   93.655358][    T9] usb 1-1: Manufacturer: syz
[   93.657589][    T9] usb 1-1: SerialNumber: syz
[   93.664212][    T9] usb 1-1: config 0 descriptor??
[   93.823137][   T51] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   93.963473][   T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   93.983154][   T51] usb 3-1: Using ep0 maxpacket: 32
[   93.986492][   T51] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[   93.990079][   T51] usb 3-1: config 0 has no interface number 0
[   93.992312][   T51] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[   93.997387][   T51] usb 3-1: config 0 interface 196 has no altsetting 0
[   94.002545][   T51] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[   94.005383][   T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.008208][   T51] usb 3-1: Product: syz
[   94.010056][   T51] usb 3-1: Manufacturer: syz
[   94.012184][   T51] usb 3-1: SerialNumber: syz
[   94.017121][   T51] usb 3-1: config 0 descriptor??
[   94.020992][ T6554] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   94.080267][    T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[   94.089837][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   94.095001][    T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[   94.098031][    T9] usb 1-1: media controller created
[   94.118702][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   94.123394][   T24] usb 2-1: Using ep0 maxpacket: 32
[   94.134645][   T24] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[   94.138496][   T24] usb 2-1: config 0 has no interface number 0
[   94.141212][   T24] usb 2-1: config 0 interface 89 has no altsetting 0
[   94.149105][   T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[   94.152897][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.156294][   T24] usb 2-1: Product: syz
[   94.158118][   T24] usb 2-1: Manufacturer: syz
[   94.160162][   T24] usb 2-1: SerialNumber: syz
[   94.168657][   T24] usb 2-1: config 0 descriptor??
[   94.177186][   T24] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[   94.182662][   T24] em28xx 2-1:0.89: Video interface 89 found: bulk
[   94.286393][    T9] zl10353_read_register: readreg error (reg=127, ret==0)
[   94.289223][    T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[   94.292343][    T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[   94.298213][    T9] usb 1-1: USB disconnect, device number 2
[   94.325401][    T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[   94.432135][   T51] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes
[   94.436471][   T51] ipheth 3-1:0.196: probe with driver ipheth failed with error -22
[   94.635157][    T9] usb 3-1: USB disconnect, device number 5
[   94.783696][   T24] em28xx 2-1:0.89: unknown em28xx chip ID (0)
[   94.939017][ T6566] loop0: detected capacity change from 0 to 2048
[   94.966111][ T6566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.971197][ T6566] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   94.981560][   T33] audit: type=1804 audit(1756967661.234:2): pid=6566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.316" name="/newroot/81/file0/file1" dev="loop0" ino=15 res=1 errno=0
[   95.011467][ T5991] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.510232][ T6581] loop0: detected capacity change from 0 to 32768
[   95.633254][   T51] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   95.636185][   T24] em28xx 2-1:0.89: write to i2c device at 0xa0 failed with unknown error (status=1)
[   95.639993][   T24] em28xx 2-1:0.89: failed to read eeprom (err=-5)
[   95.642513][   T24] em28xx 2-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5]
[   95.823145][   T51] usb 3-1: Using ep0 maxpacket: 32
[   95.829227][   T51] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[   95.832363][   T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.836623][   T51] usb 3-1: Product: syz
[   95.838036][   T51] usb 3-1: Manufacturer: syz
[   95.839615][   T51] usb 3-1: SerialNumber: syz
[   95.846783][   T51] usb 3-1: config 0 descriptor??
[   95.873296][   T24] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67)
[   95.883133][   T24] em28xx 2-1:0.89: analog set to bulk mode.
[   95.885871][  T792] em28xx 2-1:0.89: Registering V4L2 extension
[   95.902835][   T24] usb 2-1: USB disconnect, device number 3
[   95.911353][   T24] em28xx 2-1:0.89: Disconnecting em28xx
[   95.966578][  T792] em28xx 2-1:0.89: Config register raw data: 0xffffffed
[   95.969631][  T792] em28xx 2-1:0.89: AC97 chip type couldn't be determined
[   95.971986][  T792] em28xx 2-1:0.89: No AC97 audio processor
[   95.996033][  T792] usb 2-1: Decoder not found
[   95.997648][  T792] em28xx 2-1:0.89: failed to create media graph
[   95.999961][  T792] em28xx 2-1:0.89: V4L2 device video103 deregistered
[   96.014683][  T792] em28xx 2-1:0.89: Registering snapshot button...
[   96.020845][  T792] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input7
[   96.034530][  T792] em28xx 2-1:0.89: Remote control support is not available for this card.
[   96.038530][   T24] em28xx 2-1:0.89: Closing input extension
[   96.041384][   T24] em28xx 2-1:0.89: Deregistering snapshot button
[   96.065290][   T24] em28xx 2-1:0.89: Freeing device
[   96.227259][ T6591] loop0: detected capacity change from 0 to 1764
[   96.261878][   T51] airspy 3-1:0.0: Board ID: 00
[   96.264320][   T51] airspy 3-1:0.0: Firmware version: 
[   96.538328][ T6605] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   96.546135][ T6605] I/O error, dev loop1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   96.550044][ T6605] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   96.555537][ T6605] I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   96.559792][ T6605] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[   96.566768][ T6605] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[   96.570409][ T6605] UDF-fs: Scanning with blocksize 512 failed
[   96.574447][ T6605] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   96.578752][ T6605] I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   96.584532][ T6605] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   96.590079][ T6605] I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   96.596192][ T6605] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[   96.600166][ T6605] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[   96.603899][ T6605] UDF-fs: Scanning with blocksize 1024 failed
[   96.606980][ T6605] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   96.610910][ T6605] I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   96.615110][ T6605] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   96.619567][ T6605] I/O error, dev loop1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   96.624700][ T6605] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[   96.628797][ T6605] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[   96.631910][ T6605] UDF-fs: Scanning with blocksize 2048 failed
[   96.636240][ T6605] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   96.641220][ T6605] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   96.646812][ T6605] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[   96.650906][ T6605] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[   96.654801][ T6605] UDF-fs: Scanning with blocksize 4096 failed
[   96.657305][ T6605] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1)
[   96.907713][ T6618] ptrace attach of "/syz-executor exec"[5995] was attempted by "\x22"[6618]
[   97.091643][ T6626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.341'.
[   97.270809][   T51] airspy 3-1:0.0: Registered as swradio24
[   97.274458][   T51] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[   97.360156][ T6628] loop1: detected capacity change from 0 to 32768
[   97.366935][ T6628] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.342 (6628)
[   97.394441][ T6628] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   97.398645][ T6628] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   97.484196][ T1273] usb 3-1: USB disconnect, device number 6
[   97.529884][ T6645] loop0: detected capacity change from 0 to 8
[   97.534514][ T6645] MTD: Attempt to mount non-MTD device "/dev/loop0"
[   97.560807][ T6628] BTRFS info (device loop1): enabling ssd optimizations
[   97.574221][ T6628] BTRFS info (device loop1): enabling free space tree
[   97.707530][ T5995] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   98.041598][ T6664] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[   98.132319][ T6668] netlink: 202368 bytes leftover after parsing attributes in process `syz.1.353'.
[   98.410929][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'.
[   98.422239][ T6660] loop0: detected capacity change from 0 to 32768
[   98.903548][ T1273] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   99.058886][ T1273] usb 2-1: Using ep0 maxpacket: 8
[   99.080625][ T1273] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[   99.094841][ T1273] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   99.117323][ T1273] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   99.121198][ T1273] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[   99.142769][ T1273] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[   99.155822][ T1273] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   99.161054][ T1273] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   99.200048][ T1273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.240871][ T1273] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22
[   99.479218][  T792] usb 2-1: USB disconnect, device number 4
[   99.843979][   T24] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[   99.995360][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   99.999791][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  100.023384][   T24] usb 3-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00
[  100.027115][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.043591][   T24] usb 3-1: config 0 descriptor??
[  100.048190][ T6681] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  100.089380][ T6701] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  100.092083][ T6701] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  100.096879][ T6701] vhci_hcd vhci_hcd.0: Device attached
[  100.100701][ T6702] vhci_hcd: cannot find the pending unlink 1
[  100.104437][ T6702] vhci_hcd: connection closed
[  100.110476][   T12] vhci_hcd: stop threads
[  100.116393][   T12] vhci_hcd: release socket
[  100.139685][   T12] vhci_hcd: disconnect device
[  100.214802][ T6709] netlink: 'syz.0.371': attribute type 6 has an invalid length.
[  100.254867][ T6711] tipc: Started in network mode
[  100.257080][ T6711] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  100.263813][ T6711] tipc: Enabled bearer <udp:syz0>, priority 10
[  100.266502][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'.
[  100.314100][ T6713] loop0: detected capacity change from 0 to 2048
[  100.339159][   T33] audit: type=1800 audit(1756967666.574:3): pid=6713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.373" name="file1" dev="loop0" ino=1415 res=0 errno=0
[  100.390095][ T6715] loop0: detected capacity change from 0 to 64
[  100.401401][ T6715] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  100.725924][ T6724] bond1: entered allmulticast mode
[  100.740909][ T6724] 8021q: adding VLAN 0 to HW filter on device bond1
[  100.750721][ T6724] bridge0: port 3(bond1) entered blocking state
[  100.770431][ T6724] bridge0: port 3(bond1) entered disabled state
[  100.781173][ T6724] bond1: entered promiscuous mode
[  100.785430][ T6724] bridge0: port 3(bond1) entered blocking state
[  100.788314][ T6724] bridge0: port 3(bond1) entered forwarding state
[  100.805514][ T1088] bridge0: port 3(bond1) entered disabled state
[  100.814568][   T24] usbhid 3-1:0.0: can't add hid device: -71
[  100.817209][   T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  100.836157][   T24] usb 3-1: USB disconnect, device number 7
[  100.898014][ T6734] loop0: detected capacity change from 0 to 128
[  100.925996][ T6734] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  100.974623][ T6732] block nbd0: server does not support multiple connections per device.
[  100.995163][ T6732] block nbd0: shutting down sockets
[  101.280020][ T1273] tipc: Node number set to 1
[  102.473485][ T6769] loop0: detected capacity change from 0 to 1024
[  102.595738][ T6774] loop2: detected capacity change from 0 to 512
[  102.606580][ T6774] EXT4-fs: Ignoring removed mblk_io_submit option
[  102.620440][ T6774] EXT4-fs: Ignoring removed nomblk_io_submit option
[  102.628410][ T6774] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  102.631914][ T6774] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  102.671886][ T6774] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.399: Allocating blocks 41-42 which overlap fs metadata
[  102.704248][ T6774] Quota error (device loop2): write_blk: dquota write failed
[  102.707260][ T6774] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[  102.711028][ T6774] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.399: Allocating blocks 41-42 which overlap fs metadata
[  102.724069][ T6774] Quota error (device loop2): write_blk: dquota write failed
[  102.735157][ T6774] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  102.739071][ T6774] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.399: Failed to acquire dquot type 1
[  102.776855][ T6774] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  102.803431][ T6774] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.399: corrupted inode contents
[  102.810873][ T6774] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #12: comm syz.2.399: mark_inode_dirty error
[  102.817588][ T6774] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.399: corrupted inode contents
[  102.833435][ T6774] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.399: mark_inode_dirty error
[  102.840367][ T6774] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.399: corrupted inode contents
[  102.849854][ T6774] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  102.866652][ T6774] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.399: corrupted inode contents
[  102.881774][ T6774] EXT4-fs error (device loop2): ext4_truncate:4666: inode #12: comm syz.2.399: mark_inode_dirty error
[  102.889918][ T6774] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  102.898421][ T6774] EXT4-fs (loop2): 1 truncate cleaned up
[  102.898871][ T6770] loop1: detected capacity change from 0 to 32768
[  102.901067][ T6774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.939498][ T6770] JBD2: Ignoring recovery information on journal
[  102.962663][ T5993] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.001281][ T6770] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  103.041488][ T6770] (syz.1.397,6770,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10
[  103.048761][ T6770] (syz.1.397,6770,1):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2
[  103.051880][ T6770] (syz.1.397,6770,1):ocfs2_mknod:301 ERROR: status = -2
[  103.055396][ T6770] (syz.1.397,6770,1):ocfs2_mknod:505 ERROR: status = -2
[  103.057839][ T6770] (syz.1.397,6770,1):ocfs2_create:678 ERROR: status = -2
[  103.109568][ T6793] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  103.110667][ T5995] ocfs2: Unmounting device (7,1) on (node local)
[  103.428003][ T6799] loop0: detected capacity change from 0 to 512
[  103.453657][ T6799] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.409: iget: bad i_size value: 38620345925642
[  103.463895][ T6799] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.409: couldn't read orphan inode 15 (err -117)
[  103.506595][ T6799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.742223][ T5991] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.685391][ T6818] netlink: 28 bytes leftover after parsing attributes in process `syz.2.419'.
[  104.690508][ T6818] netlink: 28 bytes leftover after parsing attributes in process `syz.2.419'.
[  105.224845][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  105.246656][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  105.268997][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  105.294780][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  105.305990][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  105.463219][   T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  105.637176][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  105.637215][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  105.638505][   T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  105.638527][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  105.638543][   T10] usb 3-1: SerialNumber: syz
[  105.806090][ T6829] chnl_net:caif_netlink_parms(): no params data found
[  105.865589][   T10] usb 3-1: 0:2 : does not exist
[  105.867897][   T10] usb 3-1: unit 5: unexpected type 0x09
[  105.912010][   T10] usb 3-1: USB disconnect, device number 8
[  106.019577][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  106.100302][ T6829] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.109167][ T6829] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.120747][ T6829] bridge_slave_0: entered allmulticast mode
[  106.125541][ T6829] bridge_slave_0: entered promiscuous mode
[  106.130699][ T6829] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.136800][ T6829] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.139803][ T6829] bridge_slave_1: entered allmulticast mode
[  106.144959][ T6829] bridge_slave_1: entered promiscuous mode
[  106.221473][ T6829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  106.230494][ T6829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  106.310015][ T6829] team0: Port device team_slave_0 added
[  106.317851][ T6829] team0: Port device team_slave_1 added
[  106.345682][ T6848] batadv1: entered promiscuous mode
[  106.349698][ T6848] 8021q: adding VLAN 0 to HW filter on device batadv1
[  106.381902][ T6829] batman_adv: batadv0: Adding interface: batadv_slave_0
[  106.388691][ T6829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.409494][ T6829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  106.421871][ T6829] batman_adv: batadv0: Adding interface: batadv_slave_1
[  106.432199][ T6829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.466596][ T6829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  106.494949][ T6850] loop1: detected capacity change from 0 to 512
[  106.516962][ T6850] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  106.532863][ T6850] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  106.561770][ T6850] EXT4-fs (loop1): 1 truncate cleaned up
[  106.565797][ T6850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.568228][ T6829] hsr_slave_0: entered promiscuous mode
[  106.589891][ T6829] hsr_slave_1: entered promiscuous mode
[  106.592753][ T6829] debugfs: 'hsr0' already exists in 'hsr'
[  106.599213][ T6829] Cannot create hsr debugfs directory
[  106.601806][ T6850] fscrypt (loop1, inode 18): Unsupported encryption flags (0x33)
[  106.682799][ T5995] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.856874][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.432'.
[  106.861011][ T6860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.432'.
[  106.935608][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.432'.
[  106.940051][ T6860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.432'.
[  107.126572][ T6829] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  107.145537][ T6829] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  107.192706][ T6829] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  107.207026][ T6829] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  107.433742][ T5237] Bluetooth: hci0: command tx timeout
[  107.538879][ T6829] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.551865][ T6829] 8021q: adding VLAN 0 to HW filter on device team0
[  107.562746][   T84] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.565544][   T84] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.569831][   T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  107.584972][   T84] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.587338][   T84] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.727980][   T10] usb 3-1: Using ep0 maxpacket: 8
[  107.732710][   T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  107.745672][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.824898][   T10] pvrusb2: Hardware description: Terratec Grabster AV400
[  107.833410][   T10] pvrusb2: **********
[  107.834695][   T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  107.840439][   T10] pvrusb2: Important functionality might not be entirely working.
[  107.842766][   T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  107.863338][   T10] pvrusb2: **********
[  107.901000][ T6829] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.011144][ T6829] veth0_vlan: entered promiscuous mode
[  108.025858][ T2398] pvrusb2: Invalid write control endpoint
[  108.048735][ T6829] veth1_vlan: entered promiscuous mode
[  108.089385][ T6829] veth0_macvtap: entered promiscuous mode
[  108.099904][ T6829] veth1_macvtap: entered promiscuous mode
[  108.141425][ T2398] pvrusb2: Invalid write control endpoint
[  108.154897][ T6829] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.174246][ T2398] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  108.178561][ T2398] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  108.181899][ T2398] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  108.197161][ T2398] pvrusb2: Device being rendered inoperable
[  108.202977][ T2398] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  108.211785][ T2398] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  108.212015][ T6829] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.227315][ T2398] pvrusb2: Attached sub-driver cx25840
[  108.229896][ T2398] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  108.236633][ T2398] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  108.240004][ T6049] usb 3-1: USB disconnect, device number 9
[  108.249137][ T6015] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.259522][ T6015] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.285022][ T6015] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.288528][ T6015] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.390143][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.404827][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.435298][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.438344][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.773243][ T6049] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  108.939146][ T6049] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  108.945473][ T6049] usb 4-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  108.949999][ T6049] usb 4-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  108.957354][ T6049] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  108.960922][ T6049] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  108.964315][ T6049] usb 4-1: SerialNumber: syz
[  109.211694][ T6049] rndis_host 4-1:253.0: RNDIS init failed, -71
[  109.225970][ T6049] rndis_host 4-1:253.0: probe with driver rndis_host failed with error -71
[  109.250463][ T6049] usb 4-1: USB disconnect, device number 2
[  109.425918][   T51] Process accounting resumed
[  109.485473][ T5237] Bluetooth: hci0: command tx timeout
[  109.862013][ T6925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.453'.
[  110.025513][ T5237] Bluetooth: Wrong link type (-71)
[  110.559870][   T24] libceph: connect (1)[c::]:6789 error -101
[  110.565743][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  110.592451][ T6952] loop1: detected capacity change from 0 to 128
[  110.642065][ T6945] ceph: No mds server is up or the cluster is laggy
[  110.807767][ T6957] loop1: detected capacity change from 0 to 2048
[  110.834263][ T6957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.891727][ T5995] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.955681][ T6967] loop1: detected capacity change from 0 to 128
[  110.963974][ T6967] hpfs: Bad version 183,140. Mount readonly to go around
[  110.967697][ T6967] hpfs: please try recent version of HPFS driver at http://artax.karlin.mff.cuni.cz/~mikulas/vyplody/hpfs/index-e.cgi and if it still can't understand this format, contact author - mikulas@artax.karlin.mff.cuni.cz
[  111.313635][ T6986] loop2: detected capacity change from 0 to 512
[  111.343392][ T6986] EXT4-fs: Ignoring removed i_version option
[  111.346012][ T6986] EXT4-fs: inline encryption not supported
[  111.380776][ T6986] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.477: bg 0: block 131: padding at end of block bitmap is not set
[  111.418932][ T6986] EXT4-fs (loop2): Remounting filesystem read-only
[  111.421945][ T6986] EXT4-fs (loop2): 1 truncate cleaned up
[  111.444661][ T6986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.542953][ T5993] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.563358][ T5237] Bluetooth: hci0: command tx timeout
[  111.972702][ T7003] capability: warning: `syz.2.484' uses deprecated v2 capabilities in a way that may be insecure
[  112.008036][ T7003] program syz.2.484 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  112.253173][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  112.605478][    T9] usb 4-1: Using ep0 maxpacket: 16
[  112.683673][    T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  112.695679][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.702350][    T9] usb 4-1: Product: syz
[  112.713425][    T9] usb 4-1: Manufacturer: syz
[  112.718662][    T9] usb 4-1: SerialNumber: syz
[  112.729844][    T9] r8152-cfgselector 4-1: Unknown version 0x0000
[  112.735884][    T9] r8152-cfgselector 4-1: config 0 descriptor??
[  113.079589][ T5297] udevd[5297]: worker [5973] terminated by signal 33 (Unknown signal 33)
[  113.082275][ T5297] udevd[5297]: worker [5973] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1'
[  113.098959][ T7025] loop2: detected capacity change from 0 to 256
[  113.111175][ T7025] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  113.168890][    T9] r8152-cfgselector 4-1: USB disconnect, device number 3
[  113.644158][ T5237] Bluetooth: hci0: command tx timeout
[  114.307862][ T7056] loop3: detected capacity change from 0 to 1024
[  114.444243][ T7056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.451826][ T7061] loop1: detected capacity change from 0 to 164
[  114.451949][ T7056] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.701316][ T6829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.850404][   T33] audit: type=1326 audit(1756967681.094:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7045 comm="syz.2.501" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5698ebe9 code=0x7fc00000
[  114.881844][   T33] audit: type=1326 audit(1756967681.094:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7045 comm="syz.2.501" exe="/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4f5698ebe9 code=0x7fc00000
[  114.912735][   T33] audit: type=1326 audit(1756967681.094:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7045 comm="syz.2.501" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5698ebe9 code=0x7fc00000
[  114.937021][   T33] audit: type=1326 audit(1756967681.094:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7045 comm="syz.2.501" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5698ebe9 code=0x7fc00000
[  114.996568][   T33] audit: type=1326 audit(1756967681.094:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7045 comm="syz.2.501" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5698ebe9 code=0x7fc00000
[  115.042166][   T33] audit: type=1326 audit(1756967681.094:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7045 comm="syz.2.501" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5698ebe9 code=0x7fc00000
[  115.083839][   T33] audit: type=1326 audit(1756967681.094:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7045 comm="syz.2.501" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5698ebe9 code=0x7fc00000
[  115.092209][   T33] audit: type=1326 audit(1756967681.094:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7045 comm="syz.2.501" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5698ebe9 code=0x7fc00000
[  115.111120][   T33] audit: type=1326 audit(1756967681.094:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7045 comm="syz.2.501" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5698ebe9 code=0x7fc00000
[  115.133171][   T33] audit: type=1326 audit(1756967681.094:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7045 comm="syz.2.501" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5698ebe9 code=0x7fc00000
[  115.321587][ T7072] loop1: detected capacity change from 0 to 2048
[  115.342706][ T7072] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  115.368428][ T7072] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  116.381789][ T7088] loop3: detected capacity change from 0 to 1024
[  116.412469][ T7088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.434127][ T7088] EXT4-fs: Ignoring sb option on remount
[  116.440283][ T7088] EXT4-fs: Ignoring removed orlov option
[  116.450073][ T7088] EXT4-fs: Ignoring removed nomblk_io_submit option
[  116.458339][ T7088] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  116.461161][ T7088] EXT4-fs: Remounting fs w/o journal so ignoring data_err option
[  116.463579][ T7088] EXT4-fs: can't change dax mount option while remounting
[  116.491224][ T6829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.794643][    T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  116.953150][    T9] usb 3-1: Using ep0 maxpacket: 8
[  116.957063][    T9] usb 3-1: config 0 has an invalid interface number: 60 but max is 0
[  116.960350][    T9] usb 3-1: config 0 has no interface number 0
[  116.962971][    T9] usb 3-1: config 0 interface 60 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  116.967198][    T9] usb 3-1: config 0 interface 60 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  116.978023][    T9] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=68.09
[  116.981657][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.984881][    T9] usb 3-1: Product: syz
[  116.986789][    T9] usb 3-1: Manufacturer: syz
[  116.988693][    T9] usb 3-1: SerialNumber: syz
[  116.992909][    T9] usb 3-1: config 0 descriptor??
[  117.006362][    T9] as10x_usb: device has been detected
[  117.009297][    T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  117.028099][    T9] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  117.048645][    T9] as10x_usb: error during firmware upload part1
[  117.051548][    T9] Registered device Abilis Systems DVB-Titan
[  117.215163][    T9] usb 3-1: USB disconnect, device number 10
[  117.245124][    T9] Unregistered device Abilis Systems DVB-Titan
[  117.246803][    T9] as10x_usb: device has been disconnected
[  117.918829][ T7114] loop2: detected capacity change from 0 to 32768
[  117.927460][ T7114] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section clean: entry type (unknown jset_entry_type 38) overruns end of section
[  117.927460][ T7114] clean (size 2912):
[  117.927460][ T7114] flags:          0
[  117.927460][ T7114] journal_seq:    8
[  117.927460][ T7114]                            log: 
[  117.927460][ T7114] usage: type=key_version v=0
[  117.927460][ T7114] usage: type=reserved v=0
[  117.927460][ T7114] usage: type=reserved v=0
[  117.927460][ T7114] usage: type=reserved v=0
[  117.927460][ T7114] usage: type=reserved v=0
[  117.927460][ T7114] data_usage: btree: 1/1 [0]=2816
[  117.927460][ T7114] data_usage: journal: 1/1 [0]=0
[  117.927460][ T7114] 
[  117.949912][ T7114] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  118.084493][ T7120] loop2: detected capacity change from 0 to 512
[  118.098542][ T7120] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.530: corrupted in-inode xattr: invalid ea_ino
[  118.111136][ T7120] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.530: couldn't read orphan inode 15 (err -117)
[  118.121387][ T7120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.165048][ T5993] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.658579][ T7132] loop1: detected capacity change from 0 to 256
[  118.671745][ T7132] FAT-fs (loop1): Directory bread(block 64) failed
[  118.675410][ T7132] FAT-fs (loop1): Directory bread(block 65) failed
[  118.677844][ T7132] FAT-fs (loop1): Directory bread(block 66) failed
[  118.680281][ T7132] FAT-fs (loop1): Directory bread(block 67) failed
[  118.682830][ T7132] FAT-fs (loop1): Directory bread(block 68) failed
[  118.687145][ T7132] FAT-fs (loop1): Directory bread(block 69) failed
[  118.691737][ T7132] FAT-fs (loop1): Directory bread(block 70) failed
[  118.695515][ T7132] FAT-fs (loop1): Directory bread(block 71) failed
[  118.698423][ T7132] FAT-fs (loop1): Directory bread(block 72) failed
[  118.700875][ T7132] FAT-fs (loop1): Directory bread(block 73) failed
[  118.960061][ T7144] netlink: 'syz.1.541': attribute type 1 has an invalid length.
[  118.966325][ T7144] netlink: 232 bytes leftover after parsing attributes in process `syz.1.541'.
[  118.970250][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'.
[  119.060388][ T7148] input: syz1 as /devices/virtual/input/input9
[  119.818217][ T7165] comedi comedi0: pcl816: I/O port conflict (0x2f00,16)
[  120.132866][ T7167] netlink: 'syz.1.551': attribute type 17 has an invalid length.
[  120.180354][ T7169] loop1: detected capacity change from 0 to 16
[  120.197949][ T7169] erofs (device loop1): mounted with root inode @ nid 36.
[  120.486056][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.558'.
[  120.489551][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.558'.
[  120.533285][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  120.693154][    T9] usb 2-1: Using ep0 maxpacket: 32
[  120.700242][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  120.713717][    T9] usb 2-1: config 128 has an invalid interface number: 127 but max is 3
[  120.716990][    T9] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  120.732928][    T9] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4
[  120.746259][    T9] usb 2-1: config 128 has no interface number 0
[  120.753261][    T9] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 28, changing to 8
[  120.757402][    T9] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 33417, setting to 1024
[  120.772306][    T9] usb 2-1: config 128 interface 127 has no altsetting 0
[  120.790873][    T9] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  120.796236][ T7195] loop3: detected capacity change from 0 to 512
[  120.798511][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.805837][    T9] usb 2-1: Product: syz
[  120.807539][    T9] usb 2-1: Manufacturer: syz
[  120.815128][    T9] usb 2-1: SerialNumber: syz
[  120.832773][ T7195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.851284][ T7195] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.895641][ T7195] loop3: detected capacity change from 512 to 64
[  120.939619][ T7195] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Out of memory
[  120.951880][ T7195] EXT4-fs error (device loop3): ext4_ext_tree_init:883: inode #18: comm syz.3.565: mark_inode_dirty error
[  120.964222][ T7195] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Out of memory
[  120.974502][ T7195] EXT4-fs error (device loop3): __ext4_new_inode:1342: inode #18: comm syz.3.565: mark_inode_dirty error
[  120.986448][ T7195] EXT4-fs error (device loop3) in __ext4_new_inode:1344: Out of memory
[  121.000314][ T7195] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Out of memory
[  121.030037][ T7195] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #18: comm syz.3.565: mark_inode_dirty error
[  121.041757][ T7195] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -12)
[  121.082191][    T9] usb 2-1: USB disconnect, device number 5
[  121.099020][ T6829] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Out of memory
[  121.117187][ T6829] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error
[  121.171890][ T7206] loop2: detected capacity change from 0 to 512
[  121.176644][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  121.222128][ T7206] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.570: bg 0: block 248: padding at end of block bitmap is not set
[  121.238032][ T7206] __quota_error: 16 callbacks suppressed
[  121.238051][ T7206] Quota error (device loop2): write_blk: dquota write failed
[  121.242157][ T7206] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  121.247154][ T7206] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.570: Failed to acquire dquot type 1
[  121.260090][ T7206] EXT4-fs (loop2): 1 truncate cleaned up
[  121.265595][ T7206] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.271634][ T7206] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.300236][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.325679][ T5993] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.378907][ T6829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.387964][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.490757][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.571769][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.802098][   T12] bridge_slave_1: left allmulticast mode
[  121.805284][   T12] bridge_slave_1: left promiscuous mode
[  121.809283][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.830624][   T12] bridge_slave_0: left allmulticast mode
[  121.838476][   T12] bridge_slave_0: left promiscuous mode
[  121.840465][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.884542][ T7219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.577'.
[  122.012602][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  122.019619][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  122.032088][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  122.038561][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  122.047525][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  122.479577][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  122.489088][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  122.495291][   T12] bond0 (unregistering): Released all slaves
[  122.568490][   T12] tipc: Disabling bearer <udp:syz0>
[  122.575906][   T12] tipc: Left network mode
[  122.595314][ T6023] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  122.753991][ T6023] usb 2-1: Using ep0 maxpacket: 16
[  122.766945][ T6023] usb 2-1: config 0 has an invalid interface number: 48 but max is 0
[  122.770216][ T6023] usb 2-1: config 0 has no interface number 0
[  122.772557][ T6023] usb 2-1: config 0 interface 48 has no altsetting 0
[  122.788168][ T6023] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98
[  122.791987][ T6023] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.798246][ T6023] usb 2-1: Product: syz
[  122.807370][ T6023] usb 2-1: Manufacturer: syz
[  122.809224][ T6023] usb 2-1: SerialNumber: syz
[  122.814706][ T6023] usb 2-1: config 0 descriptor??
[  123.025176][ T6023] usb 2-1: USB disconnect, device number 6
[  123.061301][   T12] hsr_slave_0: left promiscuous mode
[  123.070466][   T12] hsr_slave_1: left promiscuous mode
[  123.075361][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.078552][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.089350][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.092375][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.127154][   T12] veth1_macvtap: left promiscuous mode
[  123.130587][   T12] veth0_macvtap: left promiscuous mode
[  123.133754][   T12] veth1_vlan: left promiscuous mode
[  123.136256][   T12] veth0_vlan: left promiscuous mode
[  123.197320][ T7253] loop2: detected capacity change from 0 to 512
[  123.208341][ T7253] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  123.225387][ T7253] EXT4-fs (loop2): blocks per group (34) and clusters per group (32768) inconsistent
[  123.495079][    T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  123.651243][    T9] usb 3-1: config 0 has an invalid interface number: 111 but max is 0
[  123.656784][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  123.659984][    T9] usb 3-1: config 0 has no interface number 0
[  123.661913][    T9] usb 3-1: too many endpoints for config 0 interface 111 altsetting 99: 44, using maximum allowed: 30
[  123.667104][    T9] usb 3-1: config 0 interface 111 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 44
[  123.673763][    T9] usb 3-1: config 0 interface 111 has no altsetting 0
[  123.676466][    T9] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  123.680093][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.686982][    T9] usb 3-1: config 0 descriptor??
[  123.698782][    T9] usb 3-1: selecting invalid altsetting 0
[  123.755810][   T12] team0 (unregistering): Port device team_slave_1 removed
[  123.817415][   T12] team0 (unregistering): Port device team_slave_0 removed
[  123.906385][  T792] usb 3-1: USB disconnect, device number 11
[  124.043730][   T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  124.128112][   T54] Bluetooth: hci0: command tx timeout
[  124.215976][   T24] usb 2-1: Using ep0 maxpacket: 32
[  124.221326][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  124.227690][   T24] usb 2-1: config 5 has an invalid interface number: 114 but max is 0
[  124.231225][   T24] usb 2-1: config 5 has no interface number 0
[  124.236398][   T24] usb 2-1: config 5 interface 114 has no altsetting 0
[  124.257394][   T24] usb 2-1: New USB device found, idVendor=1b3d, idProduct=9316, bcdDevice=28.00
[  124.261178][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.264450][   T24] usb 2-1: Product: syz
[  124.266175][   T24] usb 2-1: Manufacturer: syz
[  124.268028][   T24] usb 2-1: SerialNumber: syz
[  124.407717][ T7226] chnl_net:caif_netlink_parms(): no params data found
[  124.508840][   T24] ftdi_sio 2-1:5.114: FTDI USB Serial Device converter detected
[  124.529090][   T24] usb 2-1: Detected FT2233HP
[  124.532343][   T24] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  124.550002][   T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  124.566242][   T24] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  124.591396][   T24] usb 2-1: USB disconnect, device number 7
[  124.600071][   T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  124.613725][   T24] ftdi_sio 2-1:5.114: device disconnected
[  124.764206][ T7226] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.767222][ T7226] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.770181][ T7226] bridge_slave_0: entered allmulticast mode
[  124.786858][ T7226] bridge_slave_0: entered promiscuous mode
[  124.791431][ T7226] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.795458][ T7226] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.799343][ T7226] bridge_slave_1: entered allmulticast mode
[  124.805925][ T7226] bridge_slave_1: entered promiscuous mode
[  124.882201][ T7226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.069917][ T7226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.158265][ T7226] team0: Port device team_slave_0 added
[  125.166108][ T7226] team0: Port device team_slave_1 added
[  125.236406][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.246915][ T7226] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.249275][ T7226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.260812][ T7226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  125.266348][ T7226] batman_adv: batadv0: Adding interface: batadv_slave_1
[  125.268975][ T7226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.278543][ T7226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  125.296213][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'.
[  125.314532][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.402200][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.420390][ T7226] hsr_slave_0: entered promiscuous mode
[  125.422811][ T7226] hsr_slave_1: entered promiscuous mode
[  125.492293][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.564517][   T54] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  125.569030][   T54] Bluetooth: hci1: Injecting HCI hardware error event
[  125.575598][   T54] Bluetooth: hci1: hardware error 0x00
[  125.941022][ T7226] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  125.956817][   T12] bridge_slave_1: left allmulticast mode
[  125.959121][   T12] bridge_slave_1: left promiscuous mode
[  125.966814][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.983415][   T12] bridge_slave_0: left allmulticast mode
[  125.985723][   T12] bridge_slave_0: left promiscuous mode
[  125.988086][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.209947][ T5237] Bluetooth: hci0: command tx timeout
[  126.282421][ T7294] loop2: detected capacity change from 0 to 32768
[  126.350110][ T7294] ERROR: (device loop2): dtSearch: DT_GETPAGE: dtree page corrupt
[  126.350110][ T7294] 
[  126.358538][ T7294] ERROR: (device loop2): remounting filesystem as read-only
[  126.361303][ T7294] jfs_lookup: dtSearch returned -5
[  126.393757][  T117] blkno = 8ed2c, nblocks = 1
[  126.395593][  T117] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[  126.395593][  T117] 
[  126.399578][  T117] JFS: metapage_get_blocks failed
[  126.401798][  T117] ERROR: (device loop2): release_metapage: metapage_write_one() failed
[  126.401798][  T117] 
[  126.419728][  T117] blkno = 8ed2c, nblocks = 1
[  126.421569][  T117] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[  126.421569][  T117] 
[  126.564062][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  126.569628][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  126.576458][   T12] bond0 (unregistering): Released all slaves
[  126.587826][ T7226] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  126.606011][ T7226] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  126.621921][ T7226] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  126.710444][ T7312] loop1: detected capacity change from 0 to 32768
[  126.732939][ T7312] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.610 (7312)
[  126.806128][ T7312] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  126.809794][ T7312] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  126.879131][ T7329] netlink: 'syz.2.608': attribute type 3 has an invalid length.
[  126.881683][ T7329] netlink: 'syz.2.608': attribute type 16 has an invalid length.
[  126.891291][ T7329] netlink: 132 bytes leftover after parsing attributes in process `syz.2.608'.
[  126.972427][ T7341] loop2: detected capacity change from 0 to 256
[  126.983897][ T7312] BTRFS info (device loop1): rebuilding free space tree
[  127.018533][   T12] hsr_slave_0: left promiscuous mode
[  127.044276][   T12] hsr_slave_1: left promiscuous mode
[  127.047172][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.050129][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.065154][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.068617][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.110809][   T12] veth1_macvtap: left promiscuous mode
[  127.114267][ T7312] BTRFS info (device loop1): enabling ssd optimizations
[  127.115283][   T12] veth0_macvtap: left promiscuous mode
[  127.117092][ T7312] BTRFS info (device loop1): disabling tree log
[  127.119491][   T12] veth1_vlan: left promiscuous mode
[  127.121843][ T7312] BTRFS info (device loop1): enabling free space tree
[  127.133676][ T7312] BTRFS info (device loop1): force clearing of disk cache
[  127.136398][ T7312] BTRFS info (device loop1): force zlib compression, level 3
[  127.138892][ T7312] BTRFS info (device loop1): max_inline set to 4096
[  127.150867][   T12] veth0_vlan: left promiscuous mode
[  127.199600][   T33] audit: type=1800 audit(1756967693.444:30): pid=7312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.610" name="file1" dev="loop1" ino=260 res=0 errno=0
[  127.227664][   T33] audit: type=1804 audit(1756967693.474:31): pid=7312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.610" name="/newroot/191/file0/bus" dev="loop1" ino=263 res=1 errno=0
[  127.309518][ T5995] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  127.504102][ T6023] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  127.682978][ T6023] usb 3-1: unable to get BOS descriptor or descriptor too short
[  127.698454][ T6023] usb 3-1: config 3 has an invalid interface number: 8 but max is 3
[  127.715355][ T6023] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  127.719395][ T6023] usb 3-1: config 3 has 1 interface, different from the descriptor's value: 4
[  127.722915][ T6023] usb 3-1: config 3 has no interface number 0
[  127.727336][   T54] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  127.730584][ T6023] usb 3-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  127.737535][ T6023] usb 3-1: config 3 interface 8 altsetting 6 endpoint 0x82 has invalid wMaxPacketSize 0
[  127.742778][ T6023] usb 3-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  127.758775][ T6023] usb 3-1: config 3 interface 8 has no altsetting 0
[  127.773364][ T6023] usb 3-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be
[  127.777002][ T6023] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.784162][ T6023] usb 3-1: Product: syz
[  127.789508][ T6023] usb 3-1: Manufacturer: syz
[  127.791372][ T6023] usb 3-1: SerialNumber: syz
[  128.081652][ T6023] appledisplay 3-1:3.8: Submitting URB failed
[  128.086741][ T6023] appledisplay 3-1:3.8: probe with driver appledisplay failed with error -5
[  128.102581][ T6023] usb 3-1: USB disconnect, device number 12
[  128.287646][   T12] team0 (unregistering): Port device team_slave_1 removed
[  128.294415][   T54] Bluetooth: hci0: command tx timeout
[  128.332997][   T12] team0 (unregistering): Port device team_slave_0 removed
[  128.549994][ T7358] loop1: detected capacity change from 0 to 512
[  128.580461][ T7358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.676466][ T7362] loop2: detected capacity change from 0 to 256
[  128.684137][ T5995] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.369167][ T7226] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.399524][ T7226] 8021q: adding VLAN 0 to HW filter on device team0
[  129.409333][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.412117][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.466832][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.469104][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.884235][ T7226] 8021q: adding VLAN 0 to HW filter on device batadv0
[  130.259956][ T7226] veth0_vlan: entered promiscuous mode
[  130.270309][ T7226] veth1_vlan: entered promiscuous mode
[  130.327032][ T7226] veth0_macvtap: entered promiscuous mode
[  130.342977][ T7226] veth1_macvtap: entered promiscuous mode
[  130.365539][   T54] Bluetooth: hci0: command tx timeout
[  130.378850][ T7226] batman_adv: batadv0: Interface activated: batadv_slave_0
[  130.386890][ T7226] batman_adv: batadv0: Interface activated: batadv_slave_1
[  130.401964][ T5990] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.406809][ T5990] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.419581][ T5990] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.430705][ T5990] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.437593][ T7421] tmpfs: Bad value for 'mpol'
[  130.542037][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.554516][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.605709][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.609310][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.202268][ T7433] loop2: detected capacity change from 0 to 32768
[  131.225424][ T7433] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.637 (7433)
[  131.251175][ T7433] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  131.285754][ T7433] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  131.403782][ T7433] BTRFS info (device loop2): enabling ssd optimizations
[  131.407000][ T7433] BTRFS info (device loop2): enabling free space tree
[  131.598694][ T5993] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  131.850666][ T7496] xt_limit: Overflow, try lower: 271964/0
[  131.973730][    T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  132.077257][ T7504] netlink: 'syz.4.655': attribute type 1 has an invalid length.
[  132.083172][ T1273] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  132.141158][ T7506] loop4: detected capacity change from 0 to 256
[  132.146715][    T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  132.150770][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.174379][    T9] usb 2-1: config 0 descriptor??
[  132.186530][    T9] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[  132.188183][ T7506] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  132.209296][ T7506] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  132.232353][   T33] audit: type=1800 audit(1756967698.474:32): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.656" name="file0" dev="loop4" ino=1048642 res=0 errno=0
[  132.274471][ T1273] usb 3-1: Using ep0 maxpacket: 8
[  132.282375][ T1273] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00
[  132.290521][ T1273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.304430][ T1273] usb 3-1: config 0 descriptor??
[  132.399658][    T9] gspca_sn9c2028: read1 error -32
[  132.407249][    T9] gspca_sn9c2028: read1 error -32
[  132.530757][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.535857][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  132.626097][ T6023] usb 2-1: USB disconnect, device number 8
[  132.745925][ T1273] magicmouse 0003:05AC:0269.0002: hidraw0: USB HID v0.05 Device [HID 05ac:0269] on usb-dummy_hcd.2-1/input0
[  132.930404][ T6050] usb 3-1: USB disconnect, device number 13
[  133.455739][ T7524] loop1: detected capacity change from 0 to 8
[  133.692993][ T7530] netlink: 'syz.2.663': attribute type 1 has an invalid length.
[  133.698749][ T7530] netlink: 228 bytes leftover after parsing attributes in process `syz.2.663'.
[  134.569467][ T7577] loop2: detected capacity change from 0 to 4096
[  134.594382][ T7577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.617334][ T7577] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.684: bg 0: block 363: padding at end of block bitmap is not set
[  134.630910][ T7577] fs-verity (loop2, inode 15): ext4_end_enable_verity() failed with err -117
[  134.663664][ T5993] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.703535][ T6023] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  134.853214][ T6023] usb 2-1: Using ep0 maxpacket: 8
[  134.858505][ T6023] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  134.861207][ T6023] usb 2-1: config 0 has no interface number 0
[  134.864676][ T6023] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  134.868099][ T6023] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  134.871653][ T6023] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  134.875942][ T6023] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  134.880573][ T6023] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  134.884154][ T6023] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.893640][ T6023] usb 2-1: config 0 descriptor??
[  134.910285][ T6023] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  135.441636][   T54] Bluetooth: hci0: unexpected cc 0x042d length: 63 > 7
[  135.848315][ T7592] loop2: detected capacity change from 0 to 4096
[  135.854720][ T7592] EXT4-fs: Ignoring removed i_version option
[  135.877044][ T7592] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  135.880290][ T7592] System zones: 0-5
[  135.894376][ T7592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.934308][ T5993] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.199084][ T7606] netlink: 'syz.4.695': attribute type 3 has an invalid length.
[  136.579104][ T7622] loop4: detected capacity change from 0 to 8
[  136.584104][ T7624] binder: 7623:7624 ioctl 80286722 0 returned -22
[  136.622234][ T7622] netlink: zone id is out of range
[  136.643742][ T7622] netlink: zone id is out of range
[  136.648533][ T7622] netlink: zone id is out of range
[  136.650601][ T7622] netlink: zone id is out of range
[  136.652641][ T7622] netlink: zone id is out of range
[  136.655146][ T7622] netlink: zone id is out of range
[  136.656877][ T7622] netlink: zone id is out of range
[  136.658660][ T7622] netlink: zone id is out of range
[  136.660502][ T7622] netlink: zone id is out of range
[  136.662610][ T7622] netlink: zone id is out of range
[  136.666008][ T7626] loop2: detected capacity change from 0 to 16
[  136.682800][ T7626] erofs (device loop2): mounted with root inode @ nid 36.
[  136.796268][ T7629] loop4: detected capacity change from 0 to 1024
[  136.910480][ T1089] hfsplus: b-tree write err: -5, ino 8
[  137.459651][   T51] usb 2-1: USB disconnect, device number 9
[  137.495383][   T51] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[  137.687255][ T7642] loop4: detected capacity change from 0 to 8192
[  137.728166][   T33] audit: type=1800 audit(1756967703.974:33): pid=7642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.711" name="bus" dev="loop4" ino=1048643 res=0 errno=0
[  138.013261][   T51] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  138.108450][ T7660] loop2: detected capacity change from 0 to 164
[  138.136279][ T7660] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  138.183267][   T51] usb 2-1: Using ep0 maxpacket: 8
[  138.196729][   T51] usb 2-1: config 0 has an invalid interface number: 52 but max is 0
[  138.199616][   T51] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  138.205771][   T51] usb 2-1: config 0 has no interface number 0
[  138.213516][   T51] usb 2-1: config 0 interface 52 has no altsetting 0
[  138.219747][   T51] usb 2-1: New USB device found, idVendor=06cb, idProduct=0009, bcdDevice= 8.00
[  138.222989][   T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=184
[  138.226683][   T51] usb 2-1: SerialNumber: syz
[  138.237004][   T51] usb 2-1: config 0 descriptor??
[  138.633423][ T6023] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  138.659240][ T1273] usb 2-1: USB disconnect, device number 10
[  138.786309][ T6023] usb 3-1: unable to get BOS descriptor or descriptor too short
[  138.789305][ T6023] usb 3-1: not running at top speed; connect to a high speed hub
[  138.793884][ T6023] usb 3-1: config 1 has an invalid interface number: 138 but max is 0
[  138.796912][ T6023] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  138.800453][ T6023] usb 3-1: config 1 has no interface number 0
[  138.802292][ T6023] usb 3-1: config 1 interface 138 altsetting 252 endpoint 0xC has invalid wMaxPacketSize 0
[  138.807047][ T6023] usb 3-1: config 1 interface 138 has no altsetting 0
[  138.811308][ T6023] usb 3-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae
[  138.816004][ T7675] loop4: detected capacity change from 0 to 4096
[  138.818040][ T6023] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.820911][ T6023] usb 3-1: Product: syz
[  138.822600][ T6023] usb 3-1: Manufacturer: syz
[  138.834921][ T6023] usb 3-1: SerialNumber: syz
[  138.866824][ T7677] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  139.037278][ T7682] libceph: resolve '4..' (ret=-3): failed
[  139.062994][ T6023] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  139.097683][ T6023] usb 3-1: USB disconnect, device number 14
[  139.172172][ T7350] udevd[7350]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  139.485064][   T54] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  139.488613][   T54] Bluetooth: hci0: Injecting HCI hardware error event
[  139.492275][   T54] Bluetooth: hci0: hardware error 0x00
[  139.653407][ T1273] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  139.831474][ T1273] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  139.849325][ T1273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.856222][ T1273] usb 2-1: Product: syz
[  139.857914][ T1273] usb 2-1: Manufacturer: syz
[  139.859797][ T1273] usb 2-1: SerialNumber: syz
[  139.888645][ T1273] usb 2-1: config 0 descriptor??
[  139.946087][ T7692] loop2: detected capacity change from 0 to 32768
[  139.950890][ T7692] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.729 (7692)
[  139.962606][ T7692] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  139.967214][ T7692] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  140.014824][ T7700] capability: warning: `syz.4.730' uses 32-bit capabilities (legacy support in use)
[  140.110309][ T7692] BTRFS info (device loop2): enabling ssd optimizations
[  140.112699][ T7692] BTRFS info (device loop2): enabling free space tree
[  140.117699][ T1273] hso 2-1:0.0: Failed to find BULK IN ep
[  140.132575][ T1273] usb-storage 2-1:0.0: USB Mass Storage device detected
[  140.229942][ T5993] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  140.235853][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'.
[  140.348576][   T24] usb 2-1: USB disconnect, device number 11
[  140.409403][ T7723] Bluetooth: MGMT ver 1.23
[  140.528468][ T7726] loop4: detected capacity change from 0 to 2048
[  140.541061][ T7726] EXT4-fs: Ignoring removed mblk_io_submit option
[  140.616060][ T7726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.627655][ T7733] loop2: detected capacity change from 0 to 128
[  140.657354][ T7726] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.737: bg 0: block 234: padding at end of block bitmap is not set
[  140.666013][ T7726] EXT4-fs (loop4): Remounting filesystem read-only
[  140.667729][ T7733] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  140.694010][ T7226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.720926][ T7733] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  141.384593][ T7747] loop1: detected capacity change from 0 to 4096
[  141.400080][ T7747] NILFS (loop1): invalid segment: Inconsistency found
[  141.402372][ T7747] NILFS (loop1): trying rollback from an earlier position
[  141.411785][ T7747] NILFS (loop1): recovery complete
[  141.420703][ T7748] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  141.528792][ T7739] loop2: detected capacity change from 0 to 32768
[  141.564346][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  141.570824][ T7739] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  141.617113][ T7739] XFS (loop2): Ending clean mount
[  141.736817][ T5993] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  141.879254][   T33] audit: type=1800 audit(1756967708.124:34): pid=7764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.750" name="bus" dev="overlay" ino=300 res=0 errno=0
[  141.975181][ T7759] loop1: detected capacity change from 0 to 32768
[  142.014186][ T7759] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  142.044739][ T7769] 9pnet: Unknown protocol version 9p20\++}
[  142.049388][ T7759] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  142.198114][ T7773] evm: overlay not supported
[  142.241682][ T7773] overlayfs: failed to get inode (-116)
[  142.246598][ T7773] overlayfs: failed to get inode (-116)
[  142.249130][ T7773] overlayfs: failed to get inode (-116)
[  142.251530][ T7773] overlayfs: failed to get inode (-116)
[  142.280521][ T5995] ocfs2: Unmounting device (7,1) on (node local)
[  142.881297][ T7775] loop2: detected capacity change from 0 to 32768
[  143.008619][ T7775] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  143.011227][ T7801] binder: BINDER_SET_CONTEXT_MGR already set
[  143.041037][ T7801] binder: 7800:7801 ioctl 4018620d 2000000002c0 returned -16
[  143.051364][ T7775] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  143.082353][ T7801] binder: 7800:7801 ioctl c0306201 200000000240 returned -11
[  143.122336][ T5993] ocfs2: Unmounting device (7,2) on (node local)
[  143.275846][ T7815] netlink: 28 bytes leftover after parsing attributes in process `syz.1.763'.
[  143.293452][ T1273] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  143.452806][ T7824] loop1: detected capacity change from 0 to 2048
[  143.453612][ T1273] usb 5-1: Using ep0 maxpacket: 32
[  143.460052][ T1273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  143.468566][ T1273] usb 5-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice= 9.75
[  143.474585][ T5976]  loop1: p3 p4 < >
[  143.476973][ T1273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.480111][ T1273] usb 5-1: Product: syz
[  143.481634][ T1273] usb 5-1: Manufacturer: syz
[  143.483723][ T5976] loop1: p3 size 16777216 extends beyond EOD, truncated
[  143.489123][ T1273] usb 5-1: SerialNumber: syz
[  143.500601][ T1273] usb 5-1: config 0 descriptor??
[  143.520194][ T7824]  loop1: p3 p4 < >
[  143.528390][ T7824] loop1: p3 size 16777216 extends beyond EOD, truncated
[  143.606377][ T5974] udevd[5974]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  143.668576][ T5974] udevd[5974]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  143.676131][ T5976] udevd[5976]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  143.738618][ T1273] usb 5-1: USB disconnect, device number 2
[  143.756003][ T5974] udevd[5974]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  143.768574][ T5976] udevd[5976]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  144.407508][ T7862] loop1: detected capacity change from 0 to 1024
[  144.426528][ T7862] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  144.430565][ T7862] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[  144.446893][ T7865] loop4: detected capacity change from 0 to 512
[  144.451358][ T7862] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  144.458222][ T7862] EXT4-fs (loop1): invalid journal inode
[  144.495120][ T7865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.519010][ T7865] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  144.598653][ T7865] EXT4-fs error (device loop4): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.4.775: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[  144.667949][ T7865] EXT4-fs error (device loop4): ext4_get_first_dir_block:3540: inode #12: comm syz.4.775: directory missing '.'
[  144.731062][ T7226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.144597][ T7879] loop1: detected capacity change from 0 to 32768
[  145.161320][ T7879] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  145.208350][ T7879] XFS (loop1): Ending clean mount
[  145.220134][ T7879] XFS (loop1): Quotacheck needed: Please wait.
[  145.274662][ T7879] XFS (loop1): Quotacheck: Done.
[  145.320050][ T5995] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  145.946854][ T7923] loop1: detected capacity change from 0 to 4096
[  145.972768][ T7926] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  146.002377][ T7923] overlayfs: upper fs does not support tmpfile.
[  146.007961][ T7923] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  146.010503][ T7923] overlayfs: failed to set xattr on upper
[  146.012665][ T7923] overlayfs: ...falling back to redirect_dir=nofollow.
[  146.015755][ T7923] overlayfs: ...falling back to index=off.
[  146.018410][ T7923] overlayfs: ...falling back to uuid=null.
[  146.056813][ T5995] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  146.059870][ T5995] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=12)
[  146.078904][ T5995] Remounting filesystem read-only
[  146.080960][ T5995] NILFS (loop1): error -5 truncating bmap (ino=12)
[  146.096417][ T5995] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  146.318878][ T7940] vlan2: entered promiscuous mode
[  146.324823][ T7940] vlan2: entered allmulticast mode
[  146.326847][ T7940] hsr_slave_1: entered allmulticast mode
[  146.335948][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.800'.
[  147.174350][ T7959] syz.2.807 uses obsolete (PF_INET,SOCK_PACKET)
[  147.370081][ T7962] loop4: detected capacity change from 0 to 2048
[  147.386424][ T7962] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  147.665513][ T7964] netlink: 'syz.4.809': attribute type 2 has an invalid length.
[  148.118825][ T7972] loop1: detected capacity change from 0 to 32768
[  148.130827][ T7984] netlink: 40 bytes leftover after parsing attributes in process `syz.4.819'.
[  148.131607][ T7972] bcachefs (/dev/loop1): error reading default superblock: Not a bcachefs superblock (got magic c68573f6-de0e-0000-0000-000048ba6d81)
[  148.148282][ T7972] bcachefs (/dev/loop1): error reading superblock: block size (0) smaller than device block size (512)
[  148.152802][ T7972] bcachefs: bch2_fs_get_tree() error: block_size_too_small
[  148.250734][   T33] audit: type=1326 audit(1756967714.494:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.4.821" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd40b8ebe9 code=0x7ffc0000
[  148.268672][   T33] audit: type=1326 audit(1756967714.494:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.4.821" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd40b8ebe9 code=0x7ffc0000
[  148.305855][   T33] audit: type=1326 audit(1756967714.514:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.4.821" exe="/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fbd40b8ebe9 code=0x7ffc0000
[  148.350857][   T33] audit: type=1326 audit(1756967714.514:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.4.821" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd40b8ebe9 code=0x7ffc0000
[  148.361509][   T33] audit: type=1326 audit(1756967714.514:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.4.821" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd40b8ebe9 code=0x7ffc0000
[  148.435875][ T7995] netlink: 9280 bytes leftover after parsing attributes in process `syz.4.823'.
[  149.857866][ T8039] loop4: detected capacity change from 0 to 512
[  149.927014][ T8039] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.840: bg 0: block 5: invalid block bitmap
[  149.936809][ T8041] net_ratelimit: 39 callbacks suppressed
[  149.936841][ T8041] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  149.960169][ T8039] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  149.973662][ T8039] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.840: invalid indirect mapped block 3 (level 2)
[  149.991493][ T8039] EXT4-fs (loop4): 2 truncates cleaned up
[  150.024864][ T8039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.303896][ T7226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.559699][ T6050] kernel read not supported for file /audio1 (pid: 6050 comm: kworker/1:4)
[  151.570517][ T8057] loop4: detected capacity change from 0 to 764
[  151.977608][ T8072] loop2: detected capacity change from 0 to 4096
[  152.130080][ T8065] loop4: detected capacity change from 0 to 32768
[  152.139421][ T8077] loop1: detected capacity change from 0 to 1024
[  152.220396][   T27] hfsplus: b-tree write err: -5, ino 4
[  152.223553][ T8065] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  152.386334][ T7226] ocfs2: Unmounting device (7,4) on (node local)
[  152.663469][ T8098] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  152.699074][ T8098] CIFS mount error: No usable UNC path provided in device string!
[  152.699074][ T8098] 
[  152.709548][ T8098] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  152.800321][ T8105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'.
[  152.878666][ T8107] netlink: 'syz.4.869': attribute type 10 has an invalid length.
[  152.916869][ T8107] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.924546][ T8107] bridge_slave_1: left allmulticast mode
[  152.928636][ T8107] bridge_slave_1: left promiscuous mode
[  152.931260][ T8107] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.959427][ T8107] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  153.022242][ T8118] netlink: 348 bytes leftover after parsing attributes in process `syz.4.876'.
[  153.303668][ T8128] input: syz1 as /devices/virtual/input/input10
[  153.776781][ T8134] mmap: syz.2.881 (8134) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  154.157332][ T8145] loop4: detected capacity change from 0 to 4096
[  154.225496][ T8152] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  154.276202][ T8145] NILFS (loop4): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed
[  154.709066][ T8159] loop2: detected capacity change from 0 to 8
[  154.926079][ T8159] SQUASHFS error: Unable to read inode 0x127
[  155.062846][ T8163] loop4: detected capacity change from 0 to 2048
[  155.084019][ T8163] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  156.019861][ T8168] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  156.473216][   T51] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  156.652513][   T51] usb 2-1: Using ep0 maxpacket: 32
[  156.674830][   T51] usb 2-1: config 0 has an invalid interface number: 16 but max is 0
[  156.689075][   T51] usb 2-1: config 0 has no interface number 0
[  156.692269][   T51] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  156.712005][   T51] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  156.745139][   T51] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[  156.758937][   T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.769802][   T51] usb 2-1: Product: syz
[  156.776512][   T51] usb 2-1: Manufacturer: syz
[  156.785032][   T51] usb 2-1: SerialNumber: syz
[  156.823121][   T51] usb 2-1: config 0 descriptor??
[  156.836928][ T8178] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  156.845493][ T8178] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  156.905006][   T51] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  157.123783][   T51] usb 2-1: USB disconnect, device number 12
[  157.233619][    T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  157.403370][    T9] usb 3-1: Using ep0 maxpacket: 16
[  157.415445][    T9] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  157.418719][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  157.442790][    T9] usb 3-1: config 0 has no interface number 0
[  157.455140][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  157.461247][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.479244][    T9] usb 3-1: Product: syz
[  157.481520][    T9] usb 3-1: Manufacturer: syz
[  157.486400][    T9] usb 3-1: SerialNumber: syz
[  157.507157][    T9] usb 3-1: config 0 descriptor??
[  157.524134][    T9] usb 3-1: Found UVC 0.00 device syz (046d:08d3)
[  157.526195][    T9] usb 3-1: No valid video chain found.
[  157.760019][    T9] usb 3-1: USB disconnect, device number 15
[  158.387496][ T8211] loop2: detected capacity change from 0 to 8
[  158.409808][ T8211] SQUASHFS error: Unable to read directory block [2c0:35]
[  158.451109][ T8204] loop4: detected capacity change from 0 to 32768
[  158.459415][ T8204] btrfs: Deprecated parameter 'usebackuproot'
[  158.461507][ T8204] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  158.489073][ T8204] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.909 (8204)
[  158.519227][ T8204] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  158.524438][ T8204] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  158.539000][ T8222] loop1: detected capacity change from 0 to 256
[  158.571448][   T29] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  158.580043][ T8204] BTRFS error (device loop4): failed to load root extent
[  158.583637][ T8204] BTRFS warning (device loop4): try to load backup roots slot 1
[  158.587043][ T2943] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  158.595588][ T8204] BTRFS warning (device loop4): couldn't read tree root
[  158.598480][ T8204] BTRFS warning (device loop4): try to load backup roots slot 2
[  158.604841][   T68] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  158.628469][ T8204] BTRFS warning (device loop4): couldn't read tree root
[  158.631302][ T8204] BTRFS warning (device loop4): try to load backup roots slot 3
[  158.640275][ T8233] loop2: detected capacity change from 0 to 22
[  158.651390][ T8204] BTRFS info (device loop4): rebuilding free space tree
[  158.693913][ T8233] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  158.705613][ T8233] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  158.712350][ T8204] BTRFS info (device loop4): checking UUID tree
[  158.725644][ T8204] BTRFS info (device loop4): setting nodatasum
[  158.728130][ T8204] BTRFS info (device loop4): setting nodatacow
[  158.773806][ T8204] BTRFS info (device loop4): enabling ssd optimizations
[  158.776615][ T8204] BTRFS info (device loop4): turning off barriers
[  158.779226][ T8204] BTRFS info (device loop4): turning on sync discard
[  158.794496][ T8204] BTRFS info (device loop4): enabling free space tree
[  158.805102][ T8204] BTRFS info (device loop4): force clearing of disk cache
[  158.818438][ T8204] BTRFS info (device loop4): trying to use backup root at mount time
[  158.821692][ T8204] BTRFS info (device loop4): max_inline set to 0
[  158.852615][ T8242] netlink: 64 bytes leftover after parsing attributes in process `syz.1.919'.
[  158.905957][ T8245] netlink: 'syz.1.920': attribute type 3 has an invalid length.
[  158.909039][ T8245] netlink: 'syz.1.920': attribute type 1 has an invalid length.
[  158.912650][ T8245] netlink: 216 bytes leftover after parsing attributes in process `syz.1.920'.
[  159.062798][ T8251] netlink: 64 bytes leftover after parsing attributes in process `syz.1.922'.
[  159.074711][ T7226] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  159.100616][ T8253] loop2: detected capacity change from 0 to 2048
[  159.110904][ T8253] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  159.488197][ T8263] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  159.490949][ T8263] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  159.508402][ T8263] vhci_hcd vhci_hcd.0: Device attached
[  159.746960][   T24] usb 35-1: new high-speed USB device number 2 using vhci_hcd
[  159.848967][ T8272] netlink: 132 bytes leftover after parsing attributes in process `syz.4.930'.
[  160.436713][ T8264] vhci_hcd: connection reset by peer
[  160.442646][   T12] vhci_hcd: stop threads
[  160.447836][   T12] vhci_hcd: release socket
[  160.450759][   T12] vhci_hcd: disconnect device
[  160.636510][  T792] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  160.793309][  T792] usb 5-1: Using ep0 maxpacket: 8
[  160.799609][  T792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  160.804336][  T792] usb 5-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  160.808165][  T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.814849][  T792] usb 5-1: config 0 descriptor??
[  161.227611][  T792] kye 0003:0458:5015.0003: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  161.231756][  T792] kye 0003:0458:5015.0003: item fetching failed at offset 0/2
[  161.235068][  T792] kye 0003:0458:5015.0003: parse failed
[  161.237102][  T792] kye 0003:0458:5015.0003: probe with driver kye failed with error -22
[  161.428357][ T1273] usb 5-1: USB disconnect, device number 3
[  162.423191][ T1273] usb 5-1: new low-speed USB device number 4 using dummy_hcd
[  162.587917][ T1273] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  162.598834][ T1273] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  162.619109][ T1273] usb 5-1: config 0 interface 0 has no altsetting 0
[  162.622103][ T1273] usb 5-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[  162.643229][ T1273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.659849][ T1273] usb 5-1: config 0 descriptor??
[  162.662626][ T8302] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  163.316750][ T1273] holtek_mouse 0003:04D9:A067.0004: unknown main item tag 0x0
[  163.319974][ T1273] holtek_mouse 0003:04D9:A067.0004: unknown main item tag 0x0
[  163.323166][ T1273] holtek_mouse 0003:04D9:A067.0004: unknown main item tag 0x0
[  163.326341][ T1273] holtek_mouse 0003:04D9:A067.0004: unknown main item tag 0x0
[  163.329589][ T1273] holtek_mouse 0003:04D9:A067.0004: unknown main item tag 0x0
[  163.332791][ T1273] holtek_mouse 0003:04D9:A067.0004: unknown main item tag 0x0
[  163.336102][ T1273] holtek_mouse 0003:04D9:A067.0004: unknown main item tag 0x0
[  163.339357][ T1273] holtek_mouse 0003:04D9:A067.0004: unknown main item tag 0x0
[  163.347744][ T1273] holtek_mouse 0003:04D9:A067.0004: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.4-1/input0
[  163.493832][   T51] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  163.542514][  T792] usb 5-1: USB disconnect, device number 4
[  163.611574][ T8333] loop2: detected capacity change from 0 to 4096
[  163.653836][   T51] usb 2-1: Using ep0 maxpacket: 8
[  163.657987][   T51] usb 2-1: config index 0 descriptor too short (expected 6427, got 27)
[  163.661186][   T51] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  163.677441][   T51] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  163.680999][   T51] usb 2-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0
[  163.693602][   T51] usb 2-1: Product: syz
[  163.695304][   T51] usb 2-1: Manufacturer: syz
[  163.714200][   T51] usb 2-1: config 0 descriptor??
[  163.926817][   T51] usb 2-1: USB disconnect, device number 13
[  164.453378][   T51] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  164.613574][   T51] usb 5-1: Using ep0 maxpacket: 8
[  164.635082][   T51] usb 5-1: unable to get BOS descriptor or descriptor too short
[  164.644697][   T51] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.649204][   T51] usb 5-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  164.690723][   T51] usb 5-1: config 1 interface 0 has no altsetting 0
[  164.710494][   T51] usb 5-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.40
[  164.715750][   T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.719139][   T33] audit: type=1326 audit(1756967730.964:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8354 comm="syz.2.967" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f5698ebe9 code=0x0
[  164.733536][   T51] usb 5-1: Product: syz
[  164.736096][   T51] usb 5-1: Manufacturer: syz
[  164.738090][   T51] usb 5-1: SerialNumber: syz
[  164.878002][ T8362] loop1: detected capacity change from 0 to 4096
[  164.882097][ T8362] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  164.901028][ T8362] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  164.911026][ T8362] ntfs3(loop1): ino=1a, mi_enum_attr
[  164.914135][ T8362] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[  164.933438][   T24] vhci_hcd: vhci_device speed not set
[  165.803519][ T6049] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  165.808940][   T51] hid (null): invalid report_count 58840
[  165.813539][   T51] uclogic 0003:28BD:0078.0005: interface is invalid, ignoring
[  165.960185][ T6049] usb 3-1: unable to get BOS descriptor or descriptor too short
[  165.985392][ T6049] usb 3-1: not running at top speed; connect to a high speed hub
[  165.992156][ T6049] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  165.999711][ T6049] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  166.019025][ T1273] usb 5-1: USB disconnect, device number 5
[  166.034274][ T6049] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  166.041398][ T6049] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.052057][ T6049] usb 3-1: Product: syz
[  166.054602][ T6049] usb 3-1: Manufacturer: syz
[  166.056476][ T6049] usb 3-1: SerialNumber: syz
[  166.282981][ T6049] usb 3-1: 0:2 : does not exist
[  166.304889][ T6049] usb 3-1: USB disconnect, device number 16
[  166.336515][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  166.590267][ T8387] netlink: 40 bytes leftover after parsing attributes in process `syz.4.981'.
[  166.803307][ T6049] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  166.878891][ T8389] loop4: detected capacity change from 0 to 32768
[  166.979324][ T6049] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  166.982878][ T6049] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.004250][ T6049] usb 2-1: config 0 descriptor??
[  167.008158][ T6049] gspca_main: spca508-2.14.0 probing 8086:0110
[  167.067497][ T8393] loop2: detected capacity change from 0 to 2048
[  167.115764][ T8393] hpfs: hpfs_map_sector(): read error
[  167.516153][ T8401] netlink: 'syz.2.984': attribute type 1 has an invalid length.
[  167.519346][ T8401] netlink: 244 bytes leftover after parsing attributes in process `syz.2.984'.
[  167.751398][ T6049] gspca_spca508: reg_read err -71
[  167.758687][ T6049] gspca_spca508: reg_read err -71
[  167.779869][ T6049] gspca_spca508: reg_read err -71
[  167.786532][ T6049] gspca_spca508: reg_read err -71
[  167.788933][ T6049] gspca_spca508: reg write: error -71
[  167.791049][ T6049] spca508 2-1:0.0: probe with driver spca508 failed with error -71
[  167.796605][ T6049] usb 2-1: USB disconnect, device number 14
[  168.065994][ T8414] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.993'.
[  168.176568][ T8418] loop1: detected capacity change from 0 to 64
[  168.180275][ T8417] netlink: 'syz.4.995': attribute type 4 has an invalid length.
[  168.607097][   T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  168.766634][   T24] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  168.769292][   T24] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  168.772039][   T24] usb 5-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config
[  168.794560][   T24] usb 5-1: config 220 has no interface number 2
[  168.798396][   T24] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  168.804843][   T24] usb 5-1: config 220 interface 0 has no altsetting 0
[  168.807127][   T24] usb 5-1: config 220 interface 76 has no altsetting 0
[  168.809396][   T24] usb 5-1: config 220 interface 1 has no altsetting 0
[  168.812689][ T8436] loop2: detected capacity change from 0 to 32768
[  168.813957][   T24] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  168.818277][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.820831][   T24] usb 5-1: Product: syz
[  168.822144][   T24] usb 5-1: Manufacturer: syz
[  168.825817][   T24] usb 5-1: SerialNumber: syz
[  168.836214][ T8436] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  168.870203][ T8436] XFS (loop2): Ending clean mount
[  168.900480][ T5993] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  169.067479][   T24] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  169.093807][   T24] usb 5-1: No valid video chain found.
[  169.095859][   T24] usb 5-1: selecting invalid altsetting 0
[  169.102880][   T24] usb 5-1: selecting invalid altsetting 0
[  169.122515][   T24] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  169.133341][   T24] usb 5-1: USB disconnect, device number 6
[  169.142171][ T8460] loop2: detected capacity change from 0 to 512
[  169.150692][ T5974] udevd[5974]: setting mode of /dev/bus/usb/005/006 to 020664 failed: No such file or directory
[  169.160853][ T8460] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  169.170483][ T5974] udevd[5974]: setting owner of /dev/bus/usb/005/006 to uid=0, gid=0 failed: No such file or directory
[  169.181971][ T8460] EXT4-fs (loop2): 1 truncate cleaned up
[  169.194176][ T8460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.228874][   T33] audit: type=1800 audit(1756967735.464:41): pid=8460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1009" name="file1" dev="loop2" ino=15 res=0 errno=0
[  169.332920][ T5993] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.372479][ T8466] binder: 8465:8466 ioctl c0306201 200000000080 returned -14
[  169.843754][ T8482] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  171.029103][ T8484] lo speed is unknown, defaulting to 1000
[  171.031523][ T8484] lo speed is unknown, defaulting to 1000
[  171.047040][ T8484] lo speed is unknown, defaulting to 1000
[  171.072072][ T8484] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  171.135102][ T8484] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  171.230005][ T8484] lo speed is unknown, defaulting to 1000
[  171.245511][ T8484] lo speed is unknown, defaulting to 1000
[  171.249994][ T8484] lo speed is unknown, defaulting to 1000
[  171.344292][ T8493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1023'.
[  171.352555][ T8493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1023'.
[  171.628867][ T8507] libceph: resolve '0.0' (ret=-3): failed
[  172.319441][ T8515] loop2: detected capacity change from 0 to 40427
[  172.350959][ T8515] F2FS-fs (loop2): build fault injection rate: 14
[  172.360860][ T8515] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[  172.371267][ T8515] F2FS-fs (loop2): invalid crc value
[  172.389512][    C1] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  172.402981][    C1] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  172.499367][ T8515] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  172.506551][ T8515] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  172.517391][ T8515] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  172.696729][    C0] F2FS-fs (loop2): inject write IO error in f2fs_write_end_io of blk_update_request+0x57e/0xe60
[  172.701167][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[  172.701187][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  172.701197][    C0] Call Trace:
[  172.701223][    C0]  <TASK>
[  172.701232][    C0]  dump_stack_lvl+0x189/0x250
[  172.701256][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  172.701273][    C0]  ? __pfx_queue_work_on+0x10/0x10
[  172.701296][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  172.701319][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  172.701345][    C0]  f2fs_handle_critical_error+0x37c/0x540
[  172.701371][    C0]  f2fs_write_end_io+0x886/0xb60
[  172.701396][    C0]  blk_update_request+0x57e/0xe60
[  172.701422][    C0]  blk_mq_end_request+0x3e/0x70
[  172.701438][    C0]  blk_done_softirq+0x10a/0x160
[  172.701455][    C0]  handle_softirqs+0x286/0x870
[  172.701472][    C0]  ? run_ksoftirqd+0x9b/0x100
[  172.701491][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  172.701507][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  172.701524][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  172.701537][    C0]  run_ksoftirqd+0x9b/0x100
[  172.701551][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  172.701572][    C0]  smpboot_thread_fn+0x542/0xa60
[  172.701587][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  172.701606][    C0]  kthread+0x711/0x8a0
[  172.701625][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  172.701637][    C0]  ? __pfx_kthread+0x10/0x10
[  172.701654][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  172.701673][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  172.701692][    C0]  ? __pfx_kthread+0x10/0x10
[  172.701710][    C0]  ret_from_fork+0x3fc/0x770
[  172.701728][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  172.701746][    C0]  ? __switch_to_asm+0x39/0x70
[  172.701763][    C0]  ? __switch_to_asm+0x33/0x70
[  172.701813][    C0]  ? __pfx_kthread+0x10/0x10
[  172.701832][    C0]  ret_from_fork_asm+0x1a/0x30
[  172.701861][    C0]  </TASK>
[  172.701868][    C0] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  172.774741][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[  172.774763][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  172.774800][    C0] Call Trace:
[  172.774809][    C0]  <TASK>
[  172.774816][    C0]  dump_stack_lvl+0x189/0x250
[  172.774842][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  172.774860][    C0]  ? __pfx_queue_work_on+0x10/0x10
[  172.774875][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  172.774894][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  172.774921][    C0]  f2fs_handle_critical_error+0x37c/0x540
[  172.774946][    C0]  f2fs_write_end_io+0x886/0xb60
[  172.774969][    C0]  blk_update_request+0x57e/0xe60
[  172.775015][    C0]  blk_mq_end_request+0x3e/0x70
[  172.775038][    C0]  blk_done_softirq+0x10a/0x160
[  172.775055][    C0]  handle_softirqs+0x286/0x870
[  172.775072][    C0]  ? run_ksoftirqd+0x9b/0x100
[  172.775090][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  172.775106][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  172.775121][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  172.775134][    C0]  run_ksoftirqd+0x9b/0x100
[  172.775149][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  172.775169][    C0]  smpboot_thread_fn+0x542/0xa60
[  172.775184][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  172.775203][    C0]  kthread+0x711/0x8a0
[  172.775223][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  172.775236][    C0]  ? __pfx_kthread+0x10/0x10
[  172.775253][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  172.775271][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  172.775287][    C0]  ? __pfx_kthread+0x10/0x10
[  172.775304][    C0]  ret_from_fork+0x3fc/0x770
[  172.775321][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  172.775340][    C0]  ? __switch_to_asm+0x39/0x70
[  172.775357][    C0]  ? __switch_to_asm+0x33/0x70
[  172.775373][    C0]  ? __pfx_kthread+0x10/0x10
[  172.775390][    C0]  ret_from_fork_asm+0x1a/0x30
[  172.775419][    C0]  </TASK>
[  172.775425][    C0] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  172.847030][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[  172.847054][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  172.847065][    C0] Call Trace:
[  172.847074][    C0]  <TASK>
[  172.847082][    C0]  dump_stack_lvl+0x189/0x250
[  172.847107][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  172.847124][    C0]  ? __pfx_queue_work_on+0x10/0x10
[  172.847138][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  172.847156][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  172.847182][    C0]  f2fs_handle_critical_error+0x37c/0x540
[  172.847206][    C0]  f2fs_write_end_io+0x886/0xb60
[  172.847230][    C0]  blk_update_request+0x57e/0xe60
[  172.847256][    C0]  blk_mq_end_request+0x3e/0x70
[  172.847273][    C0]  blk_done_softirq+0x10a/0x160
[  172.847290][    C0]  handle_softirqs+0x286/0x870
[  172.847307][    C0]  ? run_ksoftirqd+0x9b/0x100
[  172.847325][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  172.847341][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  172.847356][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  172.847368][    C0]  run_ksoftirqd+0x9b/0x100
[  172.847383][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  172.847403][    C0]  smpboot_thread_fn+0x542/0xa60
[  172.847417][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  172.847437][    C0]  kthread+0x711/0x8a0
[  172.847455][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  172.847468][    C0]  ? __pfx_kthread+0x10/0x10
[  172.847485][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  172.847502][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  172.847521][    C0]  ? __pfx_kthread+0x10/0x10
[  172.847537][    C0]  ret_from_fork+0x3fc/0x770
[  172.847553][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  172.847571][    C0]  ? __switch_to_asm+0x39/0x70
[  172.847587][    C0]  ? __switch_to_asm+0x33/0x70
[  172.847603][    C0]  ? __pfx_kthread+0x10/0x10
[  172.847619][    C0]  ret_from_fork_asm+0x1a/0x30
[  172.847647][    C0]  </TASK>
[  172.847653][    C0] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  172.921894][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[  172.921913][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  172.921923][    C0] Call Trace:
[  172.921932][    C0]  <TASK>
[  172.921941][    C0]  dump_stack_lvl+0x189/0x250
[  172.921966][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  172.921982][    C0]  ? __pfx_queue_work_on+0x10/0x10
[  172.921995][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  172.922022][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  172.922049][    C0]  f2fs_handle_critical_error+0x37c/0x540
[  172.922075][    C0]  f2fs_write_end_io+0x886/0xb60
[  172.922100][    C0]  blk_update_request+0x57e/0xe60
[  172.922126][    C0]  blk_mq_end_request+0x3e/0x70
[  172.922143][    C0]  blk_done_softirq+0x10a/0x160
[  172.922161][    C0]  handle_softirqs+0x286/0x870
[  172.922176][    C0]  ? run_ksoftirqd+0x9b/0x100
[  172.922195][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  172.922208][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  172.922223][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  172.922235][    C0]  run_ksoftirqd+0x9b/0x100
[  172.922251][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  172.922268][    C0]  smpboot_thread_fn+0x542/0xa60
[  172.922280][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  172.922297][    C0]  kthread+0x711/0x8a0
[  172.922312][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  172.922322][    C0]  ? __pfx_kthread+0x10/0x10
[  172.922338][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  172.922352][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  172.922367][    C0]  ? __pfx_kthread+0x10/0x10
[  172.922384][    C0]  ret_from_fork+0x3fc/0x770
[  172.922399][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  172.922415][    C0]  ? __switch_to_asm+0x39/0x70
[  172.922432][    C0]  ? __switch_to_asm+0x33/0x70
[  172.922447][    C0]  ? __pfx_kthread+0x10/0x10
[  172.922465][    C0]  ret_from_fork_asm+0x1a/0x30
[  172.922492][    C0]  </TASK>
[  172.922499][    C0] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  172.995294][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[  172.995318][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  172.995328][    C0] Call Trace:
[  172.995336][    C0]  <TASK>
[  172.995343][    C0]  dump_stack_lvl+0x189/0x250
[  172.995368][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  172.995385][    C0]  ? __pfx_queue_work_on+0x10/0x10
[  172.995400][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  172.995419][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  172.995445][    C0]  f2fs_handle_critical_error+0x37c/0x540
[  172.995474][    C0]  f2fs_write_end_io+0x886/0xb60
[  172.995499][    C0]  blk_update_request+0x57e/0xe60
[  172.995526][    C0]  blk_mq_end_request+0x3e/0x70
[  172.995543][    C0]  blk_done_softirq+0x10a/0x160
[  172.995560][    C0]  handle_softirqs+0x286/0x870
[  172.995577][    C0]  ? run_ksoftirqd+0x9b/0x100
[  172.995596][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  172.995612][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  172.995627][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  172.995639][    C0]  run_ksoftirqd+0x9b/0x100
[  172.995654][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  172.995674][    C0]  smpboot_thread_fn+0x542/0xa60
[  172.995689][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  172.995708][    C0]  kthread+0x711/0x8a0
[  172.995727][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  172.995740][    C0]  ? __pfx_kthread+0x10/0x10
[  172.995786][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  172.995805][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  172.995821][    C0]  ? __pfx_kthread+0x10/0x10
[  172.995836][    C0]  ret_from_fork+0x3fc/0x770
[  172.995852][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  172.995869][    C0]  ? __switch_to_asm+0x39/0x70
[  172.995886][    C0]  ? __switch_to_asm+0x33/0x70
[  172.995902][    C0]  ? __pfx_kthread+0x10/0x10
[  172.995918][    C0]  ret_from_fork_asm+0x1a/0x30
[  172.995947][    C0]  </TASK>
[  172.995953][    C0] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  173.063781][ T5993] F2FS-fs (loop2): do_checkpoint failed err:-5, stop checkpoint
[  173.615465][ T8544] loop1: detected capacity change from 0 to 164
[  174.025624][ T8566] loop2: detected capacity change from 0 to 4096
[  174.038774][ T8566] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  174.074148][ T8566] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  174.087218][ T8566] ntfs3(loop2): ino=19, mi_enum_attr
[  174.099812][ T8566] ntfs3(loop2): failed to convert "c46c" to default
[  174.121629][ T8566] ntfs3(loop2): ino=20, mi_enum_attr
[  174.191590][ T8580] loop2: detected capacity change from 0 to 256
[  174.196566][ T8580] exfat: Deprecated parameter 'namecase'
[  174.207484][ T8580] exfat: Deprecated parameter 'namecase'
[  174.221348][ T8580] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  174.306746][ T8583] loop2: detected capacity change from 0 to 764
[  174.322459][ T8583] Symlink component flag not implemented
[  174.328080][ T8583] Symlink component flag not implemented (7)
[  174.737783][ T8597] loop2: detected capacity change from 0 to 32768
[  174.755442][ T8597] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  174.773919][ T8597] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  174.784317][ T8597] XFS (loop2): Starting recovery (logdev: internal)
[  174.799605][ T8597] XFS (loop2): Ending recovery (logdev: internal)
[  174.828223][ T5993] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  175.151069][ T8609] loop2: detected capacity change from 0 to 16384
[  175.328653][ T8609] bcachefs (loop2): starting version 1.13: inode_has_child_snapshots opts=errors=continue,metadata_checksum=none,data_checksum=xxhash,erasure_code,grpquota,prjquota,norecovery,reconstruct_alloc,version_upgrade=none,nocow
[  175.328677][ T8609]   features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  175.348953][ T8609] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  175.355582][ T8609] bcachefs (loop2): invalid journal entry, version=1.13: inode_has_child_snapshots type=clock in superblock: bad size, fixing
[  175.366671][ T8609] bcachefs (loop2): recovering from clean shutdown, journal seq 18
[  175.371248][ T8609] bcachefs (loop2): dropping and reconstructing all alloc info
[  175.409771][ T8609] bcachefs (loop2): accounting_read... done
[  175.414617][ T8609] bcachefs (loop2): alloc_read... done
[  175.422611][ T8609] bcachefs (loop2): snapshots_read... done
[  175.425758][ T8628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1076'.
[  175.426177][ T8609] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean
[  175.433235][ T8609] bcachefs (loop2): reading quotas
[  175.444037][ T8609] bcachefs (loop2): quotas done
[  175.446948][ T8609] bcachefs (loop2): done starting filesystem
[  175.533903][ T5993] bcachefs (loop2): shutting down
[  175.595557][ T5993] bcachefs (loop2): shutdown complete
[  176.521790][ T8645] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1084'.
[  177.160312][ T8678] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1099'.
[  177.218192][ T8682] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1101'.
[  177.221981][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1101'.
[  177.228161][ T8682] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1101'.
[  177.232130][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1101'.
[  177.307265][ T8689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1104'.
[  177.359494][ T8693] syzkaller0: entered allmulticast mode
[  177.379094][ T8693] syzkaller0 (unregistering): left allmulticast mode
[  177.446067][ T8697] loop4: detected capacity change from 0 to 2048
[  177.458758][ T8697] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  177.471162][ T8698] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  177.484239][ T8700] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  177.513388][   T51] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  177.730073][ T8713] loop4: detected capacity change from 0 to 128
[  177.749520][ T8713] befs: (loop4): invalid magic header
[  178.094851][   T51] usb 3-1: config 0 has an invalid interface number: 117 but max is 0
[  178.097725][   T51] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  178.109396][   T51] usb 3-1: config 0 has no interface number 0
[  178.115081][   T51] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  178.121186][   T51] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  178.145109][   T51] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  178.149328][   T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.170891][   T51] usb 3-1: Product: syz
[  178.179932][   T51] usb 3-1: Manufacturer: syz
[  178.189870][   T51] usb 3-1: SerialNumber: syz
[  178.219899][   T51] usb 3-1: config 0 descriptor??
[  178.316458][ T6023] lo speed is unknown, defaulting to 1000
[  178.743254][ T6023] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  178.838943][ T8725] loop4: detected capacity change from 0 to 32768
[  178.852456][   T51] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.117/input/input11
[  178.890570][ T8725] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  178.905243][ T6023] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  178.909028][ T6023] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  178.912739][ T6023] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.943619][ T6023] usb 2-1: config 0 descriptor??
[  178.972869][ T7226] ocfs2: Unmounting device (7,4) on (node local)
[  179.058408][   T51] usb 3-1: USB disconnect, device number 17
[  179.157618][   T24] usb 2-1: USB disconnect, device number 15
[  179.246014][ T6023] IPVS: starting estimator thread 0...
[  179.343380][ T8732] IPVS: using max 53 ests per chain, 127200 per kthread
[  179.483130][ T8736] loop4: detected capacity change from 0 to 32768
[  179.493241][ T8736] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1124 (8736)
[  179.502700][ T8736] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  179.511422][ T8736] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  179.530275][ T8736] BTRFS info (device loop4): rebuilding free space tree
[  179.540077][ T8736] BTRFS info (device loop4): enabling ssd optimizations
[  179.542699][ T8736] BTRFS info (device loop4): using spread ssd allocation scheme
[  179.546670][ T8736] BTRFS info (device loop4): enabling free space tree
[  179.550005][ T8736] BTRFS info (device loop4): force clearing of disk cache
[  180.227641][ T7226] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  180.439576][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1132'.
[  180.442663][ T8773] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1132'.
[  180.767320][ T8783] netlink: 'syz.1.1137': attribute type 3 has an invalid length.
[  181.259509][ T8795] loop2: detected capacity change from 0 to 8
[  181.270373][ T8795] Major/Minor mismatch, older Squashfs 0.0 filesystems are unsupported
[  181.436880][ T8795] loop2: detected capacity change from 0 to 32768
[  181.491127][ T8795] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  181.552693][ T8795] XFS (loop2): Ending clean mount
[  181.558225][ T8795] XFS (loop2): Quotacheck needed: Please wait.
[  181.607417][ T8795] XFS (loop2): Quotacheck: Done.
[  182.925162][ T5993] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  182.988330][   T33] audit: type=1800 audit(1756967749.234:42): pid=8825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1150" name="/" dev="9p" ino=2 res=0 errno=0
[  183.017688][ T8825] netfs: Couldn't get user pages (rc=-14)
[  183.090779][ T6023] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  183.164403][ T8827] overlayfs: workdir and upperdir must be separate subtrees
[  183.375908][ T6023] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  183.379449][ T6023] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.385423][ T6023] usb 2-1: config 0 descriptor??
[  183.719650][ T6023] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  183.763433][ T6016] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  183.920184][ T6016] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  183.921270][ T6023] [drm:udl_init] *ERROR* Selecting channel failed
[  183.929752][ T6016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.932838][ T6016] usb 5-1: Product: syz
[  183.936850][ T6016] usb 5-1: Manufacturer: syz
[  183.938857][ T6016] usb 5-1: SerialNumber: syz
[  183.949569][ T6016] usb 5-1: config 0 descriptor??
[  183.951382][ T6023] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 3
[  183.956739][ T6023] [drm] Initialized udl on minor 3
[  183.969832][ T6023] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  183.979985][ T6023] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  183.995243][    T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  183.998929][ T6023] usb 2-1: USB disconnect, device number 16
[  184.004697][    T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  184.308504][ T8839] netlink: 452 bytes leftover after parsing attributes in process `syz.2.1156'.
[  184.362712][ T6016] usb 5-1: Firmware version (0.0) predates our first public release.
[  184.367472][ T6016] usb 5-1: Please update to version 0.2 or newer
[  184.371817][ T6016] usb 5-1: Firmware: build 
[  184.585355][ T6016] usb 5-1: USB disconnect, device number 7
[  184.764176][ T6050] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  184.949836][ T6050] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  184.953513][ T6050] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.966826][ T6050] usb 2-1: config 0 descriptor??
[  185.219729][ T6050] usb 2-1: Cannot read MAC address
[  185.222513][ T6050] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  185.248836][ T6050] usb 2-1: USB disconnect, device number 17
[  186.088910][ T8859] loop4: detected capacity change from 0 to 32768
[  186.137917][ T8859] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  186.144261][   T12] (kworker/u8:0,12,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[  186.161279][ T8859] 
[  186.162334][ T8859] ======================================================
[  186.165055][ T8859] WARNING: possible circular locking dependency detected
[  186.167756][ T8859] syzkaller #0 Not tainted
[  186.169671][ T8859] ------------------------------------------------------
[  186.173525][ T8859] syz.4.1164/8859 is trying to acquire lock:
[  186.175986][ T8859] ffff88811fddc3c0 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  186.181336][ T8859] 
[  186.181336][ T8859] but task is already holding lock:
[  186.184236][ T8859] ffff88811fdddd60 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: __ocfs2_change_file_space+0x760/0xe80
[  186.188493][ T8859] 
[  186.188493][ T8859] which lock already depends on the new lock.
[  186.188493][ T8859] 
[  186.192392][ T8859] 
[  186.192392][ T8859] the existing dependency chain (in reverse order) is:
[  186.195860][ T8859] 
[  186.195860][ T8859] -> #5 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  186.199270][ T8859]        lock_acquire+0x120/0x360
[  186.201260][ T8859]        down_write+0x96/0x1f0
[  186.203174][ T8859]        ocfs2_try_remove_refcount_tree+0xb6/0x320
[  186.205627][ T8859]        ocfs2_xattr_set+0x595/0x11f0
[  186.207764][ T8859]        ocfs2_set_acl+0x701/0x7b0
[  186.209774][ T8859]        ocfs2_iop_set_acl+0x1aa/0x2a0
[  186.211873][ T8859]        vfs_set_acl+0x887/0xb00
[  186.213856][ T8859]        filename_setxattr+0x2e0/0x600
[  186.215952][ T8859]        path_setxattrat+0x364/0x3a0
[  186.218034][ T8859]        __x64_sys_setxattr+0xbc/0xe0
[  186.220138][ T8859]        do_syscall_64+0xfa/0x3b0
[  186.222113][ T8859]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.224540][ T8859] 
[  186.224540][ T8859] -> #4 (&oi->ip_xattr_sem){++++}-{4:4}:
[  186.227541][ T8859]        lock_acquire+0x120/0x360
[  186.229516][ T8859]        down_read+0x46/0x2e0
[  186.231310][ T8859]        ocfs2_init_acl+0x2f9/0x720
[  186.233351][ T8859]        ocfs2_mknod+0x1321/0x2050
[  186.235364][ T8859]        ocfs2_create+0x1a5/0x440
[  186.237329][ T8859]        path_openat+0x14f4/0x3830
[  186.239352][ T8859]        do_filp_open+0x1fa/0x410
[  186.241361][ T8859]        do_sys_openat2+0x121/0x1c0
[  186.243334][ T8859]        __x64_sys_openat+0x138/0x170
[  186.245372][ T8859]        do_syscall_64+0xfa/0x3b0
[  186.247382][ T8859]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.249837][ T8859] 
[  186.249837][ T8859] -> #3 (jbd2_handle){++++}-{0:0}:
[  186.252647][ T8859]        lock_acquire+0x120/0x360
[  186.254655][ T8859]        start_this_handle+0x1fa7/0x21c0
[  186.256831][ T8859]        jbd2__journal_start+0x2c1/0x5b0
[  186.259042][ T8859]        jbd2_journal_start+0x2a/0x40
[  186.261167][ T8859]        ocfs2_start_trans+0x376/0x6d0
[  186.263292][ T8859]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  186.265661][ T8859]        ocfs2_dismount_volume+0x201/0x8d0
[  186.268059][ T8859]        generic_shutdown_super+0x135/0x2c0
[  186.270280][ T8859]        kill_block_super+0x44/0x90
[  186.272286][ T8859]        deactivate_locked_super+0xbc/0x130
[  186.274467][ T8859]        cleanup_mnt+0x425/0x4c0
[  186.276401][ T8859]        task_work_run+0x1d4/0x260
[  186.278650][ T8859]        exit_to_user_mode_loop+0xec/0x110
[  186.280895][ T8859]        do_syscall_64+0x2bd/0x3b0
[  186.282921][ T8859]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.286188][ T8859] 
[  186.286188][ T8859] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  186.289566][ T8859]        lock_acquire+0x120/0x360
[  186.291596][ T8859]        down_read+0x46/0x2e0
[  186.293425][ T8859]        ocfs2_start_trans+0x36a/0x6d0
[  186.295644][ T8859]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  186.298130][ T8859]        ocfs2_dismount_volume+0x201/0x8d0
[  186.300516][ T8859]        generic_shutdown_super+0x135/0x2c0
[  186.302887][ T8859]        kill_block_super+0x44/0x90
[  186.304971][ T8859]        deactivate_locked_super+0xbc/0x130
[  186.307276][ T8859]        cleanup_mnt+0x425/0x4c0
[  186.309188][ T8859]        task_work_run+0x1d4/0x260
[  186.311206][ T8859]        exit_to_user_mode_loop+0xec/0x110
[  186.312186][ T8869] loop2: detected capacity change from 0 to 32768
[  186.313525][ T8859]        do_syscall_64+0x2bd/0x3b0
[  186.313543][ T8859]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.313558][ T8859] 
[  186.313558][ T8859] -> #1 (sb_internal#2){.+.+}-{0:0}:
[  186.313589][ T8859]        lock_acquire+0x120/0x360
[  186.313609][ T8859]        ocfs2_start_trans+0x26b/0x6d0
[  186.313627][ T8859]        ocfs2_mknod+0xe93/0x2050
[  186.313660][ T8859]        ocfs2_create+0x1a5/0x440
[  186.313673][ T8859]        path_openat+0x14f4/0x3830
[  186.313691][ T8859]        do_filp_open+0x1fa/0x410
[  186.313705][ T8859]        do_sys_openat2+0x121/0x1c0
[  186.313719][ T8859]        __x64_sys_openat+0x138/0x170
[  186.313732][ T8859]        do_syscall_64+0xfa/0x3b0
[  186.313744][ T8859]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.327673][ T8869] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1168 (8869)
[  186.327935][ T8859] 
[  186.327935][ T8859] -> #0 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  186.353513][ T8859]        validate_chain+0xb9b/0x2140
[  186.355660][ T8859]        __lock_acquire+0xab9/0xd20
[  186.357721][ T8859]        lock_acquire+0x120/0x360
[  186.359729][ T8859]        down_write+0x96/0x1f0
[  186.361666][ T8859]        ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  186.364302][ T8859]        ocfs2_reserve_clusters_with_limit+0x1be/0xba0
[  186.367317][ T8859]        ocfs2_lock_allocators+0x2fa/0x5c0
[  186.369768][ T8859]        ocfs2_extend_allocation+0x39b/0x17a0
[  186.372163][ T8859]        ocfs2_allocate_unwritten_extents+0x2e9/0x7b0
[  186.375044][ T8859]        __ocfs2_change_file_space+0x901/0xe80
[  186.377446][ T8859]        ocfs2_fallocate+0x1f5/0x240
[  186.379572][ T8859]        vfs_fallocate+0x669/0x7e0
[  186.381631][ T8859]        __x64_sys_fallocate+0xc0/0x110
[  186.383802][ T8859]        do_syscall_64+0xfa/0x3b0
[  186.385689][ T8859]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.388196][ T8859] 
[  186.388196][ T8859] other info that might help us debug this:
[  186.388196][ T8859] 
[  186.392134][ T8859] Chain exists of:
[  186.392134][ T8859]   &ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE] --> &oi->ip_xattr_sem --> &ocfs2_file_ip_alloc_sem_key
[  186.392134][ T8859] 
[  186.398585][ T8859]  Possible unsafe locking scenario:
[  186.398585][ T8859] 
[  186.401499][ T8859]        CPU0                    CPU1
[  186.403553][ T8859]        ----                    ----
[  186.405604][ T8859]   lock(&ocfs2_file_ip_alloc_sem_key);
[  186.407713][ T8859]                                lock(&oi->ip_xattr_sem);
[  186.410443][ T8859]                                lock(&ocfs2_file_ip_alloc_sem_key);
[  186.413530][ T8859]   lock(&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]);
[  186.416379][ T8859] 
[  186.416379][ T8859]  *** DEADLOCK ***
[  186.416379][ T8859] 
[  186.419514][ T8859] 3 locks held by syz.4.1164/8859:
[  186.421524][ T8859]  #0: ffff888032eea428 (sb_writers#24){.+.+}-{0:0}, at: vfs_fallocate+0x5f0/0x7e0
[  186.425075][ T8859]  #1: ffff88811fdde0c0 (&sb->s_type->i_mutex_key#35){+.+.}-{4:4}, at: __ocfs2_change_file_space+0x1d8/0xe80
[  186.429476][ T8859]  #2: ffff88811fdddd60 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: __ocfs2_change_file_space+0x760/0xe80
[  186.433926][ T8859] 
[  186.433926][ T8859] stack backtrace:
[  186.436348][ T8859] CPU: 0 UID: 0 PID: 8859 Comm: syz.4.1164 Not tainted syzkaller #0 PREEMPT(full) 
[  186.436367][ T8859] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  186.436378][ T8859] Call Trace:
[  186.436387][ T8859]  <TASK>
[  186.436396][ T8859]  dump_stack_lvl+0x189/0x250
[  186.436446][ T8859]  ? __pfx_dump_stack_lvl+0x10/0x10
[  186.436465][ T8859]  ? __pfx__printk+0x10/0x10
[  186.436486][ T8859]  ? print_lock_name+0xde/0x100
[  186.436505][ T8859]  print_circular_bug+0x2ee/0x310
[  186.436522][ T8859]  check_noncircular+0x134/0x160
[  186.436540][ T8859]  validate_chain+0xb9b/0x2140
[  186.436555][ T8859]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  186.436579][ T8859]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  186.436603][ T8859]  __lock_acquire+0xab9/0xd20
[  186.436625][ T8859]  ? ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  186.436655][ T8859]  lock_acquire+0x120/0x360
[  186.436674][ T8859]  ? ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  186.436695][ T8859]  ? is_bpf_text_address+0x26/0x2b0
[  186.436717][ T8859]  ? kernel_text_address+0xa5/0xe0
[  186.436737][ T8859]  down_write+0x96/0x1f0
[  186.436750][ T8859]  ? ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  186.436770][ T8859]  ? __pfx_down_write+0x10/0x10
[  186.436783][ T8859]  ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  186.436806][ T8859]  ? check_noncircular+0xe0/0x160
[  186.436820][ T8859]  ? lockdep_unlock+0x89/0x120
[  186.436837][ T8859]  ? validate_chain+0x897/0x2140
[  186.436849][ T8859]  ? __pfx_ocfs2_reserve_local_alloc_bits+0x10/0x10
[  186.436869][ T8859]  ? do_syscall_64+0xfa/0x3b0
[  186.436888][ T8859]  ? __lock_acquire+0xab9/0xd20
[  186.436912][ T8859]  ? do_raw_spin_unlock+0x4d/0x240
[  186.436928][ T8859]  ? _raw_spin_unlock+0x28/0x50
[  186.436944][ T8859]  ? ocfs2_alloc_should_use_local+0x152/0x310
[  186.436964][ T8859]  ? ocfs2_reserve_clusters_with_limit+0x16b/0xba0
[  186.436981][ T8859]  ocfs2_reserve_clusters_with_limit+0x1be/0xba0
[  186.436999][ T8859]  ? __pfx_ocfs2_reserve_clusters_with_limit+0x10/0x10
[  186.437016][ T8859]  ? rcu_is_watching+0x15/0xb0
[  186.437030][ T8859]  ? ocfs2_num_free_extents+0x347/0x620
[  186.437045][ T8859]  ? __pfx_ocfs2_num_free_extents+0x10/0x10
[  186.437061][ T8859]  ? __pfx_ocfs2_read_blocks+0x10/0x10
[  186.437080][ T8859]  ocfs2_lock_allocators+0x2fa/0x5c0
[  186.437098][ T8859]  ? __pfx_ocfs2_lock_allocators+0x10/0x10
[  186.437114][ T8859]  ? ocfs2_read_inode_block+0x11d/0x190
[  186.437129][ T8859]  ? __pfx_ocfs2_read_inode_block+0x10/0x10
[  186.437146][ T8859]  ocfs2_extend_allocation+0x39b/0x17a0
[  186.437166][ T8859]  ? ocfs2_search_extent_list+0x1b7/0x220
[  186.437186][ T8859]  ? __pfx_ocfs2_get_clusters_nocache+0x10/0x10
[  186.437205][ T8859]  ? __pfx_ocfs2_extend_allocation+0x10/0x10
[  186.437223][ T8859]  ? ocfs2_read_inode_block+0x11d/0x190
[  186.437237][ T8859]  ? __pfx_ocfs2_read_inode_block+0x10/0x10
[  186.437253][ T8859]  ? __brelse+0x59/0xa0
[  186.437265][ T8859]  ? ocfs2_get_clusters+0x2b3/0xa70
[  186.437285][ T8859]  ? __pfx_ocfs2_journal_access_di+0x10/0x10
[  186.437302][ T8859]  ? __pfx_ocfs2_get_clusters+0x10/0x10
[  186.437321][ T8859]  ? __lock_acquire+0xab9/0xd20
[  186.437339][ T8859]  ocfs2_allocate_unwritten_extents+0x2e9/0x7b0
[  186.437352][ T8859]  ? __pfx_ocfs2_allocate_unwritten_extents+0x10/0x10
[  186.437365][ T8859]  ? inode_dio_wait+0x19e/0x240
[  186.437383][ T8859]  ? down_write+0x162/0x1f0
[  186.437396][ T8859]  ? __pfx_down_write+0x10/0x10
[  186.437411][ T8859]  ? do_raw_spin_unlock+0x4d/0x240
[  186.437475][ T8859]  __ocfs2_change_file_space+0x901/0xe80
[  186.437493][ T8859]  ? __pfx___ocfs2_change_file_space+0x10/0x10
[  186.437509][ T8859]  ? __lock_acquire+0xab9/0xd20
[  186.437534][ T8859]  ocfs2_fallocate+0x1f5/0x240
[  186.437549][ T8859]  vfs_fallocate+0x669/0x7e0
[  186.437565][ T8859]  ? __fget_files+0x2a/0x420
[  186.437577][ T8859]  ? __pfx_vfs_fallocate+0x10/0x10
[  186.437594][ T8859]  ? __fget_files+0x2a/0x420
[  186.437607][ T8859]  __x64_sys_fallocate+0xc0/0x110
[  186.437627][ T8859]  do_syscall_64+0xfa/0x3b0
[  186.437639][ T8859]  ? lockdep_hardirqs_on+0x9c/0x150
[  186.437665][ T8859]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.437679][ T8859]  ? exc_page_fault+0x9f/0xf0
[  186.437699][ T8859]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.437713][ T8859] RIP: 0033:0x7fbd40b8ebe9
[  186.437727][ T8859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  186.437740][ T8859] RSP: 002b:00007fbd41ab2038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[  186.437756][ T8859] RAX: ffffffffffffffda RBX: 00007fbd40dc5fa0 RCX: 00007fbd40b8ebe9
[  186.437767][ T8859] RDX: 0000000000007351 RSI: 0000000000000000 RDI: 0000000000000004
[  186.437777][ T8859] RBP: 00007fbd40c11e19 R08: 0000000000000000 R09: 0000000000000000
[  186.437786][ T8859] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000000
[  186.437795][ T8859] R13: 00007fbd40dc6038 R14: 00007fbd40dc5fa0 R15: 00007ffca2da96c8
[  186.437812][ T8859]  </TASK>
[  186.623455][ T8869] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  186.628312][ T8869] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  186.659764][ T8869] BTRFS info (device loop2): enabling free space tree
[  186.664994][ T8869] BTRFS info (device loop2): enabling auto defrag
[  186.668906][ T8869] BTRFS info (device loop2): force zlib compression, level 3
[  186.672960][ T8869] BTRFS info (device loop2): max_inline set to 0
[  186.701181][ T8869] BTRFS error (device loop2): target device  is invalid!
[  186.711774][ T5993] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  186.802778][ T7226] ocfs2: Unmounting device (7,4) on (node local)
[  193.965933][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  193.968918][ T1365] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
06:35:52  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000010fa RDI=00000000000010fb RBP=00000000000003f8 RSP=ffffc9000400e670
R8 =ffff888020e60237 R9 =1ffff110041cc046 R10=dffffc0000000000 R11=ffffffff854f3980
R12=dffffc0000000000 R13=ffffffff99afd8dc R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f39fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fbd41ab26c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2ff12ff8 CR3=0000000028a20000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffff0000000000 XMM01=0101010101010101 0101010000000000
XMM02=695f746e756f6d5f 7a79730032736667 XMM03=ffffffffffffffff 0000000000000000
XMM04=12649c002c303030 3030303030303030 XMM05=220237189d7a78d4 a93c95a2c653dbf1
XMM06=51a5f96e5e4b0832 c26f1c1613e430bb XMM07=0000000000000000 231c65032c2a2d2a
XMM08=0000000000000000 000000dbe8a3adfc XMM09=0000000000000000 00007fbd40c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000002 RBX=0000000000000001 RCX=ffffffff99abd303 RDX=0000000000000000
RSI=ffffffff8be33860 RDI=ffff888136640000 RBP=ffffc9000406f458 RSP=ffffc9000406f448
R8 =ffff88813fff89c7 R9 =1ffff11027fff138 R10=dffffc0000000000 R11=ffffed1027fff139
R12=dffffc0000000000 R13=1ffff9200080dee4 R14=ffff888136640000 R15=ffffc9000406f75c
RIP=ffffffff819e03fc RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f4f5789b6c0 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005572af9fe7e8 CR3=0000000106864000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f4f56a12e53
XMM06=0000000000000000 00007f4f56a12e4d XMM07=0000000000000000 00007f4f56a12e61
XMM08=0000000000000000 00007f4f56a12ee7 XMM09=0000000000000000 00007f4f56a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
