last executing test programs:

53.253846352s ago: executing program 2 (id=497):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, &(0x7f0000000580))

53.253721429s ago: executing program 2 (id=498):
lremovexattr(0x0, &(0x7f0000000100)=@known='system.posix_acl_access\x00')

53.174904338s ago: executing program 2 (id=499):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000003c0))

52.343353551s ago: executing program 2 (id=519):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0)

52.275014584s ago: executing program 2 (id=521):
r0 = socket(0x22, 0x2, 0x1)
bind$bt_hci(r0, &(0x7f0000000440)={0x1f, 0x3}, 0x6)

52.082113484s ago: executing program 2 (id=523):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x1)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x100})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2100)
shutdown(r0, 0x0)
write$cgroup_devices(r0, &(0x7f0000000000)={'a', ' *:* ', 'r\x00'}, 0x8)

51.987523201s ago: executing program 32 (id=523):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x1)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x100})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2100)
shutdown(r0, 0x0)
write$cgroup_devices(r0, &(0x7f0000000000)={'a', ' *:* ', 'r\x00'}, 0x8)

3.052196226s ago: executing program 0 (id=1039):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x202)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
execve(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)

2.48228726s ago: executing program 3 (id=1046):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r0, 0x8)
ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000880)={0x2d, 0x0, 0x8, 0xa, 0x0, 0x40})

2.402734442s ago: executing program 3 (id=1047):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x2d, &(0x7f0000000180)={&(0x7f0000000380)={0x54, r1, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x2, @empty=0x4000}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)

2.402488022s ago: executing program 3 (id=1048):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, <r3=>0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r3, r4, 0x3, 0x0, 0x0, 0x804, {0x6, 0x1, 0x3, 0x67, 0xf4b, 0x4, 0x2, 0x5, 0x412e, 0xe154, 0x1000, 0x7f, 0x403c, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}})

2.320815434s ago: executing program 3 (id=1049):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000100c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x10010)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000004080)='/sys/power/pm_wakeup_irq', 0x80000, 0x0)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)

2.233389941s ago: executing program 3 (id=1050):
openat$fb0(0xffffffffffffff9c, 0x0, 0x100, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r6, 0x9)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)

2.092924283s ago: executing program 0 (id=1051):
r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x8921)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)

2.092690539s ago: executing program 0 (id=1052):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000004)

2.012848184s ago: executing program 0 (id=1053):
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[{0x48, 0x1, 0x0, "4c3e4bbed2ea31145dcfedea84572d670c38a73614dbd8e3af774b92a52d35398cb42f459b02dfab59b4ca8cae2bc2a826"}], 0x48}}], 0x1, 0x1)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

1.947374953s ago: executing program 3 (id=1054):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x10)

1.785357859s ago: executing program 33 (id=1054):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x10)

435.737114ms ago: executing program 0 (id=1056):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000100)={0x0, 0x5, 0x577, {0x763039aa, 0x114}, 0x10, 0x5})

346.127898ms ago: executing program 0 (id=1057):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_usb_connect(0x2, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x6d, 0x53, 0xf1, 0x10, 0x2001, 0x331d, 0xbe57, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd, 0x1, 0x0, 0xff, 0xff, 0xff, 0x0, [@uac_as]}}]}}]}}, 0x0)

339.455166ms ago: executing program 1 (id=1058):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x602, r0}, 0x38)

178.311085ms ago: executing program 1 (id=1059):
syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x22d, &(0x7f0000000a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000240)={0x402a, 0x10100002000001, 0x0, 0x7})

102.695859ms ago: executing program 1 (id=1060):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @dev}}}, @ip_tos_u8={{0x11, 0x110}}], 0x38}, 0x0)

52.290112ms ago: executing program 1 (id=1061):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0)
close(r2)

266.158µs ago: executing program 1 (id=1062):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="c5dd22ba", 0x4}, {0x0}], 0x2, 0xf, 0x2a3)

0s ago: executing program 1 (id=1063):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "c4a8bb72"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0)

kernel console output (not intermixed with test programs):

orphan:347: Corrupt filesystem
[   74.209425][ T5996] EXT4-fs (loop2): 1 truncate cleaned up
[   74.212737][ T5996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.258356][ T5996] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   74.351813][ T5919] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.443700][ T5963] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   74.603330][ T5963] usb 1-1: Using ep0 maxpacket: 8
[   74.643777][ T5963] usb 1-1: config index 0 descriptor too short (expected 19222, got 18)
[   74.648236][ T5963] usb 1-1: config 28 has too many interfaces: 241, using maximum allowed: 32
[   74.651685][ T5963] usb 1-1: config 28 has 1 interface, different from the descriptor's value: 241
[   74.670942][ T5963] usb 1-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=62.0d
[   74.693287][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.698188][ T5963] usb 1-1: Product: syz
[   74.700003][ T5963] usb 1-1: Manufacturer: syz
[   74.701829][ T5963] usb 1-1: SerialNumber: syz
[   74.728129][ T6023] syzkaller1: tun_chr_ioctl cmd 1074025678
[   74.730683][ T6023] syzkaller1: group set to 0
[   74.841073][ T6029] netlink: 'syz.2.88': attribute type 6 has an invalid length.
[   74.853340][ T5214] Bluetooth: hci1: command tx timeout
[   74.922379][ T5950] usb 1-1: USB disconnect, device number 2
[   74.933671][ T5214] Bluetooth: hci0: command tx timeout
[   74.935416][ T5214] Bluetooth: hci2: command tx timeout
[   75.012397][ T6038] loop1: detected capacity change from 0 to 64
[   75.033980][ T6038] syz.1.93: attempt to access beyond end of device
[   75.033980][ T6038] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64
[   75.040002][ T6038] Buffer I/O error on dev loop1, logical block 134217734, async page read
[   75.076257][ T6038] Trying to free block not in datazone
[   75.511341][ T6062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.102'.
[   75.968683][ T6077] loop2: detected capacity change from 0 to 512
[   75.984807][ T6077] =======================================================
[   75.984807][ T6077] WARNING: The mand mount option has been deprecated and
[   75.984807][ T6077]          and is ignored by this kernel. Remove the mand
[   75.984807][ T6077]          option from the mount to silence this warning.
[   75.984807][ T6077] =======================================================
[   76.000894][ T6077] EXT4-fs: Ignoring removed bh option
[   76.002803][ T6077] EXT4-fs: Ignoring removed nomblk_io_submit option
[   76.010072][ T6077] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   76.017352][ T6077] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   76.020431][ T6077] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[   76.037934][ T6077] System zones: 0-1, 15-15, 18-18, 34-34
[   76.061319][ T6077] EXT4-fs (loop2): orphan cleanup on readonly fs
[   76.073146][ T6077] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[   76.080948][ T6077] EXT4-fs warning (device loop2): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   76.092898][ T6077] EXT4-fs (loop2): Cannot turn on quotas: error -22
[   76.097854][ T6077] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.109: bg 0: block 40: padding at end of block bitmap is not set
[   76.104960][ T6077] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   76.108173][ T6077] EXT4-fs (loop2): 1 truncate cleaned up
[   76.111058][ T6077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   76.121270][ T6077] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.109: bad symlink.
[   76.139002][ T5919] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.364965][ T6085] loop0: detected capacity change from 0 to 512
[   76.577770][ T6085] EXT4-fs warning (device loop0): ext4_xattr_inode_get:542: inode #11: comm syz.0.111: ea_inode file size=4 entry size=6
[   76.583694][ T6085] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   76.588330][ T6085] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.111: corrupted inode contents
[   76.595143][ T6085] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #15: comm syz.0.111: mark_inode_dirty error
[   76.599436][ T6085] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.111: corrupted inode contents
[   76.605479][ T6085] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #15: comm syz.0.111: mark_inode_dirty error
[   76.610771][ T6085] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #15: comm syz.0.111: mark inode dirty (error -117)
[   76.616044][ T6085] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117)
[   76.619487][ T6085] EXT4-fs (loop0): 1 orphan inode deleted
[   76.635573][ T6085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.941489][ T5918] Bluetooth: hci1: command tx timeout
[   77.023491][ T5918] Bluetooth: hci2: command tx timeout
[   77.023598][ T5214] Bluetooth: hci0: command tx timeout
[   77.040742][ T5910] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.533251][ T5815] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   77.684701][ T5815] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[   77.694906][ T5815] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[   77.699714][ T5815] usb 1-1: config 0 has no interfaces?
[   77.708163][ T5815] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[   77.711845][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.719593][ T5815] usb 1-1: config 0 descriptor??
[   77.945358][ T5963] usb 1-1: USB disconnect, device number 3
[   78.264456][ T6129] loop2: detected capacity change from 0 to 1024
[   78.267975][ T6129] EXT4-fs: Ignoring removed nomblk_io_submit option
[   78.291927][ T6129] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[   78.301504][ T6129] System zones: 0-1, 3-36
[   78.308416][ T6129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.338326][ T5919] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.429206][ T6134] loop2: detected capacity change from 0 to 1024
[   78.437482][ T6134] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled
[   78.460201][ T6134] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.472810][ T6134] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.132: missing EA_INODE flag
[   78.501838][ T6134] EXT4-fs (loop2): Remounting filesystem read-only
[   78.570129][ T5919] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.054976][ T5815] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   79.080589][ T5214] Bluetooth: hci1: command tx timeout
[   79.094694][ T5214] Bluetooth: hci2: command tx timeout
[   79.094725][ T5918] Bluetooth: hci0: command tx timeout
[   79.215904][ T5815] usb 2-1: unable to get BOS descriptor or descriptor too short
[   79.220655][ T5815] usb 2-1: config 4 has an invalid interface number: 180 but max is 0
[   79.224255][ T5815] usb 2-1: config 4 has no interface number 0
[   79.226884][ T5815] usb 2-1: config 4 interface 180 has no altsetting 0
[   79.234736][ T5815] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice=eb.29
[   79.239276][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.242686][ T5815] usb 2-1: Product: syz
[   79.244736][ T5815] usb 2-1: Manufacturer: syz
[   79.246699][ T5815] usb 2-1: SerialNumber: syz
[   79.477083][ T5815] qmi_wwan 2-1:4.180: probe with driver qmi_wwan failed with error -22
[   79.519452][ T5815] usb 2-1: USB disconnect, device number 2
[   79.560199][ T6158] loop2: detected capacity change from 0 to 4096
[   79.567000][ T6158] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[   79.604810][ T6158] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   79.632268][   T33] audit: type=1800 audit(1759217621.601:2): pid=6158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.141" name="file1" dev="loop2" ino=30 res=0 errno=0
[   79.788289][ T6168] loop2: detected capacity change from 0 to 512
[   79.799541][ T6168] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   79.806087][ T6168] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   79.812357][ T6168] EXT4-fs (loop2): 1 truncate cleaned up
[   79.816639][ T6168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.843151][   T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   79.857847][ T5919] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.960742][ T6175] Zero length message leads to an empty skb
[   79.998976][   T10] usb 1-1: Using ep0 maxpacket: 8
[   80.032785][   T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[   80.037739][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.041006][   T10] usb 1-1: Product: syz
[   80.042646][   T10] usb 1-1: Manufacturer: syz
[   80.048298][   T10] usb 1-1: SerialNumber: syz
[   80.055706][   T10] usb 1-1: config 0 descriptor??
[   80.273190][   T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[   80.403173][ T6003] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   80.555915][ T6003] usb 3-1: Using ep0 maxpacket: 8
[   80.561158][ T6003] usb 3-1: config 0 has an invalid interface number: 143 but max is 0
[   80.566179][ T6003] usb 3-1: config 0 has no interface number 0
[   80.568864][ T6003] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[   80.572620][ T6003] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.584282][ T6003] usb 3-1: config 0 descriptor??
[   80.816747][ T6003] viperboard 3-1:0.143: version 0.00 found at bus 003 address 002
[   80.830977][ T6003] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100
[   80.835220][ T6003] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5
[   80.844773][ T6003] usb 3-1: USB disconnect, device number 2
[   81.283976][   T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[   81.345777][  T791] cfg80211: failed to load regulatory.db
[   81.510785][  T791] usb 1-1: USB disconnect, device number 4
[   81.540327][ T6209] netlink: 'syz.1.163': attribute type 2 has an invalid length.
[   81.578089][ T6213] netlink: 16 bytes leftover after parsing attributes in process `syz.1.165'.
[   82.173710][ T6221] loop2: detected capacity change from 0 to 4096
[   82.207516][ T6223] loop0: detected capacity change from 0 to 512
[   82.231991][ T6221] ntfs3(loop2): ino=b, mi_enum_attr
[   82.239711][ T6221] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   82.257243][ T6221] ntfs3(loop2): Failed to load $Extend (-22).
[   82.259838][ T6221] ntfs3(loop2): Failed to initialize $Extend.
[   82.405107][ T6229] loop2: detected capacity change from 0 to 2048
[   82.442011][ T6229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.500128][ T5919] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.630822][ T6243] capability: warning: `syz.2.176' uses 32-bit capabilities (legacy support in use)
[   82.701425][ T6225] loop0: detected capacity change from 0 to 32768
[   82.712127][ T6225] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.169 (6225)
[   82.731086][ T6225] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   82.743753][ T6225] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   82.884786][ T5963] hid-generic 0005:0005:0008.0001: unknown main item tag 0x0
[   82.886559][ T6225] BTRFS info (device loop0): enabling ssd optimizations
[   82.893299][ T6225] BTRFS info (device loop0): enabling free space tree
[   82.898228][ T5963] hid-generic 0005:0005:0008.0001: item fetching failed at offset 1/2
[   82.903953][ T5963] hid-generic 0005:0005:0008.0001: probe with driver hid-generic failed with error -22
[   83.053190][ T5910] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   83.056401][ T6279] Illegal XDP return value 4294967274 on prog  (id 21) dev N/A, expect packet loss!
[   83.243441][ T6287] usb usb9: usbfs: process 6287 (syz.0.188) did not claim interface 0 before use
[   83.317720][ T6289] loop0: detected capacity change from 0 to 1024
[   83.349993][ T6289] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002]
[   83.360789][ T6289] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.388205][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.392254][ T6291] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.396758][ T6289] EXT4-fs: can't change dax mount option while remounting
[   83.417602][ T5910] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.511793][ T6291] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.521841][ T6291] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.632646][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.636791][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.641779][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.646625][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.678648][ T6291] syz.2.191 (6291) used greatest stack depth: 19864 bytes left
[   83.714701][ T6301] loop2: detected capacity change from 0 to 128
[   83.743227][ T6301] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000)
[   83.746771][ T6301] FAT-fs (loop2): Filesystem has been set read-only
[   83.752075][ T6301] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[   83.817840][ T6305] loop1: detected capacity change from 0 to 164
[   83.845226][ T6305] rock: directory entry would overflow storage
[   83.847899][ T6305] rock: sig=0x4f50, size=4, remaining=3
[   83.850294][ T6305] iso9660: Corrupted directory entry in block 5 of inode 1792
[   84.033204][  T791] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   84.203455][  T791] usb 3-1: Using ep0 maxpacket: 32
[   84.212196][  T791] usb 3-1: config 0 has an invalid interface number: 89 but max is 0
[   84.217287][  T791] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   84.225593][ T6325] process 'syz.0.206' launched './file1' with NULL argv: empty string added
[   84.225615][  T791] usb 3-1: config 0 has no interface number 0
[   84.234173][  T791] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0114, bcdDevice= 4.be
[   84.237598][  T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.246743][  T791] usb 3-1: Product: syz
[   84.257170][  T791] usb 3-1: Manufacturer: syz
[   84.258913][  T791] usb 3-1: SerialNumber: syz
[   84.268030][  T791] usb 3-1: config 0 descriptor??
[   84.274559][  T791] kvaser_usb 3-1:0.89: error -ENODEV: Cannot get usb endpoint(s)
[   84.288469][ T6330] loop0: detected capacity change from 0 to 256
[   84.300000][ T6330] exfat: Deprecated parameter 'utf8'
[   84.317845][ T6330] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6efbb19, utbl_chksum : 0xe619d30d)
[   84.432328][ T6338] loop1: detected capacity change from 0 to 8
[   84.440631][ T6338] MTD: Attempt to mount non-MTD device "/dev/loop1"
[   84.453702][ T6340] loop0: detected capacity change from 0 to 8
[   84.461649][ T6338] cramfs: bad data blocksize 4294934200
[   84.467091][ T6338] cramfs: bad data blocksize 4294934200
[   84.469562][   T33] audit: type=1800 audit(1759217626.441:3): pid=6338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.212" name="file1" dev="loop1" ino=33092 res=0 errno=0
[   84.482866][ T6340] SQUASHFS error: xz decompression failed, data probably corrupt
[   84.487263][ T6340] SQUASHFS error: Failed to read block 0x108: -5
[   84.487393][  T791] usb 3-1: USB disconnect, device number 3
[   84.489674][ T6340] SQUASHFS error: Unable to read metadata cache entry [106]
[   84.489695][ T6340] SQUASHFS error: Unable to read inode 0x11f
[   84.952013][ T6372] loop0: detected capacity change from 0 to 64
[   84.979299][ T6372] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[   85.119590][ T6381] loop1: detected capacity change from 0 to 2048
[   85.168759][ T6385] loop0: detected capacity change from 0 to 256
[   85.190969][ T6385] FAT-fs (loop0): Directory bread(block 64) failed
[   85.198389][ T6385] FAT-fs (loop0): Directory bread(block 65) failed
[   85.201669][ T6385] FAT-fs (loop0): Directory bread(block 66) failed
[   85.205526][ T6385] FAT-fs (loop0): Directory bread(block 67) failed
[   85.208411][ T6385] FAT-fs (loop0): Directory bread(block 68) failed
[   85.211263][ T6385] FAT-fs (loop0): Directory bread(block 69) failed
[   85.215998][ T6385] FAT-fs (loop0): Directory bread(block 70) failed
[   85.218271][ T6385] FAT-fs (loop0): Directory bread(block 71) failed
[   85.220695][ T6385] FAT-fs (loop0): Directory bread(block 72) failed
[   85.222855][ T6385] FAT-fs (loop0): Directory bread(block 73) failed
[   85.243246][ T6381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.271138][ T5913] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.379607][ T6391] input: syz0 as /devices/virtual/input/input4
[   85.773242][  T791] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   85.945800][  T791] usb 1-1: config 1 has an invalid descriptor of length 167, skipping remainder of the config
[   85.960366][  T791] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   85.967075][  T791] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   85.971831][  T791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   85.982893][  T791] usb 1-1: SerialNumber: syz
[   86.102873][ T6414] loop2: detected capacity change from 0 to 64
[   86.206697][  T791] usb 1-1: 0:2 : does not exist
[   86.253035][  T791] usb 1-1: USB disconnect, device number 5
[   86.319866][ T5911] udevd[5911]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   86.393725][ T6420] loop2: detected capacity change from 0 to 128
[   86.412895][ T6420] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   86.424659][ T6420] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   86.461904][ T5919] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   86.797027][  T791] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   86.972526][  T791] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   86.972551][  T791] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3
[   86.972653][  T791] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[   86.972668][  T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.019409][ T6429] Scaler: =================  START STATUS  =================
[   87.022574][ T6429] Scaler: ==================  END STATUS  ==================
[   87.055550][  T791] usb 3-1: config 0 descriptor??
[   87.373812][ T6431] Bluetooth: MGMT ver 1.23
[   87.509400][  T791] Bluetooth: Can't get version to change to load ram patch err
[   87.512716][  T791] Bluetooth: Loading patch file failed
[   87.519208][  T791] ath3k 3-1:0.0: probe with driver ath3k failed with error -71
[   87.538894][  T791] usb 3-1: USB disconnect, device number 4
[   87.621355][ T6431] loop0: detected capacity change from 0 to 4096
[   87.640667][ T6431] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[   87.677810][ T6431] ntfs3(loop0): ino=1a, mi_enum_attr
[   87.680047][ T6431] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   87.684615][ T6431] ntfs3(loop0): ino=1a, mi_enum_attr
[   87.686922][ T6431] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[   87.720907][ T6431] ntfs3(loop0): ino=5, "/" ntfs_readdir
[   88.438339][ T6466] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8)
[   88.470949][ T6463] loop2: detected capacity change from 0 to 2048
[   88.589262][ T6477] loop2: detected capacity change from 0 to 256
[   88.654783][ T6481] loop0: detected capacity change from 0 to 512
[   88.658115][ T6481] EXT4-fs: Ignoring removed orlov option
[   88.661911][ T6481] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   88.681877][ T6481] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   88.696371][ T6481] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.268: corrupted in-inode xattr: e_value size too large
[   88.703213][ T6481] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.268: couldn't read orphan inode 15 (err -117)
[   88.717020][ T6481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.743122][  T791] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   88.746582][ T5910] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.847812][ T6491] loop2: detected capacity change from 0 to 1764
[   88.900436][  T791] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   88.904852][ T6494] syz_tun: entered promiscuous mode
[   88.904919][ T6494] vlan2: entered promiscuous mode
[   88.910406][  T791] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.916248][  T791] usb 2-1: config 0 interface 0 has no altsetting 0
[   88.919054][  T791] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00
[   88.923901][  T791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.935731][  T791] usb 2-1: config 0 descriptor??
[   89.075998][ T6502] usb usb8: usbfs: process 6502 (syz.0.278) did not claim interface 0 before use
[   89.358606][  T791] lenovo 0003:17EF:60EE.0002: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.1-1/input0
[   89.544770][  T791] lenovo 0003:17EF:60EE.0002: Failed to switch middle button: -71
[   89.551576][  T791] lenovo 0003:17EF:60EE.0002: Fn-lock setting failed: -71
[   89.562365][  T791] lenovo 0003:17EF:60EE.0002: Sensitivity setting failed: -71
[   89.582077][  T791] usb 2-1: USB disconnect, device number 3
[   89.655865][ T6539] atomic_op ffff888032072998 conn xmit_atomic 0000000000000000
[   89.689560][ T6541] netlink: 2 bytes leftover after parsing attributes in process `syz.2.295'.
[   89.848133][ T6547] netlink: 16 bytes leftover after parsing attributes in process `syz.0.298'.
[   89.851762][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.298'.
[   89.876915][ T6549] loop2: detected capacity change from 0 to 2048
[   89.882940][ T6549] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=66359, location=66359
[   89.890203][ T6549] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   90.483170][   T47] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   90.643158][   T47] usb 3-1: Using ep0 maxpacket: 16
[   90.647331][   T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   90.651506][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   90.656131][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   90.660379][   T47] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   90.664557][   T47] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   90.671489][   T47] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   90.675323][   T47] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   90.678818][   T47] usb 3-1: Manufacturer: syz
[   90.683788][   T47] usb 3-1: config 0 descriptor??
[   90.934102][   T47] rc_core: IR keymap rc-hauppauge not found
[   90.936621][   T47] Registered IR keymap rc-empty
[   90.938982][   T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   90.953118][   T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   90.975079][   T47] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[   90.981668][   T47] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5
[   91.017897][   T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   91.032172][ T6577] loop0: detected capacity change from 0 to 32768
[   91.042294][   T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   91.063568][   T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   91.073316][ T6577] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   91.083143][   T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   91.095214][ T6577] XFS (loop0): Ending clean mount
[   91.103821][   T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   91.105966][ T6577] XFS (loop0): Quotacheck needed: Please wait.
[   91.123166][   T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   91.135442][ T6577] XFS (loop0): Quotacheck: Done.
[   91.143128][   T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   91.163948][   T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   91.183762][   T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   91.185728][ T5910] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   91.204154][   T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   91.230475][   T47] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[   91.238141][   T47] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[   91.368032][   T47] usb 3-1: USB disconnect, device number 5
[   91.395077][ T6299] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   91.555113][ T6299] usb 2-1: config 0 has an invalid interface number: 120 but max is 0
[   91.558573][ T6299] usb 2-1: config 0 has no interface number 0
[   91.571879][ T6299] usb 2-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   91.588472][ T6299] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   91.592718][ T6299] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[   91.597810][ T6299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.609142][ T6299] usb 2-1: config 0 descriptor??
[   91.615640][ T6299] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input6
[   91.711120][ T6613] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   91.797295][ T6619] loop0: detected capacity change from 0 to 512
[   91.800187][ T6619] EXT4-fs: Ignoring removed nomblk_io_submit option
[   91.805924][ T6619] EXT4-fs: Mount option(s) incompatible with ext3
[   91.815031][ T5815] usb 2-1: USB disconnect, device number 4
[   91.827420][ T6619] gfs2: Unexpected value for 'barrier'
[   92.000802][ T6631] loop0: detected capacity change from 0 to 136
[   92.091951][ T6635] loop2: detected capacity change from 0 to 512
[   92.097659][ T6635] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[   92.982429][ T5815] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   93.081281][ T6659] loop1: detected capacity change from 0 to 4096
[   93.116344][ T6659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.133141][ T5815] usb 1-1: Using ep0 maxpacket: 16
[   93.138092][ T5815] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   93.141794][ T5815] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   93.156879][ T6659] EXT4-fs error (device loop1): ext4_get_first_dir_block:3549: inode #12: block 80: comm syz.1.340: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[   93.165828][ T5815] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   93.171766][ T6659] EXT4-fs (loop1): Remounting filesystem read-only
[   93.175824][ T5815] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   93.179600][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.182922][ T5815] usb 1-1: Product: syz
[   93.185789][ T5815] usb 1-1: Manufacturer: syz
[   93.187752][ T5815] usb 1-1: SerialNumber: syz
[   93.228903][ T5913] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.363183][  T791] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   93.563771][   T33] audit: type=1400 audit(1759217635.521:4): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6664 comm="syz.1.342"
[   93.923870][ T5815] usb 1-1: 0:2 : does not exist
[   93.943183][  T791] usb 3-1: Using ep0 maxpacket: 8
[   93.947994][  T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[   93.952671][  T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   93.957396][  T791] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   93.961772][  T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[   93.966813][  T791] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[   93.971042][  T791] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[   93.974944][  T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.982006][  T791] usb 3-1: config 0 descriptor??
[   93.986045][ T6663] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   94.543183][ T5815] usb 1-1: USB disconnect, device number 6
[   94.600168][  T791] usb 3-1: USB disconnect, device number 6
[   94.601669][ T5918] Bluetooth: hci3: Opcode 0x0c03 failed: -19
[   95.353184][  T791] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   95.459969][ T6696] loop2: detected capacity change from 0 to 32768
[   95.470603][ T6696] xfs: Unknown parameter 'attr2'
[   95.513182][  T791] usb 1-1: Using ep0 maxpacket: 8
[   95.524267][  T791] usb 1-1: config 0 has an invalid interface number: 186 but max is 0
[   95.527692][  T791] usb 1-1: config 0 has no interface number 0
[   95.530278][  T791] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   95.553649][  T791] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[   95.563295][  T791] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[   95.567533][  T791] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[   95.586306][  T791] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[   95.589565][  T791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.603583][  T791] usb 1-1: Product: syz
[   95.605582][  T791] usb 1-1: Manufacturer: syz
[   95.607373][  T791] usb 1-1: SerialNumber: syz
[   95.615192][  T791] usb 1-1: config 0 descriptor??
[   95.717984][ T6698] loop1: detected capacity change from 0 to 32768
[   95.727362][ T6698] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.356 (6698)
[   95.739557][ T6698] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   95.743833][ T6698] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   95.782377][ T6698] BTRFS info (device loop1): enabling ssd optimizations
[   95.787905][ T6698] BTRFS info (device loop1): enabling free space tree
[   95.793347][ T5963] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[   95.837761][  T791] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0
[   95.841871][ T5913] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   95.847247][  T791] usb 1-1: USB disconnect, device number 7
[   95.946280][ T5963] usb 3-1: unable to get BOS descriptor or descriptor too short
[   95.950067][ T5963] usb 3-1: not running at top speed; connect to a high speed hub
[   95.954837][ T5963] usb 3-1: config 1 has an invalid descriptor of length 157, skipping remainder of the config
[   95.962624][ T5963] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[   95.968848][ T6718] loop1: detected capacity change from 0 to 512
[   95.972339][ T5963] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   95.979526][ T6718] EXT4-fs (loop1): Test dummy encryption mode enabled
[   95.982194][ T6718] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   95.994164][ T6718] EXT4-fs (loop1): 1 truncate cleaned up
[   95.998268][ T6718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.008118][ T5963] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   96.012488][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.019018][ T5963] usb 3-1: SerialNumber: syz
[   96.078645][ T5913] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.236790][ T5963] cdc_ncm 3-1:1.0: invalid descriptor buffer length
[   96.239531][ T5963] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[   96.245806][ T5963] cdc_ncm 3-1:1.0: bind() failure
[   96.262052][ T5963] usb 3-1: USB disconnect, device number 7
[   96.417367][ T6734] loop0: detected capacity change from 0 to 4096
[   96.428333][ T6736] loop1: detected capacity change from 0 to 512
[   96.432874][ T6736] FAT-fs (loop1): bogus sectors per cluster 0
[   96.443095][ T6736] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code
[   96.446869][ T6736] FAT-fs (loop1): Can't find a valid FAT filesystem
[   96.932623][ T6744] loop0: detected capacity change from 0 to 32768
[   96.945878][ T6744] xfs: Unknown parameter 'ikeep'
[   97.270475][ T6768] loop0: detected capacity change from 0 to 256
[   97.281032][ T6768] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   97.300984][ T6768] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[   97.309020][ T6750] loop2: detected capacity change from 0 to 40427
[   97.337126][ T6750] F2FS-fs (loop2): invalid crc value
[   97.346144][ T6768] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62dd34a, utbl_chksum : 0xe619d30d)
[   97.398467][ T6750] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   97.417827][ T6750] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   97.446587][ T6779] loop1: detected capacity change from 0 to 16
[   97.471964][ T6779] erofs (device loop1): mounted with root inode @ nid 36.
[   97.622462][ T6790] netlink: 24 bytes leftover after parsing attributes in process `syz.1.392'.
[   97.696798][ T6793] loop1: detected capacity change from 0 to 4096
[   97.715810][ T6793] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[   97.725097][ T6794] evm: overlay not supported
[   98.403057][ T6299] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   98.442827][ T6812] loop2: detected capacity change from 0 to 256
[   98.458756][ T6812] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[   98.482796][   T33] audit: type=1800 audit(1759217640.451:5): pid=6812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.401" name="file1" dev="loop2" ino=1048617 res=0 errno=0
[   98.546808][ T6816] loop2: detected capacity change from 0 to 64
[   98.560093][ T6299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.572890][ T6299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 1024
[   98.581785][ T6299] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0a31, bcdDevice= 0.00
[   98.588933][ T6299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.596677][ T6299] usb 1-1: config 0 descriptor??
[   98.600199][ T6804] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   98.681894][ T6820] loop2: detected capacity change from 0 to 1024
[   98.710360][ T6820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.714835][ T6820] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.791117][ T5919] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.932841][ T6833] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.988503][ T6835] loop2: detected capacity change from 0 to 16
[   99.002500][ T6835] erofs (device loop2): mounted with root inode @ nid 36.
[   99.018718][ T6835] syz.2.410: attempt to access beyond end of device
[   99.018718][ T6835] loop2: rw=0, sector=48, nr_sectors = 16 limit=16
[   99.030288][ T6835] erofs (device loop2): read error -5 @ 43 of nid 36
[   99.530930][ T6299] hid-corsair-void 0003:1B1C:0A31.0003: hidraw0: USB HID v0.00 Device [HID 1b1c:0a31] on usb-dummy_hcd.0-1/input0
[   99.550196][ T6299] usb 1-1: USB disconnect, device number 8
[  100.115610][   T33] audit: type=1326 audit(1759217642.091:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6851 comm="syz.1.418" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfcf8ec29 code=0x7ffc0000
[  100.143798][   T33] audit: type=1326 audit(1759217642.091:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6851 comm="syz.1.418" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5dfcf8ec29 code=0x7ffc0000
[  100.160322][   T33] audit: type=1326 audit(1759217642.091:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6851 comm="syz.1.418" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfcf8ec29 code=0x7ffc0000
[  100.177956][   T33] audit: type=1326 audit(1759217642.091:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6851 comm="syz.1.418" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfcf8ec29 code=0x7ffc0000
[  100.218201][   T33] audit: type=1326 audit(1759217642.091:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6851 comm="syz.1.418" exe="/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5dfcf8ec29 code=0x7ffc0000
[  100.239511][   T33] audit: type=1326 audit(1759217642.091:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6851 comm="syz.1.418" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfcf8ec29 code=0x7ffc0000
[  100.248878][   T33] audit: type=1326 audit(1759217642.091:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6851 comm="syz.1.418" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfcf8ec29 code=0x7ffc0000
[  100.269819][   T33] audit: type=1326 audit(1759217642.091:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6851 comm="syz.1.418" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5dfcf8ec29 code=0x7ffc0000
[  100.279819][   T33] audit: type=1326 audit(1759217642.091:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6851 comm="syz.1.418" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfcf8ec29 code=0x7ffc0000
[  100.291938][ T6864] loop2: detected capacity change from 0 to 256
[  100.296244][   T33] audit: type=1326 audit(1759217642.091:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6851 comm="syz.1.418" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfcf8ec29 code=0x7ffc0000
[  100.312697][ T6864] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  100.318040][ T6864] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  100.336888][ T6864] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  100.816743][ T6884] capability: warning: `syz.1.431' uses deprecated v2 capabilities in a way that may be insecure
[  101.103865][ T6890] loop1: detected capacity change from 0 to 512
[  101.110561][ T6890] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  101.144488][ T6890] EXT4-fs (loop1): 1 truncate cleaned up
[  101.178950][ T6890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.465858][ T5913] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.288821][    T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  102.482527][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  102.489073][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 15
[  102.497294][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  102.500239][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  102.506222][    T9] usb 3-1: SerialNumber: syz
[  102.530703][    T9] cdc_ether 3-1:1.0: invalid descriptor buffer length
[  102.537839][    T9] usb 3-1: bad CDC descriptors
[  102.749429][ T5963] usb 3-1: USB disconnect, device number 8
[  102.762608][ T6916] loop1: detected capacity change from 0 to 32768
[  102.776243][ T6916] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.444 (6916)
[  102.831590][ T6916] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  102.839466][ T6916] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  102.971263][ T6916] BTRFS info (device loop1): enabling ssd optimizations
[  102.983105][ T6916] BTRFS info (device loop1): enabling free space tree
[  103.034175][ T5913] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  103.352334][ T6951] loop2: detected capacity change from 0 to 512
[  103.358712][ T6951] EXT4-fs: Ignoring removed nomblk_io_submit option
[  103.365472][ T6951] EXT4-fs (loop2): Test dummy encryption mode enabled
[  103.369985][ T6951] EXT4-fs (loop2): 1 truncate cleaned up
[  103.372680][ T6951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.433112][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  103.483608][ T6955] netlink: 212264 bytes leftover after parsing attributes in process `syz.0.451'.
[  103.873088][    T9] usb 2-1: Using ep0 maxpacket: 8
[  103.887040][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  103.892275][    T9] usb 2-1: config 0 has no interfaces?
[  103.903784][    T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=1240, bcdDevice= 0.3c
[  103.907616][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.910829][    T9] usb 2-1: Product: syz
[  103.915668][    T9] usb 2-1: Manufacturer: syz
[  103.917651][    T9] usb 2-1: SerialNumber: syz
[  103.921745][    T9] apple-mfi-fastcharge 2-1: config 0 descriptor??
[  104.151292][    T9] apple-mfi-fastcharge 2-1: USB disconnect, device number 5
[  104.289153][ T5919] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.593337][ T5963] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  104.748182][ T5963] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  104.752010][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.777822][ T5963] usb 3-1: Product: syz
[  104.779721][ T5963] usb 3-1: Manufacturer: syz
[  104.781624][ T5963] usb 3-1: SerialNumber: syz
[  104.786678][ T5963] usb 3-1: config 0 descriptor??
[  104.799011][ T5963] gspca_main: sunplus-2.14.0 probing 055f:c230
[  105.196485][ T7002] tipc: Started in network mode
[  105.198763][ T7002] tipc: Node identity e0000002, cluster identity 4711
[  105.201693][ T7002] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  105.374036][ T7011] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.380320][ T7011] bond0: (slave rose0): Enslaving as an active interface with an up link
[  105.442820][    T9] usb 3-1: USB disconnect, device number 9
[  105.497707][ T7019] loop1: detected capacity change from 0 to 512
[  105.515551][ T7019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.522646][ T7019] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  105.541857][ T5913] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.991664][ T7046] warning: `syz.2.483' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  106.251034][ T7052] loop2: detected capacity change from 0 to 32768
[  106.276053][ T7052] (syz.2.486,7052,1):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  106.279623][ T7052] (syz.2.486,7052,1):ocfs2_read_locked_inode:597 ERROR: status = -12
[  106.283644][ T7052] (syz.2.486,7052,1):_ocfs2_get_system_file_inode:144 ERROR: status = -12
[  106.287605][ T7052] (syz.2.486,7052,1):ocfs2_init_local_system_inodes:496 ERROR: status=-22, sysfile=8, slot=0
[  106.291797][ T7052] (syz.2.486,7052,1):ocfs2_init_local_system_inodes:505 ERROR: status = -22
[  106.297218][ T7052] (syz.2.486,7052,1):ocfs2_mount_volume:1758 ERROR: status = -22
[  106.301781][ T7052] (syz.2.486,7052,1):ocfs2_fill_super:1177 ERROR: status = -22
[  106.544144][ T7059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.489'.
[  106.637648][   T33] kauditd_printk_skb: 6 callbacks suppressed
[  106.637661][   T33] audit: type=1800 audit(1759217648.611:22): pid=7063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.491" name="bus" dev="overlay" ino=802 res=0 errno=0
[  106.650361][ T7065] loop2: detected capacity change from 0 to 128
[  106.681482][ T7065] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  106.689260][ T7065] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  106.706486][ T7067] netlink: 'syz.1.493': attribute type 3 has an invalid length.
[  106.762445][ T5815] IPVS: starting estimator thread 0...
[  106.883391][ T7070] IPVS: using max 57 ests per chain, 136800 per kthread
[  106.950354][ T7085] netlink: 40 bytes leftover after parsing attributes in process `syz.1.500'.
[  106.973889][ T7087] loop1: detected capacity change from 0 to 128
[  106.980510][ T7087] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  106.985028][ T7087] System zones: 1-3, 19-19, 35-36
[  106.988348][ T7087] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  106.994407][ T7087] ext4 filesystem being mounted at /156/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  107.007656][ T7087] EXT4-fs warning (device loop1): ext4_group_add:1736: No reserved GDT blocks, can't resize
[  107.027287][ T5913] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  107.052090][ T7090] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621
[  107.342723][ T7105] syz.1.509 uses obsolete (PF_INET,SOCK_PACKET)
[  107.680089][ T7120] loop0: detected capacity change from 0 to 128
[  108.013195][ T5815] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  108.093124][  T791] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  108.165547][ T5815] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.170118][ T5815] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.191841][ T5815] usb 2-1: config 0 interface 0 has no altsetting 0
[  108.196713][ T5815] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[  108.200581][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.234072][ T5815] usb 2-1: config 0 descriptor??
[  108.255654][  T791] usb 1-1: config 0 has an invalid interface number: 113 but max is 0
[  108.259156][  T791] usb 1-1: config 0 has no interface number 0
[  108.261827][  T791] usb 1-1: config 0 interface 113 has no altsetting 0
[  108.268315][ T5918] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  108.272601][ T5918] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  108.276869][ T5918] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  108.285136][ T5918] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  108.288223][ T5918] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  108.288395][  T791] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  108.300666][  T791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.305558][  T791] usb 1-1: Product: syz
[  108.307168][  T791] usb 1-1: Manufacturer: syz
[  108.308792][  T791] usb 1-1: SerialNumber: syz
[  108.313636][   T12] bridge_slave_1: left allmulticast mode
[  108.315656][   T12] bridge_slave_1: left promiscuous mode
[  108.326043][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.328527][  T791] usb 1-1: config 0 descriptor??
[  108.333287][   T12] bridge_slave_0: left allmulticast mode
[  108.335341][   T12] bridge_slave_0: left promiscuous mode
[  108.337792][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.537663][    C0] usb 1-1: NFC: Urb failure (status -71)
[  108.542898][    C0] usb 1-1: NFC: Urb failure (status -71)
[  108.565431][  T791] usb 1-1: NFC: Unable to get FW version
[  108.579492][  T791] pn533_usb 1-1:0.113: probe with driver pn533_usb failed with error -71
[  108.590484][  T791] usb 1-1: USB disconnect, device number 9
[  108.595443][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  108.602503][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  108.609599][   T12] bond0 (unregistering): Released all slaves
[  108.672330][ T5815] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.0004/input/input7
[  108.794182][ T5815] sony 0003:054C:03D5.0004: input,hidraw0: USB HID v1d.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0
[  108.877650][ T6299] usb 2-1: USB disconnect, device number 6
[  108.965586][ T7132] chnl_net:caif_netlink_parms(): no params data found
[  108.998580][   T12] hsr_slave_0: left promiscuous mode
[  109.001538][   T12] hsr_slave_1: left promiscuous mode
[  109.006129][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  109.011002][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  109.138181][ T7152] netlink: 'syz.0.526': attribute type 1 has an invalid length.
[  109.277904][   T12] team0 (unregistering): Port device team_slave_1 removed
[  109.299066][   T12] team0 (unregistering): Port device team_slave_0 removed
[  109.712620][ T7132] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.715866][ T7132] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.718985][ T7132] bridge_slave_0: entered allmulticast mode
[  109.722674][ T7132] bridge_slave_0: entered promiscuous mode
[  109.731320][ T7132] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.735294][ T7132] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.738209][ T7132] bridge_slave_1: entered allmulticast mode
[  109.746189][ T7132] bridge_slave_1: entered promiscuous mode
[  109.797988][ T7132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.806027][ T7132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.859822][ T7132] team0: Port device team_slave_0 added
[  109.871227][ T7132] team0: Port device team_slave_1 added
[  109.910156][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_0
[  109.913179][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.925765][ T7132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.932888][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.936343][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.947471][ T7132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  109.987432][ T7132] hsr_slave_0: entered promiscuous mode
[  109.990429][ T7132] hsr_slave_1: entered promiscuous mode
[  109.992799][ T7132] debugfs: 'hsr0' already exists in 'hsr'
[  109.995337][ T7132] Cannot create hsr debugfs directory
[  110.100134][ T7132] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  110.107604][ T7132] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  110.112579][ T7132] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  110.117494][ T7132] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  110.142046][ T7132] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.144296][ T7132] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.180412][ T7132] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.190231][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.200631][ T7132] 8021q: adding VLAN 0 to HW filter on device team0
[  110.206602][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.209468][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.224543][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.227430][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.326764][ T7132] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.370267][ T7132] veth0_vlan: entered promiscuous mode
[  110.373247][ T5918] Bluetooth: hci2: command tx timeout
[  110.378909][ T7132] veth1_vlan: entered promiscuous mode
[  110.416395][ T7132] veth0_macvtap: entered promiscuous mode
[  110.423829][ T7132] veth1_macvtap: entered promiscuous mode
[  110.432200][ T7194] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  110.434479][ T7132] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.442841][ T7132] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.453633][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.459369][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.469925][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.474807][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.548420][  T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.551116][  T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.567838][ T7198] loop1: detected capacity change from 0 to 512
[  110.572647][ T7198] EXT4-fs: Ignoring removed mblk_io_submit option
[  110.574335][  T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.578778][  T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.580767][ T7198] EXT4-fs: Ignoring removed mblk_io_submit option
[  110.590292][ T7198] EXT4-fs (loop1): Test dummy encryption mode enabled
[  110.597943][ T7198] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  110.620986][ T7198] EXT4-fs (loop1): 1 truncate cleaned up
[  110.633988][ T7198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.694715][ T5913] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.729017][ T7208] loop0: detected capacity change from 0 to 512
[  110.732222][ T7208] EXT4-fs: Ignoring removed mblk_io_submit option
[  110.755573][ T7208] EXT4-fs: inline encryption not supported
[  110.758068][ T7208] EXT4-fs: Ignoring removed mblk_io_submit option
[  110.772223][ T7208] EXT4-fs (loop0): Test dummy encryption mode enabled
[  110.786081][ T7208] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  110.794587][ T7208] EXT4-fs (loop0): 1 truncate cleaned up
[  110.798099][ T7208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.844952][ T5910] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.885277][ T7218] loop0: detected capacity change from 0 to 512
[  110.891837][ T7220] loop3: detected capacity change from 0 to 8
[  110.906571][ T7220] SQUASHFS error: xz decompression failed, data probably corrupt
[  110.907248][ T7218] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.542: bad orphan inode 11862016
[  110.909908][ T7220] SQUASHFS error: Failed to read block 0x108: -5
[  110.916834][ T7220] SQUASHFS error: Unable to read metadata cache entry [106]
[  110.919999][ T7220] SQUASHFS error: Unable to read inode 0x11f
[  110.928247][ T7218] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  110.940414][ T7218] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.072924][ T5910] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  112.113892][ T5963] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  112.273246][ T5963] usb 2-1: Using ep0 maxpacket: 32
[  112.286258][ T5963] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31
[  112.292674][ T5963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.316160][ T5963] usb 2-1: config 0 descriptor??
[  112.367430][ T7246] syzkaller0: tun_chr_ioctl cmd 1074812117
[  112.369258][ T5963] usb 2-1: selecting invalid altsetting 3
[  112.371838][ T5963] comedi comedi5: could not set alternate setting 3 in high speed
[  112.376670][ T5963] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device.
[  112.391985][ T5963] usbduxsigma 2-1:0.0: probe with driver usbduxsigma failed with error -22
[  112.453328][ T5918] Bluetooth: hci2: command tx timeout
[  112.611179][ T6003] usb 2-1: USB disconnect, device number 7
[  113.206643][ T7260] loop1: detected capacity change from 0 to 512
[  113.214804][ T7260] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  113.286175][ T7260] EXT4-fs (loop1): 1 truncate cleaned up
[  113.288841][ T7260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.363623][ T5913] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.619766][ T7268] tipc: Can't bind to reserved service type 0
[  113.715751][ T6003] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER)
[  114.064920][ T6003] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER)
[  114.068648][ T7263] ceph: No mds server is up or the cluster is laggy
[  114.300036][ T7290] loop0: detected capacity change from 0 to 164
[  114.503476][ T5963] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  114.533185][ T5918] Bluetooth: hci2: command tx timeout
[  114.623073][ T6299] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  114.653080][ T5963] usb 4-1: Using ep0 maxpacket: 32
[  114.656629][ T5963] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  114.659716][ T5963] usb 4-1: config 0 has no interface number 0
[  114.664798][ T5963] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  114.667772][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.670725][ T5963] usb 4-1: Product: syz
[  114.672214][ T5963] usb 4-1: Manufacturer: syz
[  114.674031][ T5963] usb 4-1: SerialNumber: syz
[  114.677091][ T5963] usb 4-1: config 0 descriptor??
[  114.683198][ T5963] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  114.686741][ T5963] usb 4-1: selecting invalid altsetting 1
[  114.688752][ T5963] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  114.695817][ T5963] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  114.700439][ T5963] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  114.704864][ T6003] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  114.708150][ T5963] usb 4-1: media controller created
[  114.726759][ T5963] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  114.783838][ T6299] usb 1-1: Using ep0 maxpacket: 8
[  114.788495][ T6299] usb 1-1: config index 0 descriptor too short (expected 30, got 18)
[  114.797866][ T6299] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  114.801730][ T6299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.805687][ T6299] usb 1-1: Product: syz
[  114.807568][ T6299] usb 1-1: Manufacturer: syz
[  114.809530][ T6299] usb 1-1: SerialNumber: syz
[  114.815201][ T6299] usb 1-1: config 0 descriptor??
[  114.822578][ T6299] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  114.826187][ T6299] usb 1-1: setting power ON
[  114.828771][ T6299] dvb-usb: bulk message failed: -22 (2/0)
[  114.836982][ T6299] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  114.841782][ T6299] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  114.845951][ T6299] usb 1-1: media controller created
[  114.871541][ T6299] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  114.878063][ T6003] usb 2-1: config 1 has an invalid interface number: 7 but max is 0
[  114.886878][ T6003] usb 2-1: config 1 has no interface number 0
[  114.889458][ T5963] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  114.898516][ T5963] zl10353_read_register: readreg error (reg=127, ret==-71)
[  114.902774][ T5963] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  114.906187][ T6003] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  114.910902][ T6003] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  114.915874][ T6299] usb 1-1: selecting invalid altsetting 6
[  114.918476][ T6299] usb 1-1: digital interface selection failed (-22)
[  114.921285][ T6299] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  114.930928][ T6003] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64
[  114.935148][ T6003] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.943747][ T6299] usb 1-1: setting power OFF
[  114.945908][ T6299] dvb-usb: bulk message failed: -22 (2/0)
[  114.948408][ T6299] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  114.963159][ T6299] (NULL device *): no alternate interface
[  114.965063][ T6003] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  114.970974][ T6003] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.983800][ T6003] usb 2-1: Product: syz
[  114.985530][ T6003] usb 2-1: Manufacturer: syz
[  114.987437][ T6003] usb 2-1: SerialNumber: syz
[  115.000946][ T5963] usb 4-1: USB disconnect, device number 2
[  115.006234][ T7302] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  115.016971][ T7302] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  115.044143][ T6299] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  115.054701][ T6299] usb 1-1: USB disconnect, device number 10
[  115.435114][ T7302] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  115.438723][ T7302] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  115.637699][ T7317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.579'.
[  115.644467][ T6003] usb 2-1: Incompatible driver and firmware versions
[  115.663071][ T6003] usb 2-1: USB disconnect, device number 8
[  115.794436][   T33] audit: type=1326 audit(1759217657.761:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7322 comm="syz.3.582" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d4b8ec29 code=0x7ffc0000
[  115.820477][   T33] audit: type=1326 audit(1759217657.781:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7322 comm="syz.3.582" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d4b8ec29 code=0x7ffc0000
[  115.868301][   T33] audit: type=1326 audit(1759217657.781:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7322 comm="syz.3.582" exe="/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fb7d4b8ec29 code=0x7ffc0000
[  115.880827][   T33] audit: type=1326 audit(1759217657.781:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7322 comm="syz.3.582" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d4b8ec29 code=0x7ffc0000
[  115.887740][   T33] audit: type=1326 audit(1759217657.781:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7322 comm="syz.3.582" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d4b8ec29 code=0x7ffc0000
[  116.224150][ T7332] netlink: 'syz.3.585': attribute type 13 has an invalid length.
[  116.305153][ T7336] netlink: 'syz.3.587': attribute type 12 has an invalid length.
[  116.308364][ T7336] netlink: 132 bytes leftover after parsing attributes in process `syz.3.587'.
[  116.400971][ T7340] policy can only be matched on NF_INET_PRE_ROUTING
[  116.400993][ T7340] unable to load match
[  116.521647][ T7346] loop1: detected capacity change from 0 to 4096
[  116.616156][ T5918] Bluetooth: hci2: command tx timeout
[  116.729276][ T7354] loop0: detected capacity change from 0 to 2048
[  116.758032][ T7354] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  116.791559][   T33] audit: type=1800 audit(1759217658.761:28): pid=7354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.596" name="file2" dev="loop0" ino=1347 res=0 errno=0
[  117.303825][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.618'.
[  117.501915][ T6003] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  117.676199][ T6003] usb 1-1: config 0 has an invalid interface number: 128 but max is 0
[  117.687501][ T6003] usb 1-1: config 0 has no interface number 0
[  117.730655][ T6003] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  117.753223][ T6003] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.778365][ T6003] usb 1-1: Product: syz
[  117.794821][ T6003] usb 1-1: Manufacturer: syz
[  117.813761][ T6003] usb 1-1: SerialNumber: syz
[  117.891859][ T6003] usb 1-1: config 0 descriptor??
[  118.046241][ T7421] loop1: detected capacity change from 0 to 128
[  118.068906][ T7421] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  118.084569][ T7421] ext4 filesystem being mounted at /206/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  118.136585][ T5913] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  118.507737][ T6003] usb 1-1: Firmware version (0.0) predates our first public release.
[  118.511937][ T6003] usb 1-1: Please update to version 0.2 or newer
[  118.545488][ T6003] usb 1-1: USB disconnect, device number 11
[  118.656458][ T5815] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  118.817872][ T5815] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  118.821773][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.839516][ T5815] usb 2-1: config 0 descriptor??
[  119.088150][ T5815] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  119.158280][ T7456] netlink: 'syz.0.639': attribute type 4 has an invalid length.
[  119.210091][ T7456] netlink: 'syz.0.639': attribute type 4 has an invalid length.
[  119.301441][ T5815] [drm:udl_init] *ERROR* Selecting channel failed
[  119.356486][ T5815] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 3
[  119.359464][ T5815] [drm] Initialized udl on minor 3
[  119.368095][ T5815] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  119.374270][ T5815] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  119.382283][  T791] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  119.383752][ T5815] usb 2-1: USB disconnect, device number 9
[  119.389062][  T791] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  120.196478][ T7471] loop1: detected capacity change from 0 to 128
[  120.743364][ T5815] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  120.894583][ T5815] usb 1-1: Using ep0 maxpacket: 32
[  120.905291][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  120.909769][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.928396][ T5815] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  120.931632][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.935275][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.661'.
[  120.949531][ T5815] usb 1-1: config 0 descriptor??
[  120.960512][ T5815] hub 1-1:0.0: USB hub found
[  121.001779][ T7527] loop3: detected capacity change from 0 to 128
[  121.168989][ T7486] loop0: detected capacity change from 0 to 512
[  121.214455][ T7486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.226945][ T7486] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  121.238188][ T5815] hub 1-1:0.0: 1 port detected
[  121.253361][ T7539] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.309595][ T7528] loop1: detected capacity change from 0 to 32768
[  121.449650][ T5815] hub 1-1:0.0: hub_hub_status failed (err = -71)
[  121.452011][ T5815] hub 1-1:0.0: config failed, can't get hub status (err -71)
[  121.475659][ T5815] usbhid 1-1:0.0: can't add hid device: -71
[  121.477911][ T5815] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  121.759892][ T5815] usb 1-1: USB disconnect, device number 12
[  121.989640][ T5910] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.109567][ T7566] loop1: detected capacity change from 0 to 2048
[  122.133248][   T33] audit: type=1326 audit(1759217664.101:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.1.674" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5dfcf8ec29 code=0x0
[  122.235056][ T7570] netlink: 360 bytes leftover after parsing attributes in process `syz.0.677'.
[  122.374380][ T7578] loop3: detected capacity change from 0 to 4096
[  122.414190][ T7582] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  122.686491][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.674'.
[  123.162702][ T7605] loop1: detected capacity change from 0 to 1024
[  123.308246][   T40] hfsplus: b-tree write err: -5, ino 4
[  123.371407][ T7603] loop0: detected capacity change from 0 to 32768
[  123.409330][ T7603] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  123.457666][ T7603] XFS (loop0): Ending clean mount
[  123.471703][ T7603] XFS (loop0): Quotacheck needed: Please wait.
[  123.502524][ T7603] XFS (loop0): Quotacheck: Done.
[  123.556806][ T7627] loop1: detected capacity change from 0 to 128
[  123.565390][ T5910] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  123.650432][   T33] audit: type=1800 audit(1759217665.621:30): pid=7630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.695" name="file1" dev="loop1" ino=1048625 res=0 errno=0
[  123.661801][ T7629] loop3: detected capacity change from 0 to 4096
[  123.703930][ T7631] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  123.712772][ T7627] syz.1.695: attempt to access beyond end of device
[  123.712772][ T7627] loop1: rw=2049, sector=873, nr_sectors = 8 limit=128
[  123.732941][   T27] kworker/u10:0: attempt to access beyond end of device
[  123.732941][   T27] loop1: rw=1, sector=145, nr_sectors = 16 limit=128
[  123.762488][   T27] kworker/u10:0: attempt to access beyond end of device
[  123.762488][   T27] loop1: rw=1, sector=169, nr_sectors = 8 limit=128
[  123.769615][   T27] kworker/u10:0: attempt to access beyond end of device
[  123.769615][   T27] loop1: rw=1, sector=185, nr_sectors = 8 limit=128
[  123.777873][   T27] kworker/u10:0: attempt to access beyond end of device
[  123.777873][   T27] loop1: rw=1, sector=201, nr_sectors = 8 limit=128
[  123.784744][   T27] kworker/u10:0: attempt to access beyond end of device
[  123.784744][   T27] loop1: rw=1, sector=217, nr_sectors = 8 limit=128
[  123.790578][   T27] kworker/u10:0: attempt to access beyond end of device
[  123.790578][   T27] loop1: rw=1, sector=233, nr_sectors = 8 limit=128
[  123.799107][   T27] kworker/u10:0: attempt to access beyond end of device
[  123.799107][   T27] loop1: rw=1, sector=249, nr_sectors = 8 limit=128
[  123.811692][   T27] kworker/u10:0: attempt to access beyond end of device
[  123.811692][   T27] loop1: rw=1, sector=265, nr_sectors = 8 limit=128
[  123.819054][   T27] kworker/u10:0: attempt to access beyond end of device
[  123.819054][   T27] loop1: rw=1, sector=281, nr_sectors = 8 limit=128
[  124.054754][ T7637] loop1: detected capacity change from 0 to 256
[  125.386840][ T7647] loop1: detected capacity change from 0 to 32768
[  125.401146][ T7647] (syz.1.703,7647,0):ocfs2_read_blocks:239 ERROR: status = -12
[  125.407085][ T7647] (syz.1.703,7647,0):ocfs2_map_slot_buffers:388 ERROR: status = -12
[  125.414449][ T7647] (syz.1.703,7647,0):ocfs2_init_slot_info:426 ERROR: status = -12
[  125.420947][ T7647] (syz.1.703,7647,0):ocfs2_initialize_super:2222 ERROR: status = -12
[  125.429310][ T7647] (syz.1.703,7647,0):ocfs2_fill_super:1177 ERROR: status = -12
[  125.532008][ T7658] ieee802154 phy0 wpan0: encryption failed: -22
[  125.619613][ T7665] sctp: [Deprecated]: syz.0.712 (pid 7665) Use of struct sctp_assoc_value in delayed_ack socket option.
[  125.619613][ T7665] Use struct sctp_sack_info instead
[  125.633378][ T6299] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  125.670018][ T7670] netlink: 28 bytes leftover after parsing attributes in process `syz.1.713'.
[  125.828614][ T6299] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.833561][ T6299] usb 4-1: config 0 interface 0 has no altsetting 0
[  125.835751][ T5926] nci: nci_ntf_packet: unknown ntf opcode 0x10d
[  125.836430][ T6299] usb 4-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00
[  125.842246][ T6299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.848724][ T6299] usb 4-1: config 0 descriptor??
[  126.467323][ T6299] usb 4-1: USB disconnect, device number 3
[  126.647469][ T7689] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  126.686354][ T7691] loop0: detected capacity change from 0 to 1024
[  126.694305][ T7691] hfsplus: bad catalog entry type
[  127.066885][ T7700] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  127.071758][ T7700] overlayfs: failed to set xattr on upper
[  127.074938][ T7700] overlayfs: ...falling back to redirect_dir=nofollow.
[  127.078017][ T7700] overlayfs: ...falling back to metacopy=off.
[  127.080759][ T7700] overlayfs: ...falling back to uuid=null.
[  127.299551][ T7702] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.726'.
[  127.644605][ T7707] netlink: 60 bytes leftover after parsing attributes in process `syz.1.728'.
[  127.692720][ T7707] netlink: 60 bytes leftover after parsing attributes in process `syz.1.728'.
[  127.944362][ T7718] loop1: detected capacity change from 0 to 256
[  127.952530][ T7718] exfat: Deprecated parameter 'utf8'
[  127.969820][ T7718] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  127.985010][ T7718] overlay: filesystem on ./file0 not supported
[  128.007608][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.733'.
[  128.137969][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.738'.
[  128.318395][ T7736] loop1: detected capacity change from 0 to 2048
[  128.356475][ T6156]  loop1: p1 < > p4
[  128.361992][ T6156] loop1: p4 size 8388608 extends beyond EOD, truncated
[  128.392324][ T7726] loop0: detected capacity change from 0 to 32768
[  128.399008][ T7736]  loop1: p1 < > p4
[  128.403539][ T7736] loop1: p4 size 8388608 extends beyond EOD, truncated
[  128.437211][ T7726] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.735 (7726)
[  128.458412][ T7726] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  128.461544][ T7726] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  128.578918][ T7726] BTRFS info (device loop0): enabling ssd optimizations
[  128.581459][ T7726] BTRFS info (device loop0): enabling free space tree
[  128.718656][ T7740] loop3: detected capacity change from 0 to 32768
[  128.742466][ T5910] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  128.748603][ T7740] ERROR: (device loop3): diAllocAG: error reading iag
[  128.748603][ T7740] 
[  128.765641][ T7740] ialloc: diAlloc returned -5!
[  129.120957][ T7770] loop0: detected capacity change from 0 to 1024
[  129.138593][ T7770] EXT4-fs: inline encryption not supported
[  129.141173][ T7770] EXT4-fs: Ignoring removed bh option
[  129.191995][ T7770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.247914][ T5910] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.366691][ T7789] netlink: 56 bytes leftover after parsing attributes in process `syz.0.751'.
[  129.494933][ T7793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.753'.
[  129.499452][ T7773] loop3: detected capacity change from 0 to 32768
[  129.556163][ T7773] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  129.640024][ T7773] (syz.3.749,7773,0):ocfs2_remove_inode_range:1794 ERROR: status = -22
[  129.661695][ T7773] (syz.3.749,7773,0):__ocfs2_change_file_space:2045 ERROR: status = -22
[  129.693748][ T7773] syz.3.749 (7773) used greatest stack depth: 18808 bytes left
[  129.738424][ T7132] ocfs2: Unmounting device (7,3) on (node local)
[  130.043092][ T5963] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  130.089684][ T7803] loop3: detected capacity change from 0 to 32768
[  130.111591][   T33] audit: type=1800 audit(1759217672.081:31): pid=7803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.756" name="file1" dev="loop3" ino=4 res=0 errno=0
[  130.226682][ T5963] usb 1-1: config 0 has an invalid interface number: 69 but max is 0
[  130.230123][ T5963] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.238483][ T5963] usb 1-1: config 0 has no interface number 0
[  130.267469][ T5963] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 255
[  130.272611][ T5963] usb 1-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  130.289483][ T5963] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  130.296619][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.303721][ T5963] usb 1-1: Product: syz
[  130.305448][ T5963] usb 1-1: Manufacturer: syz
[  130.312637][ T5963] usb 1-1: SerialNumber: syz
[  130.324356][ T5963] usb 1-1: config 0 descriptor??
[  130.333976][ T7801] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  130.340586][ T5963] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  130.367069][ T5963] cyberjack ttyUSB0: usb_submit_urb(read int) failed
[  130.375849][ T5963] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  130.546881][   T10] usb 1-1: USB disconnect, device number 13
[  130.558116][   T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  130.565449][   T10] cyberjack 1-1:0.69: device disconnected
[  130.786312][  T791] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  130.933808][  T791] usb 2-1: Using ep0 maxpacket: 8
[  130.937816][  T791] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.950976][  T791] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c
[  130.955127][  T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.958478][  T791] usb 2-1: Product: syz
[  130.960279][  T791] usb 2-1: Manufacturer: syz
[  130.962163][  T791] usb 2-1: SerialNumber: syz
[  130.975529][  T791] usb 2-1: config 0 descriptor??
[  130.980994][  T791] cdc_ether 2-1:0.0: skipping garbage
[  130.983284][  T791] usb 2-1: bad CDC descriptors
[  130.987489][  T791] usb 2-1: unsupported MDLM descriptors
[  130.990429][  T791] cdc_acm 2-1:0.0: skipping garbage
[  131.238887][ T5963] usb 2-1: USB disconnect, device number 10
[  131.462091][ T7820] loop0: detected capacity change from 0 to 128
[  131.487181][ T7820] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  131.493511][ T7820] hpfs: filesystem error: improperly stopped
[  131.496141][ T7820] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  131.499520][ T7820] hpfs: You really don't want any checks? You are crazy...
[  131.505343][ T7820] hpfs: hpfs_map_sector(): read error
[  131.507730][ T7820] hpfs: code page support is disabled
[  131.512334][ T7820] hpfs: hpfs_map_4sectors(): unaligned read
[  131.515563][ T7820] hpfs: hpfs_map_4sectors(): unaligned read
[  131.518205][ T7820] hpfs: filesystem error: unable to find root dir
[  131.713126][ T7814] loop3: detected capacity change from 0 to 32768
[  131.966488][ T7825] netlink: 6 bytes leftover after parsing attributes in process `syz.1.766'.
[  132.607050][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.609836][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.769187][ T7852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.778'.
[  132.791001][ T7853] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[  132.966101][ T7855] loop1: detected capacity change from 0 to 256
[  133.583096][ T7871] loop1: detected capacity change from 0 to 512
[  133.608758][ T7871] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.786: corrupted in-inode xattr: invalid ea_ino
[  133.623852][ T7871] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.786: couldn't read orphan inode 15 (err -117)
[  133.638610][ T7871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000500000000 r/w without journal. Quota mode: none.
[  133.726515][ T5913] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000500000000.
[  133.832828][ T7875] loop1: detected capacity change from 0 to 16
[  133.850578][ T7875] erofs (device loop1): mounted with root inode @ nid 36.
[  133.995943][ T7879] random: crng reseeded on system resumption
[  134.221994][ T5926] tipc: Subscription rejected, illegal request
[  135.014620][ T7894] loop3: detected capacity change from 0 to 2048
[  135.042348][ T7894] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  135.060675][ T5911] udevd[5911]: incorrect nilfs2 checksum on /dev/loop3
[  135.130995][ T7895] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  135.139034][ T5911] udevd[5911]: incorrect nilfs2 checksum on /dev/loop3
[  135.191614][ T7894] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  135.200112][ T7894] Remounting filesystem read-only
[  135.204981][ T7894] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 3044605952
[  135.209657][ T7894] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15)
[  135.214421][ T7894] NILFS (loop3): error -5 truncating bmap (ino=15)
[  135.301623][ T7132] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  135.419883][ T7897] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  136.007409][ T7913] netlink: 148 bytes leftover after parsing attributes in process `syz.0.792'.
[  136.010147][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.792'.
[  136.016169][ T7912] loop3: detected capacity change from 0 to 1024
[  136.080027][ T1092] hfsplus: b-tree write err: -5, ino 4
[  136.143851][ T5918] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  136.148693][ T5918] Bluetooth: hci1: Injecting HCI hardware error event
[  136.152121][ T5918] Bluetooth: hci1: hardware error 0x00
[  136.166470][ T7907] loop1: detected capacity change from 0 to 32768
[  136.170450][ T7907] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.799 (7907)
[  136.185585][ T7907] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  136.189481][ T7907] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  136.219215][ T7924] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  136.227716][ T7924] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  136.230408][ T7924] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  136.232461][ T7924] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4)
[  136.237453][ T7924] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  136.252374][ T7924] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  136.256265][ T7924] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  136.265800][ T7924] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  136.266653][ T7907] BTRFS info (device loop1): enabling ssd optimizations
[  136.270339][ T7907] BTRFS info (device loop1): enabling free space tree
[  136.272471][ T7907] BTRFS info (device loop1): use lzo compression, level 1
[  136.273159][ T7924] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  136.287092][ T7924] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  136.296986][ T7924] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  136.333663][ T5913] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  136.840798][ T7951] loop1: detected capacity change from 0 to 32768
[  136.919662][ T7951] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  136.968010][ T7951] XFS (loop1): Ending clean mount
[  136.977725][   T33] audit: type=1800 audit(1759217678.951:32): pid=7951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.808" name="file1" dev="loop1" ino=6150 res=0 errno=0
[  137.027828][ T7951] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  137.032520][ T7951] XFS (loop1): Unmount and run xfs_repair
[  137.036020][ T7951] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  137.039278][ T7951] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  137.045423][ T7951] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  137.049029][ T7951] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  137.052783][ T7951] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  137.057469][ T7951] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  137.062884][ T7951] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  137.070731][ T7951] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  137.075149][ T7951] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  137.078834][ T7951] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x4 len 4 error 74
[  137.147080][ T5913] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  137.154046][ T5913] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair.
[  137.732521][ T7984] netlink: 140 bytes leftover after parsing attributes in process `syz.1.822'.
[  137.910795][ T7986] loop1: detected capacity change from 0 to 512
[  137.953958][ T7986] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  137.995948][ T7986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.000627][ T7986] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.060025][   T33] audit: type=1800 audit(1759217680.031:33): pid=7986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.823" name="file1" dev="loop1" ino=15 res=0 errno=0
[  138.095998][ T7992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.825'.
[  138.099489][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.825'.
[  138.103315][   T33] audit: type=1800 audit(1759217680.051:34): pid=7986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.823" name="file2" dev="loop1" ino=16 res=0 errno=0
[  138.106786][ T7992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.825'.
[  138.118478][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.825'.
[  138.125332][ T5913] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.213369][ T5918] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  138.257842][ T7994] netlink: 40 bytes leftover after parsing attributes in process `syz.1.826'.
[  138.311948][ T8000] loop1: detected capacity change from 0 to 256
[  138.339085][ T8002] loop3: detected capacity change from 0 to 4096
[  138.377156][ T8007] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  138.392113][ T8009] loop1: detected capacity change from 0 to 256
[  138.404626][ T8009] FAT-fs (loop1): Directory bread(block 64) failed
[  138.407137][ T8009] FAT-fs (loop1): Directory bread(block 65) failed
[  138.409796][ T8009] FAT-fs (loop1): Directory bread(block 66) failed
[  138.412352][ T8009] FAT-fs (loop1): Directory bread(block 67) failed
[  138.415274][ T8009] FAT-fs (loop1): Directory bread(block 68) failed
[  138.417763][ T8009] FAT-fs (loop1): Directory bread(block 69) failed
[  138.427397][ T8009] FAT-fs (loop1): Directory bread(block 70) failed
[  138.429664][ T8009] FAT-fs (loop1): Directory bread(block 71) failed
[  138.433484][ T8009] FAT-fs (loop1): Directory bread(block 72) failed
[  138.435727][ T8009] FAT-fs (loop1): Directory bread(block 73) failed
[  138.498365][ T8015] loop0: detected capacity change from 0 to 1024
[  138.504986][ T8015] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  138.509302][ T8014] loop3: detected capacity change from 0 to 2048
[  138.517796][ T8014] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  138.532129][ T8015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.551528][ T8015] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.827: missing EA_INODE flag
[  138.570588][ T8015] EXT4-fs (loop0): Remounting filesystem read-only
[  138.645813][ T8025] kernel profiling enabled (shift: 9)
[  138.835794][ T8031] loop1: detected capacity change from 0 to 256
[  138.947250][ T8031] FAT-fs (loop1): Directory bread(block 64) failed
[  138.950932][ T8031] FAT-fs (loop1): Directory bread(block 65) failed
[  138.957994][ T8031] FAT-fs (loop1): Directory bread(block 66) failed
[  138.961576][ T8031] FAT-fs (loop1): Directory bread(block 67) failed
[  138.989899][ T8031] FAT-fs (loop1): Directory bread(block 68) failed
[  138.998871][ T8031] FAT-fs (loop1): Directory bread(block 69) failed
[  139.002469][ T8031] FAT-fs (loop1): Directory bread(block 70) failed
[  139.009548][ T8031] FAT-fs (loop1): Directory bread(block 71) failed
[  139.021927][ T8031] FAT-fs (loop1): Directory bread(block 72) failed
[  139.033921][ T8031] FAT-fs (loop1): Directory bread(block 73) failed
[  139.240871][ T5910] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.530277][ T8034] netlink: 'syz.1.842': attribute type 9 has an invalid length.
[  140.142392][ T8049] loop1: detected capacity change from 0 to 256
[  140.152299][ T8049] vfat: Bad value for 'shortname'
[  140.167303][ T8051] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  140.406725][ T8049] loop1: detected capacity change from 0 to 32768
[  140.410499][ T8049] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.849 (8049)
[  140.432498][ T8049] BTRFS info (device loop1): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  140.437016][ T8049] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  140.499573][ T8049] BTRFS info (device loop1): enabling ssd optimizations
[  140.502516][ T8049] BTRFS info (device loop1): enabling free space tree
[  140.514275][ T8049] BTRFS info (device loop1): use lzo compression, level 1
[  140.517557][ T8074] loop3: detected capacity change from 0 to 2048
[  140.522316][ T8074] EXT4-fs (loop3): unsupported inode size: 0
[  140.525545][ T8074] EXT4-fs (loop3): blocksize: 2048
[  140.573184][ T5963] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  140.693873][ T5913] BTRFS info (device loop1): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  140.731933][ T5963] usb 1-1: config 0 has no interfaces?
[  140.737248][ T5963] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  140.747434][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.763833][ T5963] usb 1-1: config 0 descriptor??
[  140.811310][ T8082] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32
[  140.908661][ T8085] netlink: 64 bytes leftover after parsing attributes in process `syz.3.859'.
[  140.977273][ T8091] loop3: detected capacity change from 0 to 512
[  141.004947][ T8091] EXT4-fs: Ignoring removed i_version option
[  141.016792][ T8090] syzkaller0: mtu greater than device maximum
[  141.030272][ T8091] EXT4-fs (loop3): can't mount with both data=journal and dax
[  141.336913][ T8101] netlink: 129704 bytes leftover after parsing attributes in process `syz.1.864'.
[  141.386074][ T6299] usb 1-1: USB disconnect, device number 14
[  142.290530][ T8118] loop3: detected capacity change from 0 to 136
[  143.202463][ T8126] loop1: detected capacity change from 0 to 32768
[  143.229328][ T8126] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  143.241504][ T8126] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  143.249899][ T8126] XFS (loop1): Tail block (0x29) overwrite detected. Updated to 0x30
[  143.275322][ T8126] XFS (loop1): Ending clean mount
[  143.323593][ T5913] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  143.513255][ T8144] loop1: detected capacity change from 0 to 512
[  143.538935][ T8146] loop0: detected capacity change from 0 to 1764
[  143.585081][ T8144] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.875: bg 0: block 248: padding at end of block bitmap is not set
[  143.599524][ T8144] Quota error (device loop1): write_blk: dquota write failed
[  143.602078][ T8144] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  143.605974][ T8144] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.875: Failed to acquire dquot type 1
[  143.628347][ T8144] EXT4-fs (loop1): 1 truncate cleaned up
[  143.635380][ T8144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.645656][ T8144] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.676612][ T5913] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.757878][ T8167] tmpfs: Cannot retroactively limit inodes
[  143.933469][ T8174] loop1: detected capacity change from 0 to 4096
[  143.937058][ T8174] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  143.956956][ T8174] ntfs3(loop1): Failed to load root (-22).
[  144.100031][ T8179] tipc: Started in network mode
[  144.111540][ T8179] tipc: Node identity 7f000001, cluster identity 4711
[  144.125871][ T8179] tipc: Enabled bearer <udp:syz2>, priority 10
[  144.154090][ T8179] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  144.158943][ T8179] tipc: Enabled bearer <udp:syz0>, priority 10
[  144.546648][ T8186] atomic_op ffff888030d12198 conn xmit_atomic 0000000000000000
[  145.161774][ T6299] tipc: Node number set to 2130706433
[  145.179671][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.899'.
[  145.705916][  T791] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0
[  145.712006][  T791] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0
[  145.726346][  T791] hid-generic 0000:0003:0000.0006: hidraw0: <UNKNOWN> HID v0.03 Device [syz0] on syz0
[  145.920573][   T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  145.954969][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.911'.
[  146.112652][   T10] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  146.123547][   T10] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3
[  146.138449][   T10] usb 2-1: config 220 interface 0 has no altsetting 0
[  146.170386][   T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  146.176954][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.185197][   T10] usb 2-1: Product: syz
[  146.187127][   T10] usb 2-1: Manufacturer: syz
[  146.188991][   T10] usb 2-1: SerialNumber: syz
[  146.456450][   T10] usb 2-1: Found UVC 0.00 device syz (8086:0b07)
[  146.459627][   T10] usb 2-1: No valid video chain found.
[  146.491345][   T10] usb 2-1: USB disconnect, device number 11
[  147.100742][ T8226] loop0: detected capacity change from 0 to 1024
[  147.183257][ T6147] hfsplus: b-tree write err: -5, ino 4
[  147.825530][ T8233] loop1: detected capacity change from 0 to 32768
[  147.843572][   T33] audit: type=1800 audit(1759217945.827:35): pid=8233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.918" name="bus" dev="loop1" ino=7 res=0 errno=0
[  148.273454][ T8248] loop3: detected capacity change from 0 to 32768
[  148.276884][ T8248] xfs: Unknown parameter 'noikeep'
[  148.458662][ T8250] loop1: detected capacity change from 0 to 32768
[  148.515809][ T8250] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  148.580784][ T5913] ocfs2: Unmounting device (7,1) on (node local)
[  148.782269][ T8274] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  148.807242][ T8277] overlayfs: missing 'lowerdir'
[  148.981624][ T8287] overlayfs: conflicting options: metacopy=on,redirect_dir=follow
[  148.986026][ T8291] loop1: detected capacity change from 0 to 128
[  149.010592][ T8291] FAT-fs (loop1): Directory bread(block 414) failed
[  149.012879][ T8291] FAT-fs (loop1): Directory bread(block 415) failed
[  149.015147][ T8291] FAT-fs (loop1): Directory bread(block 416) failed
[  149.017264][ T8291] FAT-fs (loop1): Directory bread(block 417) failed
[  149.034072][ T8291] FAT-fs (loop1): Directory bread(block 418) failed
[  149.036488][ T8291] FAT-fs (loop1): Directory bread(block 419) failed
[  149.043324][ T8291] FAT-fs (loop1): Directory bread(block 420) failed
[  149.051201][ T8294] loop3: detected capacity change from 0 to 128
[  149.055947][ T8294] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  149.060521][ T8291] FAT-fs (loop1): Directory bread(block 421) failed
[  149.064262][ T8294] hpfs: filesystem error: improperly stopped
[  149.066554][ T8294] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  149.069324][ T8294] hpfs: You really don't want any checks? You are crazy...
[  149.071980][ T8294] hpfs: hpfs_map_sector(): read error
[  149.073617][ T8294] hpfs: code page support is disabled
[  149.076115][ T8294] hpfs: hpfs_map_4sectors(): unaligned read
[  149.078027][ T8294] hpfs: hpfs_map_4sectors(): unaligned read
[  149.080866][ T8294] hpfs: filesystem error: unable to find root dir
[  149.090784][ T8291] FAT-fs (loop1): Directory bread(block 414) failed
[  149.094110][ T8291] FAT-fs (loop1): Directory bread(block 415) failed
[  149.204283][ T8305] loop3: detected capacity change from 0 to 65
[  149.212356][ T8305] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway
[  149.232726][ T8305] BFS-fs: bfs_readdir(): Bad f_pos=00000012 for loop3:00000002
[  149.403933][ T8315] program syz.3.953 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  149.420737][   T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  149.524056][ T8321] loop1: detected capacity change from 0 to 4096
[  149.536977][ T8321] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  149.568477][   T10] usb 1-1: Using ep0 maxpacket: 16
[  149.573477][   T10] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  149.581686][ T8321] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  149.587661][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.598020][   T10] usb 1-1: config 0 descriptor??
[  149.623329][   T10] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  149.723381][ T8327] loop1: detected capacity change from 0 to 512
[  149.750433][ T8327] fscrypt (loop1, inode 2): Error -61 getting encryption context
[  149.753906][ T8327] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61
[  149.757407][ T8327] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #13: comm syz.1.959: iget: bad i_size value: 12154757448730
[  149.763506][ T8327] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.959: couldn't read orphan inode 13 (err -117)
[  149.770313][ T8327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.807295][ T5913] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.842553][   T10] usb 1-1: Detected FT232A
[  149.859880][   T10] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  149.864214][ T8334] loop3: detected capacity change from 0 to 8
[  149.867713][ T8336] loop1: detected capacity change from 0 to 128
[  149.870596][   T10] usb 1-1: USB disconnect, device number 15
[  149.872429][   T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  149.876726][   T10] ftdi_sio 1-1:0.0: device disconnected
[  149.876893][ T8334] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  150.053669][ T8339] loop1: detected capacity change from 0 to 2048
[  150.087559][ T8339] hpfs: hpfs_map_sector(): read error
[  150.120966][ T8340] cramfs: Error -5 while decompressing!
[  150.123106][ T8340] cramfs: ffffffff99688708(26)->ffff8881366f4000(4096)
[  150.126011][ T8340] cramfs: Error -3 while decompressing!
[  150.128571][ T8340] cramfs: ffffffff99688722(26)->ffff8881366f5000(4096)
[  150.131366][ T8340] cramfs: Error -3 while decompressing!
[  150.133660][ T8340] cramfs: ffffffff9968873c(16)->ffff8881366f6000(4096)
[  150.136379][ T8340] cramfs: Error -5 while decompressing!
[  150.138899][ T8340] cramfs: ffffffff99688708(26)->ffff8881366f4000(4096)
[  150.208560][   T33] audit: type=1800 audit(1759217948.129:36): pid=8340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.962" name="file2" dev="loop3" ino=348 res=0 errno=0
[  150.412805][ T8344] loop0: detected capacity change from 0 to 256
[  150.443004][ T8344] FAT-fs (loop0): Directory bread(block 64) failed
[  150.447487][ T8344] FAT-fs (loop0): Directory bread(block 65) failed
[  150.452319][ T8344] FAT-fs (loop0): Directory bread(block 66) failed
[  150.455173][ T8344] FAT-fs (loop0): Directory bread(block 67) failed
[  150.457812][ T8344] FAT-fs (loop0): Directory bread(block 68) failed
[  150.461270][ T8344] FAT-fs (loop0): Directory bread(block 69) failed
[  150.464656][ T8344] FAT-fs (loop0): Directory bread(block 70) failed
[  150.468842][ T8344] FAT-fs (loop0): Directory bread(block 71) failed
[  150.472077][ T8344] FAT-fs (loop0): Directory bread(block 72) failed
[  150.475181][ T8344] FAT-fs (loop0): Directory bread(block 73) failed
[  150.752511][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.966'.
[  150.756278][ T8351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.966'.
[  150.769951][ T8351] gretap0: entered promiscuous mode
[  150.772262][ T8351] macsec1: entered promiscuous mode
[  150.774255][ T8351] macsec1: entered allmulticast mode
[  150.776357][ T8351] gretap0: entered allmulticast mode
[  151.120705][ T8356] gretap0: entered promiscuous mode
[  151.123005][ T8356] vlan2: entered promiscuous mode
[  151.462380][ T8369] loop1: detected capacity change from 0 to 1024
[  151.977397][   T10] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  152.141513][   T10] usb 4-1: not running at top speed; connect to a high speed hub
[  152.146178][   T10] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  152.151955][   T10] usb 4-1: config 1 interface 0 has no altsetting 0
[  152.157441][   T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.40
[  152.161465][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.165011][   T10] usb 4-1: Product: syz
[  152.166931][   T10] usb 4-1: Manufacturer: syz
[  152.172486][   T10] usb 4-1: SerialNumber: syz
[  152.260114][ T8386] loop0: detected capacity change from 0 to 1024
[  152.394567][   T10] usbhid 4-1:1.0: can't add hid device: -71
[  152.397198][   T10] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  152.402799][   T10] usb 4-1: USB disconnect, device number 4
[  152.517076][ T6299] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  152.770442][ T6299] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  152.857631][ T6299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  152.865541][ T6299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  152.877282][ T6299] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  152.892846][ T6299] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  152.902217][ T6299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.963158][ T6299] usb 1-1: config 0 descriptor??
[  152.967574][ T8386] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  153.416551][ T6003] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  153.421023][ T6299] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd
[  153.441618][ T6299] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  153.544080][ T8403] bond0: entered promiscuous mode
[  153.546357][ T8403] bond_slave_0: entered promiscuous mode
[  153.550882][ T8403] bond_slave_1: entered promiscuous mode
[  153.555022][ T8403] batadv0: entered promiscuous mode
[  153.562293][ T8403] hsr1: entered allmulticast mode
[  153.564617][ T8403] bond0: entered allmulticast mode
[  153.567369][ T8403] bond_slave_0: entered allmulticast mode
[  153.569850][ T8403] bond_slave_1: entered allmulticast mode
[  153.572461][ T8403] batadv0: entered allmulticast mode
[  153.575223][ T8403] 8021q: adding VLAN 0 to HW filter on device hsr1
[  153.581969][ T8403] bond0: left promiscuous mode
[  153.584190][ T8403] bond_slave_0: left promiscuous mode
[  153.586928][ T8403] bond_slave_1: left promiscuous mode
[  153.589912][ T8403] batadv0: left promiscuous mode
[  153.606030][ T6003] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  153.610171][ T6003] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.616231][ T6003] usb 4-1: config 0 descriptor??
[  153.625790][ T6003] cp210x 4-1:0.0: cp210x converter detected
[  153.686784][   T10] usb 1-1: USB disconnect, device number 16
[  153.741355][ T8405] loop1: detected capacity change from 0 to 512
[  153.762900][ T8405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.768383][ T8405] ext4 filesystem being mounted at /335/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  153.809269][ T5913] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.028468][ T6003] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  154.037211][ T6003] usb 4-1: cp210x converter now attached to ttyUSB0
[  154.238907][  T791] usb 4-1: USB disconnect, device number 5
[  154.257622][  T791] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  154.267291][  T791] cp210x 4-1:0.0: device disconnected
[  154.832276][ T8425] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1000'.
[  155.106498][ T8442] mmap: syz.1.1008 (8442) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  155.348513][ T8457] loop0: detected capacity change from 0 to 256
[  155.387885][   T33] audit: type=1326 audit(1759217953.371:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8460 comm="syz.3.1017" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7d4b8ec29 code=0x0
[  155.480795][ T8464] binder: 8463:8464 ioctl c0306201 200000000080 returned -14
[  155.759743][   T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  155.905779][   T10] usb 4-1: Using ep0 maxpacket: 16
[  155.912263][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  155.917078][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  155.920397][   T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0
[  155.923688][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  155.931144][   T10] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  155.934253][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.938440][   T10] usb 4-1: Product: syz
[  155.939990][   T10] usb 4-1: Manufacturer: syz
[  155.941484][   T10] usb 4-1: SerialNumber: syz
[  155.944219][   T10] usb 4-1: config 0 descriptor??
[  155.948166][   T10] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  155.997366][   T33] audit: type=1326 audit(1759217953.961:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.1.1027" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfcf8ec29 code=0x7ffc0000
[  156.019607][   T33] audit: type=1326 audit(1759217953.971:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.1.1027" exe="/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f5dfcf8ec29 code=0x7ffc0000
[  156.030961][   T33] audit: type=1326 audit(1759217953.971:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.1.1027" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfcf8ec29 code=0x7ffc0000
[  156.040343][   T33] audit: type=1326 audit(1759217953.971:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.1.1027" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfcf8ec29 code=0x7ffc0000
[  156.112082][ T8489] loop1: detected capacity change from 0 to 1024
[  156.150951][   T10] usb 4-1: USB disconnect, device number 6
[  156.212847][ T8489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  156.219695][ T8489] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.262010][ T8489] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.1029: lblock 3 mapped to illegal pblock 3 (length 3)
[  156.269479][ T8489] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  156.273511][ T8489] EXT4-fs (loop1): This should not happen!! Data will be lost
[  156.273511][ T8489] 
[  156.280270][ T8489] EXT4-fs error (device loop1): ext4_ext_remove_space:2955: inode #15: comm syz.1.1029: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  156.289015][ T8489] EXT4-fs error (device loop1) in ext4_setattr:6071: Corrupt filesystem
[  156.294070][ T8489] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.1029: lblock 0 mapped to illegal pblock 0 (length 1)
[  156.300079][ T8489] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  156.304092][ T8489] EXT4-fs (loop1): This should not happen!! Data will be lost
[  156.304092][ T8489] 
[  156.386826][ T5918] Bluetooth: hci0: Ignoring connect complete event for invalid link type
[  156.491891][ T5913] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  156.723430][ T8500] loop1: detected capacity change from 0 to 1024
[  156.743471][ T8500] hfsplus: bad catalog entry type
[  157.022744][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1038'.
[  157.271221][ T8524] IPv6: NLM_F_CREATE should be specified when creating new route
[  157.491019][ T1092] Bluetooth: hci3: Frame reassembly failed (-84)
[  157.539891][ T8532] loop3: detected capacity change from 0 to 16
[  157.544850][ T8532] erofs (device loop3): mounted with root inode @ nid 36.
[  157.550519][ T8532] erofs (device loop3): readahead error at folio 2 @ nid 89
[  157.558612][   T56] erofs (device loop3): failed to decompress 6838 in[4096, 0] out[8192]
[  157.564063][ T8532] erofs (device loop3): failed to decompress 6838 in[4096, 0] out[8192]
[  157.568510][ T8532] erofs (device loop3): read error -117 @ 1 of nid 89
[  157.572081][   T33] audit: type=1800 audit(1759217961.554:42): pid=8532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1045" name="file3" dev="loop3" ino=89 res=0 errno=0
[  157.572463][ T8532] erofs (device loop3): failed to decompress 6838 in[4096, 0] out[8192]
[  157.581429][ T8532] erofs (device loop3): read error -117 @ 1 of nid 89
[  157.584731][ T8532] erofs (device loop3): failed to decompress 6838 in[4096, 0] out[8192]
[  157.589392][ T8532] erofs (device loop3): read error -117 @ 1 of nid 89
[  157.669547][ T8537] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  157.754791][ T8541] loop3: detected capacity change from 0 to 512
[  157.771627][ T8541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.076236][ T8544] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.183909][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.249125][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.305285][  T791] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  158.305941][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.376763][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.455522][  T791] usb 1-1: Using ep0 maxpacket: 16
[  158.463298][  T791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.476361][  T791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.480145][  T791] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  158.483083][  T791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.483690][ T5917] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  158.491487][ T5917] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  158.495852][ T5917] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  158.499897][ T5917] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  158.503132][ T5917] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  158.518979][  T791] usb 1-1: config 0 descriptor??
[  158.528160][   T13] bridge_slave_1: left allmulticast mode
[  158.530045][   T13] bridge_slave_1: left promiscuous mode
[  158.532316][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.566626][   T13] bridge_slave_0: left allmulticast mode
[  158.568682][   T13] bridge_slave_0: left promiscuous mode
[  158.571474][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.890550][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  158.896992][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  158.901839][   T13] bond0 (unregistering): Released all slaves
[  158.911185][   T13] bond1 (unregistering): Released all slaves
[  158.931025][  T791] hid (null): report_id 0 is invalid
[  159.002013][   T13] tipc: Disabling bearer <udp:syz2>
[  159.007757][   T13] tipc: Disabling bearer <udp:syz0>
[  159.010073][   T13] tipc: Left network mode
[  159.140651][  T791] usb 1-1: string descriptor 0 read error: -71
[  159.177019][ T8552] chnl_net:caif_netlink_parms(): no params data found
[  159.179905][  T791] usb 1-1: Max retries (5) exceeded reading string descriptor 200
[  159.182839][  T791] letsketch 0003:6161:4D15.0008: probe with driver letsketch failed with error -32
[  159.207499][  T791] usb 1-1: USB disconnect, device number 17
[  159.328206][ T8552] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.331374][ T8552] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.334013][ T8552] bridge_slave_0: entered allmulticast mode
[  159.339947][ T8552] bridge_slave_0: entered promiscuous mode
[  159.356506][   T13] hsr_slave_0: left promiscuous mode
[  159.359238][   T13] hsr_slave_1: left promiscuous mode
[  159.361727][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.364889][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.368353][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.370809][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.387704][   T13] veth1_macvtap: left promiscuous mode
[  159.390020][   T13] veth0_macvtap: left promiscuous mode
[  159.392253][   T13] veth1_vlan: left promiscuous mode
[  159.398153][   T13] veth0_vlan: left promiscuous mode
[  159.565258][ T5918] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  159.565495][ T5214] Bluetooth: hci3: command 0x1003 tx timeout
[  159.799479][   T33] audit: type=1326 audit(1759217963.784:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.0.1057" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a2f8ec29 code=0x7ffc0000
[  159.830725][   T33] audit: type=1326 audit(1759217963.784:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.0.1057" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a2f8ec29 code=0x7ffc0000
[  159.842310][   T33] audit: type=1326 audit(1759217963.814:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.0.1057" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0a2f8d590 code=0x7ffc0000
[  159.861469][   T33] audit: type=1326 audit(1759217963.814:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.0.1057" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc0a2f8e82b code=0x7ffc0000
[  159.899164][   T13] team0 (unregistering): Port device team_slave_1 removed
[  159.904044][ T8585] loop1: detected capacity change from 0 to 16
[  159.917410][ T8585] erofs (device loop1): mounted with root inode @ nid 36.
[  159.938898][   T13] team0 (unregistering): Port device team_slave_0 removed
[  160.095554][ T6003] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  160.270949][ T6003] usb 1-1: config 15 has an invalid interface number: 13 but max is 0
[  160.274381][ T6003] usb 1-1: config 15 has no interface number 0
[  160.282051][ T6003] usb 1-1: config 15 interface 13 has no altsetting 0
[  160.288767][ T6003] usb 1-1: New USB device found, idVendor=2001, idProduct=331d, bcdDevice=be.57
[  160.292563][ T6003] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.295985][ T8552] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.296064][ T8552] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.296189][ T8552] bridge_slave_1: entered allmulticast mode
[  160.301401][ T6003] usb 1-1: Product: syz
[  160.302708][ T8552] bridge_slave_1: entered promiscuous mode
[  160.304059][ T6003] usb 1-1: Manufacturer: syz
[  160.312253][ T6003] usb 1-1: SerialNumber: syz
[  160.345236][ T5815] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  160.358387][ T8552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  160.377216][ T8552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  160.409439][ T8552] team0: Port device team_slave_0 added
[  160.412667][ T8552] team0: Port device team_slave_1 added
[  160.447990][ T8552] batman_adv: batadv0: Adding interface: batadv_slave_0
[  160.450826][ T8552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.461779][ T8552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  160.467986][ T8552] batman_adv: batadv0: Adding interface: batadv_slave_1
[  160.470944][ T8552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.487939][ T8552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  160.509190][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.523354][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  160.526782][ T5815] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  160.530018][   T33] kauditd_printk_skb: 27 callbacks suppressed
[  160.530024][   T33] audit: type=1326 audit(1759217964.514:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.0.1057" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a2f8ec29 code=0x7ffc0000
[  160.539431][ T5918] Bluetooth: hci2: command tx timeout
[  160.545221][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.549513][ T5815] usb 2-1: config 0 descriptor??
[  160.553624][  T791] usb 1-1: USB disconnect, device number 18
[  160.567500][   T33] audit: type=1326 audit(1759217964.514:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.0.1057" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a2f8ec29 code=0x7ffc0000
[  160.572635][ T8552] hsr_slave_0: entered promiscuous mode
[  160.586976][ T8552] hsr_slave_1: entered promiscuous mode
[  160.589400][ T8552] debugfs: 'hsr0' already exists in 'hsr'
[  160.591808][ T8552] Cannot create hsr debugfs directory
[  160.640448][   T13] ------------[ cut here ]------------
[  160.642443][   T13] WARNING: CPU: 0 PID: 13 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x26d/0x2f0
[  160.645868][   T13] Modules linked in:
[  160.647426][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  160.651779][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  160.655725][   T13] Workqueue: netns cleanup_net
[  160.657478][   T13] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  160.659577][   T13] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 1b 22 43 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 99 d3 23 f8 e8 14 a1 df f7 90 <0f> 0b 90 e9 fd fd ff ff e8 06 a1 df f7 90 0f 0b 90 e9 60 fe ff ff
[  160.666056][   T13] RSP: 0018:ffffc90000107898 EFLAGS: 00010293
[  160.668217][   T13] RAX: ffffffff89de750c RBX: ffff888021c68000 RCX: ffff88801bef0000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  160.670899][   T13] RDX: 0000000000000000 RSI: ffffffff8d71699d RDI: ffff88801bef0000
[  160.673869][   T13] RBP: ffffc900001079b0 R08: ffffffff8f5cac37 R09: 1ffffffff1eb9586
[  160.676654][   T13] R10: dffffc0000000000 R11: fffffbfff1eb9587 R12: ffffffff8f1c5700
[  160.679364][   T13] R13: 1ffff92000020f40 R14: ffff888021c694c0 R15: dffffc0000000000
[  160.682045][   T13] FS:  0000000000000000(0000) GS:ffff8880b8d7e000(0000) knlGS:0000000000000000
[  160.685297][   T13] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  160.688141][   T13] CR2: 00005609b35fa131 CR3: 0000000028584000 CR4: 00000000000006f0
[  160.691504][   T13] Call Trace:
[  160.692982][   T13]  <TASK>
[  160.694296][   T13]  xfrm_net_exit+0x2d/0x70
[  160.696355][   T13]  ops_undo_list+0x49a/0x990
[  160.698421][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  160.700619][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  160.702832][   T13]  cleanup_net+0x4d8/0x820
[  160.704803][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  160.707020][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  160.709307][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  160.711822][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  160.714375][   T13]  process_scheduled_works+0xae1/0x17b0
[  160.716819][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  160.719290][   T13]  worker_thread+0x8a0/0xda0
[  160.720913][   T13]  kthread+0x711/0x8a0
[  160.722358][   T13]  ? __pfx_worker_thread+0x10/0x10
[  160.723972][   T13]  ? __pfx_kthread+0x10/0x10
[  160.725902][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  160.727948][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  160.730056][   T13]  ? __pfx_kthread+0x10/0x10
[  160.732059][   T13]  ret_from_fork+0x439/0x7d0
[  160.734084][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  160.736454][   T13]  ? __switch_to_asm+0x39/0x70
[  160.738266][   T13]  ? __switch_to_asm+0x33/0x70
[  160.740372][   T13]  ? __pfx_kthread+0x10/0x10
[  160.742357][   T13]  ret_from_fork_asm+0x1a/0x30
[  160.744447][   T13]  </TASK>
[  160.745844][   T13] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  160.748787][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  160.752539][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  160.756639][   T13] Workqueue: netns cleanup_net
[  160.758655][   T13] Call Trace:
[  160.760053][   T13]  <TASK>
[  160.761299][   T13]  dump_stack_lvl+0x99/0x250
[  160.763203][   T13]  ? __asan_memcpy+0x40/0x70
[  160.765127][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  160.767248][   T13]  ? __pfx__printk+0x10/0x10
[  160.769128][   T13]  vpanic+0x281/0x750
[  160.770762][   T13]  ? __pfx__printk+0x10/0x10
[  160.772701][   T13]  ? __pfx_vpanic+0x10/0x10
[  160.774592][   T13]  ? is_bpf_text_address+0x292/0x2b0
[  160.776768][   T13]  panic+0xb9/0xc0
[  160.777919][   T13]  ? __pfx_panic+0x10/0x10
[  160.779611][   T13]  __warn+0x31b/0x4b0
[  160.780957][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[  160.782885][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[  160.784520][   T13]  report_bug+0x2be/0x4f0
[  160.785890][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[  160.787570][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[  160.789443][   T13]  ? xfrm_state_fini+0x26f/0x2f0
[  160.791276][   T13]  handle_bug+0x84/0x160
[  160.792809][   T13]  exc_invalid_op+0x1a/0x50
[  160.794228][   T13]  asm_exc_invalid_op+0x1a/0x20
[  160.795886][   T13] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  160.797837][   T13] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 1b 22 43 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 99 d3 23 f8 e8 14 a1 df f7 90 <0f> 0b 90 e9 fd fd ff ff e8 06 a1 df f7 90 0f 0b 90 e9 60 fe ff ff
[  160.805084][   T13] RSP: 0018:ffffc90000107898 EFLAGS: 00010293
[  160.807251][   T13] RAX: ffffffff89de750c RBX: ffff888021c68000 RCX: ffff88801bef0000
[  160.810135][   T13] RDX: 0000000000000000 RSI: ffffffff8d71699d RDI: ffff88801bef0000
[  160.813367][   T13] RBP: ffffc900001079b0 R08: ffffffff8f5cac37 R09: 1ffffffff1eb9586
[  160.816571][   T13] R10: dffffc0000000000 R11: fffffbfff1eb9587 R12: ffffffff8f1c5700
[  160.819790][   T13] R13: 1ffff92000020f40 R14: ffff888021c694c0 R15: dffffc0000000000
[  160.823004][   T13]  ? xfrm_state_fini+0x26c/0x2f0
[  160.825053][   T13]  ? xfrm_state_fini+0x26c/0x2f0
[  160.827068][   T13]  xfrm_net_exit+0x2d/0x70
[  160.828725][   T13]  ops_undo_list+0x49a/0x990
[  160.830623][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  160.832707][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  160.834803][   T13]  cleanup_net+0x4d8/0x820
[  160.836656][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  160.838668][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  160.840744][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  160.843003][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  160.845366][   T13]  process_scheduled_works+0xae1/0x17b0
[  160.847628][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  160.850065][   T13]  worker_thread+0x8a0/0xda0
[  160.852007][   T13]  kthread+0x711/0x8a0
[  160.853706][   T13]  ? __pfx_worker_thread+0x10/0x10
[  160.855819][   T13]  ? __pfx_kthread+0x10/0x10
[  160.857732][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  160.859867][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  160.862006][   T13]  ? __pfx_kthread+0x10/0x10
[  160.863920][   T13]  ret_from_fork+0x439/0x7d0
[  160.865836][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  160.867907][   T13]  ? __switch_to_asm+0x39/0x70
[  160.869886][   T13]  ? __switch_to_asm+0x33/0x70
[  160.871804][   T13]  ? __pfx_kthread+0x10/0x10
[  160.873738][   T13]  ret_from_fork_asm+0x1a/0x30
[  160.875784][   T13]  </TASK>
[  160.877567][   T13] Kernel Offset: disabled
[  160.879366][   T13] Rebooting in 86400 seconds..

VM DIAGNOSIS:
07:35:02  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000107030
R8 =ffff88801ffd8237 R9 =1ffff11003ffb046 R10=dffffc0000000000 R11=ffffffff850b3ff0
R12=dffffc0000000000 R13=ffffffff99596919 R14=ffffffff99889380 R15=0000000000000000
RIP=ffffffff850b406c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8d7e000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005609b35fa131 CR3=0000000028584000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=ffff000000000000 000000000000ff00 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 00000000000000ff XMM05=000000000000002f 000000003265612f
XMM06=ffffffffffffff00 ffffffff00000000 XMM07=00000000000000ff 00000000000000ff
XMM08=ffffffffffffff00 ffffffff00000000 XMM09=0000000000000051 00000000326e6170
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=d43654e3a03e6300 RBX=ffffffff8194f198 RCX=d43654e3a03e6300 RDX=0000000000000001
RSI=ffffffff8d531ee2 RDI=ffffffff8b9e6fe0 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632fdb R9 =1ffff11026cc65fb R10=dffffc0000000000 R11=ffffed1026cc65fc
R12=ffffffff8f5cac30 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b35a153 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a417e000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055663a228000 CR3=000000001eedc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f5dfd012fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
