last executing test programs:

4m0.780468021s ago: executing program 2 (id=632):
socket$nl_generic(0x10, 0x3, 0x10)
gettid()
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0)

4m0.780047931s ago: executing program 2 (id=633):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x70bd27, 0x25dfdbf8, {0xa, 0x20, 0x19, 0xca, r1}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x600}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c051}, 0x20044804)
mprotect(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000)

4m0.685344623s ago: executing program 2 (id=635):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f90fa3c92b", 0x14}], 0x1}, 0x0)

4m0.634657967s ago: executing program 2 (id=636):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0xd2023, &(0x7f00000001c0)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}, 0x1, 0x0, 0x0)

4m0.525765133s ago: executing program 2 (id=638):
r0 = socket$inet(0x2, 0x1, 0x100)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f00000012c0)="09268a92", 0x4, 0x40054, 0x0, 0x0)

4m0.235964275s ago: executing program 2 (id=644):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000bc0)={0x3e})

4m0.13287152s ago: executing program 32 (id=644):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000bc0)={0x3e})

3m13.491830468s ago: executing program 3 (id=1056):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000080), 0x0}, 0x20)

3m13.43201979s ago: executing program 3 (id=1058):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000380)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xff, 0x6, 0x2000}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_DIR={0x5, 0x3, 0x3}}}}]}, 0x38}}, 0x0)

3m13.431388913s ago: executing program 3 (id=1059):
syz_read_part_table(0x106f, &(0x7f0000000000)="$eJzs0LFNxTAQBuDfEMt5bETFVjQUPFZgExagRmIDBqE95JeAsgDQfF9zyd3pt+Xwr07V1/HzV1Wnw7A/f15vX3dV9Zi8z52XJCMtS9Lm7D7nGfQd2JPbVlVtySxVl26uZit93xpPST5et2HWJDdJ3tLWfWHZ63b+6Jf8cx5G6nj9/gtPAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/7isAAP//xLcfbA==")

3m13.240550358s ago: executing program 3 (id=1060):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x80)
getdents64(r0, &(0x7f0000000000)=""/39, 0x27)

3m13.203391464s ago: executing program 3 (id=1061):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000010240)={&(0x7f0000000180), 0xc, &(0x7f0000010200)={&(0x7f00000001c0)={0x10, 0x3e9, 0x0, 0x8000000, 0x0, {0xffff, 0x3f7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0)

3m12.924872813s ago: executing program 3 (id=1062):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f0000000180)={[{@dioread_nolock}, {@jqfmt_vfsv0}]}, 0xff, 0x4a9, &(0x7f0000000580)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000002c0)=@v2={0x2, @aes128, 0x2, '\x00', @b})

3m12.797895834s ago: executing program 33 (id=1062):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f0000000180)={[{@dioread_nolock}, {@jqfmt_vfsv0}]}, 0xff, 0x4a9, &(0x7f0000000580)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000002c0)=@v2={0x2, @aes128, 0x2, '\x00', @b})

3m10.238705671s ago: executing program 1 (id=1088):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r1, 0x1, 0x0, 0xffffc, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x47c, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x1004)

3m10.236948863s ago: executing program 1 (id=1090):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCGPKT(r0, 0x40045431, &(0x7f00000001c0))

3m10.157235858s ago: executing program 1 (id=1091):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40)

3m10.156819847s ago: executing program 1 (id=1092):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000200)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x2080, 0x0)
io_setup(0x4, &(0x7f0000010440)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000019c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xfdfe, 0x100000000000000}])

3m9.955163766s ago: executing program 1 (id=1093):
r0 = socket$inet6(0xa, 0x3, 0x9)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x7f, {{0x29, 0x0, 0x2000000, @mcast1, 0x200d45}}}, 0x88)

3m9.129627323s ago: executing program 1 (id=1100):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d8005"], 0x2c}}, 0x0)

3m8.885220949s ago: executing program 34 (id=1100):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d8005"], 0x2c}}, 0x0)

1m14.727903344s ago: executing program 4 (id=2278):
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
ioctl$FICLONE(r0, 0x40049409, r1)

1m14.388101572s ago: executing program 4 (id=2279):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffa1, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[], 0x40}}, 0x0)
r0 = socket$inet(0x2, 0x2, 0x1)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000)

1m14.323215091s ago: executing program 4 (id=2280):
close(0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil)
mlock(&(0x7f0000626000/0x5000)=nil, 0x5000)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
prctl$PR_GET_TSC(0x43, &(0x7f0000000040))

1m13.393058816s ago: executing program 4 (id=2297):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x18)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
r1 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)

1m13.29264139s ago: executing program 4 (id=2301):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})

1m12.861719222s ago: executing program 4 (id=2307):
r0 = io_uring_setup(0x664c, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x5})
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
connect$l2tp6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x4044000)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[], 0x14)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f7, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)}], 0x1)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz1\x00'}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m12.468515879s ago: executing program 35 (id=2307):
r0 = io_uring_setup(0x664c, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x5})
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
connect$l2tp6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x4044000)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[], 0x14)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f7, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)}], 0x1)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz1\x00'}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4.395418623s ago: executing program 0 (id=3080):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

3.796840823s ago: executing program 6 (id=3089):
r0 = getpgrp(0x0)
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x34020000)

3.73759914s ago: executing program 6 (id=3090):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48094}, 0x240400c0)
syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x12, 0x14, 0x63, 0x0, 0xf, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local}}}}}, 0x0)

3.737193307s ago: executing program 6 (id=3091):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000940300000000000695"], &(0x7f0000000000)='GPL\x00'}, 0x90)

3.68767256s ago: executing program 6 (id=3092):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x2, 0x222, &(0x7f0000000800)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020)

3.684735587s ago: executing program 6 (id=3093):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
shutdown(r0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

3.376277343s ago: executing program 6 (id=3094):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0, 0x0, 0x3}, 0x18)
fsync(0xffffffffffffffff)

3.318471258s ago: executing program 36 (id=3094):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0, 0x0, 0x3}, 0x18)
fsync(0xffffffffffffffff)

3.023122343s ago: executing program 5 (id=3096):
syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, 0x0, 0xc094)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRES16, @ANYRESDEC=r1, @ANYRESOCT=r0], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$netlink(0x10, 0x3, 0x8000000004)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000380)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
r7 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_route(r7, &(0x7f0000000a80)={0x0, 0x300, &(0x7f0000000a40)={&(0x7f0000000200)=@setneightbl={0x1c, 0x43, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2}, [@NDTA_THRESH1={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20050}, 0x40080)
pipe(&(0x7f00000000c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = socket$inet_udp(0x2, 0x2, 0x0)
close(r10)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0)
write$binfmt_misc(r9, &(0x7f0000000000), 0xfffffecc)
splice(r8, 0x0, r10, 0x0, 0x4ffe2, 0x0)

2.103543527s ago: executing program 5 (id=3097):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x9b}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0)

1.989002274s ago: executing program 5 (id=3098):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0xc0, &(0x7f0000002280)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB=',nostrict,umask=00000000000000000177777,gid=forget,volume=00000000000000001023,noadinicb,novrs,lastblock=00000000000000000002,iocharset=cp932,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c000927ef269377351d90aeb50529825f700786beb0826da0bf9d36620d87d004d56ca63f2e70957efda4662ca0eab69a6221732d7cbdd8f6c022eb6c842004c94d39a0aa81d68ad1cca39fa8ddbb70aa75c886c11149d401ffcdab20fb3aed07ec97390337828e6bfa896e5875ceb3a020461d98fc2a61ac4685346c0fac3e0114e8bf33c9c8d36d9e451b5fb0b94421daa4e5142e192401bec01a9dbeba53d105f78b91bc6e07d984c1071ac746a483083a8c2eb0ed62057c9c4b4ec5bf54162a901e9c1f3f8b4e8c813e2a061482a7ca495b2f7c5ba527fbbd320d96e977145ed6152b9ce4ccef88a3"], 0x1, 0xc32, &(0x7f0000009100)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10010, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
open(&(0x7f0000000040)='./file1\x00', 0x181042, 0x0)
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00')

1.935358075s ago: executing program 5 (id=3099):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007292bd404020305582a80000000109021b0001000000000904000001df7fa9000905", @ANYBLOB="868f54"], 0x0)

1.327648837s ago: executing program 0 (id=3100):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
syz_emit_ethernet(0x2a, &(0x7f0000000300)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0)

989.330828ms ago: executing program 0 (id=3101):
syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

857.434378ms ago: executing program 0 (id=3102):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffffff, 0xb, 0x5}}}}]}, 0x40}}, 0x0)

603.240391ms ago: executing program 5 (id=3103):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000b00)=0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@acquire={0x128, 0x17, 0x10, 0x70bd2b, 0x25dfdbfe, {{@in=@multicast1, 0x4d3, 0xff}, @in=@dev={0xac, 0x14, 0x14, 0x34}, {@in=@remote, @in=@multicast2, 0x4e24, 0x0, 0x4e22, 0x8, 0xa, 0x0, 0x20, 0x62}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e22, 0x7, 0x4e23, 0x2, 0x0, 0xc0, 0x80}, {0x2, 0x7, 0x5, 0x4, 0x10001, 0x6, 0xce, 0x558}, {0x4, 0xfffffffeffffffff, 0x2, 0x7}, 0x3, 0x6e6bb2, 0x0, 0x1, 0x6, 0x3}, 0x3c, 0x6, 0x2, 0x70bd2a}}, 0x128}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

523.605962ms ago: executing program 5 (id=3104):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0)
ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000000c0)=0x1)
mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r0, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000))
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)

354.315µs ago: executing program 0 (id=3105):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0xffff, 0x0})

0s ago: executing program 0 (id=3106):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r2=>0x0})
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x34, r1, 0x5, 0x100000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8}, @NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x34}}, 0x4000800)
sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 PREEMPT(full) 
[  283.204956][ T8858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  283.204963][ T8858] Call Trace:
[  283.204967][ T8858]  <TASK>
[  283.204971][ T8858]  dump_stack_lvl+0x189/0x250
[  283.204989][ T8858]  ? __pfx_dump_stack_lvl+0x10/0x10
[  283.204999][ T8858]  ? __pfx_queue_work_on+0x10/0x10
[  283.205008][ T8858]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  283.205019][ T8858]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  283.205033][ T8858]  f2fs_handle_critical_error+0x37c/0x540
[  283.205048][ T8858]  f2fs_write_end_io+0x886/0xb60
[  283.205067][ T8858]  __submit_merged_bio+0x27a/0x6a0
[  283.205080][ T8858]  __submit_merged_write_cond+0x255/0x530
[  283.205092][ T8858]  f2fs_write_data_pages+0x261d/0x3000
[  283.205118][ T8858]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  283.205153][ T8858]  ? folios_put_refs+0x559/0x640
[  283.205203][ T8858]  ? __pfx_folios_put_refs+0x10/0x10
[  283.205213][ T8858]  ? rcu_is_watching+0x15/0xb0
[  283.205230][ T8858]  ? __lock_acquire+0xab9/0xd20
[  283.205256][ T8858]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  283.205271][ T8858]  do_writepages+0x32e/0x550
[  283.205291][ T8858]  ? do_raw_spin_unlock+0x4d/0x240
[  283.205303][ T8858]  filemap_fdatawrite+0x199/0x240
[  283.205315][ T8858]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  283.205347][ T8858]  ? do_raw_spin_unlock+0x4d/0x240
[  283.205358][ T8858]  f2fs_sync_dirty_inodes+0x31f/0x830
[  283.205377][ T8858]  f2fs_write_checkpoint+0x95a/0x1df0
[  283.205399][ T8858]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  283.205431][ T8858]  ? kill_f2fs_super+0x298/0x6c0
[  283.205445][ T8858]  kill_f2fs_super+0x2c3/0x6c0
[  283.205458][ T8858]  ? __pfx_kill_f2fs_super+0x10/0x10
[  283.205483][ T8858]  ? radix_tree_delete_item+0x2b6/0x400
[  283.205497][ T8858]  ? shrinker_free+0x2ce/0x3e0
[  283.205508][ T8858]  deactivate_locked_super+0xbc/0x130
[  283.205519][ T8858]  cleanup_mnt+0x425/0x4c0
[  283.205529][ T8858]  ? lockdep_hardirqs_on+0x9c/0x150
[  283.205541][ T8858]  task_work_run+0x1d4/0x260
[  283.205554][ T8858]  ? __pfx_task_work_run+0x10/0x10
[  283.205563][ T8858]  ? __x64_sys_umount+0x122/0x160
[  283.205576][ T8858]  ? exit_to_user_mode_loop+0x40/0x110
[  283.205591][ T8858]  exit_to_user_mode_loop+0xec/0x110
[  283.205602][ T8858]  do_syscall_64+0x2bd/0x3b0
[  283.205612][ T8858]  ? lockdep_hardirqs_on+0x9c/0x150
[  283.205621][ T8858]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.205630][ T8858]  ? exc_page_fault+0x9f/0xf0
[  283.205639][ T8858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.205647][ T8858] RIP: 0033:0x7f527998ff17
[  283.205658][ T8858] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  283.205665][ T8858] RSP: 002b:00007ffd27d01518 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  283.205675][ T8858] RAX: 0000000000000000 RBX: 00007f5279a11c05 RCX: 00007f527998ff17
[  283.205681][ T8858] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd27d015d0
[  283.205686][ T8858] RBP: 00007ffd27d015d0 R08: 0000000000000000 R09: 0000000000000000
[  283.205691][ T8858] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd27d02660
[  283.205696][ T8858] R13: 00007f5279a11c05 R14: 00000000000451c1 R15: 00007ffd27d026a0
[  283.205710][ T8858]  </TASK>
[  283.205714][ T8858] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  284.024684][T11277] loop5: detected capacity change from 0 to 32768
[  284.035381][T11277] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  284.079451][T11277] XFS (loop5): Ending clean mount
[  284.088477][T11277] XFS (loop5): Quotacheck needed: Please wait.
[  284.148514][T11277] XFS (loop5): Quotacheck: Done.
[  284.162449][   T33] audit: type=1800 audit(1755642600.955:126): pid=11277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2031" name="file1" dev="loop5" ino=9286 res=0 errno=0
[  284.218844][ T8858] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  284.829896][T11299] loop5: detected capacity change from 0 to 32768
[  284.860849][T11299] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  284.893528][T11299] XFS (loop5): Ending clean mount
[  284.907369][T11299] XFS (loop5): Quotacheck needed: Please wait.
[  284.944911][T11317] veth3: entered promiscuous mode
[  284.949513][T11299] XFS (loop5): Quotacheck: Done.
[  284.991392][ T8858] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  285.208254][T11323] loop5: detected capacity change from 0 to 512
[  285.215369][T11323] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  285.310937][   T33] audit: type=1326 audit(1755642602.105:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11328 comm="syz.4.2050" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd3ba18ebe9 code=0x0
[  286.243264][ T8858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.463020][T11376] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  286.681534][T11380] loop4: detected capacity change from 0 to 32768
[  286.687181][T11380] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  286.718977][T11384] loop5: detected capacity change from 0 to 512
[  286.733616][T11384] EXT4-fs (loop5): Test dummy encryption mode enabled
[  286.747585][T11384] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  286.761010][T11384] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.2075: bad orphan inode 131083
[  286.776078][T11384] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  286.799317][ T8858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.989697][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2082'.
[  287.184530][T11397] loop5: detected capacity change from 0 to 32768
[  287.188180][T11397] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2081 (11397)
[  287.196773][T11397] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  287.200887][T11397] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  287.204375][T11397] BTRFS info (device loop5): using free-space-tree
[  287.232974][T11397] BTRFS info (device loop5): rebuilding free space tree
[  287.380149][ T8858] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  287.522794][T11423] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input20
[  287.769657][T11439] netlink: 'syz.4.2093': attribute type 3 has an invalid length.
[  287.772647][T11439] netlink: 'syz.4.2093': attribute type 3 has an invalid length.
[  287.777531][T11439] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2093'.
[  287.805701][    T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  287.966200][    T9] usb 6-1: config 0 has an invalid interface number: 182 but max is 1
[  287.968892][    T9] usb 6-1: config 0 has no interface number 1
[  287.970749][    T9] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af
[  287.974698][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.982194][    T9] usb 6-1: config 0 descriptor??
[  288.192894][    T9] usb 6-1: USB disconnect, device number 16
[  288.244380][T11454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2100'.
[  289.112519][T11473] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.2105'.
[  289.117882][T11473] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.2105'.
[  289.974816][ T5910] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  290.130470][ T5910] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  290.137904][ T5910] usb 6-1: config 0 has no interface number 0
[  290.140435][ T5910] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  290.145709][ T5910] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  290.149735][ T5910] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  290.153458][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.159974][ T5910] usb 6-1: config 0 descriptor??
[  290.580757][ T5910] prodikeys 0003:041E:2801.000A: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.5-1/input1
[  290.591758][ T5910] hid_prodikeys: hid-prodikeys: failed to find output report
[  290.591758][ T5910] 
[  290.643658][T11483] loop4: detected capacity change from 0 to 131072
[  290.649946][T11483] F2FS-fs (loop4): Invalid log sectorsize (67108873)
[  290.652075][T11483] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  290.655802][T11483] F2FS-fs (loop4): invalid crc value
[  290.687271][T11483] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  290.693764][T11483] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  290.696748][T11483] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  290.721034][T11483] F2FS-fs (loop4): inconsistent node block, node_type:2, nid:8, node_footer[nid:8,ino:8,ofs:0,cpver:5013063228981249506,blkaddr:100678662]
[  290.781575][ T5910] usb 6-1: USB disconnect, device number 17
[  291.413580][T11500] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2117'.
[  291.675625][   T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  291.747793][T11506] loop5: detected capacity change from 0 to 40427
[  291.754096][T11506] F2FS-fs (loop5): invalid crc value
[  291.823849][T11506] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  291.828720][T11506] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  291.849933][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  291.854202][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  291.871259][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  291.888926][   T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  291.893167][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.909570][   T24] usb 5-1: config 0 descriptor??
[  291.953047][ T8858] syz-executor: attempt to access beyond end of device
[  291.953047][ T8858] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  291.961196][ T8858] CPU: 0 UID: 0 PID: 8858 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  291.961222][ T8858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  291.961232][ T8858] Call Trace:
[  291.961238][ T8858]  <TASK>
[  291.961245][ T8858]  dump_stack_lvl+0x189/0x250
[  291.961276][ T8858]  ? __pfx_dump_stack_lvl+0x10/0x10
[  291.961294][ T8858]  ? __pfx_queue_work_on+0x10/0x10
[  291.961311][ T8858]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  291.961332][ T8858]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  291.961360][ T8858]  f2fs_handle_critical_error+0x37c/0x540
[  291.961389][ T8858]  f2fs_write_end_io+0x886/0xb60
[  291.961427][ T8858]  __submit_merged_bio+0x27a/0x6a0
[  291.961453][ T8858]  __submit_merged_write_cond+0x255/0x530
[  291.961474][ T8858]  f2fs_write_data_pages+0x261d/0x3000
[  291.961556][ T8858]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  291.961573][ T8858]  ? is_bpf_text_address+0x26/0x2b0
[  291.961633][ T8858]  ? ktime_get+0x3e/0x1f0
[  291.961648][ T8858]  ? ktime_get+0x3e/0x1f0
[  291.961665][ T8858]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  291.961679][ T8858]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  291.961709][ T8858]  ? rcu_is_watching+0x15/0xb0
[  291.961734][ T8858]  ? __lock_acquire+0xab9/0xd20
[  291.961772][ T8858]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  291.961792][ T8858]  do_writepages+0x32e/0x550
[  291.961824][ T8858]  ? do_raw_spin_unlock+0x4d/0x240
[  291.961846][ T8858]  filemap_fdatawrite+0x199/0x240
[  291.961886][ T8858]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  291.961950][ T8858]  ? do_raw_spin_unlock+0x4d/0x240
[  291.961969][ T8858]  f2fs_sync_dirty_inodes+0x31f/0x830
[  291.962010][ T8858]  f2fs_write_checkpoint+0x95a/0x1df0
[  291.962049][ T8858]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  291.962115][ T8858]  ? kill_f2fs_super+0x298/0x6c0
[  291.962143][ T8858]  kill_f2fs_super+0x2c3/0x6c0
[  291.962169][ T8858]  ? __pfx_kill_f2fs_super+0x10/0x10
[  291.962184][ T8858]  ? radix_tree_delete_item+0x2b6/0x400
[  291.962210][ T8858]  ? shrinker_free+0x2ce/0x3e0
[  291.962229][ T8858]  deactivate_locked_super+0xbc/0x130
[  291.962251][ T8858]  cleanup_mnt+0x425/0x4c0
[  291.962284][ T8858]  ? lockdep_hardirqs_on+0x9c/0x150
[  291.962305][ T8858]  task_work_run+0x1d4/0x260
[  291.962328][ T8858]  ? __pfx_task_work_run+0x10/0x10
[  291.962344][ T8858]  ? __x64_sys_umount+0x122/0x160
[  291.962367][ T8858]  ? exit_to_user_mode_loop+0x40/0x110
[  291.962391][ T8858]  exit_to_user_mode_loop+0xec/0x110
[  291.962410][ T8858]  do_syscall_64+0x2bd/0x3b0
[  291.962427][ T8858]  ? lockdep_hardirqs_on+0x9c/0x150
[  291.962444][ T8858]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.962471][ T8858]  ? exc_page_fault+0x9f/0xf0
[  291.962517][ T8858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.962533][ T8858] RIP: 0033:0x7f527998ff17
[  291.962548][ T8858] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  291.962561][ T8858] RSP: 002b:00007ffd27d01518 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  291.962577][ T8858] RAX: 0000000000000000 RBX: 00007f5279a11c05 RCX: 00007f527998ff17
[  291.962586][ T8858] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd27d015d0
[  291.962593][ T8858] RBP: 00007ffd27d015d0 R08: 0000000000000000 R09: 0000000000000000
[  291.962601][ T8858] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd27d02660
[  291.962611][ T8858] R13: 00007f5279a11c05 R14: 00000000000473e5 R15: 00007ffd27d026a0
[  291.962638][ T8858]  </TASK>
[  291.963863][ T8858] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  292.197310][T11525] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9)
[  292.199560][T11525] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  292.205594][T11525] vhci_hcd vhci_hcd.0: Device attached
[  292.382711][   T24] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  292.385149][   T24] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  292.387687][   T24] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  292.390119][   T24] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  292.392526][   T24] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  292.445184][ T5910] usb 33-1: new high-speed USB device number 2 using vhci_hcd
[  292.986990][T11526] vhci_hcd: connection reset by peer
[  292.996766][   T13] vhci_hcd: stop threads
[  293.000458][   T13] vhci_hcd: release socket
[  293.007821][   T13] vhci_hcd: disconnect device
[  293.263100][T11539] netlink: 'syz.4.2132': attribute type 41 has an invalid length.
[  293.293640][T11541] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2133'.
[  293.298742][T11541] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2133'.
[  293.523715][T11551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  293.537245][   T24] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  293.558712][   T24] usb 5-1: USB disconnect, device number 17
[  293.739400][T11553] loop5: detected capacity change from 0 to 32768
[  293.762160][T11553] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=data_checksum=none,compression=lz4,recovery_pass_last=initialize_subvolumes,nojournal_transaction_names,noexcl,read_only
[  293.762178][T11553]   allowing incompatible features above 0.0: (unknown version)
[  293.762183][T11553]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  293.775483][T11553] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  293.778154][T11553] bcachefs (loop5): recovering from clean shutdown, journal seq 10
[  293.780650][T11553] bcachefs (loop5): Version upgrade required:
[  293.780650][T11553] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  293.780650][T11553] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  293.780650][T11553]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  293.829087][T11553] bcachefs (loop5): accounting_read... done
[  293.835272][T11553] bcachefs (loop5): alloc_read... done
[  293.838418][T11553] bcachefs (loop5): done starting filesystem
[  293.864868][   T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  293.874094][ T8858] bcachefs (loop5): shutting down
[  293.889767][ T8858] bcachefs (loop5): shutdown complete
[  294.024882][   T24] usb 5-1: Using ep0 maxpacket: 32
[  294.029179][   T24] usb 5-1: config 0 has an invalid interface number: 133 but max is 0
[  294.032373][   T24] usb 5-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config
[  294.036774][   T24] usb 5-1: config 0 has no interface number 0
[  294.039416][   T24] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  294.043207][   T24] usb 5-1: config 0 interface 133 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[  294.050529][   T24] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64
[  294.055595][   T24] usb 5-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  294.062956][   T24] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e
[  294.067548][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.070842][   T24] usb 5-1: Product: syz
[  294.072764][   T24] usb 5-1: Manufacturer: syz
[  294.075282][   T24] usb 5-1: SerialNumber: syz
[  294.080242][   T24] usb 5-1: config 0 descriptor??
[  294.082939][T11549] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  294.219139][T11562] netem: incorrect ge model size
[  294.221667][T11562] netem: change failed
[  294.335931][   T24] usb 5-1: probing VID:PID(0424:012C)   
[  294.342633][   T24] usb 5-1: vub300 testing BULK OUT EndPoint(0) 0B
[  294.345007][   T24] usb 5-1: vub300 testing UNKNOWN EndPoint(1) 01
[  294.347052][   T24] usb 5-1: vub300 ignoring EndPoint(1) 01
[  294.353375][   T24] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs
[  294.357350][   T24] vub300 5-1:0.133: probe with driver vub300 failed with error -22
[  294.369207][   T24] usb 5-1: USB disconnect, device number 18
[  294.906060][T11567] loop5: detected capacity change from 0 to 1764
[  295.140135][T11573] loop5: detected capacity change from 0 to 8
[  295.153664][T11573] SQUASHFS error: lzo decompression failed, data probably corrupt
[  295.156457][T11573] SQUASHFS error: Failed to read block 0x91: -5
[  295.158439][T11573] SQUASHFS error: Unable to read metadata cache entry [8f]
[  295.160826][T11573] SQUASHFS error: Unable to read inode 0x11f
[  295.198901][T11574] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.2148'.
[  295.202017][T11574] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2148'.
[  295.351681][T11576] loop5: detected capacity change from 0 to 8
[  295.558351][T11580] loop5: detected capacity change from 0 to 32768
[  295.564704][T11580] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  295.573439][T11580] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  295.582490][T11580] XFS (loop5): Ending clean mount
[  295.633444][ T8858] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  295.852471][T11602] loop5: detected capacity change from 0 to 1024
[  295.870352][T11602] hfsplus: bad catalog entry type
[  295.893771][   T36] hfsplus: b-tree write err: -5, ino 4
[  295.921932][T11610] loop5: detected capacity change from 0 to 1024
[  296.001826][T10961] hfsplus: b-tree write err: -5, ino 4
[  296.252977][T11620] loop5: detected capacity change from 0 to 32768
[  296.262622][T11620] ERROR: (device loop5): diAllocAG: error reading iag
[  296.262622][T11620] 
[  296.273431][T11620] ialloc: diAlloc returned -5!
[  296.344751][    T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  296.524681][    T9] usb 5-1: Using ep0 maxpacket: 32
[  296.536270][    T9] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  296.538870][    T9] usb 5-1: config 0 has no interface number 0
[  296.542769][    T9] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  296.546274][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.550761][    T9] usb 5-1: Product: syz
[  296.552599][    T9] usb 5-1: Manufacturer: syz
[  296.554342][    T9] usb 5-1: SerialNumber: syz
[  296.558126][    T9] usb 5-1: config 0 descriptor??
[  296.561761][    T9] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  296.767688][    T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  296.773451][    T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  297.177392][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  297.186184][    T9] usb 5-1: USB disconnect, device number 19
[  297.192571][    T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  297.201821][    T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  297.211123][    T9] quatech2 5-1:0.51: device disconnected
[  297.219369][T11636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2174'.
[  297.567213][ T5910] vhci_hcd: vhci_device speed not set
[  298.259153][T11645] loop4: detected capacity change from 0 to 32768
[  298.324098][T11645] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  298.361815][T11645] (syz.4.2178,11645,0):ocfs2_find_entry:1094 ERROR: status = -117
[  298.375324][T11645] (syz.4.2178,11645,0):ocfs2_find_entry:1094 ERROR: status = -117
[  298.378414][T11645] (syz.4.2178,11645,0):ocfs2_symlink:2080 ERROR: status = -117
[  298.499675][ T8775] (syz-executor,8775,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 76
[  298.523446][ T8775] ocfs2: Unmounting device (7,4) on (node local)
[  298.627015][T11661] loop5: detected capacity change from 0 to 4096
[  298.634701][T11661] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  298.676261][T11661] ntfs3(loop5): ino=1a, mi_enum_attr
[  298.678370][T11661] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  298.685409][T11661] ntfs3(loop5): ino=1a, mi_enum_attr
[  298.691584][T11661] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  298.880797][T11685] netlink: 'syz.0.2196': attribute type 7 has an invalid length.
[  298.892987][T11685] netlink: 'syz.0.2196': attribute type 8 has an invalid length.
[  298.993404][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2201'.
[  299.030423][T11695] 8021q: adding VLAN 0 to HW filter on device bond1
[  299.078269][T11695] 8021q: adding VLAN 0 to HW filter on device bond1
[  299.087069][T11695] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  299.099651][T11695] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  300.609927][T11701] loop4: detected capacity change from 0 to 32768
[  300.612714][T11701] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2203 (11701)
[  300.622197][T11701] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  300.627700][T11701] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  300.630329][T11701] BTRFS info (device loop4): disk space caching is enabled
[  300.632690][T11701] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  300.659414][T11701] BTRFS info (device loop4): rebuilding free space tree
[  300.666450][T11701] BTRFS info (device loop4): disabling free space tree
[  300.668568][T11701] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  300.671471][T11701] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  300.761226][ T8775] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  300.796216][ T5942] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  300.968007][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  300.971326][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  300.974249][ T5942] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  300.999645][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.003544][ T5942] usb 6-1: config 0 descriptor??
[  301.431136][ T5942] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0
[  301.436845][ T5942] hid-thrustmaster 0003:044F:B65D.000C: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0
[  301.440636][ T5942] hid-thrustmaster 0003:044F:B65D.000C: Wrong number of endpoints?
[  301.757631][T11765] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  301.800926][    C1] hid-thrustmaster 0003:044F:B65D.000C: URB to get model id failed with error -71
[  301.805657][ T5942] usb 6-1: USB disconnect, device number 18
[  301.902843][T11765] loop4: detected capacity change from 0 to 32768
[  301.926245][T11765] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  301.966138][T11765] XFS (loop4): Ending clean mount
[  302.493352][T11788] random: crng reseeded on system resumption
[  302.684653][ T5942] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[  302.813445][ T8775] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  302.851307][ T5942] usb 6-1: config 0 has an invalid interface number: 81 but max is 0
[  302.872831][ T5942] usb 6-1: config 0 has no interface number 0
[  302.881431][ T5942] usb 6-1: config 0 interface 81 altsetting 6 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  302.903972][ T5942] usb 6-1: config 0 interface 81 has no altsetting 0
[  302.936612][ T5942] usb 6-1: New USB device found, idVendor=07b0, idProduct=0006, bcdDevice=40.a8
[  302.948119][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.978303][ T5942] usb 6-1: Product: syz
[  302.982555][ T5942] usb 6-1: Manufacturer: syz
[  302.996915][ T5942] usb 6-1: SerialNumber: syz
[  303.038711][ T5942] usb 6-1: config 0 descriptor??
[  303.041585][T11787] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  303.261324][ T5942] HFC-S_USB 6-1:0.81: probe with driver HFC-S_USB failed with error -5
[  303.283912][ T5942] usb 6-1: USB disconnect, device number 19
[  303.306608][T11790] veth0: entered promiscuous mode
[  303.317238][T11790] veth0: left promiscuous mode
[  303.513103][T11808] netlink: 'syz.4.2241': attribute type 84 has an invalid length.
[  303.566026][T11810] loop4: detected capacity change from 0 to 4096
[  303.568886][T11810] EXT4-fs: inline encryption not supported
[  303.571758][T11810] EXT4-fs (loop4): Test dummy encryption mode enabled
[  303.577680][T11810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  303.616922][ T8775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.824370][T11854] loop5: detected capacity change from 0 to 128
[  304.843052][   T33] audit: type=1800 audit(1755642621.635:128): pid=11854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2258" name="bus" dev="loop5" ino=1048676 res=0 errno=0
[  304.893565][T11854] syz.5.2258: attempt to access beyond end of device
[  304.893565][T11854] loop5: rw=0, sector=121, nr_sectors = 920 limit=128
[  305.052290][T11856] loop5: detected capacity change from 0 to 512
[  305.055004][T11856] EXT4-fs: Ignoring removed i_version option
[  305.057624][T11856] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  305.062596][T11856] EXT4-fs (loop5): 1 truncate cleaned up
[  305.066629][T11856] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  305.093020][ T8858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.160127][T11863] loop5: detected capacity change from 0 to 1024
[  305.212347][T11863] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  305.216343][T11863] ext4 filesystem being mounted at /369/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  305.243341][   T33] audit: type=1800 audit(1755642622.035:129): pid=11863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2260" name="file1" dev="loop5" ino=15 res=0 errno=0
[  305.368572][ T8858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.521395][T11865] loop4: detected capacity change from 0 to 32768
[  305.526574][T11865] btrfs: Deprecated parameter 'usebackuproot'
[  305.528548][T11865] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  305.532654][T11865] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2263 (11865)
[  305.546741][T11865] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  305.550216][T11865] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  305.554419][T11865] BTRFS info (device loop4): disk space caching is enabled
[  305.562423][T11865] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  305.596805][T11865] btrfs: Deprecated parameter 'usebackuproot'
[  305.598870][T11865] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  305.601910][T11865] BTRFS warning (device loop4 state M): remount supports changing free space tree only from RO to RW
[  305.606987][T11865] BTRFS info (device loop4 state M): enabling free space tree
[  305.610072][T11865] BTRFS info (device loop4 state M): force clearing of disk cache
[  305.612948][T11865] BTRFS info (device loop4 state M): trying to use backup root at mount time
[  305.618200][T11865] BTRFS info (device loop4 state M): disabling disk space caching
[  305.624829][T11865] btrfs: Deprecated parameter 'usebackuproot'
[  305.627354][T11865] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  305.630660][T11865] BTRFS info (device loop4 state M): rebuilding free space tree
[  305.696568][T11865] BTRFS info (device loop4 state M): disabling free space tree
[  305.699386][T11865] BTRFS info (device loop4 state M): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  305.705975][T11865] BTRFS info (device loop4 state M): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  305.760009][T11865] BTRFS info (device loop4 state M): enabling disk space caching
[  305.762555][T11865] BTRFS info (device loop4 state M): force clearing of disk cache
[  305.768223][T11865] BTRFS info (device loop4 state M): trying to use backup root at mount time
[  305.771299][T11865] BTRFS info (device loop4 state M): disabling free space tree
[  306.044172][ T8775] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  306.719250][T11904] loop4: detected capacity change from 0 to 1024
[  306.723835][T11904] EXT4-fs: inline encryption not supported
[  306.730054][T11904] EXT4-fs: Ignoring removed bh option
[  306.759637][T11904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  306.925816][T11914] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2274'.
[  306.928693][T11914] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2274'.
[  307.063841][ T8775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.233036][T11916] loop5: detected capacity change from 0 to 32768
[  307.251745][T11916] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  307.510960][T11916] XFS (loop5): Ending clean mount
[  307.520963][T11916] XFS (loop5): Quotacheck needed: Please wait.
[  307.568401][T11916] XFS (loop5): Quotacheck: Done.
[  307.706423][ T8858] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  308.184814][T11953] loop5: detected capacity change from 0 to 8
[  308.191073][T11954] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2286'.
[  308.289000][T11960] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  308.292651][T11960] overlayfs: failed to set xattr on upper
[  308.294521][T11960] overlayfs: ...falling back to index=off.
[  308.297615][T11960] overlayfs: ...falling back to uuid=null.
[  308.517374][T11975] loop5: detected capacity change from 0 to 1024
[  308.567140][ T8513] hfsplus: b-tree write err: -5, ino 8
[  308.602497][T11978] loop4: detected capacity change from 0 to 8192
[  308.817090][   T33] audit: type=1326 audit(1755642625.615:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.0.2305" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff833b8ebe9 code=0x7ffc0000
[  308.827569][   T33] audit: type=1326 audit(1755642625.615:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.0.2305" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff833b8ebe9 code=0x7ffc0000
[  308.837591][   T33] audit: type=1326 audit(1755642625.625:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.0.2305" exe="/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7ff833b8ebe9 code=0x7ffc0000
[  308.845052][   T33] audit: type=1326 audit(1755642625.625:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.0.2305" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff833b8ebe9 code=0x7ffc0000
[  308.853681][   T33] audit: type=1326 audit(1755642625.625:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.0.2305" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff833b8ebe9 code=0x7ffc0000
[  309.213900][T11997] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.2306'.
[  309.218139][T11997] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.2306'.
[  309.384844][ T5875] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  309.394913][ T5875] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.509202][ T5875] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  309.512876][ T5875] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.596613][ T5875] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  309.601069][ T5875] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.676513][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  309.687174][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  309.712534][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  309.718705][ T5875] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  309.723416][ T5875] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.731822][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  309.739573][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  309.793866][   T24] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[  309.983516][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  309.987161][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  309.990161][   T24] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  309.993000][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.997301][   T24] usb 6-1: config 0 descriptor??
[  310.062619][ T5875] bridge_slave_1: left allmulticast mode
[  310.065745][ T5875] bridge_slave_1: left promiscuous mode
[  310.068354][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.074454][ T5875] bridge_slave_0: left allmulticast mode
[  310.078951][ T5875] bridge_slave_0: left promiscuous mode
[  310.081650][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.876408][ T5875]  (unregistering): (slave bond_slave_0): Releasing backup interface
[  310.882268][ T5875]  (unregistering): (slave bond_slave_1): Releasing backup interface
[  310.889679][ T5875]  (unregistering): Released all slaves
[  311.121804][   T24] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0
[  311.138589][ T5875] bond0 (unregistering): Released all slaves
[  311.156021][T12002] chnl_net:caif_netlink_parms(): no params data found
[  311.182986][    T9] usb 6-1: USB disconnect, device number 20
[  311.262388][ T5875] tipc: Left network mode
[  311.386941][T12002] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.390053][T12002] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.393041][T12002] bridge_slave_0: entered allmulticast mode
[  311.397395][T12002] bridge_slave_0: entered promiscuous mode
[  311.401968][T12002] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.416985][T12002] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.419920][T12002] bridge_slave_1: entered allmulticast mode
[  311.423384][T12002] bridge_slave_1: entered promiscuous mode
[  311.479464][T12002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  311.484003][T12002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  311.520229][T12002] team0: Port device team_slave_0 added
[  311.523532][T12002] team0: Port device team_slave_1 added
[  311.539229][ T5875] hsr_slave_0: left promiscuous mode
[  311.541349][ T5875] hsr_slave_1: left promiscuous mode
[  311.543391][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  311.547347][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_0
[  311.550124][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  311.552397][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_1
[  311.571135][ T5875] veth1_macvtap: left promiscuous mode
[  311.572956][ T5875] veth0_macvtap: left promiscuous mode
[  311.575737][ T5875] veth1_vlan: left promiscuous mode
[  311.577920][ T5875] veth0_vlan: left promiscuous mode
[  311.896469][ T5235] Bluetooth: hci2: command tx timeout
[  312.331920][ T5875] team0 (unregistering): Port device team_slave_1 removed
[  312.396053][ T5875] team0 (unregistering): Port device team_slave_0 removed
[  313.150115][T12034] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.153748][T12034] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.173114][T12034] ipvlan2: left allmulticast mode
[  313.176218][T12034] netdevsim netdevsim5 netdevsim0: left allmulticast mode
[  313.189987][T12002] batman_adv: batadv0: Adding interface: batadv_slave_0
[  313.192375][T12002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  313.203043][T12002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  313.207784][T12002] batman_adv: batadv0: Adding interface: batadv_slave_1
[  313.210043][T12002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  313.220949][T12002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  313.287371][T12002] hsr_slave_0: entered promiscuous mode
[  313.299982][T12002] hsr_slave_1: entered promiscuous mode
[  313.450329][ T5875] IPVS: stop unused estimator thread 0...
[  313.549265][T12002] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  313.556441][T12002] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  313.560973][T12002] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  313.564725][  T794] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[  313.566019][T12002] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  313.628273][T12002] 8021q: adding VLAN 0 to HW filter on device bond0
[  313.642614][T12002] 8021q: adding VLAN 0 to HW filter on device team0
[  313.648835][T10961] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.651052][T10961] bridge0: port 1(bridge_slave_0) entered forwarding state
[  313.658973][T10961] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.661161][T10961] bridge0: port 2(bridge_slave_1) entered forwarding state
[  313.717411][  T794] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  313.724750][  T794] usb 6-1: config 0 has no interface number 0
[  313.727165][  T794] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  313.730993][  T794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.738281][  T794] usb 6-1: config 0 descriptor??
[  313.744111][  T794] usb 6-1: selecting invalid altsetting 1
[  313.753288][  T794] dvb_ttusb_budget: ttusb_init_controller: error
[  313.757184][  T794] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  313.792647][  T794] DVB: Unable to find symbol cx22700_attach()
[  313.805629][T12002] 8021q: adding VLAN 0 to HW filter on device batadv0
[  313.813480][  T794] DVB: Unable to find symbol tda10046_attach()
[  313.817215][  T794] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  313.942439][T12002] veth0_vlan: entered promiscuous mode
[  313.948029][T12002] veth1_vlan: entered promiscuous mode
[  313.950338][  T794] usb 6-1: USB disconnect, device number 21
[  313.970743][T12002] veth0_macvtap: entered promiscuous mode
[  313.975692][T12002] veth1_macvtap: entered promiscuous mode
[  313.984979][ T5235] Bluetooth: hci2: command tx timeout
[  313.987770][T12002] batman_adv: batadv0: Interface activated: batadv_slave_0
[  313.994473][T12002] batman_adv: batadv0: Interface activated: batadv_slave_1
[  314.001321][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  314.007044][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  314.010222][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  314.016343][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  314.077946][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  314.080301][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  314.099654][ T2972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  314.102092][ T2972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  314.317691][T12080] loop6: detected capacity change from 0 to 128
[  314.332285][T12080] EXT4-fs: Ignoring removed nomblk_io_submit option
[  314.336175][T12080] EXT4-fs: Ignoring removed nomblk_io_submit option
[  314.348470][T12080] EXT4-fs (loop6): Test dummy encryption mode enabled
[  314.358367][T12080] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  314.363428][T12080] ext4 filesystem being mounted at mnt:[4026532753] supports timestamps until 2038-01-19 (0x7fffffff)
[  314.372934][T12080] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  314.601840][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2336'.
[  314.635010][T12095] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2337'.
[  315.609596][T12124] loop5: detected capacity change from 0 to 4096
[  315.613369][T12124] EXT4-fs (loop5): Test dummy encryption mode enabled
[  315.617989][T12124] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  315.620599][T12124] System zones: 0-5
[  315.623386][T12124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  315.667374][ T8858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.885000][T12151] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  316.055736][ T5235] Bluetooth: hci2: command tx timeout
[  316.271559][T12163] loop5: detected capacity change from 0 to 32768
[  316.456273][T12167] loop6: detected capacity change from 0 to 32768
[  316.462358][T12167] (syz.6.2369,12167,0):ocfs2_find_slot:468 ERROR: no free slots available!
[  316.465844][T12167] (syz.6.2369,12167,0):ocfs2_mount_volume:1751 ERROR: status = -22
[  316.469489][T12167] (syz.6.2369,12167,0):ocfs2_fill_super:1177 ERROR: status = -22
[  316.747400][T12180] loop5: detected capacity change from 0 to 32768
[  316.751439][T12180] bcachefs: bch2_fs_open() bch_fs_open err opening /dev/loop5: erofs_nochanges
[  316.754443][T12180] bcachefs: bch2_fs_get_tree() error: erofs_nochanges
[  316.807935][T12184] loop6: detected capacity change from 0 to 32768
[  316.823252][   T33] audit: type=1800 audit(1755642633.615:135): pid=12184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2377" name="file1" dev="loop6" ino=4 res=0 errno=0
[  316.837573][T12184] ERROR: (device loop6): dbAllocBits: leaf page corrupt
[  316.837573][T12184] 
[  316.840858][T12184] ERROR: (device loop6): remounting filesystem as read-only
[  316.843717][T12184] syz.6.2377: attempt to access beyond end of device
[  316.843717][T12184] loop6: rw=34817, sector=4680704, nr_sectors = 792 limit=32768
[  316.854506][T12184] blkno = 8ed80, nblocks = 63
[  316.861524][T12184] ERROR: (device loop6): dbFree: block to be freed is outside the map
[  316.861524][T12184] 
[  316.871550][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  316.873628][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  317.594707][  T794] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  317.749676][  T794] usb 7-1: config index 0 descriptor too short (expected 61256, got 72)
[  317.753190][  T794] usb 7-1: config 1 has an invalid interface number: 0 but max is -1
[  317.756660][  T794] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  317.760192][  T794] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 0
[  317.762959][  T794] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  317.768686][  T794] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  317.774714][  T794] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  317.778402][  T794] usb 7-1: SerialNumber: syz
[  317.783919][  T794] cdc_acm 7-1:1.0: Control and data interfaces are not separated!
[  317.786650][  T794] cdc_acm 7-1:1.0: This needs exactly 3 endpoints
[  317.788912][  T794] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -22
[  317.992588][  T794] usb 7-1: USB disconnect, device number 2
[  318.134986][ T5235] Bluetooth: hci2: command tx timeout
[  318.269121][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2390'.
[  318.271886][T12213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2390'.
[  318.277687][T12213] netlink: 'syz.0.2390': attribute type 18 has an invalid length.
[  318.318580][T12215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2391'.
[  318.829868][T12227] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9)
[  318.832266][T12227] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  318.838556][T12227] vhci_hcd vhci_hcd.0: Device attached
[  318.898864][T12228] vhci_hcd: connection closed
[  318.903207][   T13] vhci_hcd: stop threads
[  318.910093][   T13] vhci_hcd: release socket
[  318.914191][   T13] vhci_hcd: disconnect device
[  319.494920][  T794] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  320.016331][  T794] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  320.019996][  T794] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  320.023712][  T794] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  320.027191][  T794] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.032334][  T794] usb 7-1: config 0 descriptor??
[  320.203623][T12253] loop5: detected capacity change from 0 to 128
[  320.207797][T12253] ufs: You didn't specify the type of your ufs filesystem
[  320.207797][T12253] 
[  320.207797][T12253] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  320.207797][T12253] 
[  320.207797][T12253] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  320.222497][T12253] ufs: ufstype=old is supported read-only
[  320.231282][T12253] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  320.241313][  T794] usbhid 7-1:0.0: can't add hid device: -71
[  320.243131][  T794] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  320.248003][  T794] usb 7-1: USB disconnect, device number 3
[  320.474348][  T794] Process accounting resumed
[  320.526746][T12277] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2419'.
[  320.697930][ T5877] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  320.844671][ T5877] usb 7-1: Using ep0 maxpacket: 32
[  320.850141][ T5877] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  320.853590][ T5877] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  320.856933][ T5877] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  320.859655][ T5877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.872922][ T5877] usb 7-1: config 0 descriptor??
[  320.882418][ T5877] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  320.901098][ T5877] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  321.119875][ T5877] usb 7-1: USB disconnect, device number 4
[  321.138319][ T5877] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[  322.034291][T12320] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2438'.
[  322.964725][  T793] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  323.146809][  T793] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  323.150488][  T793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.156847][  T793] usb 6-1: config 0 descriptor??
[  323.367681][  T793] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  323.380270][T12330] loop6: detected capacity change from 0 to 1024
[  323.383580][T12330] EXT4-fs: Ignoring removed nomblk_io_submit option
[  323.388979][T12330] EXT4-fs: Invalid want_extra_isize 130
[  323.568976][  T793] [drm:udl_init] *ERROR* Selecting channel failed
[  323.577762][  T793] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 3
[  323.579822][  T793] [drm] Initialized udl on minor 3
[  323.583531][  T793] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  323.586729][  T793] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  323.592946][   T24] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  323.596506][  T793] usb 6-1: USB disconnect, device number 22
[  323.598468][   T24] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  323.679407][T12346] loop6: detected capacity change from 0 to 512
[  323.681870][T12346] vfat: Unknown parameter '?Q'
[  324.251813][T12361] sctp: [Deprecated]: syz.0.2457 (pid 12361) Use of int in maxseg socket option.
[  324.251813][T12361] Use struct sctp_assoc_value instead
[  324.393643][T12373] loop5: detected capacity change from 0 to 764
[  324.399213][T12373] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  324.731163][   T24] usb 6-1: new low-speed USB device number 23 using dummy_hcd
[  325.146747][   T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  325.150455][   T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  325.153162][   T24] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  325.157292][   T24] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  325.160080][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.165717][   T24] hub 6-1:1.0: bad descriptor, ignoring hub
[  325.167755][   T24] hub 6-1:1.0: probe with driver hub failed with error -5
[  325.170142][   T24] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[  325.194110][T12398] raw_sendmsg: syz.0.2473 forgot to set AF_INET. Fix it!
[  325.240118][ T1097] Bluetooth: hci3: Frame reassembly failed (-84)
[  325.243897][T12400] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  325.532006][   T24] usb 6-1: USB disconnect, device number 23
[  325.660393][T12407] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2477'.
[  326.610424][T12414] loop6: detected capacity change from 0 to 32768
[  326.647443][T12414] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  326.668832][T12414] XFS (loop6): Ending clean mount
[  326.672224][T12414] XFS (loop6): Quotacheck needed: Please wait.
[  326.705119][T12414] XFS (loop6): Quotacheck: Done.
[  326.723540][T12002] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  326.872185][T12424] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2482'.
[  326.916076][T12426] loop6: detected capacity change from 0 to 16
[  326.918940][T12426] erofs (device loop6): mounted with root inode @ nid 36.
[  326.928011][T12426] erofs (device loop6): readahead error at folio 6 @ nid 36
[  326.930706][T12426] erofs (device loop6): readahead error at folio 4 @ nid 36
[  326.934274][T12426] erofs (device loop6): invalid logical cluster 0 at nid 36
[  326.938113][T12426] erofs (device loop6): readahead error at folio 0 @ nid 36
[  326.940672][T12426] syz.6.2481: attempt to access beyond end of device
[  326.940672][T12426] loop6: rw=524288, sector=296, nr_sectors = 16 limit=16
[  326.946043][T12426] syz.6.2481: attempt to access beyond end of device
[  326.946043][T12426] loop6: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  326.950207][T12426] syz.6.2481: attempt to access beyond end of device
[  326.950207][T12426] loop6: rw=524288, sector=8, nr_sectors = 16 limit=16
[  326.954316][T12426] syz.6.2481: attempt to access beyond end of device
[  326.954316][T12426] loop6: rw=524288, sector=720, nr_sectors = 16 limit=16
[  326.963859][T12426] erofs (device loop6): invalid logical cluster 0 at nid 36
[  326.968141][T12426] syz.6.2481: attempt to access beyond end of device
[  326.968141][T12426] loop6: rw=0, sector=296, nr_sectors = 8 limit=16
[  326.973568][T12426] erofs (device loop6): read error -5 @ 0 of nid 36
[  326.976375][T12426] erofs (device loop6): failed to readdir of logical block 0 of nid 36
[  326.979137][T12427] erofs (device loop6): invalid logical cluster 0 at nid 36
[  326.981576][T12427] syz.6.2481: attempt to access beyond end of device
[  326.981576][T12427] loop6: rw=0, sector=296, nr_sectors = 8 limit=16
[  326.986989][T12427] erofs (device loop6): read error -5 @ 0 of nid 36
[  326.989100][T12427] erofs (device loop6): failed to readdir of logical block 0 of nid 36
[  327.051934][T12431] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2484'.
[  327.119143][T12435] loop6: detected capacity change from 0 to 1024
[  327.132173][T12435] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  327.144527][T12435] EXT4-fs error (device loop6): ext4_get_first_dir_block:3556: inode #11: comm syz.6.2486: directory missing '..'
[  327.144717][ T5877] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  327.167211][T12002] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.255404][   T54] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  327.309312][ T5877] usb 6-1: config index 0 descriptor too short (expected 8192, got 36)
[  327.312622][ T5877] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  327.317015][ T5877] usb 6-1: config 0 has no interfaces?
[  327.319233][ T5877] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  327.322758][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.330155][ T5877] usb 6-1: config 0 descriptor??
[  327.408654][T12454] usb usb8: usbfs: process 12454 (syz.0.2494) did not claim interface 0 before use
[  327.525177][  T793] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  327.540168][  T794] usb 6-1: USB disconnect, device number 24
[  327.687672][  T793] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  327.691068][  T793] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  327.694020][  T793] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  327.698189][  T793] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  327.701042][  T793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.713180][  T793] usb 7-1: config 0 descriptor??
[  327.943851][T12466] JFS: charset not found
[  328.142245][  T793] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  329.461943][T12499] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2512'.
[  329.465404][T12499] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  329.490209][  T793] usb 7-1: USB disconnect, device number 5
[  329.503713][T12499] batman_adv: batadv0: Removing interface: batadv_slave_1
[  330.194809][   T33] audit: type=1400 audit(1755642646.975:136): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=":(%#{//(@\)//&@},['%%&\#*" pid=12512 comm="syz.0.2517"
[  330.212767][   T33] audit: type=1326 audit(1755642647.005:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.6.2518" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7378ebe9 code=0x7ffc0000
[  330.229538][   T33] audit: type=1326 audit(1755642647.005:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.6.2518" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7378ebe9 code=0x7ffc0000
[  330.239143][   T33] audit: type=1326 audit(1755642647.005:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.6.2518" exe="/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fdf7378ebe9 code=0x7ffc0000
[  330.246692][   T33] audit: type=1326 audit(1755642647.005:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.6.2518" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7378ebe9 code=0x7ffc0000
[  330.255825][   T33] audit: type=1326 audit(1755642647.005:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.6.2518" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7378ebe9 code=0x7ffc0000
[  330.267727][   T33] audit: type=1326 audit(1755642647.015:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.6.2518" exe="/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fdf7378ebe9 code=0x7ffc0000
[  330.291790][   T33] audit: type=1326 audit(1755642647.015:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.6.2518" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7378ebe9 code=0x7ffc0000
[  330.306564][   T33] audit: type=1326 audit(1755642647.015:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.6.2518" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7378ebe9 code=0x7ffc0000
[  330.850310][T12539] loop5: detected capacity change from 0 to 40427
[  330.864431][T12539] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  330.867845][T12539] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  330.876218][T12539] F2FS-fs (loop5): invalid crc value
[  330.902771][T12561] loop6: detected capacity change from 0 to 512
[  330.929273][T12539] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  330.933109][T12539] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  330.936634][T12539] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  331.013765][ T8858] syz-executor: attempt to access beyond end of device
[  331.013765][ T8858] loop5: rw=2051, sector=77824, nr_sectors = 2560 limit=40427
[  331.029247][ T8858] F2FS-fs (loop5): Issue discard(9728, 9728, 320) failed, ret: -5
[  331.099262][T12570] loop6: detected capacity change from 0 to 512
[  331.108403][T12570] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001)
[  331.110863][T12570] FAT-fs (loop6): Filesystem has been set read-only
[  331.147015][T12572] loop6: detected capacity change from 0 to 256
[  331.556521][T12586] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2550'.
[  332.784790][  T794] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  332.954687][T12072] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  332.957290][  T794] usb 6-1: Using ep0 maxpacket: 32
[  332.960816][  T794] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[  332.963260][  T794] usb 6-1: config 0 has no interface number 0
[  332.965317][  T794] usb 6-1: config 0 interface 12 has no altsetting 0
[  332.969440][  T794] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  332.972235][  T794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.975443][  T794] usb 6-1: Product: syz
[  332.976754][  T794] usb 6-1: Manufacturer: syz
[  332.978216][  T794] usb 6-1: SerialNumber: syz
[  332.981325][  T794] usb 6-1: config 0 descriptor??
[  333.126243][T12072] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  333.129771][T12072] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  333.133412][T12072] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  333.137243][T12072] usb 7-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  333.140276][T12072] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.145092][T12072] usb 7-1: config 0 descriptor??
[  333.149653][T12072] em28xx 7-1:0.0: New device   @ 480 Mbps (2040:1605, interface 0, class 0)
[  333.152497][T12072] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[  333.414935][T12072] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  333.418121][T12072] em28xx 7-1:0.0: Config register raw data: 0xfffffffb
[  333.420670][T12072] em28xx 7-1:0.0: AC97 chip type couldn't be determined
[  333.422832][T12072] em28xx 7-1:0.0: No AC97 audio processor
[  333.428599][T12072] usb 7-1: USB disconnect, device number 6
[  333.431768][T12072] em28xx 7-1:0.0: Disconnecting em28xx
[  333.439330][T12072] em28xx 7-1:0.0: Freeing device
[  333.706157][T12619] tmpfs: Bad value for 'mpol'
[  334.209754][  T794] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  334.212120][  T794] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71
[  334.214255][  T794] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  334.217233][  T794] f81534 6-1:0.12: probe with driver f81534 failed with error -71
[  334.222037][  T794] usb 6-1: USB disconnect, device number 25
[  335.209942][T12668] loop5: detected capacity change from 0 to 128
[  335.216135][T12668] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  335.223710][T12668] ext4 filesystem being mounted at /476/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  335.252112][ T8858] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  336.074782][    T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  336.224747][    T9] usb 6-1: Using ep0 maxpacket: 8
[  336.231470][    T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  336.235388][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.238675][    T9] usb 6-1: Product: syz
[  336.240479][    T9] usb 6-1: Manufacturer: syz
[  336.242469][    T9] usb 6-1: SerialNumber: syz
[  336.247070][    T9] usb 6-1: config 0 descriptor??
[  336.455233][    T9] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  337.468406][    T9] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  337.677907][T12072] usb 6-1: USB disconnect, device number 26
[  338.208195][T12718] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2607'.
[  338.564743][T12072] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  338.653827][T12735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2614'.
[  338.749091][T12072] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  338.752309][T12072] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  338.756098][T12072] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  338.759017][T12072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.763790][T12726] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  338.769763][T12072] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  339.056530][T12072] usb 6-1: USB disconnect, device number 27
[  339.404024][T12765] syz_tun: entered promiscuous mode
[  339.410184][T12765] syz_tun: left promiscuous mode
[  339.682667][T12769] loop6: detected capacity change from 0 to 32768
[  339.685904][T12769] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2630 (12769)
[  339.691982][T12769] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  339.695830][T12769] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  339.698484][T12769] BTRFS info (device loop6): using free-space-tree
[  339.746114][T12769] BTRFS info (device loop6): rebuilding free space tree
[  339.780274][T12772] loop5: detected capacity change from 0 to 32768
[  339.787711][T12772] *** Log Format Error ! ***
[  339.790185][T12772] lmLogInit: exit(-22)
[  339.791497][T12772] lmLogOpen: exit(-22)
[  339.792761][T12772] jfs_mount_rw failed, return code = -22
[  339.887597][T12002] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  339.972196][T12796] netlink: 'syz.5.2635': attribute type 4 has an invalid length.
[  340.085323][T12800] netlink: 'syz.5.2638': attribute type 2 has an invalid length.
[  340.088009][T12800] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2638'.
[  340.494999][T12072] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  340.649038][T12072] usb 7-1: config 10 has an invalid interface number: 185 but max is 0
[  340.652139][T12072] usb 7-1: config 10 has no interface number 0
[  340.657335][T12072] usb 7-1: config 10 interface 185 has no altsetting 0
[  340.667508][T12072] usb 7-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice=72.2f
[  340.674681][T12072] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.681203][T12072] usb 7-1: Product: syz
[  340.684675][T12072] usb 7-1: Manufacturer: syz
[  340.686765][T12072] usb 7-1: SerialNumber: syz
[  340.910215][T12072] snd-usb-caiaq 7-1:10.185: can't set alt interface.
[  340.912787][T12072] usb 7-1: unable to init card! (ret=-5)
[  340.920882][T12072] snd-usb-caiaq 7-1:10.185: probe with driver snd-usb-caiaq failed with error -5
[  340.926095][T12072] usb 7-1: USB disconnect, device number 7
[  341.072012][T12852] loop5: detected capacity change from 0 to 512
[  341.075804][T12852] EXT4-fs: Ignoring removed orlov option
[  341.078849][T12852] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  341.086904][T12852] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  341.091008][T12852] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.2663: corrupted in-inode xattr: e_value size too large
[  341.099203][T12852] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2663: couldn't read orphan inode 15 (err -117)
[  341.106071][T12852] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  341.150598][ T8858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.209920][T12856] loop5: detected capacity change from 0 to 1024
[  341.219888][T12856] hfsplus: invalid catalog btree flag
[  341.222121][T12856] hfsplus: failed to load catalog file
[  341.339330][T12862] loop5: detected capacity change from 0 to 128
[  341.396066][T12864] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2668'.
[  341.478204][T12870] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2671'.
[  341.559388][T12875] loop5: detected capacity change from 0 to 164
[  341.642381][T12877] loop5: detected capacity change from 0 to 1024
[  341.805426][T12885] netlink: 'syz.6.2679': attribute type 7 has an invalid length.
[  341.828576][T12887] loop5: detected capacity change from 0 to 256
[  341.838786][T12887] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x200c26b4, utbl_chksum : 0xe619d30d)
[  341.850751][T12885] : entered promiscuous mode
[  342.036659][T12890] loop6: detected capacity change from 0 to 32768
[  342.044159][T12890] (syz.6.2681,12890,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  342.050511][T12890] (syz.6.2681,12890,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  342.072227][T12890] JBD2: Ignoring recovery information on journal
[  342.133783][T12890] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  342.392703][T12002] ocfs2: Unmounting device (7,6) on (node local)
[  342.674456][T12906] loop6: detected capacity change from 0 to 256
[  342.980973][T12912] loop6: detected capacity change from 0 to 4096
[  343.015484][T12913] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  343.292135][T12917] loop5: detected capacity change from 0 to 256
[  343.299189][T12917] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001)
[  343.654908][T12072] usb 6-1: new full-speed USB device number 28 using dummy_hcd
[  343.808336][T12072] usb 6-1: config 162 has an invalid interface number: 35 but max is 0
[  343.811661][T12072] usb 6-1: config 162 has no interface number 0
[  343.814282][T12072] usb 6-1: config 162 interface 35 has no altsetting 0
[  343.820334][T12072] usb 6-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice=b9.11
[  343.823858][T12072] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.827717][T12072] usb 6-1: Product: syz
[  343.829343][T12072] usb 6-1: Manufacturer: syz
[  343.831138][T12072] usb 6-1: SerialNumber: syz
[  343.979186][T12927] loop6: detected capacity change from 0 to 256
[  344.063224][T12072] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:162.35/input/input24
[  344.080892][T12072] usb 6-1: USB disconnect, device number 28
[  344.159779][T12932] netlink: 'syz.0.2699': attribute type 3 has an invalid length.
[  344.162821][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2699'.
[  345.279060][T12951] loop5: detected capacity change from 0 to 32768
[  345.496255][T12968] netlink: 'syz.6.2716': attribute type 20 has an invalid length.
[  345.538511][T12972] loop5: detected capacity change from 0 to 256
[  345.542046][T12972] vfat: Deprecated parameter 'posix'
[  345.544329][T12972] FAT-fs: "posix" option is obsolete, not supported now
[  346.460749][T12998] sctp: [Deprecated]: syz.6.2726 (pid 12998) Use of int in max_burst socket option deprecated.
[  346.460749][T12998] Use struct sctp_assoc_value instead
[  346.671804][T13007] loop5: detected capacity change from 0 to 512
[  346.699251][T13007] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  346.702189][T13007] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  346.705828][T13007] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.2730: bad orphan inode 13
[  346.709620][T13007] EXT4-fs (loop5): Remounting filesystem read-only
[  346.711614][T13007] ext4_test_bit(bit=12, block=32) = 0
[  346.714363][T13007] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  346.725846][T13007] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.881109][T13026] loop5: detected capacity change from 0 to 4096
[  346.885838][T13026] NILFS (loop5): mounting unchecked fs
[  346.887693][T13026] NILFS (loop5): recovery required for readonly filesystem
[  346.889949][T13026] NILFS (loop5): write access will be enabled during recovery
[  346.896236][T13026] NILFS (loop5): invalid segment: Checksum error in super root
[  346.898676][T13026] NILFS (loop5): error -22 while loading super root
[  346.952941][T13028] loop5: detected capacity change from 0 to 8
[  346.958629][T13028] SQUASHFS error: lzo decompression failed, data probably corrupt
[  346.962005][T13028] SQUASHFS error: Failed to read block 0x91: -5
[  346.965046][T13028] SQUASHFS error: Unable to read metadata cache entry [8f]
[  346.968211][T13028] SQUASHFS error: Unable to read inode 0x11f
[  347.249529][T13048] loop5: detected capacity change from 0 to 512
[  347.270096][T13048] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities
[  348.750813][T13099] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2771'.
[  349.340201][T13117] netlink: 'syz.5.2780': attribute type 29 has an invalid length.
[  349.558385][T13119] loop5: detected capacity change from 0 to 32768
[  349.565299][T13119] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  349.588733][T13119] XFS (loop5): Ending clean mount
[  349.602749][T13119] XFS (loop5): Quotacheck needed: Please wait.
[  349.685430][T13119] XFS (loop5): Quotacheck: Done.
[  349.723494][ T8858] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  349.836198][T13131] loop5: detected capacity change from 0 to 256
[  349.847536][T13131] FAT-fs (loop5): Directory bread(block 64) failed
[  349.849606][T13131] FAT-fs (loop5): Directory bread(block 65) failed
[  349.851636][T13131] FAT-fs (loop5): Directory bread(block 66) failed
[  349.853590][T13131] FAT-fs (loop5): Directory bread(block 67) failed
[  349.856174][T13131] FAT-fs (loop5): Directory bread(block 68) failed
[  349.858070][T13131] FAT-fs (loop5): Directory bread(block 69) failed
[  349.860057][T13131] FAT-fs (loop5): Directory bread(block 70) failed
[  349.862018][T13131] FAT-fs (loop5): Directory bread(block 71) failed
[  349.864068][T13131] FAT-fs (loop5): Directory bread(block 72) failed
[  349.875361][T13131] FAT-fs (loop5): Directory bread(block 73) failed
[  349.931707][T13129] loop6: detected capacity change from 0 to 32768
[  349.936129][T13129] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2782 (13129)
[  349.942832][T13129] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  349.949054][T13129] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  349.951814][T13129] BTRFS info (device loop6): using free-space-tree
[  350.028582][T12002] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  350.154788][T12072] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  350.220902][T13152] loop6: detected capacity change from 0 to 512
[  350.229263][T13152] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.2786: casefold flag without casefold feature
[  350.233604][T13152] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2786: couldn't read orphan inode 15 (err -117)
[  350.239749][T13152] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  350.318395][T12072] usb 6-1: config 0 has an invalid interface number: 171 but max is 0
[  350.321927][T12072] usb 6-1: config 0 has no interface number 0
[  350.323838][T12072] usb 6-1: config 0 interface 171 has no altsetting 0
[  350.337592][T12072] usb 6-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67
[  350.340650][T12072] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.343648][T12072] usb 6-1: Product: syz
[  350.345257][T12072] usb 6-1: Manufacturer: syz
[  350.346952][T12072] usb 6-1: SerialNumber: syz
[  350.349797][T12072] usb 6-1: config 0 descriptor??
[  350.381931][T12002] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.556840][T12072] dvb_usb_m920x 6-1:0.171: probe with driver dvb_usb_m920x failed with error -71
[  350.561091][T12072] usb 6-1: USB disconnect, device number 29
[  350.684871][  T794] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  350.834808][  T794] usb 7-1: Using ep0 maxpacket: 32
[  350.839965][  T794] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  350.844478][  T794] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  350.848721][  T794] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  350.852596][  T794] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.858413][  T794] usb 7-1: config 0 descriptor??
[  351.069736][  T794] usbhid 7-1:0.0: can't add hid device: -71
[  351.072207][  T794] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  351.076937][  T794] usb 7-1: USB disconnect, device number 8
[  351.658193][T13195] bpq0: left promiscuous mode
[  351.713656][T13200] loop5: detected capacity change from 0 to 4096
[  351.726777][T13201] loop6: detected capacity change from 0 to 2048
[  351.731363][T13201] NILFS (loop6): invalid segment: Sequence number mismatch
[  351.733619][T13201] NILFS (loop6): trying rollback from an earlier position
[  351.748122][T13201] NILFS (loop6): recovery complete
[  351.751106][T13202] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  351.757260][T13203] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  352.075016][   T24] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  352.263856][   T24] usb 6-1: Using ep0 maxpacket: 8
[  352.291144][   T24] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  352.300361][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.303148][   T24] usb 6-1: Product: syz
[  352.305279][   T24] usb 6-1: Manufacturer: syz
[  352.308866][   T24] usb 6-1: SerialNumber: syz
[  352.328636][   T24] usb 6-1: config 0 descriptor??
[  352.754968][   T24] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  352.757831][   T24] gspca_sunplus: reg_w_riv err -71
[  352.764297][   T24] sunplus 6-1:0.0: probe with driver sunplus failed with error -71
[  352.779887][   T24] usb 6-1: USB disconnect, device number 30
[  353.478598][T13244] loop6: detected capacity change from 0 to 512
[  353.480966][T13244] EXT4-fs: Ignoring removed nomblk_io_submit option
[  353.501954][T13244] EXT4-fs: Mount option(s) incompatible with ext3
[  353.527687][T13244] gfs2: Unexpected value for 'barrier'
[  354.028726][T13257] loop5: detected capacity change from 0 to 32768
[  354.038399][T13257] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  354.051747][T13257] XFS (loop5): Ending clean mount
[  354.085602][ T8858] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  354.562432][T13292] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2841'.
[  354.842870][T13319] loop5: detected capacity change from 0 to 512
[  354.845766][T13319] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  354.957435][T13326] loop5: detected capacity change from 0 to 8
[  354.959944][T13326] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  355.618426][T13329] cramfs: Error -3 while decompressing!
[  355.620493][T13329] cramfs: ffffffff99be3628(26)->ffff888128378000(4096)
[  355.622682][T13329] cramfs: Error -3 while decompressing!
[  355.624431][T13329] cramfs: ffffffff99be3642(26)->ffff888128377000(4096)
[  355.626851][T13329] cramfs: Error -3 while decompressing!
[  355.628621][T13329] cramfs: ffffffff99be365c(16)->ffff888128376000(4096)
[  355.630837][T13329] cramfs: Error -3 while decompressing!
[  355.632852][T13329] cramfs: ffffffff99be3628(26)->ffff888128378000(4096)
[  356.104942][ T5877] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  356.274850][ T5877] usb 7-1: Using ep0 maxpacket: 16
[  356.278744][ T5877] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  356.283173][ T5877] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  356.288500][ T5877] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00
[  356.292014][ T5877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.298115][ T5877] usb 7-1: config 0 descriptor??
[  356.434809][  T793] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  356.584795][  T793] usb 6-1: Using ep0 maxpacket: 16
[  356.589002][  T793] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  356.592294][  T793] usb 6-1: config 0 has no interface number 0
[  356.598336][  T793] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  356.602054][  T793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.605407][  T793] usb 6-1: Product: syz
[  356.607521][  T793] usb 6-1: Manufacturer: syz
[  356.609592][  T793] usb 6-1: SerialNumber: syz
[  356.615182][  T793] usb 6-1: config 0 descriptor??
[  356.622059][  T793] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  356.712283][ T5877] input: HID 0955:7214 Haptics as /devices/virtual/input/input25
[  356.751304][ T5877] shield 0003:0955:7214.000F: Registered Thunderstrike controller
[  356.754117][ T5877] shield 0003:0955:7214.000F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0
[  356.912170][   T24] usb 7-1: USB disconnect, device number 9
[  356.917695][ T5313] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  356.921317][ T5313] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  356.931160][ T5313] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  356.936808][ T5313] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  357.577905][T13378] sctp: [Deprecated]: syz.6.2880 (pid 13378) Use of int in max_burst socket option.
[  357.577905][T13378] Use struct sctp_assoc_value instead
[  357.640279][T13382] loop6: detected capacity change from 0 to 512
[  357.982538][T13398] netlink: 'syz.6.2889': attribute type 1 has an invalid length.
[  357.985828][T13398] netlink: 'syz.6.2889': attribute type 1 has an invalid length.
[  358.156177][T13405] block device autoloading is deprecated and will be removed.
[  358.229239][  T793] gspca_spca1528: reg_r err -71
[  358.232737][  T793] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71
[  358.267862][  T793] usb 6-1: USB disconnect, device number 31
[  358.445410][T13411] loop0: detected capacity change from 0 to 4096
[  358.456551][T13411] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  358.477882][T13411] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  358.480326][T13411] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  358.482492][T13411] ntfs3(loop0): Failed to load $Bitmap (-22).
[  358.487225][T13411] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22.
[  359.148927][T13425] loop0: detected capacity change from 0 to 1764
[  359.178990][T13425] loop0: detected capacity change from 0 to 128
[  359.181497][T13425] omfs: Bad value for 'dmask'
[  359.186244][T13425] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  359.194308][T13425] CIFS mount error: No usable UNC path provided in device string!
[  359.194308][T13425] 
[  359.198307][T13425] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  359.205863][T12072] usb 6-1: new low-speed USB device number 32 using dummy_hcd
[  359.786764][T12072] usb 6-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a
[  359.790971][T12072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.991017][T12072] usb 6-1: config 0 descriptor??
[  360.182134][T12072] pwc: Logitech QuickCam Notebook Pro USB webcam detected.
[  360.222932][T12072] pwc: Failed to set LED on/off time (-71)
[  360.225264][T12072] pwc: send_video_command error -71
[  360.227067][T12072] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  360.229441][T12072] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71
[  360.233365][T12072] usb 6-1: USB disconnect, device number 32
[  360.454728][    T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  360.617563][    T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  360.621393][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  360.625401][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  360.628285][    T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  360.632459][    T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  360.636127][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.640859][    T9] usb 7-1: config 0 descriptor??
[  361.103910][    T9] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  362.052391][    T9] usb 7-1: USB disconnect, device number 10
[  362.165994][T13483] No source specified
[  362.434677][   T24] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  362.596578][   T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  362.600163][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  362.603847][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  362.608403][   T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  362.612174][   T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  362.616069][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.619815][   T24] usb 6-1: config 0 descriptor??
[  362.621991][T13485] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  362.633950][T13496] loop6: detected capacity change from 0 to 16
[  362.847931][T13510] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2937'.
[  362.979795][T13512] loop6: detected capacity change from 0 to 256
[  362.989653][T13512] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f50, chksum : 0xa6aae999, utbl_chksum : 0xe619d30d)
[  363.031667][   T24] plantronics 0003:047F:FFFF.0011: reserved main item tag 0xd
[  363.131954][   T24] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  363.516924][   T24] usb 6-1: USB disconnect, device number 33
[  364.354805][  T794] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  364.504683][  T794] usb 7-1: Using ep0 maxpacket: 16
[  364.509187][  T794] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  364.513593][  T794] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  364.521143][  T794] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  364.525149][  T794] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.528490][  T794] usb 7-1: Product: syz
[  364.530222][  T794] usb 7-1: Manufacturer: syz
[  364.532126][  T794] usb 7-1: SerialNumber: syz
[  364.538089][  T794] usb 7-1: config 0 descriptor??
[  364.804864][  T794] appledisplay 7-1:0.0: Error while getting initial brightness: -110
[  364.808815][  T794] appledisplay 7-1:0.0: probe with driver appledisplay failed with error -110
[  365.273088][   T24] usb 7-1: USB disconnect, device number 11
[  365.393555][T13553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2954'.
[  365.393582][T13553] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2954'.
[  366.368904][T13561] loop6: detected capacity change from 0 to 1024
[  366.379674][T13561] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5
[  366.383029][T13561] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  366.388253][T13561] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.2958: Failed to acquire dquot type 0
[  366.393007][T13561] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  366.402758][T13561] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.2958: corrupted inode contents
[  366.414338][T13561] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #13: comm syz.6.2958: mark_inode_dirty error
[  366.419777][T13561] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.2958: corrupted inode contents
[  366.425142][T13561] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.2958: mark_inode_dirty error
[  366.429962][T13561] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.2958: corrupted inode contents
[  366.436165][T13561] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem
[  366.439938][T13561] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.2958: corrupted inode contents
[  366.444923][T13561] EXT4-fs error (device loop6): ext4_truncate:4666: inode #13: comm syz.6.2958: mark_inode_dirty error
[  366.453172][T13561] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem
[  366.463101][T13561] EXT4-fs (loop6): 1 truncate cleaned up
[  366.466963][T13561] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  366.502341][T12002] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  366.570218][   T33] audit: type=1800 audit(1755642939.365:145): pid=13565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2959" name="/" dev="9p" ino=2 res=0 errno=0
[  366.642195][T13567] netlink: 180 bytes leftover after parsing attributes in process `syz.6.2960'.
[  366.699514][T13571] loop6: detected capacity change from 0 to 8
[  366.708648][T13571] SQUASHFS error: Failed to read block 0x738: -5
[  366.711142][T13571] SQUASHFS error: Unable to read metadata cache entry [736]
[  366.993158][  T794] IPVS: starting estimator thread 0...
[  367.104714][T13584] IPVS: using max 61 ests per chain, 146400 per kthread
[  367.125470][T13591] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  367.293606][T13606] openvswitch: netlink: IP tunnel dst address not specified
[  367.427012][T13618] loop5: detected capacity change from 0 to 1024
[  367.612137][T13629] loop5: detected capacity change from 0 to 1024
[  367.615610][T13620] loop6: detected capacity change from 0 to 40427
[  367.619999][T13620] F2FS-fs (loop6): invalid crc value
[  367.631011][T13629] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  367.657443][T13620] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  367.660696][T13620] F2FS-fs (loop6): Start checkpoint disabled!
[  367.668075][T13620] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  367.675880][ T8858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  367.769016][T13634] F2FS-fs (loop6): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  368.201548][T13649] loop5: detected capacity change from 0 to 256
[  368.204412][T13649] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  368.211345][T13649] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  368.223925][   T54] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  368.228801][   T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u11:0 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  368.228817][   T54] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  368.228825][   T54] Workqueue: hci1 hci_rx_work
[  368.228841][   T54] Call Trace:
[  368.228847][   T54]  <TASK>
[  368.228852][   T54]  dump_stack_lvl+0x189/0x250
[  368.228869][   T54]  ? __pfx_dump_stack_lvl+0x10/0x10
[  368.228880][   T54]  ? __pfx__printk+0x10/0x10
[  368.228897][   T54]  ? kernfs_path_from_node+0x250/0x290
[  368.228908][   T54]  ? kernfs_path_from_node+0x2f/0x290
[  368.228933][   T54]  sysfs_create_dir_ns+0x259/0x280
[  368.228945][   T54]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  368.228956][   T54]  ? do_raw_spin_unlock+0x4d/0x240
[  368.228971][   T54]  kobject_add_internal+0x59f/0xb40
[  368.228989][   T54]  kobject_add+0x155/0x220
[  368.229002][   T54]  ? __pfx_kobject_add+0x10/0x10
[  368.229013][   T54]  ? _raw_spin_unlock+0x28/0x50
[  368.229024][   T54]  ? get_device_parent+0x366/0x3a0
[  368.229039][   T54]  device_add+0x408/0xb50
[  368.229052][   T54]  hci_conn_add_sysfs+0xd5/0x1e0
[  368.229069][   T54]  le_conn_complete_evt+0xc3a/0x1220
[  368.229086][   T54]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  368.229097][   T54]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  368.229110][   T54]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  368.229119][   T54]  ? skb_pull_data+0xfb/0x200
[  368.229130][   T54]  hci_le_enh_conn_complete_evt+0x189/0x470
[  368.229141][   T54]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  368.229152][   T54]  hci_event_packet+0x78f/0x1200
[  368.229166][   T54]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  368.229177][   T54]  ? __pfx_hci_event_packet+0x10/0x10
[  368.229190][   T54]  ? kcov_remote_start+0x4d3/0x7f0
[  368.229203][   T54]  ? lockdep_hardirqs_on+0x90/0x150
[  368.229214][   T54]  ? hci_send_to_monitor+0xe2/0x570
[  368.229226][   T54]  hci_rx_work+0x46a/0xe80
[  368.229237][   T54]  ? process_scheduled_works+0x9ef/0x17b0
[  368.229247][   T54]  process_scheduled_works+0xae1/0x17b0
[  368.229268][   T54]  ? __pfx_process_scheduled_works+0x10/0x10
[  368.229290][   T54]  worker_thread+0x8a0/0xda0
[  368.229311][   T54]  kthread+0x711/0x8a0
[  368.229322][   T54]  ? __pfx_worker_thread+0x10/0x10
[  368.229329][   T54]  ? __pfx_kthread+0x10/0x10
[  368.229340][   T54]  ? _raw_spin_unlock_irq+0x23/0x50
[  368.229348][   T54]  ? lockdep_hardirqs_on+0x9c/0x150
[  368.229356][   T54]  ? __pfx_kthread+0x10/0x10
[  368.229366][   T54]  ret_from_fork+0x3fc/0x770
[  368.229377][   T54]  ? __pfx_ret_from_fork+0x10/0x10
[  368.229388][   T54]  ? __switch_to_asm+0x39/0x70
[  368.229397][   T54]  ? __switch_to_asm+0x33/0x70
[  368.229406][   T54]  ? __pfx_kthread+0x10/0x10
[  368.229416][   T54]  ret_from_fork_asm+0x1a/0x30
[  368.229434][   T54]  </TASK>
[  368.229454][   T54] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  368.326103][   T54] Bluetooth: hci1: failed to register connection device
[  368.349358][T10961] kworker/u10:6: attempt to access beyond end of device
[  368.349358][T10961] loop6: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  368.358741][T10961] kworker/u10:6: attempt to access beyond end of device
[  368.358741][T10961] loop6: rw=2049, sector=45104, nr_sectors = 16 limit=40427
[  368.363917][T10961] CPU: 1 UID: 0 PID: 10961 Comm: kworker/u10:6 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  368.363931][T10961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  368.363939][T10961] Workqueue: writeback wb_workfn (flush-7:6)
[  368.363956][T10961] Call Trace:
[  368.363960][T10961]  <TASK>
[  368.363965][T10961]  dump_stack_lvl+0x189/0x250
[  368.363981][T10961]  ? __pfx_dump_stack_lvl+0x10/0x10
[  368.363990][T10961]  ? __pfx_queue_work_on+0x10/0x10
[  368.363999][T10961]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  368.364011][T10961]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  368.364025][T10961]  f2fs_handle_critical_error+0x37c/0x540
[  368.364042][T10961]  f2fs_write_end_io+0x886/0xb60
[  368.364063][T10961]  __submit_merged_bio+0x27a/0x6a0
[  368.364077][T10961]  __submit_merged_write_cond+0x255/0x530
[  368.364091][T10961]  f2fs_write_data_pages+0x261d/0x3000
[  368.364120][T10961]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  368.364172][T10961]  ? f2fs_write_meta_pages+0x357/0x450
[  368.364188][T10961]  ? __lock_acquire+0xab9/0xd20
[  368.364204][T10961]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  368.364215][T10961]  do_writepages+0x32e/0x550
[  368.364230][T10961]  ? reacquire_held_locks+0x127/0x1d0
[  368.364237][T10961]  ? writeback_sb_inodes+0x384/0x1010
[  368.364252][T10961]  __writeback_single_inode+0x145/0xff0
[  368.364262][T10961]  ? do_raw_spin_unlock+0x4d/0x240
[  368.364274][T10961]  writeback_sb_inodes+0x6c7/0x1010
[  368.364298][T10961]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  368.364331][T10961]  ? rcu_is_watching+0x15/0xb0
[  368.364345][T10961]  wb_writeback+0x43b/0xaf0
[  368.364359][T10961]  ? queue_io+0x391/0x590
[  368.364370][T10961]  ? __pfx_wb_writeback+0x10/0x10
[  368.364385][T10961]  ? _raw_spin_unlock_irq+0x23/0x50
[  368.364396][T10961]  wb_workfn+0x409/0xef0
[  368.364412][T10961]  ? __pfx_wb_workfn+0x10/0x10
[  368.364423][T10961]  ? __lock_acquire+0xab9/0xd20
[  368.364440][T10961]  ? process_scheduled_works+0x9ef/0x17b0
[  368.364451][T10961]  ? _raw_spin_unlock_irq+0x23/0x50
[  368.364458][T10961]  ? process_scheduled_works+0x9ef/0x17b0
[  368.364465][T10961]  ? process_scheduled_works+0x9ef/0x17b0
[  368.364474][T10961]  process_scheduled_works+0xae1/0x17b0
[  368.364497][T10961]  ? __pfx_process_scheduled_works+0x10/0x10
[  368.364520][T10961]  worker_thread+0x8a0/0xda0
[  368.364530][T10961]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  368.364561][T10961]  ? __kthread_parkme+0x7b/0x200
[  368.364577][T10961]  kthread+0x711/0x8a0
[  368.364589][T10961]  ? __pfx_worker_thread+0x10/0x10
[  368.364596][T10961]  ? __pfx_kthread+0x10/0x10
[  368.364620][T10961]  ? _raw_spin_unlock_irq+0x23/0x50
[  368.364630][T10961]  ? lockdep_hardirqs_on+0x9c/0x150
[  368.364639][T10961]  ? __pfx_kthread+0x10/0x10
[  368.364650][T10961]  ret_from_fork+0x3fc/0x770
[  368.364661][T10961]  ? __pfx_ret_from_fork+0x10/0x10
[  368.364673][T10961]  ? __switch_to_asm+0x39/0x70
[  368.364704][T10961]  ? __switch_to_asm+0x33/0x70
[  368.364712][T10961]  ? __pfx_kthread+0x10/0x10
[  368.364723][T10961]  ret_from_fork_asm+0x1a/0x30
[  368.364742][T10961]  </TASK>
[  368.458289][T10961] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  368.461095][T10961] CPU: 0 UID: 0 PID: 10961 Comm: kworker/u10:6 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  368.461115][T10961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  368.461125][T10961] Workqueue: writeback wb_workfn (flush-7:6)
[  368.461166][T10961] Call Trace:
[  368.461173][T10961]  <TASK>
[  368.461179][T10961]  dump_stack_lvl+0x189/0x250
[  368.461208][T10961]  ? __pfx_dump_stack_lvl+0x10/0x10
[  368.461224][T10961]  ? __pfx_queue_work_on+0x10/0x10
[  368.461237][T10961]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  368.461253][T10961]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  368.461275][T10961]  f2fs_handle_critical_error+0x37c/0x540
[  368.461298][T10961]  f2fs_write_end_io+0x886/0xb60
[  368.461329][T10961]  __submit_merged_bio+0x27a/0x6a0
[  368.461350][T10961]  __submit_merged_write_cond+0x255/0x530
[  368.461371][T10961]  f2fs_write_data_pages+0x261d/0x3000
[  368.461414][T10961]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  368.461493][T10961]  ? f2fs_write_meta_pages+0x357/0x450
[  368.461518][T10961]  ? __lock_acquire+0xab9/0xd20
[  368.461541][T10961]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  368.461559][T10961]  do_writepages+0x32e/0x550
[  368.461582][T10961]  ? reacquire_held_locks+0x127/0x1d0
[  368.461596][T10961]  ? writeback_sb_inodes+0x384/0x1010
[  368.461620][T10961]  __writeback_single_inode+0x145/0xff0
[  368.461637][T10961]  ? do_raw_spin_unlock+0x4d/0x240
[  368.461656][T10961]  writeback_sb_inodes+0x6c7/0x1010
[  368.461722][T10961]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  368.461771][T10961]  ? rcu_is_watching+0x15/0xb0
[  368.461792][T10961]  wb_writeback+0x43b/0xaf0
[  368.461815][T10961]  ? queue_io+0x391/0x590
[  368.461833][T10961]  ? __pfx_wb_writeback+0x10/0x10
[  368.461856][T10961]  ? _raw_spin_unlock_irq+0x23/0x50
[  368.461875][T10961]  wb_workfn+0x409/0xef0
[  368.461900][T10961]  ? __pfx_wb_workfn+0x10/0x10
[  368.461918][T10961]  ? __lock_acquire+0xab9/0xd20
[  368.461943][T10961]  ? process_scheduled_works+0x9ef/0x17b0
[  368.461962][T10961]  ? _raw_spin_unlock_irq+0x23/0x50
[  368.461974][T10961]  ? process_scheduled_works+0x9ef/0x17b0
[  368.461986][T10961]  ? process_scheduled_works+0x9ef/0x17b0
[  368.462000][T10961]  process_scheduled_works+0xae1/0x17b0
[  368.462037][T10961]  ? __pfx_process_scheduled_works+0x10/0x10
[  368.462071][T10961]  worker_thread+0x8a0/0xda0
[  368.462087][T10961]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  368.462112][T10961]  ? __kthread_parkme+0x7b/0x200
[  368.462135][T10961]  kthread+0x711/0x8a0
[  368.462154][T10961]  ? __pfx_worker_thread+0x10/0x10
[  368.462166][T10961]  ? __pfx_kthread+0x10/0x10
[  368.462192][T10961]  ? _raw_spin_unlock_irq+0x23/0x50
[  368.462205][T10961]  ? lockdep_hardirqs_on+0x9c/0x150
[  368.462219][T10961]  ? __pfx_kthread+0x10/0x10
[  368.462236][T10961]  ret_from_fork+0x3fc/0x770
[  368.462252][T10961]  ? __pfx_ret_from_fork+0x10/0x10
[  368.462271][T10961]  ? __switch_to_asm+0x39/0x70
[  368.462287][T10961]  ? __switch_to_asm+0x33/0x70
[  368.462301][T10961]  ? __pfx_kthread+0x10/0x10
[  368.462318][T10961]  ret_from_fork_asm+0x1a/0x30
[  368.462347][T10961]  </TASK>
[  368.462968][T10961] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  369.013680][T13655] loop5: detected capacity change from 0 to 1024
[  369.025574][T13655] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  369.033905][T13655] EXT4-fs (loop5): shut down requested (2)
[  369.054280][ T8858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  369.119890][T13662] loop5: detected capacity change from 0 to 2048
[  369.131528][T13665] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  369.489586][T13691] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.3012'.
[  369.500249][T13693] loop6: detected capacity change from 0 to 512
[  369.502710][T13693] EXT4-fs: Ignoring removed mblk_io_submit option
[  369.510215][T13693] EXT4-fs error (device loop6): ext4_orphan_get:1392: comm syz.6.3013: inode #13: comm syz.6.3013: iget: illegal inode #
[  369.514900][T13693] EXT4-fs (loop6): Remounting filesystem read-only
[  369.517762][T13693] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  369.543474][T12002] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  370.221897][T13704] loop6: detected capacity change from 0 to 32768
[  370.248119][T13704] ERROR: (device loop6): diRead: i_ino != di_number
[  370.248119][T13704] 
[  370.589338][T13710] loop0: detected capacity change from 0 to 4096
[  370.635914][T13711] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  370.739073][T13715] loop6: detected capacity change from 0 to 1024
[  370.741854][T13715] EXT4-fs: Ignoring removed nomblk_io_submit option
[  370.748960][T13715] EXT4-fs: Ignoring removed nomblk_io_submit option
[  370.754972][T13715] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  370.768242][T13715] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  370.806872][   T33] audit: type=1326 audit(1755642943.605:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13720 comm="syz.5.3024" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527998ebe9 code=0x7ffc0000
[  370.818170][T12002] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  370.819019][   T33] audit: type=1326 audit(1755642943.605:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13720 comm="syz.5.3024" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527998ebe9 code=0x7ffc0000
[  370.844464][   T33] audit: type=1326 audit(1755642943.615:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13720 comm="syz.5.3024" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f527998ebe9 code=0x7ffc0000
[  370.864345][   T33] audit: type=1326 audit(1755642943.615:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13720 comm="syz.5.3024" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527998ebe9 code=0x7ffc0000
[  370.878921][   T33] audit: type=1326 audit(1755642943.615:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13720 comm="syz.5.3024" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527998ebe9 code=0x7ffc0000
[  370.887589][   T33] audit: type=1326 audit(1755642943.645:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13720 comm="syz.5.3024" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f527998ebe9 code=0x7ffc0000
[  370.899565][T13726] loop5: detected capacity change from 0 to 512
[  370.902355][   T33] audit: type=1326 audit(1755642943.645:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13720 comm="syz.5.3024" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527998ebe9 code=0x7ffc0000
[  370.908088][T13726] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.3026: bad orphan inode 15
[  370.917981][T13726] ext4_test_bit(bit=14, block=5) = 0
[  370.920367][T13726] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  370.936160][T13726] EXT4-fs warning (device loop5): ext4_resize_begin:72: won't resize using backup superblock at 1
[  370.953060][T13731] sp0: Synchronizing with TNC
[  370.960850][ T8858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  370.961967][T13730] [U] `
[  371.020802][T13733] loop5: detected capacity change from 0 to 16
[  371.023420][T13733] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  371.404653][  T794] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  371.554967][  T794] usb 7-1: Using ep0 maxpacket: 8
[  371.559512][  T794] usb 7-1: unable to get BOS descriptor or descriptor too short
[  371.563056][  T794] usb 7-1: config 7 has an invalid interface number: 208 but max is 0
[  371.565644][  T794] usb 7-1: config 7 has an invalid interface association descriptor of length 6, skipping
[  371.568619][  T794] usb 7-1: config 7 has no interface number 0
[  371.570551][  T794] usb 7-1: No eUSB2 isoc ep 7 companion for config 7 interface 208 altsetting 4
[  371.573344][  T794] usb 7-1: config 7 interface 208 has no altsetting 0
[  371.577778][  T794] usb 7-1: New USB device found, idVendor=5050, idProduct=0900, bcdDevice=b3.ef
[  371.580592][  T794] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.583029][  T794] usb 7-1: Product: syz
[  371.584308][  T794] usb 7-1: Manufacturer: syz
[  371.585918][  T794] usb 7-1: SerialNumber: syz
[  371.796486][  T794] ftdi_sio 7-1:7.208: FTDI USB Serial Device converter detected
[  371.799544][  T794] ftdi_sio ttyUSB0: unknown device type: 0xb3ef
[  371.803149][  T794] usb 7-1: USB disconnect, device number 12
[  371.806246][  T794] ftdi_sio 7-1:7.208: device disconnected
[  372.347301][T13760] loop5: detected capacity change from 0 to 40427
[  372.351898][T13760] F2FS-fs (loop5): invalid crc value
[  372.399387][T13760] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  372.411275][T13760] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  372.462651][ T8858] syz-executor: attempt to access beyond end of device
[  372.462651][ T8858] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  372.476859][ T8858] CPU: 1 UID: 0 PID: 8858 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  372.476887][ T8858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  372.476900][ T8858] Call Trace:
[  372.476908][ T8858]  <TASK>
[  372.476916][ T8858]  dump_stack_lvl+0x189/0x250
[  372.476942][ T8858]  ? __pfx_dump_stack_lvl+0x10/0x10
[  372.476957][ T8858]  ? __pfx_queue_work_on+0x10/0x10
[  372.476970][ T8858]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  372.476987][ T8858]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  372.477009][ T8858]  f2fs_handle_critical_error+0x37c/0x540
[  372.477032][ T8858]  f2fs_write_end_io+0x886/0xb60
[  372.477064][ T8858]  __submit_merged_bio+0x27a/0x6a0
[  372.477085][ T8858]  __submit_merged_write_cond+0x255/0x530
[  372.477106][ T8858]  f2fs_write_data_pages+0x261d/0x3000
[  372.477137][ T8858]  ? __pfx_usage_match+0x10/0x10
[  372.477151][ T8858]  ? __bfs+0x154/0x2a0
[  372.477185][ T8858]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  372.477200][ T8858]  ? __switch_to+0xdae/0x1670
[  372.477250][ T8858]  ? rcu_is_watching+0x15/0xb0
[  372.477264][ T8858]  ? trace_sched_exit_tp+0x36/0x110
[  372.477281][ T8858]  ? __schedule+0x17ae/0x4cc0
[  372.477297][ T8858]  ? folios_put_refs+0x560/0x640
[  372.477322][ T8858]  ? __lock_acquire+0xab9/0xd20
[  372.477348][ T8858]  ? do_raw_spin_lock+0x121/0x290
[  372.477396][ T8858]  ? do_raw_spin_unlock+0x4d/0x240
[  372.477413][ T8858]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  372.477431][ T8858]  do_writepages+0x32e/0x550
[  372.477458][ T8858]  ? do_raw_spin_unlock+0x4d/0x240
[  372.477476][ T8858]  filemap_fdatawrite+0x199/0x240
[  372.477495][ T8858]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  372.477547][ T8858]  ? do_raw_spin_unlock+0x4d/0x240
[  372.477565][ T8858]  f2fs_sync_dirty_inodes+0x31f/0x830
[  372.477596][ T8858]  f2fs_write_checkpoint+0x95a/0x1df0
[  372.477648][ T8858]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  372.477702][ T8858]  ? kill_f2fs_super+0x298/0x6c0
[  372.477724][ T8858]  kill_f2fs_super+0x2c3/0x6c0
[  372.477747][ T8858]  ? __pfx_kill_f2fs_super+0x10/0x10
[  372.477764][ T8858]  ? radix_tree_delete_item+0x2b6/0x400
[  372.477785][ T8858]  ? shrinker_free+0x2ce/0x3e0
[  372.477802][ T8858]  deactivate_locked_super+0xbc/0x130
[  372.477821][ T8858]  cleanup_mnt+0x425/0x4c0
[  372.477837][ T8858]  ? lockdep_hardirqs_on+0x9c/0x150
[  372.477854][ T8858]  task_work_run+0x1d4/0x260
[  372.477874][ T8858]  ? __pfx_task_work_run+0x10/0x10
[  372.477889][ T8858]  ? __x64_sys_umount+0x122/0x160
[  372.477915][ T8858]  ? exit_to_user_mode_loop+0x40/0x110
[  372.477937][ T8858]  exit_to_user_mode_loop+0xec/0x110
[  372.477955][ T8858]  do_syscall_64+0x2bd/0x3b0
[  372.477971][ T8858]  ? lockdep_hardirqs_on+0x9c/0x150
[  372.477985][ T8858]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.477998][ T8858]  ? exc_page_fault+0x9f/0xf0
[  372.478015][ T8858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.478028][ T8858] RIP: 0033:0x7f527998ff17
[  372.478041][ T8858] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  372.478054][ T8858] RSP: 002b:00007ffd27d01518 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  372.478069][ T8858] RAX: 0000000000000000 RBX: 00007f5279a11c05 RCX: 00007f527998ff17
[  372.478078][ T8858] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd27d015d0
[  372.478086][ T8858] RBP: 00007ffd27d015d0 R08: 0000000000000000 R09: 0000000000000000
[  372.478094][ T8858] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd27d02660
[  372.478102][ T8858] R13: 00007f5279a11c05 R14: 000000000005ae66 R15: 00007ffd27d026a0
[  372.478124][ T8858]  </TASK>
[  372.478410][ T8858] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  373.792086][    T9] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  373.954702][    T9] usb 6-1: Using ep0 maxpacket: 16
[  373.963571][    T9] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[  373.968422][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  373.972610][    T9] usb 6-1: config 0 has no interface number 0
[  373.989726][    T9] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  373.993677][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.997454][    T9] usb 6-1: Product: syz
[  373.999435][    T9] usb 6-1: Manufacturer: syz
[  374.001626][    T9] usb 6-1: SerialNumber: syz
[  374.007673][    T9] usb 6-1: config 0 descriptor??
[  374.011587][    T9] uvcvideo 6-1:0.105: probe with driver uvcvideo failed with error -22
[  374.080621][T13786] loop0: detected capacity change from 0 to 4096
[  374.084747][T13786] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  374.091359][T13786] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  374.094423][T13786] ntfs3(loop0): Failed to load $MFT (-2).
[  374.232223][  T793] usb 6-1: USB disconnect, device number 34
[  374.757025][T13796] misc userio: Invalid payload size
[  375.549046][T13811] loop0: detected capacity change from 0 to 256
[  375.552064][T13811] exfat: Deprecated parameter 'utf8'
[  375.570171][T13811] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xdd33351c, utbl_chksum : 0xe619d30d)
[  376.019621][   T33] kauditd_printk_skb: 12 callbacks suppressed
[  376.019633][   T33] audit: type=1326 audit(1755642948.815:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13818 comm="syz.6.3064" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7378ebe9 code=0x7ffc0000
[  376.029209][   T33] audit: type=1326 audit(1755642948.815:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13818 comm="syz.6.3064" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdf7378ebe9 code=0x7ffc0000
[  376.044707][   T33] audit: type=1326 audit(1755642948.815:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13818 comm="syz.6.3064" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf7378ebe9 code=0x0
[  376.141515][T13825] loop5: detected capacity change from 0 to 1024
[  376.148031][T13825] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  376.166191][T13825] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  376.234067][ T8858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.595984][T13832] loop5: detected capacity change from 0 to 4096
[  376.604197][T13832] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  376.981488][T13847] loop0: detected capacity change from 0 to 512
[  376.998169][T13847] EXT4-fs (loop0): orphan cleanup on readonly fs
[  377.000670][T13847] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[  377.003862][T13847] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  377.019847][T13847] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.3074: attempt to clear invalid blocks 2 len 1
[  377.024143][T13847] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3074: invalid indirect mapped block 1819239214 (level 0)
[  377.031623][T13847] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3074: invalid indirect mapped block 1819239214 (level 1)
[  377.037279][T13847] EXT4-fs (loop0): 1 truncate cleaned up
[  377.040103][T13847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  377.051374][T13847] EXT4-fs error (device loop0): ext4_lookup:1784: inode #2: comm syz.0.3074: 'file1' linked to parent dir
[  377.081677][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  377.134760][   T24] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  377.284896][   T24] usb 6-1: Using ep0 maxpacket: 16
[  377.325179][   T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  377.331917][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  377.341705][   T24] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  377.345591][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.348175][   T24] usb 6-1: Product: syz
[  377.349563][   T24] usb 6-1: Manufacturer: syz
[  377.351064][   T24] usb 6-1: SerialNumber: syz
[  377.354205][   T24] usb 6-1: config 0 descriptor??
[  377.361386][   T24] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  377.364343][   T24] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[  377.862917][T13866] loop6: detected capacity change from 0 to 256
[  377.871645][T13866] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f41, chksum : 0x31e44978, utbl_chksum : 0xe619d30d)
[  377.889816][T13866] exFAT-fs (loop6): error, data size is invalid(17179870234)
[  377.892534][T13866] exFAT-fs (loop6): Filesystem has been set read-only
[  377.967317][   T24] em28xx 6-1:0.0: unknown em28xx chip ID (250)
[  377.992133][T13870] openvswitch: netlink: Multiple metadata blocks provided
[  378.170382][   T24] em28xx 6-1:0.0: Config register raw data: 0xfffffffb
[  378.228315][T13886] loop6: detected capacity change from 0 to 16
[  378.237225][T13886] erofs (device loop6): mounted with root inode @ nid 36.
[  378.300995][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  378.302954][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  378.374422][   T24] em28xx 6-1:0.0: AC97 chip type couldn't be determined
[  378.377131][   T24] em28xx 6-1:0.0: No AC97 audio processor
[  378.381251][   T24] usb 6-1: USB disconnect, device number 35
[  378.383769][   T24] em28xx 6-1:0.0: Disconnecting em28xx
[  378.386584][   T24] em28xx 6-1:0.0: Freeing device
[  378.573600][   T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.643341][   T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.696766][   T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.751635][   T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.778133][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  378.789777][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  378.794969][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  378.806973][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  378.811596][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  378.863101][   T13] bridge_slave_1: left allmulticast mode
[  378.865079][   T13] bridge_slave_1: left promiscuous mode
[  378.866930][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  378.870754][   T13] bridge_slave_0: left allmulticast mode
[  378.872580][   T13] bridge_slave_0: left promiscuous mode
[  378.874358][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.765878][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  379.770300][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  379.774309][   T13] bond0 (unregistering): Released all slaves
[  379.908046][   T13] : left promiscuous mode
[  379.944213][T13898] loop5: detected capacity change from 0 to 2048
[  379.950077][T13898] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  380.123456][T13888] chnl_net:caif_netlink_parms(): no params data found
[  380.212386][T13888] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.215908][T13888] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.218258][T13888] bridge_slave_0: entered allmulticast mode
[  380.221001][T13888] bridge_slave_0: entered promiscuous mode
[  380.224397][T13888] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.226796][T13888] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.229066][T13888] bridge_slave_1: entered allmulticast mode
[  380.231754][T13888] bridge_slave_1: entered promiscuous mode
[  380.279822][   T13] hsr_slave_0: left promiscuous mode
[  380.282211][   T13] hsr_slave_1: left promiscuous mode
[  380.284291][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  380.287284][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  380.290076][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  380.292324][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  380.304864][   T24] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  380.308192][   T13] veth1_macvtap: left promiscuous mode
[  380.310416][   T13] veth0_macvtap: left promiscuous mode
[  380.312626][   T13] veth1_vlan: left promiscuous mode
[  380.314270][   T13] veth0_vlan: left promiscuous mode
[  380.479273][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  380.482547][   T24] usb 6-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[  380.502997][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.507329][   T24] usb 6-1: config 0 descriptor??
[  380.531181][   T24] smsusb:smsusb_probe: board id=8, interface number 0
[  380.533823][   T24] smsusb:smsusb_probe: Device initialized with return code -19
[  380.749193][ T6231] usb 6-1: USB disconnect, device number 36
[  380.882126][   T54] Bluetooth: hci2: command tx timeout
[  381.198256][   T13] team0 (unregistering): Port device team_slave_1 removed
[  381.240916][   T13] team0 (unregistering): Port device team_slave_0 removed
[  381.852936][T13888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  381.861326][T13888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  381.901243][T13888] team0: Port device team_slave_0 added
[  381.908853][T13888] team0: Port device team_slave_1 added
[  381.962875][T13888] batman_adv: batadv0: Adding interface: batadv_slave_0
[  381.966914][T13888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  381.975219][T13888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  381.979540][T13888] batman_adv: batadv0: Adding interface: batadv_slave_1
[  381.981704][T13888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  381.989739][T13888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  382.038574][T13888] hsr_slave_0: entered promiscuous mode
[  382.040922][T13888] hsr_slave_1: entered promiscuous mode
[  382.169372][   T13] IPVS: stop unused estimator thread 0...
[  382.180670][   T13] ------------[ cut here ]------------
[  382.183010][   T13] WARNING: CPU: 0 PID: 13 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[  382.187090][   T13] Modules linked in:
[  382.189797][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  382.196257][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  382.200253][   T13] Workqueue: netns cleanup_net
[  382.202025][   T13] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  382.203986][   T13] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 a8 e0 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 56 9e e2 f7 e8 f1 75 9e f7 90 <0f> 0b 90 e9 fd fd ff ff e8 e3 75 9e f7 90 0f 0b 90 e9 60 fe ff ff
[  382.210012][   T13] RSP: 0018:ffffc90000107898 EFLAGS: 00010293
[  382.211851][   T13] RAX: ffffffff8a2135bf RBX: ffff888022ac4880 RCX: ffff88801c690000
[  382.214398][   T13] RDX: 0000000000000000 RSI: ffffffff8dba33cb RDI: ffff88801c690000
[  382.217283][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa34237 R09: 1ffffffff1f46846
[  382.219784][   T13] R10: dffffc0000000000 R11: fffffbfff1f46847 R12: ffffffff8f62d2e0
[  382.222166][   T13] R13: 1ffff92000020f40 R14: ffff888022ac5d00 R15: dffffc0000000000
[  382.225321][   T13] FS:  0000000000000000(0000) GS:ffff8880b8624000(0000) knlGS:0000000000000000
[  382.228882][   T13] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  382.231448][   T13] CR2: 0000001b3241dff8 CR3: 0000000026f84000 CR4: 00000000000006f0
[  382.234674][   T13] Call Trace:
[  382.236080][   T13]  <TASK>
[  382.237287][   T13]  xfrm_net_exit+0x2d/0x70
[  382.239079][   T13]  ops_undo_list+0x49a/0x990
[  382.240933][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  382.242891][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  382.245409][   T13]  cleanup_net+0x4c5/0x800
[  382.247178][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  382.249091][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  382.251005][   T13]  ? process_scheduled_works+0x9ef/0x17b0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  382.253558][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  382.256537][   T13]  process_scheduled_works+0xae1/0x17b0
[  382.259081][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  382.261688][   T13]  worker_thread+0x8a0/0xda0
[  382.263552][   T13]  kthread+0x711/0x8a0
[  382.265302][   T13]  ? __pfx_worker_thread+0x10/0x10
[  382.267381][   T13]  ? __pfx_kthread+0x10/0x10
[  382.269249][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  382.271342][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  382.273334][   T13]  ? __pfx_kthread+0x10/0x10
[  382.275009][   T13]  ret_from_fork+0x3fc/0x770
[  382.276554][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  382.278414][   T13]  ? __switch_to_asm+0x39/0x70
[  382.280353][   T13]  ? __switch_to_asm+0x33/0x70
[  382.282012][   T13]  ? __pfx_kthread+0x10/0x10
[  382.283557][   T13]  ret_from_fork_asm+0x1a/0x30
[  382.285324][   T13]  </TASK>
[  382.286313][   T13] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  382.288665][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  382.292529][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  382.295901][   T13] Workqueue: netns cleanup_net
[  382.297457][   T13] Call Trace:
[  382.298585][   T13]  <TASK>
[  382.299734][   T13]  dump_stack_lvl+0x99/0x250
[  382.301690][   T13]  ? __asan_memcpy+0x40/0x70
[  382.303234][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  382.304877][   T13]  ? __pfx__printk+0x10/0x10
[  382.306444][   T13]  vpanic+0x281/0x750
[  382.307777][   T13]  ? __pfx__printk+0x10/0x10
[  382.309278][   T13]  ? __pfx_vpanic+0x10/0x10
[  382.310867][   T13]  ? is_bpf_text_address+0x292/0x2b0
[  382.312568][   T13]  panic+0xb9/0xc0
[  382.313798][   T13]  ? __pfx_panic+0x10/0x10
[  382.315251][   T13]  __warn+0x31b/0x4b0
[  382.316582][   T13]  ? xfrm_state_fini+0x270/0x2f0
[  382.318208][   T13]  ? xfrm_state_fini+0x270/0x2f0
[  382.319797][   T13]  report_bug+0x2be/0x4f0
[  382.321411][   T13]  ? xfrm_state_fini+0x270/0x2f0
[  382.323346][   T13]  ? xfrm_state_fini+0x270/0x2f0
[  382.324995][   T13]  ? xfrm_state_fini+0x272/0x2f0
[  382.326550][   T13]  handle_bug+0x84/0x160
[  382.327923][   T13]  exc_invalid_op+0x1a/0x50
[  382.329337][   T13]  asm_exc_invalid_op+0x1a/0x20
[  382.330970][   T13] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  382.332702][   T13] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 a8 e0 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 56 9e e2 f7 e8 f1 75 9e f7 90 <0f> 0b 90 e9 fd fd ff ff e8 e3 75 9e f7 90 0f 0b 90 e9 60 fe ff ff
[  382.338802][   T13] RSP: 0018:ffffc90000107898 EFLAGS: 00010293
[  382.340743][   T13] RAX: ffffffff8a2135bf RBX: ffff888022ac4880 RCX: ffff88801c690000
[  382.343192][   T13] RDX: 0000000000000000 RSI: ffffffff8dba33cb RDI: ffff88801c690000
[  382.345690][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa34237 R09: 1ffffffff1f46846
[  382.348206][   T13] R10: dffffc0000000000 R11: fffffbfff1f46847 R12: ffffffff8f62d2e0
[  382.350749][   T13] R13: 1ffff92000020f40 R14: ffff888022ac5d00 R15: dffffc0000000000
[  382.353474][   T13]  ? xfrm_state_fini+0x26f/0x2f0
[  382.355437][   T13]  ? xfrm_state_fini+0x26f/0x2f0
[  382.357006][   T13]  xfrm_net_exit+0x2d/0x70
[  382.358584][   T13]  ops_undo_list+0x49a/0x990
[  382.360120][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  382.361808][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  382.363504][   T13]  cleanup_net+0x4c5/0x800
[  382.365155][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  382.366765][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  382.368406][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  382.370265][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  382.372166][   T13]  process_scheduled_works+0xae1/0x17b0
[  382.374113][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  382.376471][   T13]  worker_thread+0x8a0/0xda0
[  382.377998][   T13]  kthread+0x711/0x8a0
[  382.379380][   T13]  ? __pfx_worker_thread+0x10/0x10
[  382.381073][   T13]  ? __pfx_kthread+0x10/0x10
[  382.382846][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  382.384969][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  382.386876][   T13]  ? __pfx_kthread+0x10/0x10
[  382.388353][   T13]  ret_from_fork+0x3fc/0x770
[  382.389863][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  382.391498][   T13]  ? __switch_to_asm+0x39/0x70
[  382.392996][   T13]  ? __switch_to_asm+0x33/0x70
[  382.394446][   T13]  ? __pfx_kthread+0x10/0x10
[  382.396159][   T13]  ret_from_fork_asm+0x1a/0x30
[  382.397860][   T13]  </TASK>
[  382.399389][   T13] Kernel Offset: disabled
[  382.400756][   T13] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:53:31  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000107030
R8 =ffff888108130237 R9 =1ffff11021026046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af18ca R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3241dff8 CR3=0000000026f84000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8174859b ffffffff8168893f
XMM02=ffffffff8174859b ffffffff8174859b XMM03=ffffffff8168893f ffffffff816888ad
XMM04=00007f527a6ed100 00007f5279b87460 XMM05=00007f5279b87478 00007f5279b874c0
XMM06=00007f5279b874b8 00007f5279b874b0 XMM07=00007f5279b874a8 00007f5279b874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f5279a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffffffffffff RBX=0000000000100000 RCX=1cddcd239a9ca89a RDX=0000000000000000
RSI=0000000000100000 RDI=ffffffff93618310 RBP=0000000000000000 RSP=ffffc9000639f0e8
R8 =0000000000000000 R9 =ffffffff824021c1 R10=dffffc0000000000 R11=fffffbfff1c3cb1d
R12=dffffc0000000000 R13=0000000000001140 R14=ffffffff93618540 R15=ffffffff93618540
RIP=ffffffff84c62a89 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556fc7b500 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055bcf8057000 CR3=0000000032524000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
