last executing test programs:

8m29.555846664s ago: executing program 1 (id=127):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newtaction={0x4c, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x38, 0x1, [@m_sample={0x34, 0xc, 0x0, 0x0, {{0xb}, {0x4}, {0x6, 0x6, "9030"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x2000000)

8m29.46688416s ago: executing program 1 (id=128):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1})
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0)

8m29.453739605s ago: executing program 1 (id=129):
r0 = getpgid(0x0)
r1 = syz_pidfd_open(r0, 0x0)
process_madvise(r1, 0x0, 0x0, 0x4, 0x0)

8m29.401498126s ago: executing program 1 (id=130):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x12040cc, &(0x7f00000003c0)={[{@shortname_winnt}, {@shortname_winnt}, {@numtail}, {}, {@rodir}, {@utf8}, {@fat=@discard}, {@fat=@nfs_nostale_ro}, {@rodir}, {@shortname_mixed}, {@rodir}, {@utf8no}, {@utf8}]}, 0x0, 0x2ad, &(0x7f0000000580)="$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")
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11480, 0x0)

8m29.324523036s ago: executing program 1 (id=132):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)={0xe0, 0x12, 0x25c8ae48a72191d, 0x0, 0x0, "", [@generic="be60e9dd96bc134d4e792565f61dd171bee0d5ef11f11242ab27ce1d1d845655a80db0e8e60b96a21cb6f1a41105716ac7a9972711f01002bb429fcbf6561afca108539188b82a92927ed6e20293c85ddda8e0a76975ca5d36b2d9f64fc52c4186166d868587bdd8492f3a9ca7ea4e6c9d8f02e5349a322e9ab0a7c2800e1f3707bc1c4bd11748fe7ee91381ebe9716a8dde787ec561f20eca7d82f047111d3fe3dfe0fe9712163a8b19d900b4", @nested={0x20, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x0, 0x0, 0x0, @fd}]}]}, 0xe0}], 0x1}, 0x0)

8m28.998001163s ago: executing program 1 (id=133):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x70bd27, 0x25dedbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, "16"}, @NL80211_BAND_60GHZ={0x4, 0x11}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4048840)

8m28.940430434s ago: executing program 32 (id=133):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x70bd27, 0x25dedbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, "16"}, @NL80211_BAND_60GHZ={0x4, 0x11}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4048840)

8m3.868426161s ago: executing program 2 (id=417):
setns(0xc9, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1afdfb307cf472eb1cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

8m3.755719427s ago: executing program 2 (id=418):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x9, &(0x7f0000000100)=0x4)

8m3.755492729s ago: executing program 2 (id=419):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0)

8m3.675399062s ago: executing program 2 (id=421):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x80000c, &(0x7f00000006c0)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRES32, @ANYBLOB="d9b2de1a2f7d06000000000000f0955139afd5c85d409cd57977db7b7c40ade28a33a6a4636ff400fb97e6caf4db25c1ccd8fee922c9ca87d19e19bed2941af9fc3561a936e805795a9965b5eb669fb143b894f24dbf2cd930f396d0a6d2451810d29d7c5e9dbda0be77473bb0431e71cfa02a873d927ec49990e8ac2bb9469d53e0420e67beaa46cb9850de015b11ed84f357d67ae57d156d5a089f321ec719835c6eeb76ad4a79ca0a80f230d9110b57272d24eb8d5effb24faddf3ffcb309d9000000000000000000ce8d0113cc8e073fc339e82352bcdc64195fe94d66d7", @ANYRESDEC, @ANYRES8, @ANYRESDEC=0x0, @ANYRES8, @ANYRESOCT, @ANYRES8, @ANYRES8, @ANYRES16=0x0, @ANYRES64, @ANYRES32], 0xff, 0x1508, &(0x7f0000000a00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
creat(&(0x7f0000000380)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0xa, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0x4]})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x86e40, 0x293)

8m3.479982661s ago: executing program 2 (id=425):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8033, 0xffffffffffffffff, 0xfbffe000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x50, 0x1, [@m_bpf={0x4c, 0xb, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}]}, {0x19, 0x6, "8c5e889680ea699f0286c6926deecbcf795b716b0f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x64}}, 0x20040000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="080001"], 0x90}}, 0x0)

8m3.261880833s ago: executing program 2 (id=432):
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote, 0x101}, 0x1c, 0x0}}], 0x1, 0x0)
connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @remote, 0x7}, 0x70)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

8m3.133104532s ago: executing program 33 (id=432):
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote, 0x101}, 0x1c, 0x0}}], 0x1, 0x0)
connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @remote, 0x7}, 0x70)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

7m50.654441256s ago: executing program 3 (id=599):
mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_script(r1, &(0x7f0000010880)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000c)
readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1)

7m50.555291065s ago: executing program 3 (id=601):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x25dfdbfe, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x23}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40)

7m50.554954172s ago: executing program 3 (id=602):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x9732)
listen(r0, 0xec)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x800)

7m50.487485546s ago: executing program 3 (id=603):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00')

7m50.431311213s ago: executing program 3 (id=604):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x40)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722", 0x6f}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26", 0x77}, {&(0x7f0000001400)="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", 0x4e2}], 0x3}, 0x0)

7m50.145425049s ago: executing program 3 (id=606):
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700)
statx(0xffffffffffffff9c, &(0x7f0000000040)='./file5\x00', 0x0, 0x35ce9dbc6723c18f, &(0x7f0000000080))

7m50.075402804s ago: executing program 34 (id=606):
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700)
statx(0xffffffffffffff9c, &(0x7f0000000040)='./file5\x00', 0x0, 0x35ce9dbc6723c18f, &(0x7f0000000080))

7m33.484175238s ago: executing program 4 (id=781):
syz_emit_ethernet(0x16, &(0x7f0000000040)={@multicast, @remote, @void, {@llc={0x4, {@snap={0x0, 0x0, "af", "1a0c65"}}}}}, 0x0)

7m33.394356905s ago: executing program 4 (id=782):
set_mempolicy(0x3, &(0x7f0000000040)=0x82, 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024"], 0xc4}}, 0x0)

7m33.39399702s ago: executing program 4 (id=783):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4428, &(0x7f0000008940)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
truncate(&(0x7f0000000900)='./file1\x00', 0x110c6b)

7m32.843861686s ago: executing program 4 (id=791):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000140)={[{@fat=@fmask={'fmask', 0x3d, 0x7f}}, {@shortname_mixed}, {@fat=@errors_continue}, {@utf8no}, {@utf8no}, {@utf8}, {@utf8}, {@utf8}, {@numtail}, {@fat=@sys_immutable}, {@fat=@umask={'umask', 0x3d, 0x1}}, {@shortname_winnt}, {@numtail}]}, 0x0, 0x2b2, &(0x7f0000002c80)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020)

7m32.534943835s ago: executing program 4 (id=798):
syz_usb_connect$hid(0x1, 0x19, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x461, 0x4e05, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, "", [{{0x9, 0x4, 0x0, 0x3, 0xb, 0x3, 0x0, 0x2, 0x8, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x8}}}}}]}}]}}, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff)

7m32.247509502s ago: executing program 4 (id=804):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, 0x0, 0x0, 0xfffffffffffffffc, 0x400001540})

7m32.082765708s ago: executing program 35 (id=804):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, 0x0, 0x0, 0xfffffffffffffffc, 0x400001540})

2.201032664s ago: executing program 6 (id=8496):
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff8000}, 0x1c)
setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10)

2.156684663s ago: executing program 6 (id=8497):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x5d, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000009000)=r0, 0x4)

2.130180877s ago: executing program 6 (id=8499):
socket(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
accept4(r0, 0x0, 0x0, 0x800)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x21, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0xffff, 0xe27, 0x0, 0x0, 0x1000, 0x801, 0xffffffffffffffff, 0x0, 0x78}}}, &(0x7f0000000400)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

613.027876ms ago: executing program 5 (id=8528):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind(r0, &(0x7f0000000080)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80)

569.290936ms ago: executing program 5 (id=8530):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9a}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

547.851674ms ago: executing program 0 (id=8531):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x20000, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2000, 0x7f, 0x14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400"], 0x7c}}, 0x0)

522.170076ms ago: executing program 5 (id=8532):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1)
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [], {0x10, 0x7}, {0x20, 0x2}}, 0x24, 0x2)

389.58364ms ago: executing program 5 (id=8533):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x2, 0x15, 0x4, 0x3, 0x5, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_address={0x3, 0x7, 0x6c, 0xe0, 0x0, @in={0x2, 0x4e22, @local}}]}, 0x28}}, 0x10)

332.703249ms ago: executing program 0 (id=8534):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
write$sndseq(r0, &(0x7f0000000080)=[{0x41, 0x0, 0x3, 0xfd, @time={0x0, 0x3}, {0x46, 0x1}, {0xf}, @raw32={[0x5d8527c6, 0x8001, 0xb]}}, {0x2b, 0x18, 0x3, 0x12, @time={0x7f, 0xffff0000}, {0x3, 0xfa}, {0xf0, 0xbd}, @addr={0x7f, 0x1}}], 0x38)

332.554628ms ago: executing program 0 (id=8535):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r0, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}}], 0x1, 0x0)

329.041849ms ago: executing program 5 (id=8536):
unshare(0x2a020480)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@ifindex, r2, 0x36, 0x10, 0x0, @void, @value=r2}, 0x20)

306.243382ms ago: executing program 0 (id=8537):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000002500010026bd7002ffdbb9250500000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4048854}, 0x40044)

265.306419ms ago: executing program 0 (id=8538):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, [@alu={0x4, 0x1, 0x3, 0x96bdff5043e24129, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)

221.728136ms ago: executing program 5 (id=8539):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x800744, &(0x7f0000000300)={[{@data_err_ignore}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nobh}, {@errors_remount}, {@nodiscard}, {@grpid}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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")
creat(&(0x7f0000000040)='./file0\x00', 0xecf86c37d5304960)

219.531918ms ago: executing program 0 (id=8540):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x38, 0x0, "53bb467d04f145"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0)

194.171638ms ago: executing program 6 (id=8541):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb90}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010101}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0xd, 0x0, 0x4000000}, 0x0)

193.33992ms ago: executing program 6 (id=8542):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x2, 0x0, &(0x7f0000001080)=0xffffffffffffff15)

0s ago: executing program 6 (id=8543):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000000000703000000000000000000010000010c00064000000000000000080900010073797a300000000008000540000000019a63179f1baf97f6fe545d0ea3fea7ecd4d3a646ef593d0a077002b06f90c80038964ec3e54acef8810818db30a7008db298c8237de46224842fd69e67d7ad7d43a6c5481932d179563363a70ae367b79723ddb4f6bc7469f3c0997dc6814a30a39774cc7c5be5"], 0x34}, 0x1, 0x0, 0x0, 0x2000000}, 0x40000)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x2, 0x7, 0x5, 0x0, 0x0, {0x5}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)

kernel console output (not intermixed with test programs):

atch(7, /dev/loop5p3, 10) failed: No such file or directory
[  410.989885][T18993] loop5: detected capacity change from 0 to 1024
[  411.004513][T18993] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  411.038975][ T7393] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  411.085846][T19000] loop5: detected capacity change from 0 to 256
[  411.099273][T19002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5353'.
[  411.121207][   T34] kauditd_printk_skb: 4 callbacks suppressed
[  411.121218][   T34] audit: type=1326 audit(1787039255.008:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18999 comm="syz.5.5352" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853139e0d9 code=0x7ffc0000
[  411.137164][T15954] usb 7-1: new full-speed USB device number 43 using dummy_hcd
[  411.139645][   T34] audit: type=1326 audit(1787039255.008:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18999 comm="syz.5.5352" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853139e0d9 code=0x7ffc0000
[  411.139669][   T34] audit: type=1326 audit(1787039255.027:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18999 comm="syz.5.5352" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853139e0d9 code=0x7ffc0000
[  411.139715][   T34] audit: type=1326 audit(1787039255.027:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18999 comm="syz.5.5352" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853139e0d9 code=0x7ffc0000
[  411.167038][   T34] audit: type=1326 audit(1787039255.027:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18999 comm="syz.5.5352" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f853139e0d9 code=0x7ffc0000
[  411.187509][   T34] audit: type=1326 audit(1787039255.073:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18999 comm="syz.5.5352" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853139e0d9 code=0x7ffc0000
[  411.196338][   T34] audit: type=1326 audit(1787039255.073:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18999 comm="syz.5.5352" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853139e0d9 code=0x7ffc0000
[  411.205535][   T34] audit: type=1326 audit(1787039255.082:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18999 comm="syz.5.5352" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f853139e0d9 code=0x7ffc0000
[  411.224289][   T34] audit: type=1326 audit(1787039255.082:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18999 comm="syz.5.5352" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f853139e0d9 code=0x7ffc0000
[  411.288224][T15954] usb 7-1: device descriptor read/64, error -71
[  411.425306][T15954] usb usb7-port1: attempt power cycle
[  411.483089][T19015] ip_tables: iptables: counters copy to user failed while replacing table
[  411.831986][T15954] usb 7-1: new full-speed USB device number 44 using dummy_hcd
[  411.853321][T15954] usb 7-1: device descriptor read/8, error -71
[  412.112417][T15954] usb 7-1: new full-speed USB device number 45 using dummy_hcd
[  412.145790][T15954] usb 7-1: device descriptor read/8, error -71
[  412.263769][T15954] usb usb7-port1: unable to enumerate USB device
[  413.815568][   T55] Bluetooth: hci3: command 0x1003 tx timeout
[  413.821536][ T8033] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  414.172200][T19067] loop6: detected capacity change from 0 to 1024
[  414.194520][T19067] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  414.204943][T19067] EXT4-fs (loop6): Errors on filesystem, clearing orphan list.
[  414.208374][T19067] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  414.250061][ T8032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.485813][T19087] netlink: 'syz.6.5392': attribute type 11 has an invalid length.
[  414.488257][T19087] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5392'.
[  414.614879][T19095] loop6: detected capacity change from 0 to 4096
[  414.632401][T19096] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  414.942452][T19110] bridge0: port 2(bridge_slave_1) entered disabled state
[  414.945599][T19110] bridge0: port 1(bridge_slave_0) entered disabled state
[  415.277323][T19110] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  415.300762][T19110] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  415.530197][T19110] geneve1: left promiscuous mode
[  415.673663][T19110] bond2: left allmulticast mode
[  415.676458][T19110] bridge2: left allmulticast mode
[  415.691298][T19110] bridge2: left promiscuous mode
[  415.698099][T19110] bridge3: left promiscuous mode
[  415.714986][T19110] bond3: left promiscuous mode
[  415.719191][T19110] bond3: left allmulticast mode
[  415.872974][ T5651] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0
[  415.882698][ T5651] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  415.900022][ T5651] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0
[  415.903048][ T5651] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  415.907846][ T5651] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0
[  415.911546][ T5651] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  415.914459][ T5651] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0
[  415.918599][ T5651] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  416.414715][T15954] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  416.590151][T15954] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  416.599490][T15954] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  416.607743][T15954] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  416.613320][T15954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.851820][T15954] cxacru 6-1:1.0: invalid response length to cm 0x90: 0
[  416.875412][T15954] cxacru 6-1:1.0: usbatm_usb_probe: invalid endpoint 02!
[  416.884098][T15954] cxacru 6-1:1.0: probe with driver cxacru failed with error -22
[  416.890929][T19185] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5435'.
[  417.069549][T15954] usb 6-1: USB disconnect, device number 45
[  417.131647][T19200] overlayfs: failed to clone upperpath
[  417.437639][T19220] loop6: detected capacity change from 0 to 4096
[  417.457017][T19221] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  417.467764][T19220] NILFS error (device loop6): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  417.475250][T19220] NILFS (loop6): mounting fs with errors
[  417.605379][T19231] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5457'.
[  417.853643][T19243] trusted_key: syz.5.5458 sent an empty control message without MSG_MORE.
[  418.291143][T19265] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5469'.
[  418.358252][T19269] fuse: fd is not a fuse device
[  418.643091][T19282] netlink: 'syz.5.5477': attribute type 21 has an invalid length.
[  418.644218][T19279] bond5: option arp_all_targets: invalid value (2097152)
[  418.649727][T19279] bond5 (unregistering): Released all slaves
[  418.747724][T19287] syz_tun: refused to change device tx_queue_len
[  418.750443][T19287] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  419.048160][T19127] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[  419.062221][T19300] loop5: detected capacity change from 0 to 1024
[  419.065570][T19300] EXT4-fs: Ignoring removed bh option
[  419.104654][T19300] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  419.182670][ T7393] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.213172][T19127] usb 7-1: Using ep0 maxpacket: 16
[  419.220687][T19127] usb 7-1: unable to get BOS descriptor or descriptor too short
[  419.242722][T19127] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7
[  419.252276][T19127] usb 7-1: config 9 has an invalid interface number: 57 but max is 0
[  419.257108][T19127] usb 7-1: config 9 has no interface number 0
[  419.259386][T19127] usb 7-1: config 9 interface 57 has no altsetting 0
[  419.269288][T19127] usb 7-1: string descriptor 0 read error: -22
[  419.271997][T19127] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.466007][T19325] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5495'.
[  419.468719][T19325] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5495'.
[  419.473142][T19325] netlink: 'syz.0.5495': attribute type 5 has an invalid length.
[  419.475704][T19325] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5495'.
[  419.538170][T15954] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  419.723878][T15954] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  419.731877][T15954] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  419.738062][T15954] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  419.743141][T15954] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  419.748041][T15954] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  419.751656][T15954] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  419.756772][T15954] usb 6-1: config 1 has no interface number 1
[  419.759173][T15954] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  419.764719][T15954] usb 6-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x1E, changing to 0xE
[  419.768695][T15954] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0xE has invalid maxpacket 16428, setting to 1024
[  419.772085][T15954] usb 6-1: config 1 interface 2 altsetting 1 bulk endpoint 0xE has invalid maxpacket 1024
[  419.780917][T15954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.786679][T15954] usb 6-1: Product: syz
[  419.790334][T15954] usb 6-1: Manufacturer: syz
[  419.793646][T15954] usb 6-1: SerialNumber: syz
[  420.125515][T19360] atomic_op ffff8881b941f998 conn xmit_atomic 0000000000000000
[  420.239419][T19315] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  420.243946][T15954] usb 6-1: No MIDI endpoints found
[  420.245655][T15954] usb 6-1: Failed to parse MIDI 2.0 interface
[  420.248420][T15954] usb 6-1: 0:2: cannot create sequencer device
[  420.389411][T19127] video4linux radio48: keene_cmd_set failed (-71)
[  420.393460][T19127] radio-keene 7-1:9.57: V4L2 device registered as radio48
[  420.399995][T19127] usb 7-1: USB disconnect, device number 46
[  420.477052][T15954] usb 6-1: USB disconnect, device number 46
[  420.978851][T19371] tunl0: Caught tx_queue_len zero misconfig
[  420.981232][T19371] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5517'.
[  421.082590][T19373] loop6: detected capacity change from 0 to 4096
[  421.094669][T19378] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  421.348228][T15954] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  421.522190][T15954] usb 6-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00
[  421.533141][T15954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.544428][T15954] usb 6-1: config 0 descriptor??
[  422.001458][T15954] smartjoyplus 0003:0925:8888.0010: item fetching failed at offset 5/8
[  422.009754][T15954] smartjoyplus 0003:0925:8888.0010: parse failed
[  422.014056][T15954] smartjoyplus 0003:0925:8888.0010: probe with driver smartjoyplus failed with error -22
[  422.032871][T19405] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5531'.
[  422.223819][T19127] usb 6-1: USB disconnect, device number 47
[  422.812778][T19426] loop5: detected capacity change from 0 to 512
[  422.835783][T19426] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  422.839994][T19426] ext4 filesystem being mounted at /1419/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  422.932497][ T7393] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.918111][T19445] loop5: detected capacity change from 0 to 512
[  423.941860][T19445] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  423.946749][T19445] ext4 filesystem being mounted at /1421/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  424.023646][T19451] netlink: 830 bytes leftover after parsing attributes in process `syz.6.5549'.
[  424.024506][ T7393] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  424.732711][T19482] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  424.958300][T19489] loop6: detected capacity change from 0 to 4096
[  425.181596][T19495] loop6: detected capacity change from 0 to 1033
[  425.224280][T19495] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  425.228944][T19495] ext4 filesystem being mounted at /1360/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  425.239179][   T34] audit: type=1326 audit(1787039268.046:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19494 comm="syz.6.5566" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b199e0d9 code=0x7ffc0000
[  425.261746][   T34] audit: type=1326 audit(1787039268.046:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19494 comm="syz.6.5566" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b199e0d9 code=0x7ffc0000
[  425.269445][   T34] audit: type=1326 audit(1787039268.046:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19494 comm="syz.6.5566" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b199e0d9 code=0x7ffc0000
[  425.277284][ T8032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  425.292608][   T34] audit: type=1326 audit(1787039268.046:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19494 comm="syz.6.5566" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b199e0d9 code=0x7ffc0000
[  425.300056][   T34] audit: type=1326 audit(1787039268.046:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19494 comm="syz.6.5566" exe="/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fe6b199e0d9 code=0x7ffc0000
[  425.317543][   T34] audit: type=1326 audit(1787039268.046:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19494 comm="syz.6.5566" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b199e0d9 code=0x7ffc0000
[  425.329028][T19502] ip_tables: iptables: counters copy to user failed while replacing table
[  425.331774][   T34] audit: type=1326 audit(1787039268.046:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19494 comm="syz.6.5566" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b199e0d9 code=0x7ffc0000
[  425.345830][   T34] audit: type=1326 audit(1787039268.046:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19494 comm="syz.6.5566" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b199e0d9 code=0x7ffc0000
[  425.362113][   T34] audit: type=1326 audit(1787039268.046:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19494 comm="syz.6.5566" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b199e0d9 code=0x7ffc0000
[  425.387610][   T34] audit: type=1326 audit(1787039268.046:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19494 comm="syz.6.5566" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe6b199e0d9 code=0x7ffc0000
[  425.673631][T19529] loop5: detected capacity change from 0 to 8
[  425.677431][T19529] squashfs image failed sanity check
[  425.943764][T19547] loop5: detected capacity change from 0 to 256
[  425.976296][T19547] exFAT-fs (loop5): error, no upcase table entry. Please run fsck
[  425.979753][T19547] exFAT-fs (loop5): Filesystem has been set read-only
[  425.982728][T19547] exFAT-fs (loop5): failed to test first cluster bit of root dir(5)
[  426.784468][T19583] tipc: Started in network mode
[  426.787294][T19583] tipc: Node identity 00002d003a2d002e0040ffffe0000001, cluster identity 4711
[  426.790144][T19583] tipc: Enabling of bearer <udp:> rejected, failed to enable media
[  426.872055][T19589] loop6: detected capacity change from 0 to 256
[  427.054718][T19604] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5611'.
[  427.219005][T19611] loop5: detected capacity change from 0 to 2048
[  427.254346][T19611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  427.262318][T19611] EXT4-fs error (device loop5): ext4_ext_precache:648: inode #2: comm syz.5.5613: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  427.304625][ T7393] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  428.133881][T19642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5627'.
[  428.137250][T19642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5627'.
[  428.217108][   T33] usb 7-1: new full-speed USB device number 47 using dummy_hcd
[  428.253441][T19647] bridge0: left promiscuous mode
[  428.255199][T19647] bridge0: left allmulticast mode
[  428.266586][T19647] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  428.269610][T19647] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  428.272899][T19647] vlan2: left promiscuous mode
[  428.274872][T19647] bond0: left promiscuous mode
[  428.276727][T19647] bond_slave_0: left promiscuous mode
[  428.279019][T19647] bond_slave_1: left promiscuous mode
[  428.303630][ T5457] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  428.306707][ T5457] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  428.309816][ T5457] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  428.313620][ T5457] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  428.403810][   T33] usb 7-1: not running at top speed; connect to a high speed hub
[  428.407147][   T33] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  428.412702][   T33] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  428.416853][   T33] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  428.420753][   T33] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6
[  428.426138][   T33] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.443538][   T33] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected
[  428.451112][   T33] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2
[  428.458769][   T33] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  428.465243][   T33] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88
[  428.473238][   T33] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6
[  428.482337][   T33] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  428.514687][T19649] Cannot find add_set index 3 as target
[  428.667207][T19659] Bluetooth: hci0: load_link_keys: too big key_count value 16384
[  428.785336][T19667] loop5: detected capacity change from 0 to 256
[  428.790655][T19667] exfat: Deprecated parameter 'utf8'
[  428.796631][T19667] exfat: Deprecated parameter 'utf8'
[  428.799035][T19667] exfat: Deprecated parameter 'namecase'
[  428.805628][T19667] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  428.818544][   T33] usb 7-1: USB disconnect, device number 47
[  428.826837][   T33] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  428.847938][   T33] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  428.862952][   T33] keyspan 7-1:1.0: device disconnected
[  429.081808][T19679] loop5: detected capacity change from 0 to 256
[  429.090152][T19679] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d)
[  429.463418][   T33] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  429.603394][T19714] openvswitch: netlink: IP tunnel dst address not specified
[  429.636690][   T33] usb 6-1: Using ep0 maxpacket: 8
[  429.648639][   T33] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  429.653559][   T33] usb 6-1: config index 0 descriptor too short (expected 30, got 18)
[  429.661672][   T33] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.667555][T19708] loop6: detected capacity change from 0 to 32768
[  429.670282][   T33] usb 6-1: Product: syz
[  429.672227][   T33] usb 6-1: Manufacturer: syz
[  429.674153][   T33] usb 6-1: SerialNumber: syz
[  429.679145][T19708] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5659 (19708)
[  429.691359][   T33] usb 6-1: config 0 descriptor??
[  429.709348][   T33] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  429.726534][   T33] usb 6-1: setting power ON
[  429.735746][   T33] dvb-usb: bulk message failed: -22 (2/0)
[  429.742018][   T33] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  429.746180][T19708] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  429.754517][T19708] BTRFS info (device loop6): using crc32c checksum algorithm
[  429.759577][   T33] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  429.769571][   T33] usb 6-1: media controller created
[  429.785138][   T33] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  429.807112][   T33] usb 6-1: selecting invalid altsetting 6
[  429.812540][   T33] usb 6-1: digital interface selection failed (-22)
[  429.817056][   T33] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  429.824905][   T33] usb 6-1: setting power OFF
[  429.840478][   T33] dvb-usb: bulk message failed: -22 (2/0)
[  429.842718][   T33] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  429.845849][   T33] (NULL device *): no alternate interface
[  429.850115][T19708] BTRFS info (device loop6): enabling ssd optimizations
[  429.858908][T19708] BTRFS info (device loop6): turning on flush-on-commit
[  429.864128][T19708] BTRFS info (device loop6): enabling free space tree
[  429.867134][T19708] BTRFS info (device loop6): enabling auto defrag
[  429.873376][T19708] BTRFS info (device loop6): use lzo compression, level 1
[  429.875828][T19708] BTRFS info (device loop6): max_inline set to 4096
[  429.880661][   T33] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  429.920821][   T33] usb 6-1: USB disconnect, device number 48
[  430.053078][ T8032] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  430.512850][T19757] xt_cgroup: invalid path, errno=-2
[  430.714933][ T5063] kernel write not supported for file /sequencer (pid: 5063 comm: kworker/0:3)
[  430.945555][T19785] netlink: 'syz.0.5683': attribute type 2 has an invalid length.
[  431.692754][T19823] loop6: detected capacity change from 0 to 256
[  431.738512][T19827] loop6: detected capacity change from 0 to 128
[  431.754372][T19827] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  431.758896][T19827] System zones: 1-3, 19-19, 35-36
[  431.764992][T19827] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  431.769891][T19827] ext4 filesystem being mounted at /1394/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  431.797634][T19835] tipc: Failed to remove unknown binding: 66,0,0/0:1800298147/1800298148
[  431.800787][T19835] tipc: Failed to remove unknown binding: 66,0,0/0:1800298147/1800298148
[  431.847079][ T8032] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  431.951582][T19842] loop5: detected capacity change from 0 to 512
[  431.955524][T19842] EXT4-fs: Ignoring removed oldalloc option
[  431.982785][T19842] EXT4-fs: Invalid journal IO priority (must be 0-7)
[  432.140875][T19850] loop6: detected capacity change from 0 to 32768
[  432.145832][T19850] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5710 (19850)
[  432.153321][T19855] loop5: detected capacity change from 0 to 128
[  432.159797][T19850] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  432.163244][T19850] BTRFS info (device loop6): using sha256 checksum algorithm
[  432.189915][   T34] kauditd_printk_skb: 29 callbacks suppressed
[  432.189929][   T34] audit: type=1800 audit(1787039530.451:2248): pid=19855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5713" name="file1" dev="loop5" ino=1048741 res=0 errno=0
[  432.216354][T19855] syz.5.5713: attempt to access beyond end of device
[  432.216354][T19855] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128
[  432.222353][T19853] syz.5.5713: attempt to access beyond end of device
[  432.222353][T19853] loop5: rw=2049, sector=146, nr_sectors = 64 limit=128
[  432.261545][T19850] BTRFS info (device loop6): enabling ssd optimizations
[  432.263921][T19850] BTRFS info (device loop6): turning on sync discard
[  432.267235][T19850] BTRFS info (device loop6): enabling free space tree
[  432.269522][T19850] BTRFS info (device loop6): use zlib compression, level 3
[  432.329003][ T8032] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  432.963756][ T5063] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  433.129266][ T5063] usb 6-1: unable to get BOS descriptor or descriptor too short
[  433.132478][ T5063] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  433.137533][ T5063] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  433.140897][T19914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5734'.
[  433.144381][ T5063] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  433.148376][ T5063] usb 6-1: Product: syz
[  433.150004][ T5063] usb 6-1: Manufacturer: syz
[  433.151920][ T5063] usb 6-1: SerialNumber: syz
[  433.327901][T19923] netlink: 'syz.0.5738': attribute type 10 has an invalid length.
[  433.332279][T19923] 8021q: adding VLAN 0 to HW filter on device batadv0
[  433.337242][T19923] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  433.382957][ T5063] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  433.599529][ T5063] usb 6-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  433.602442][ T5063] usb 6-1: found format II with max.bitrate = 4, frame size=7372
[  434.040603][ T5063] usb 6-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0)
[  434.087223][ T5063] usb 6-1: USB disconnect, device number 49
[  434.165704][ T6006] udevd[6006]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  434.196645][T19938] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5744'.
[  434.305734][T19944] tipc: Can't bind to reserved service type 0
[  434.389036][T19950] program syz.6.5750 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  434.435678][T19952] ip6gre1: entered promiscuous mode
[  434.437467][T19952] ip6gre1: entered allmulticast mode
[  434.647224][T19956] loop6: detected capacity change from 0 to 32768
[  434.653704][T19956] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[  434.659992][T19956] JBD2: Ignoring recovery information on journal
[  434.700223][T19956] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  434.778291][T19956] ocfs2: Unmounting device (7,6) on (node local)
[  434.996784][T19980] loop5: detected capacity change from 0 to 512
[  435.005518][T19980] EXT4-fs (loop5): fragment/cluster size (16384) != block size (1024)
[  435.086007][T19984] netlink: zone id is out of range
[  435.099495][T19984] netlink: zone id is out of range
[  435.101132][T19984] netlink: zone id is out of range
[  435.109611][T19984] netlink: zone id is out of range
[  435.113053][T19984] netlink: zone id is out of range
[  435.123325][T19984] netlink: zone id is out of range
[  435.127496][T19984] netlink: zone id is out of range
[  435.129588][T19984] netlink: zone id is out of range
[  435.132031][T19984] netlink: zone id is out of range
[  435.134237][T19984] netlink: zone id is out of range
[  435.321755][T20008] loop5: detected capacity change from 0 to 1024
[  435.369852][T20008] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  435.374834][T20008] ext4 filesystem being mounted at /1491/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  435.433522][ T7393] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  435.526024][T20020] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  435.557330][T20025] loop5: detected capacity change from 0 to 764
[  435.581594][T20025] Symlink component flag not implemented
[  435.584296][T20025] Symlink component flag not implemented (128)
[  436.057531][T20044] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5789'.
[  436.064338][T20044] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5789'.
[  436.129511][T20053] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode
[  436.139191][T20053] mac80211_hwsim hwsim15 wlan0: entered allmulticast mode
[  436.887007][T15954] usb 6-1: new full-speed USB device number 50 using dummy_hcd
[  437.048917][T20083] tmpfs: Bad value for 'nr_blocks'
[  437.063074][T15954] usb 6-1: unable to get BOS descriptor or descriptor too short
[  437.066208][T15954] usb 6-1: not running at top speed; connect to a high speed hub
[  437.070783][T15954] usb 6-1: New USB device found, idVendor=1199, idProduct=6893, bcdDevice=ad.70
[  437.078961][T15954] usb 6-1: config 2 has an invalid interface number: 93 but max is 0
[  437.082523][T15954] usb 6-1: config 2 has no interface number 0
[  437.084926][T15954] usb 6-1: config 2 interface 93 has no altsetting 0
[  437.090039][T15954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.092963][T15954] usb 6-1: Product: syz
[  437.094524][T15954] usb 6-1: Manufacturer: syz
[  437.096475][T15954] usb 6-1: SerialNumber: syz
[  437.332701][T15954] sierra 6-1:2.93: Sierra USB modem converter detected
[  437.347651][T15954] usb 6-1: Sierra USB modem converter now attached to ttyUSB0
[  437.357271][T15954] usb 6-1: USB disconnect, device number 50
[  437.369968][T15954] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  437.376848][T15954] sierra 6-1:2.93: device disconnected
[  437.403521][T20102] veth0: Caught tx_queue_len zero misconfig
[  437.997779][T20144] 8021q: adding VLAN 0 to HW filter on device batadv0
[  438.005332][T20144] team0: Port device batadv0 added
[  438.029700][T20144] bridge0: port 3(team0) entered blocking state
[  438.033082][T20144] bridge0: port 3(team0) entered disabled state
[  438.035207][T20144] team0: entered allmulticast mode
[  438.037917][T20144] team_slave_0: entered allmulticast mode
[  438.039941][T20144] team_slave_1: entered allmulticast mode
[  438.042984][T20144] batadv0: entered allmulticast mode
[  438.055406][T20144] team0: entered promiscuous mode
[  438.057647][T20144] team_slave_0: entered promiscuous mode
[  438.059711][T20144] team_slave_1: entered promiscuous mode
[  438.061793][T20144] batadv0: entered promiscuous mode
[  438.144783][   T34] audit: type=1326 audit(1787039535.950:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20157 comm="syz.5.5841" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853139e0d9 code=0x7ffc0000
[  438.156723][   T34] audit: type=1326 audit(1787039535.950:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20157 comm="syz.5.5841" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853139e0d9 code=0x7ffc0000
[  438.168699][   T34] audit: type=1326 audit(1787039535.950:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20157 comm="syz.5.5841" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853139e0d9 code=0x7ffc0000
[  438.181826][   T34] audit: type=1326 audit(1787039535.950:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20157 comm="syz.5.5841" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853139e0d9 code=0x7ffc0000
[  438.191614][   T34] audit: type=1326 audit(1787039535.950:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20157 comm="syz.5.5841" exe="/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f853139e0d9 code=0x7ffc0000
[  438.200705][   T34] audit: type=1326 audit(1787039535.950:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20157 comm="syz.5.5841" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853139e0d9 code=0x7ffc0000
[  438.216657][   T34] audit: type=1326 audit(1787039535.950:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20157 comm="syz.5.5841" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853139e0d9 code=0x7ffc0000
[  438.225075][   T34] audit: type=1326 audit(1787039535.959:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20157 comm="syz.5.5841" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f853139e0d9 code=0x7ffc0000
[  438.235967][   T34] audit: type=1326 audit(1787039535.959:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20157 comm="syz.5.5841" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f853139e0d9 code=0x7ffc0000
[  438.252793][ T5651] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  438.257992][ T5651] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  438.328627][T20174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5849'.
[  438.438911][T20183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5853'.
[  439.395536][T20194] bond1: entered allmulticast mode
[  439.401838][T20194] 8021q: adding VLAN 0 to HW filter on device bond1
[  439.495142][T20201] loop5: detected capacity change from 0 to 512
[  439.513158][T20201] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  439.551515][ T7393] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.179027][T20232] netlink: 'syz.5.5875': attribute type 5 has an invalid length.
[  440.194596][T20232] netlink: 'syz.5.5875': attribute type 9 has an invalid length.
[  440.198023][T20232] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5875'.
[  440.212804][T20234] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5876'.
[  440.432805][T20246] veth1_to_bond: entered allmulticast mode
[  440.437457][T20246] veth1_to_bond: left allmulticast mode
[  440.520917][T20244] loop5: detected capacity change from 0 to 32768
[  440.547660][   T34] audit: type=1800 audit(1787039538.164:2258): pid=20244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5881" name="file1" dev="loop5" ino=7 res=0 errno=0
[  440.651394][T20262] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  440.655565][T20262] bond2 (unregistering): Released all slaves
[  440.757749][T20267] fuse: fd is not a fuse device
[  441.215280][T20310] fuse: fd is not a fuse device
[  441.319659][ T5063] usb 6-1: new full-speed USB device number 51 using dummy_hcd
[  441.483368][ T5063] usb 6-1: not running at top speed; connect to a high speed hub
[  441.486480][ T5063] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00
[  441.492402][ T5063] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.496258][ T5063] usb 6-1: Product: syz
[  441.497762][ T5063] usb 6-1: Manufacturer: syz
[  441.499277][ T5063] usb 6-1: SerialNumber: syz
[  441.504619][ T5063] keyspan 6-1:1.0: Keyspan 4 port adapter converter detected
[  441.509791][ T5063] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  441.515716][ T5063] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  441.520702][ T5063] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  441.526041][ T5063] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  441.768792][    C0] usb 6-1: malformed indat packet
[  441.770998][    C0] usb 6-1: malformed indat packet
[  441.772776][    C0] usb 6-1: malformed indat packet
[  442.567346][T20348] lo: entered promiscuous mode
[  442.572511][T20348] bond0: entered promiscuous mode
[  442.574970][T20348] 8021q: adding VLAN 0 to HW filter on device bond0
[  442.579982][T20348] dummy0: entered promiscuous mode
[  442.586497][T20348] eql: entered promiscuous mode
[  442.589475][T20348] ifb0: entered promiscuous mode
[  442.591784][T20348] ifb1: entered promiscuous mode
[  442.600265][T20348] e1000 0000:00:03.0 eth0: entered promiscuous mode
[  442.606761][T20348] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode
[  442.609755][T20348] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode
[  442.615494][T20348] hwsim0: entered promiscuous mode
[  442.618038][T20348] ieee802154 phy0 wpan0: entered promiscuous mode
[  442.620654][T20348] ieee802154 phy1 wpan1: entered promiscuous mode
[  442.623209][T20348] teql0: entered promiscuous mode
[  442.625367][T20348] net_ratelimit: 496 callbacks suppressed
[  442.625378][T20348] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  443.779984][T20384] overlayfs: failed to clone lowerpath
[  443.782864][T20384] overlayfs: failed to clone lowerpath
[  444.331885][ T5063] usb 6-1: USB disconnect, device number 51
[  444.356510][ T5063] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  444.362960][ T5063] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  444.367468][ T5063] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  444.371731][ T5063] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  444.375266][ T5063] keyspan 6-1:1.0: device disconnected
[  444.455724][T20400] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5953'.
[  444.920157][T20420] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5962'.
[  445.351682][ T5708] usb 6-1: new full-speed USB device number 52 using dummy_hcd
[  445.525495][ T5708] usb 6-1: New USB device found, idVendor=0738, idProduct=b29a, bcdDevice=3e.9f
[  445.531946][ T5708] usb 6-1: config 127 has an invalid interface number: 248 but max is 0
[  445.538334][ T5708] usb 6-1: config 127 has no interface number 0
[  445.543602][ T5708] usb 6-1: config 127 interface 248 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  445.557336][ T5708] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.563208][ T5708] usb 6-1: Product: syz
[  445.567499][ T5708] usb 6-1: Manufacturer: syz
[  445.570075][ T5708] usb 6-1: SerialNumber: syz
[  445.575518][T20434] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  445.808515][ T5708] usb 6-1: USB disconnect, device number 52
[  446.032648][T20459] netlink: 'syz.6.5980': attribute type 1 has an invalid length.
[  446.304330][T20470] fuse: fd is not a fuse device
[  446.593241][T20493] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5996'.
[  447.338149][   T34] audit: type=1326 audit(1787039544.430:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20521 comm="syz.5.6010" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f853139e0d9 code=0x0
[  448.971670][T20548] syz_tun: entered allmulticast mode
[  449.718778][T20554] loop5: detected capacity change from 0 to 256
[  449.906975][T20569] loop5: detected capacity change from 0 to 16
[  449.933212][T20569] erofs (device loop5): mounted with root inode @ nid 36.
[  450.469741][   T34] audit: type=1326 audit(1787039547.318:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20616 comm="syz.6.6036" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6b199e0d9 code=0x0
[  451.011541][T20661] loop5: detected capacity change from 0 to 16
[  451.022980][T20661] erofs (device loop5): rootino(nid 36) is not a directory(i_mode 17700)
[  452.768854][T20690] loop5: detected capacity change from 0 to 32768
[  452.771579][T20690] xfs: Deprecated parameter 'attr2'
[  452.778259][T20690] XFS: attr2 mount option is deprecated.
[  452.786391][T20690] XFS (loop5): invalid logbufsize: 92 [not 16k,32k,64k,128k or 256k]
[  453.015717][   T55] Bluetooth: Wrong link type (-71)
[  453.113638][   T34] audit: type=1800 audit(1787039549.735:2261): pid=20732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6074" name="nullb0" dev="tmpfs" ino=7963 res=0 errno=0
[  453.180291][T20740] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6078'.
[  454.262417][T20776] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6087'.
[  454.394316][T20779] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  454.931957][T20788] loop5: detected capacity change from 0 to 4096
[  455.189893][T20799] netdevsim netdevsim6: Direct firmware load for  failed with error -2
[  455.194185][T20799] netdevsim netdevsim6: Falling back to sysfs fallback for: 
[  455.869424][T20814] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6104'.
[  455.896737][   T34] audit: type=1326 audit(1787039552.328:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20815 comm="syz.5.6105" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f853139e0d9 code=0x0
[  456.483939][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[  456.486779][ T1373] ieee802154 phy1 wpan1: encryption failed: -22
[  456.912213][T20859] sd 0:0:0:0: PR command failed: 1026
[  456.914446][T20859] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  456.917602][T20859] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  457.962502][T20883] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6135'.
[  458.028984][T20883] ip6gre1: entered promiscuous mode
[  458.040976][T20883] ip6gre1: entered allmulticast mode
[  458.215789][T20883] netlink: 'syz.5.6135': attribute type 6 has an invalid length.
[  458.222265][T20883] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6135'.
[  459.136951][T20955] No such timeout policy "syz1"
[  459.208898][T20956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6166'.
[  459.633688][T20970] fuse: fd is not a fuse device
[  459.922464][T20989] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  459.927627][T20990] x_tables: duplicate underflow at hook 2
[  460.645739][T21038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6206'.
[  460.648587][T21038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6206'.
[  460.792919][T21051] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6212'.
[  461.125224][T21081] loop5: detected capacity change from 0 to 512
[  461.150070][T21081] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  461.158123][T21081] ext4 filesystem being mounted at /1575/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  461.287546][ T7393] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  461.410034][   T34] audit: type=1326 audit(1787039557.412:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21094 comm="syz.6.6230" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b199e0d9 code=0x7ffc0000
[  461.440842][   T34] audit: type=1326 audit(1787039557.421:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21094 comm="syz.6.6230" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b199e0d9 code=0x7ffc0000
[  461.459102][   T34] audit: type=1326 audit(1787039557.421:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21094 comm="syz.6.6230" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b199e0d9 code=0x7ffc0000
[  461.469475][   T34] audit: type=1326 audit(1787039557.421:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21094 comm="syz.6.6230" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b199e0d9 code=0x7ffc0000
[  461.488484][   T34] audit: type=1326 audit(1787039557.421:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21094 comm="syz.6.6230" exe="/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fe6b199e0d9 code=0x7ffc0000
[  461.507634][   T34] audit: type=1326 audit(1787039557.421:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21094 comm="syz.6.6230" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b199e0d9 code=0x7ffc0000
[  461.524291][   T34] audit: type=1326 audit(1787039557.421:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21094 comm="syz.6.6230" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b199e0d9 code=0x7ffc0000
[  461.539769][   T34] audit: type=1326 audit(1787039557.421:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21094 comm="syz.6.6230" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b199e0d9 code=0x7ffc0000
[  461.552927][   T34] audit: type=1326 audit(1787039557.421:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21094 comm="syz.6.6230" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b199e0d9 code=0x7ffc0000
[  461.567050][   T34] audit: type=1326 audit(1787039557.421:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21094 comm="syz.6.6230" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe6b199cf47 code=0x7ffc0000
[  462.160868][ T5708] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  462.345885][ T5708] usb 6-1: Using ep0 maxpacket: 16
[  462.355128][ T5708] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  462.361392][ T5708] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  462.368985][ T5708] usb 6-1: config 0 has no interface number 0
[  462.375195][ T5708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.381436][ T5708] usb 6-1: config 0 descriptor??
[  463.062555][ T5708] uclogic 0003:28BD:0071.0011: pen parameters not found
[  463.067225][ T5708] uclogic 0003:28BD:0071.0011: interface is invalid, ignoring
[  463.344558][    T9] usb 6-1: USB disconnect, device number 53
[  463.836455][T21211] ip_tables: iptables: counters copy to user failed while replacing table
[  463.967267][T21219] pim6reg: entered allmulticast mode
[  464.427851][T21255] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  464.513638][T21260] No such timeout policy "s"
[  464.517994][T21260] netlink: Failed to associated timeout policy 's'
[  464.556688][T21266] Option 'dnserror' to dns_resolver key: bad/missing value
[  464.582191][T21269] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6301'.
[  464.585119][T21269] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6301'.
[  464.891847][ T5708] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  465.083132][ T5708] usb 6-1: Using ep0 maxpacket: 32
[  465.085709][ T5708] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  465.092739][ T5708] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  465.099886][ T5708] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  465.111189][ T5708] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  465.118490][ T5708] usb 6-1: Product: syz
[  465.121797][ T5708] usb 6-1: Manufacturer: syz
[  465.138744][ T5708] hub 6-1:4.0: USB hub found
[  465.350135][ T5708] hub 6-1:4.0: 2 ports detected
[  465.674449][T21334] netlink: 'syz.6.6332': attribute type 5 has an invalid length.
[  465.699586][T21336] overlayfs: failed to clone lowerpath
[  465.816337][ T5708] hub 6-1:4.0: set hub depth failed
[  465.828663][ T5708] usb 6-1: USB disconnect, device number 54
[  466.154702][T21361] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6345'.
[  466.158125][T21361] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6345'.
[  466.162431][T21361] netlink: 'syz.6.6345': attribute type 4 has an invalid length.
[  466.498354][T21384] loop5: detected capacity change from 0 to 512
[  466.541733][T21384] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  466.557550][T21384] ext4 filesystem being mounted at /1598/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  466.575593][T21384] EXT4-fs (loop5): shut down requested (1)
[  466.608209][ T7393] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  466.725600][T21397] comedi comedi1: 8255: I/O base address not correctly aligned
[  467.026818][ T5063] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  467.189347][ T5063] usb 6-1: Using ep0 maxpacket: 8
[  467.192049][ T5063] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  467.197521][ T5063] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  467.201539][ T5063] usb 6-1: config 0 has no interface number 0
[  467.203698][ T5063] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  467.207316][ T5063] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  467.216483][ T5063] usb 6-1: config 0 descriptor??
[  467.230372][ T5063] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  467.401657][T21408] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6365'.
[  467.423171][T21408] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6365'.
[  467.699960][T21429] PKCS7: Unknown OID: [4] 0.17
[  467.701649][T21429] PKCS7: Only support pkcs7_signedData type
[  468.245154][T21466] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  468.510443][T21484] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6402'.
[  468.619511][ T5708] usb 6-1: USB disconnect, device number 55
[  468.889308][T21497] netlink: 'syz.6.6408': attribute type 7 has an invalid length.
[  468.892687][T21497] netlink: 'syz.6.6408': attribute type 8 has an invalid length.
[  468.895259][T21497] netlink: 'syz.6.6408': attribute type 13 has an invalid length.
[  468.949240][T21505] overlayfs: failed to clone upperpath
[  469.235416][T21524] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6421'.
[  469.332979][T21530] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  469.428149][T21538] loop5: detected capacity change from 0 to 512
[  469.434937][T21538] EXT4-fs (loop5): Test dummy encryption mode enabled
[  469.441791][T21538] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.6428: inode has both inline data and extents flags
[  469.449388][T21538] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  469.449600][T21538] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.6428: couldn't read orphan inode 15 (err -117)
[  469.456804][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  469.456815][    C1] EXT4-fs (loop5): initial error at time 1787039564: ext4_orphan_get:1399: inode 15
[  469.456828][    C1] EXT4-fs (loop5): last error at time 1787039564: ext4_orphan_get:1399: inode 15
[  469.465295][T21538] loop5: lost filesystem error report for type 5 error -117
[  469.466199][T21538] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  469.484288][T21538] EXT4-fs error (device loop5): ext4_check_dx_root:2201: inode #2: comm syz.5.6428: Corrupt dir, invalid name_len for '.', running e2fsck is recommended
[  469.508068][ T7393] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  469.605373][T21550] : renamed from vlan0
[  469.680351][T21558] netlink: 432 bytes leftover after parsing attributes in process `syz.0.6437'.
[  469.688777][T21558] netlink: 18 bytes leftover after parsing attributes in process `syz.0.6437'.
[  469.694086][T21560] loop5: detected capacity change from 0 to 256
[  470.298058][T21616] netlink: 'syz.0.6464': attribute type 2 has an invalid length.
[  470.709676][T21639] loop5: detected capacity change from 0 to 256
[  470.818430][T21645] loop5: detected capacity change from 0 to 128
[  470.824069][T21645] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  470.833437][T21645] hpfs: filesystem error: improperly stopped
[  470.835617][T21645] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  470.838103][T21645] hpfs: You really don't want any checks? You are crazy...
[  470.840558][T21645] hpfs: Code page index out of array
[  470.842348][T21645] hpfs: code page support is disabled
[  470.844494][T21645] hpfs: filesystem error: map_dirent: not a directory
[  470.846633][T21645] 
[  470.847388][T21645] hpfs: hpfs_map_4sectors(): unaligned read
[  470.849224][T21645] hpfs: filesystem error: unable to find root dir
[  470.914614][T21650] Bluetooth: ISO socket layer initialized
[  471.554999][T21685] openvswitch: netlink: Key type 38 is out of range max 32
[  473.330665][T21720] loop5: detected capacity change from 0 to 2048
[  473.340807][T21720] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  473.344425][T21720] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  473.347233][T21720] UDF-fs: Scanning with blocksize 512 failed
[  473.354013][T21720] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  473.414539][T21726] loop5: detected capacity change from 0 to 2048
[  473.423280][T21726] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  473.433737][T21726] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  473.612231][T21741] lo: Caught tx_queue_len zero misconfig
[  473.934301][T21769] hsr_slave_0: left promiscuous mode
[  473.936769][T21769] hsr_slave_1: left promiscuous mode
[  473.980295][T21773] bond0: entered promiscuous mode
[  473.981967][T21773] bond_slave_0: entered promiscuous mode
[  473.985001][T21773] gretap0: entered promiscuous mode
[  473.987586][T21773] dummy0: entered promiscuous mode
[  474.002448][T21773] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  474.005556][T21773] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  474.012021][T21773] hsr0: Interlink (dummy0) is not up; please bring it up to get a fully working HSR network
[  474.271121][T21802] syz_tun: entered promiscuous mode
[  474.274061][T21802] syz_tun: entered allmulticast mode
[  474.276769][T21802] team0: Port device syz_tun added
[  474.338711][T21808] loop5: detected capacity change from 0 to 2048
[  474.341700][T21808] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  474.369582][T21808] syz.5.6544: attempt to access beyond end of device
[  474.369582][T21808] loop5: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048
[  474.374112][T21813] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  474.404193][T21808] syz.5.6544: attempt to access beyond end of device
[  474.404193][T21808] loop5: rw=8388608, sector=33554430, nr_sectors = 2 limit=2048
[  474.409686][T21808] NILFS (loop5): I/O error reading meta-data file (ino=6, block-offset=3)
[  475.061391][T21848] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6558'.
[  475.178323][T21856] bond2: (slave bond_slave_1): Device is not bonding slave
[  475.180766][T21856] bond2: option active_slave: invalid value (bond_slave_1)
[  475.184402][T21856] bond2 (unregistering): Released all slaves
[  475.369335][T21871] loop5: detected capacity change from 0 to 4096
[  475.375958][T21871] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  475.401381][T21871] ntfs3(loop5): Failed to initialize $Extend/$ObjId.
[  475.584470][T21901] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6583'.
[  475.588463][T21901] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6583'.
[  475.594580][T21901] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6583'.
[  475.598012][T21901] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6583'.
[  475.601654][T21901] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6583'.
[  475.604871][T21901] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6583'.
[  475.608135][T21901] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6583'.
[  475.611796][T21901] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6583'.
[  475.615076][T21901] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6583'.
[  475.647826][T21903] lo: entered allmulticast mode
[  475.655087][T21902] lo: left allmulticast mode
[  476.628891][T21935] loop5: detected capacity change from 0 to 128
[  476.681596][T21935] ufs: ufs_fill_super(): bad magic number
[  478.559506][T22002] fuse: fd is not a fuse device
[  479.618756][T22065] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  479.626326][T22065] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  479.901237][T22080] netlink: 'syz.6.6664': attribute type 11 has an invalid length.
[  481.328641][T22118] netlink: 'syz.6.6682': attribute type 11 has an invalid length.
[  481.557949][T22071] kexec: Could not allocate control_code_buffer
[  481.564045][T22133] __nla_validate_parse: 3 callbacks suppressed
[  481.564056][T22133] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.6690'.
[  481.774095][T22158] xt_hashlimit: size too large, truncated to 1048576
[  481.874609][ T5063] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  481.958590][T22168] MTD: Couldn't look up './dev/mtdblock0': -2
[  482.037645][ T5063] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  482.044455][ T5063] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  482.047267][ T5063] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  482.051339][ T5063] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  482.054250][ T5063] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  482.057760][ T5063] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  482.062999][ T5063] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  482.065604][ T5063] usb 6-1: Product: syz
[  482.066929][ T5063] usb 6-1: Manufacturer: syz
[  482.073368][ T5063] cdc_wdm 6-1:1.0: skipping garbage
[  482.075515][ T5063] cdc_wdm 6-1:1.0: skipping garbage
[  482.078170][ T5063] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  482.080100][ T5063] cdc_wdm 6-1:1.0: Unknown control protocol
[  482.353083][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  482.356076][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  482.358823][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  482.361445][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  482.363910][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  482.366563][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  482.369218][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  482.371804][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  482.374486][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  482.377203][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  482.379923][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  482.382601][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  482.385912][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  482.388543][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  482.392022][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  482.394527][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  482.397928][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  482.400689][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  482.403814][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  482.406586][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  482.433763][ T5063] usb 6-1: USB disconnect, device number 56
[  482.436290][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  482.700215][T22197] loop5: detected capacity change from 0 to 512
[  482.704290][T22197] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  482.709151][T22197] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  482.714359][T22197] System zones: 1-12
[  482.717958][T22197] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.6718: bad orphan inode 131072
[  482.727647][T22197] loop5: lost filesystem error report for type 5 error -117
[  482.729562][T22197] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  482.766958][ T7393] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.008877][T22219] x_tables: unsorted entry at hook 3
[  483.323567][T22236] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6735'.
[  483.998565][T22254] x_tables: unsorted underflow at hook 4
[  484.280104][T22267] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  484.305517][T22269] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  484.311423][T22269] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  485.114023][T22311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6769'.
[  485.117064][T22311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6769'.
[  485.119858][T22311] netlink: 'syz.0.6769': attribute type 12 has an invalid length.
[  485.122340][T22311] netlink: 'syz.0.6769': attribute type 13 has an invalid length.
[  485.215130][T22303] loop5: detected capacity change from 0 to 32768
[  485.236607][T22303] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  485.300265][T22303] XFS (loop5): Ending clean mount
[  485.422111][ T7393] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  485.750053][T22329] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6775'.
[  486.177205][    T9] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[  486.340563][    T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  486.350196][    T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  486.353316][    T9] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  486.356531][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  486.359284][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  486.364041][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  486.372906][    T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  486.376980][    T9] usb 6-1: Product: syz
[  486.378272][    T9] usb 6-1: Manufacturer: syz
[  486.398475][    T9] cdc_wdm 6-1:1.0: skipping garbage
[  486.400901][    T9] cdc_wdm 6-1:1.0: skipping garbage
[  486.410349][    T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  486.412751][    T9] cdc_wdm 6-1:1.0: Unknown control protocol
[  486.883041][T22360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6789'.
[  486.885724][T22360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6789'.
[  486.947704][    C0] cdc_wdm 6-1:1.0: Unexpected error -71
[  486.958322][    T9] usb 6-1: USB disconnect, device number 57
[  486.960723][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  487.771493][T22381] loop5: detected capacity change from 0 to 256
[  487.988363][T22390] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  488.023297][T22394] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.6804'.
[  488.306434][T22423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6818'.
[  488.311295][T22423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6818'.
[  488.314870][T22423] netlink: 'syz.0.6818': attribute type 18 has an invalid length.
[  488.355730][T22427] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  488.601615][T22437] overlayfs: failed to clone upperpath
[  488.747830][T22443] loop5: detected capacity change from 0 to 512
[  488.801218][T22443] EXT4-fs (loop5): 1 orphan inode deleted
[  488.805028][T22443] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  488.810451][T22443] ext4 filesystem being mounted at /1720/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  488.824808][T18369] __quota_error: 45 callbacks suppressed
[  488.824824][T18369] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  488.847048][T18369] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u10:27: Failed to release dquot type 1
[  488.874883][ T7393] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  490.145578][T22469] bridge3: entered promiscuous mode
[  490.147417][T22469] bridge3: entered allmulticast mode
[  490.150876][T22469] team0: Port device bridge3 added
[  490.411108][T22493] loop5: detected capacity change from 0 to 1024
[  490.413903][T22493] ext4: Unknown parameter 'nouser_xattr'
[  491.615831][T22519] fuse: Bad value for 'fd'
[  492.059466][T22540] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6869'.
[  492.062773][T22540] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6869'.
[  492.085887][T22540] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6869'.
[  492.089254][T22540] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6869'.
[  492.105476][ T5457] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  492.113005][ T5457] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  492.122412][ T5457] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  492.130557][ T5457] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  492.132960][T22545] netlink: 'syz.5.6871': attribute type 61 has an invalid length.
[  493.956742][T22627] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6908'.
[  493.999245][T22631] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6909'.
[  494.057601][T22639] netlink: 'syz.0.6913': attribute type 9 has an invalid length.
[  494.102043][T22645] tmpfs: Bad value for 'mpol'
[  494.522358][    T9] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[  494.686432][    T9] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  494.691432][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  494.697093][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  494.701887][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  494.707273][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.729943][    T9] usb 6-1: config 0 descriptor??
[  494.970422][    T9] usb 6-1: USB disconnect, device number 58
[  495.404118][T22704] openvswitch: netlink: Tunnel attr 157 out of range max 16
[  495.598369][T22716] ip_tables: iptables: counters copy to user failed while replacing table
[  495.923917][T22750] syz.6.6967 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  496.251076][T22765] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6975'.
[  496.278904][T22765] ipvlan2: entered allmulticast mode
[  496.286872][T22765] dummy0: entered allmulticast mode
[  496.660770][ T5063] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[  496.820367][ T5063] usb 6-1: Using ep0 maxpacket: 32
[  496.823721][ T5063] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  496.828866][ T5063] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[  496.832977][ T5063] usb 6-1: config 0 has no interface number 0
[  496.835315][ T5063] usb 6-1: config 0 interface 12 has no altsetting 0
[  496.841228][ T5063] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.846576][ T5063] usb 6-1: Product: syz
[  496.848121][ T5063] usb 6-1: Manufacturer: syz
[  496.849646][ T5063] usb 6-1: SerialNumber: syz
[  496.867465][ T5063] usb 6-1: config 0 descriptor??
[  496.947788][T22774] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6979'.
[  498.841152][ T5063] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  498.844936][ T5063] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71
[  498.847355][ T5063] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  498.850454][ T5063] f81534 6-1:0.12: probe with driver f81534 failed with error -71
[  498.856527][ T5063] usb 6-1: USB disconnect, device number 59
[  499.890481][T22894] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7035'.
[  499.968743][T22900] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  500.752658][T22935] fuse: fd is not a fuse device
[  501.123384][T22952] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7059'.
[  501.250077][T22958] loop5: detected capacity change from 0 to 512
[  501.282153][T22958] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  501.286414][T22958] ext4 filesystem being mounted at /1791/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  501.293594][T22958] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.7063: Allocating blocks 44-115 which overlap fs metadata
[  501.312716][ T7393] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  501.642680][T22978] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7071'.
[  502.119900][T23007] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7084'.
[  502.222182][   T34] audit: type=1326 audit(1787039596.071:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23016 comm="syz.0.7088" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdada39e0d9 code=0x0
[  502.553162][T23038] loop5: detected capacity change from 0 to 512
[  502.558015][T23038] EXT4-fs: Ignoring removed bh option
[  502.561618][T23038] EXT4-fs: Ignoring removed mblk_io_submit option
[  502.567239][T23038] EXT4-fs: Ignoring removed mblk_io_submit option
[  502.570522][T23038] EXT4-fs (loop5): Test dummy encryption mode enabled
[  502.573098][T23038] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  502.577724][T23038] EXT4-fs (loop5): group descriptors corrupted!
[  502.678569][T23046] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7096'.
[  502.719764][T23051] fuse: fd is not a fuse device
[  502.935187][T23056] loop5: detected capacity change from 0 to 32768
[  502.940423][T23056] jfs_mount: Failed to read AGGREGATE_I
[  502.949013][T23056] Mount JFS Failure: -5
[  503.434280][T23103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7123'.
[  503.438070][T23103] netlink: 'syz.0.7123': attribute type 5 has an invalid length.
[  503.441341][T23103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7123'.
[  503.455332][T23103] geneve3: entered promiscuous mode
[  503.457701][T23103] geneve3: entered allmulticast mode
[  503.485070][ T7056] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 45175 - 0
[  503.489483][ T7056] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 45175 - 0
[  503.492678][ T7056] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 45175 - 0
[  503.498023][ T7056] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 45175 - 0
[  504.313037][T23170] loop5: detected capacity change from 0 to 128
[  504.322765][T23170] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  504.328340][T23170] System zones: 1-3, 19-19, 35-36
[  504.334306][T23170] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  504.346678][T23170] ext4 filesystem being mounted at /1813/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  504.394870][ T7393] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  504.555704][T23180] openvswitch: netlink: Missing valid actions attribute.
[  504.558604][T23180] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  505.274836][T23219] netlink: 'syz.6.7174': attribute type 1 has an invalid length.
[  506.052200][T23261] loop5: detected capacity change from 0 to 40427
[  506.057891][T23261] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  506.064597][T23261] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  506.071905][T23261] F2FS-fs (loop5): invalid crc value
[  506.109055][T23261] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  506.121352][T23261] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  506.123690][T23261] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  506.136642][T23261] fscrypt (loop5, inode 3): Error -61 getting encryption context
[  506.428880][T23284] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7203'.
[  506.568828][T23293] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7207'.
[  506.615467][T23298] netlink: 'syz.6.7209': attribute type 1 has an invalid length.
[  506.618188][T23298] netlink: 'syz.6.7209': attribute type 2 has an invalid length.
[  506.620943][T23298] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7209'.
[  506.708002][T23302] netlink: Failed to add  helper -22
[  506.709763][T23302] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  506.755043][T23307] netlink: 'syz.6.7213': attribute type 11 has an invalid length.
[  507.460362][T23322] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7220'.
[  507.469102][T23322] openvswitch: netlink: Missing key (keys=c0, expected=20080)
[  507.609804][T23331] loop5: detected capacity change from 0 to 512
[  507.965895][T23363] loop5: detected capacity change from 0 to 1024
[  507.968865][T23363] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  507.972894][T23363] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  507.976316][T23363] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  507.979595][T23363] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #3: comm syz.5.7239: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0)
[  507.985334][T23363] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  507.985521][T23363] EXT4-fs (loop5): no journal found
[  507.990395][T23363] EXT4-fs (loop5): can't get journal size
[  507.995071][T23363] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  508.018657][ T7393] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  508.866602][T23393] kernel read not supported for file /file1 (pid: 23393 comm: syz.0.7252)
[  508.870679][   T34] audit: type=1800 audit(1787039602.198:2319): pid=23393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7252" name="file1" dev="mqueue" ino=60370 res=0 errno=0
[  509.146304][T23412] fuse: fd is not a fuse device
[  509.331377][T23426] device-mapper: ioctl: Unable to rename non-existent device,  to uuid 
[  509.488140][T23433] loop5: detected capacity change from 0 to 1024
[  509.519605][T23433] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  509.568952][T23437] syz_tun (unregistering): left allmulticast mode
[  509.686070][ T7393] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  509.758453][T23454] Cannot find del_set index 4 as target
[  511.595692][T23510] batadv_slave_0: Caught tx_queue_len zero misconfig
[  511.812772][T23502] loop5: detected capacity change from 0 to 32768
[  512.017888][T23536] tipc: Enabling of bearer <Eth:s> rejected, media not registered
[  512.242071][ T5708] usb 6-1: new full-speed USB device number 60 using dummy_hcd
[  512.344279][   T34] audit: type=1800 audit(1787039605.409:2320): pid=23560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.7330" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0
[  512.409904][ T5708] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  512.418076][ T5708] usb 6-1: config index 0 descriptor too short (expected 6427, got 27)
[  512.423540][ T5708] usb 6-1: config 0 has an invalid interface number: 21 but max is 0
[  512.427757][ T5708] usb 6-1: config 0 has no interface number 0
[  512.430860][ T5708] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  512.436059][ T5708] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  512.449203][ T5708] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  512.453752][ T5708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  512.460137][ T5708] usb 6-1: config 0 descriptor??
[  512.463743][T23532] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  513.132865][ T5708] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.21/input/input26
[  513.372162][ T5708] usb 6-1: USB disconnect, device number 60
[  513.374100][    C1] keyspan_remote 6-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[  514.203740][ T5708] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[  514.366624][ T5708] usb 6-1: Using ep0 maxpacket: 8
[  514.369515][ T5708] usb 6-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00
[  514.373296][ T5708] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  514.376418][ T5708] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  514.381559][ T5708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.390355][ T5708] kobil_sct 6-1:1.0: required endpoints missing
[  514.467204][T23590] No such timeout policy "syz0"
[  514.608138][ T5708] usb 6-1: USB disconnect, device number 61
[  514.806875][T23616] sctp: [Deprecated]: syz.0.7353 (pid 23616) Use of struct sctp_assoc_value in delayed_ack socket option.
[  514.806875][T23616] Use struct sctp_sack_info instead
[  515.768840][T23652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7368'.
[  515.856348][T23656] netlink: 'syz.0.7370': attribute type 2 has an invalid length.
[  516.300785][T23679] netlink: 'syz.0.7381': attribute type 3 has an invalid length.
[  516.307385][T23679] netlink: 'syz.0.7381': attribute type 27 has an invalid length.
[  517.630159][T23729] loop5: detected capacity change from 0 to 4096
[  517.641154][T23729] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  517.680448][T23729] ntfs3(loop5): ino=19, mi_enum_attr
[  517.682169][T23729] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  517.688463][T23729] ntfs3(loop5): Failed to initialize $Extend/$ObjId.
[  517.848000][T23733] loop5: detected capacity change from 0 to 2048
[  517.858520][T23733] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  518.876653][T23764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7416'.
[  518.964063][T23771] netdevsim netdevsim5 netdevsim0: left allmulticast mode
[  519.051592][T23778] loop5: detected capacity change from 0 to 65
[  519.066182][T23778] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing
[  519.069775][T23778] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway
[  519.437690][T23782] loop5: detected capacity change from 0 to 32768
[  519.445963][T23782] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  519.458628][T23782] XFS (loop5): Ending clean mount
[  519.516553][ T7393] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  519.751629][T23796] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  519.974737][T23815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7436'.
[  520.161683][T23833] netlink: 'syz.6.7444': attribute type 1 has an invalid length.
[  520.164173][T23833] netlink: 64851 bytes leftover after parsing attributes in process `syz.6.7444'.
[  520.294902][ T5063] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[  520.457175][ T5063] usb 6-1: Using ep0 maxpacket: 32
[  520.460218][ T5063] usb 6-1: New USB device found, idVendor=17cc, idProduct=4712, bcdDevice= 0.40
[  520.466052][ T5063] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.469573][ T5063] usb 6-1: Product: syz
[  520.475560][ T5063] usb 6-1: Manufacturer: syz
[  520.477059][ T5063] usb 6-1: SerialNumber: syz
[  520.486999][ T5063] usb 6-1: BAAD HEADSET c_chmask mismatch
[  520.537184][ T5063] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  520.541075][ T5063] usb 6-1: selecting invalid altsetting 1
[  520.542806][ T5063] snd-usb-caiaq 6-1:1.0: can't set alt interface.
[  520.545467][ T5063] usb 6-1: unable to init card! (ret=-5)
[  520.547534][ T5063] snd-usb-caiaq 6-1:1.0: probe with driver snd-usb-caiaq failed with error -5
[  520.551788][ T5063] usb 6-1: selecting invalid altsetting 1
[  520.553481][ T5063] snd-usb-caiaq 6-1:1.1: can't set alt interface.
[  520.556931][ T5063] usb 6-1: unable to init card! (ret=-5)
[  520.559046][ T5063] snd-usb-caiaq 6-1:1.1: probe with driver snd-usb-caiaq failed with error -5
[  520.569503][ T5063] usb 6-1: selecting invalid altsetting 1
[  520.571475][ T5063] snd-usb-caiaq 6-1:1.2: can't set alt interface.
[  520.573436][ T5063] usb 6-1: unable to init card! (ret=-5)
[  520.575313][ T5063] snd-usb-caiaq 6-1:1.2: probe with driver snd-usb-caiaq failed with error -5
[  520.601500][ T6006] udevd[6006]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  520.705726][ T5063] usb 6-1: USB disconnect, device number 62
[  520.791905][T23877] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7465'.
[  520.870138][   T34] audit: type=1326 audit(1787039613.279:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23883 comm="syz.0.7468" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdada39e0d9 code=0x7ffc0000
[  520.879653][   T34] audit: type=1326 audit(1787039613.279:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23883 comm="syz.0.7468" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdada39e0d9 code=0x7ffc0000
[  520.887784][   T34] audit: type=1326 audit(1787039613.279:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23883 comm="syz.0.7468" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdada39e0d9 code=0x7ffc0000
[  520.903431][   T34] audit: type=1326 audit(1787039613.279:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23883 comm="syz.0.7468" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdada39e0d9 code=0x7ffc0000
[  520.911109][   T34] audit: type=1326 audit(1787039613.289:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23883 comm="syz.0.7468" exe="/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fdada39e0d9 code=0x7ffc0000
[  520.919914][   T34] audit: type=1326 audit(1787039613.289:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23883 comm="syz.0.7468" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdada39e0d9 code=0x7ffc0000
[  520.934030][   T34] audit: type=1326 audit(1787039613.289:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23883 comm="syz.0.7468" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdada39e0d9 code=0x7ffc0000
[  520.947183][   T34] audit: type=1326 audit(1787039613.289:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23883 comm="syz.0.7468" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdada39e0d9 code=0x7ffc0000
[  520.956861][   T34] audit: type=1326 audit(1787039613.289:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23883 comm="syz.0.7468" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdada39e0d9 code=0x7ffc0000
[  521.725985][T23910] loop5: detected capacity change from 0 to 131072
[  521.729181][T23910] F2FS-fs (loop5): invalid crc value
[  521.762301][T23910] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  521.771620][T23910] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  521.969620][T23926] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  522.140354][T23932] netlink: 'syz.6.7491': attribute type 8 has an invalid length.
[  522.224292][T23940] fuse: fd is not a fuse device
[  522.402252][T23963] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7505'.
[  522.405464][T23963] netlink: 43 bytes leftover after parsing attributes in process `syz.0.7505'.
[  522.410068][T23963] netlink: 'syz.0.7505': attribute type 6 has an invalid length.
[  522.414847][T23963] netlink: 'syz.0.7505': attribute type 5 has an invalid length.
[  522.419320][T23963] netlink: 43 bytes leftover after parsing attributes in process `syz.0.7505'.
[  522.678714][ T5063] usb 6-1: new full-speed USB device number 63 using dummy_hcd
[  522.842156][ T5063] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  522.846155][ T5063] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[  522.848864][ T5063] usb 6-1: config 0 has no interface number 0
[  522.850872][ T5063] usb 6-1: config 0 interface 41 has no altsetting 0
[  522.856743][ T5063] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.859662][ T5063] usb 6-1: Product: syz
[  522.861199][ T5063] usb 6-1: Manufacturer: syz
[  522.863471][ T5063] usb 6-1: SerialNumber: syz
[  522.867150][ T5063] usb 6-1: config 0 descriptor??
[  523.024772][T23969] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  523.060128][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[  523.064423][ T1373] ieee802154 phy1 wpan1: encryption failed: -22
[  523.075958][T23971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7509'.
[  523.083086][T23971] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7509'.
[  523.086564][T23971] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check.
[  523.180911][T23977] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  523.364229][T23993] fuse: fd is not a fuse device
[  523.370866][T23995] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7521'.
[  523.381403][T23995] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7521'.
[  523.385996][T23995] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7521'.
[  523.756697][ T5063] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  524.584309][T24036] IPv6: NLM_F_CREATE should be specified when creating new route
[  525.171673][ T5063] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  525.180032][ T5063] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[  525.185277][ T5063] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71
[  525.191940][ T5063] usb 6-1: USB disconnect, device number 63
[  525.512234][T24067] xt_hashlimit: size too large, truncated to 1048576
[  525.569920][T24072] xt_hashlimit: size too large, truncated to 1048576
[  525.638248][T24078] overlayfs: failed to clone upperpath
[  525.662369][T24080] raw_sendmsg: syz.6.7558 forgot to set AF_INET. Fix it!
[  525.750504][T24088] program syz.5.7562 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  525.808635][   T34] audit: type=1326 audit(1787039617.828:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24092 comm="syz.5.7564" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853139e0d9 code=0x7ffc0000
[  525.816713][T24093] loop5: detected capacity change from 0 to 128
[  526.634525][  T804] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[  526.797785][  T804] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  526.810197][  T804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  526.814551][  T804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  526.818815][  T804] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  526.824809][  T804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.831640][  T804] usb 6-1: config 0 descriptor??
[  527.390109][  T804] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  528.178752][T24153] netlink: 'syz.0.7590': attribute type 6 has an invalid length.
[  528.372936][T24163] tipc: Started in network mode
[  528.374684][T24163] tipc: Node identity 1000001, cluster identity 4369
[  528.376910][T24163] tipc: Node number set to 16777217
[  528.378941][T24163] tipc: Cannot configure node identity twice
[  528.383859][T24163] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  528.638486][T24179] netlink: 'syz.0.7603': attribute type 12 has an invalid length.
[  528.643709][T24179] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7603'.
[  528.871431][T15954] usb 6-1: reset high-speed USB device number 64 using dummy_hcd
[  529.046729][T15954] usb 6-1: device descriptor read/64, error -32
[  529.327743][T15954] usb 6-1: reset high-speed USB device number 64 using dummy_hcd
[  529.489485][T15954] usb 6-1: device descriptor read/64, error -32
[  529.767437][T15954] usb 6-1: reset high-speed USB device number 64 using dummy_hcd
[  529.813030][T15954] usb 6-1: device descriptor read/8, error -32
[  529.927857][T24206] loop5: detected capacity change from 0 to 512
[  529.931445][T24206] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  529.954715][T18414] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  530.423902][T24220] IPVS: Error connecting to the multicast addr
[  530.802935][ T5708] usb 6-1: USB disconnect, device number 64
[  532.774343][T24343] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7678'.
[  533.026659][T24365] fuse: fd is not a fuse device
[  533.287757][T24387] loop5: detected capacity change from 0 to 1024
[  533.406882][T24387] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  533.411461][T24387] ext4 filesystem being mounted at /1948/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  533.427615][ T7393] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  534.056873][T24425] loop5: detected capacity change from 0 to 64
[  534.466314][T24429] loop5: detected capacity change from 0 to 32768
[  534.485457][T24429] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.7715 (24429)
[  534.538421][T24429] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  534.548145][T24429] BTRFS info (device loop5): using sha256 checksum algorithm
[  534.686612][T24429] BTRFS info (device loop5): enabling ssd optimizations
[  534.694658][T24429] BTRFS info (device loop5): turning on async discard
[  534.704838][T24429] BTRFS info (device loop5): enabling free space tree
[  534.747295][T24453] bridge0: entered allmulticast mode
[  534.754310][ T7393] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  534.984809][T24463] loop5: detected capacity change from 0 to 2048
[  534.995476][T24463] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  535.012681][T24463] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  535.015378][T24463] UDF-fs: Scanning with blocksize 512 failed
[  535.075521][T24463] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  535.085312][   T34] kauditd_printk_skb: 45 callbacks suppressed
[  535.085322][   T34] audit: type=1800 audit(1787039626.391:2376): pid=24463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7720" name="file1" dev="loop5" ino=838 res=0 errno=0
[  535.318687][T24485] netlink: 'syz.6.7733': attribute type 6 has an invalid length.
[  535.505122][T24503] program syz.5.7741 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  535.657044][T24511] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7745'.
[  535.668307][T24511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7745'.
[  535.753622][T24521] bridge_slave_1: invalid flags given to default FDB implementation
[  535.967394][T24523] loop5: detected capacity change from 0 to 32768
[  535.977961][T24523] 
[  535.977961][T24523]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  535.977961][T24523] 
[  536.004731][ T7393] 
[  536.004731][ T7393]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  536.004731][ T7393] 
[  536.011893][ T7393] 
[  536.011893][ T7393]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  536.011893][ T7393] 
[  536.098332][T24541] input: syz0 as /devices/virtual/input/input27
[  536.265555][T24548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7763'.
[  536.328002][T24549] netlink: 'syz.5.7763': attribute type 10 has an invalid length.
[  536.396595][T24549] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  536.401327][T24549] netdevsim netdevsim5 netdevsim1: entered promiscuous mode
[  536.404926][T24549] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  536.555729][T24559] cifs: Unknown parameter 'IT&:"1:ӭ'4,Zz-#F<]%gC
[  536.555729][T24559] SȘȞZ6'
[  536.643292][T24565] netlink: 'syz.0.7771': attribute type 9 has an invalid length.
[  537.476789][T24587] loop5: detected capacity change from 0 to 8
[  537.484580][T24587] SQUASHFS error: lzo decompression failed, data probably corrupt
[  537.487156][T24587] SQUASHFS error: Failed to read block 0x91: -5
[  537.489633][T24587] SQUASHFS error: Unable to read metadata cache entry [8f]
[  537.492621][T24587] SQUASHFS error: Unable to read inode 0x107
[  537.541577][T24589] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7782'.
[  537.544329][T24589] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7782'.
[  537.547103][T24589] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7782'.
[  538.135862][T24611] loop5: detected capacity change from 0 to 32768
[  538.157428][T24611] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  538.167061][T24611] XFS (loop5): Ending clean mount
[  538.219725][ T7393] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  538.684255][T24637] vti0: entered promiscuous mode
[  538.688611][T24637] vti0: entered allmulticast mode
[  538.836024][T24633] loop5: detected capacity change from 0 to 131072
[  538.839125][T24633] F2FS-fs (loop5): Invalid log sectorsize (67108873)
[  538.841267][T24633] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  538.844149][T24633] F2FS-fs (loop5): invalid crc value
[  538.874628][T24652] nbd: must specify at least one socket
[  538.881768][T24633] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  538.893740][T24633] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  538.896073][T24633] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  539.048543][T24661] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.7811'.
[  539.073805][T24663] overlayfs: failed to clone lowerpath
[  539.090206][T24663] overlayfs: failed to clone lowerpath
[  539.323658][T24679] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7819'.
[  539.326709][T24679] tipc: Invalid UDP bearer configuration
[  539.326738][T24679] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  539.945797][T24706] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7830'.
[  540.027514][T24704] loop5: detected capacity change from 0 to 8192
[  540.035793][T24710] overlayfs: failed to clone upperpath
[  540.082092][T24712] ipvlan0: Caught tx_queue_len zero misconfig
[  540.170083][T24722] loop5: detected capacity change from 0 to 256
[  540.199920][T24724] geneve2: entered promiscuous mode
[  540.214420][ T5457] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  540.219544][ T5457] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  540.226574][ T5457] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  540.234385][ T5457] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  540.239528][T24726] netlink: 'syz.0.7840': attribute type 11 has an invalid length.
[  540.375883][T24739] overlayfs: missing 'lowerdir'
[  540.456307][T24742] sctp: [Deprecated]: syz.6.7846 (pid 24742) Use of int in maxseg socket option.
[  540.456307][T24742] Use struct sctp_assoc_value instead
[  541.254232][T24765] netlink: 'syz.5.7856': attribute type 11 has an invalid length.
[  541.257229][T24765] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.7856'.
[  541.813541][T24797] loop5: detected capacity change from 0 to 16
[  541.821942][T24797] erofs (device loop5): mounted with root inode @ nid 36.
[  542.187074][T15954] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[  542.360063][T15954] usb 6-1: Using ep0 maxpacket: 32
[  542.366336][T15954] usb 6-1: unable to get BOS descriptor or descriptor too short
[  542.371370][T15954] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  542.380229][T15954] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  542.384554][T15954] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  542.392900][T15954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.403439][T15954] usb 6-1: Product: syz
[  542.405187][T15954] usb 6-1: Manufacturer: syz
[  542.407122][T15954] usb 6-1: SerialNumber: syz
[  542.528178][T24820] IPVS: persistence engine module ip_vs_pe_ not found
[  542.639650][T15954] usb 6-1: unit 0 not found!
[  542.690393][T15954] usb 6-1: USB disconnect, device number 65
[  543.247871][T24875] batadv0: entered promiscuous mode
[  543.250537][T24874] batadv0: left promiscuous mode
[  543.280182][T24879] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7904'.
[  543.284417][T24879] netdevsim netdevsim6 netdevsim0: entered allmulticast mode
[  543.287084][T24879] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  543.323812][T15954] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  543.350069][T15954] hid-generic 0000:0000:0000.0013: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  543.415534][T24887] x_tables: unsorted entry at hook 4
[  543.948071][T24934] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7931'.
[  544.024673][T24938] loop5: detected capacity change from 0 to 256
[  544.033620][T24938] FAT-fs (loop5): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[  544.038142][T24938] FAT-fs (loop5): Filesystem has been set read-only
[  544.130603][T24944] loop5: detected capacity change from 0 to 4096
[  544.133548][T24944] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  544.145633][T24944] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  544.373735][T24962] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7945'.
[  544.383995][T24962] openvswitch: netlink: Missing key (keys=c0, expected=10000000)
[  544.506002][  T804] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[  544.537453][T24979] overlayfs: failed to clone upperpath
[  544.668578][  T804] usb 6-1: Using ep0 maxpacket: 32
[  544.671154][  T804] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  544.675606][  T804] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  544.678907][  T804] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  544.683797][  T804] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  544.688154][  T804] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  544.697052][  T804] usb 6-1: config 0 interface 0 has no altsetting 0
[  544.704062][  T804] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  544.706930][  T804] usb 6-1: Product: syz
[  544.708811][  T804] usb 6-1: Manufacturer: syz
[  544.710827][  T804] usb 6-1: SerialNumber: syz
[  544.715540][  T804] usb 6-1: config 0 descriptor??
[  544.720459][  T804] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  544.725347][  T804] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  545.231087][  T804] usb 6-1: USB disconnect, device number 66
[  545.241060][  T804] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  545.387132][T24998] xt_hashlimit: size too large, truncated to 1048576
[  545.738379][T25010] fuse: fd is not a fuse device
[  545.833384][T25018] loop5: detected capacity change from 0 to 512
[  545.837821][T25018] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  545.856662][T25018] EXT4-fs (loop5): 1 truncate cleaned up
[  545.862205][T25018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  545.870411][T25018] EXT4-fs warning (device loop5): verify_group_input:137: Cannot add at group 2 (only 1 groups)
[  545.908852][ T7393] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  545.988537][T25032] overlayfs: overlapping lowerdir path
[  546.099274][T25038] overlayfs: failed to clone upperpath
[  547.715970][T25055] xfrm0: Caught tx_queue_len zero misconfig
[  549.770357][T15954] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[  549.948397][T15954] usb 6-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  549.952216][T15954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  549.955494][T15954] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  549.958614][T15954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  549.963327][T15954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.965887][T15954] usb 6-1: Product: syz
[  549.967268][T15954] usb 6-1: Manufacturer: syz
[  549.970159][T15954] usb 6-1: SerialNumber: syz
[  549.973571][T15954] usb 6-1: config 0 descriptor??
[  549.976650][T15954] kvaser_usb 6-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  550.199336][  T804] usb 6-1: USB disconnect, device number 67
[  550.549930][T25089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7998'.
[  550.553038][T25089] netlink: 31 bytes leftover after parsing attributes in process `syz.0.7998'.
[  550.569607][T25089] netlink: 'syz.0.7998': attribute type 3 has an invalid length.
[  550.572157][T25089] netlink: 'syz.0.7998': attribute type 2 has an invalid length.
[  550.574754][T25089] netlink: 31 bytes leftover after parsing attributes in process `syz.0.7998'.
[  550.603264][T25095] xt_bpf: check failed: parse error
[  551.085538][  T804] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[  551.247104][  T804] usb 6-1: Using ep0 maxpacket: 32
[  551.255424][  T804] usb 6-1: unable to get BOS descriptor or descriptor too short
[  551.289526][  T804] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  551.298899][  T804] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  551.303605][  T804] usb 6-1: config 1 interface 0 altsetting 247 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  551.308878][  T804] usb 6-1: config 1 interface 0 has no altsetting 0
[  551.313487][  T804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  551.316140][  T804] usb 6-1: Product: syz
[  551.317439][  T804] usb 6-1: Manufacturer: syz
[  551.318932][  T804] usb 6-1: SerialNumber: syz
[  551.410432][T25138] openvswitch: netlink: IP tunnel dst address not specified
[  551.412983][T25138] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  551.594949][  T804] usb 6-1: No union descriptors
[  551.599854][  T804] usb 6-1: USB disconnect, device number 68
[  552.235436][T25152] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  552.538605][T25148] loop5: detected capacity change from 0 to 131072
[  552.743685][T25148] F2FS-fs (loop5): invalid crc value
[  552.816730][T25148] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  552.827214][T25148] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  553.381153][T25188] overlayfs: failed to clone lowerpath
[  553.636206][T25214] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8053'.
[  553.778856][T25221] loop5: detected capacity change from 0 to 1024
[  554.346736][T15954] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[  554.388197][T25240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8065'.
[  554.520064][T15954] usb 6-1: Using ep0 maxpacket: 16
[  554.522550][T15954] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  554.526476][T15954] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  554.529902][T15954] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  554.535913][T15954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  554.538644][T15954] usb 6-1: Product: syz
[  554.539965][T15954] usb 6-1: Manufacturer: syz
[  554.541537][T15954] usb 6-1: SerialNumber: syz
[  554.548144][T15954] usb 6-1: 0:2 : does not exist
[  554.774838][T15954] usb 6-1: USB disconnect, device number 69
[  555.281742][T25277] netlink: 'syz.6.8083': attribute type 1 has an invalid length.
[  555.756283][ T5063] e1000 0000:00:03.0 eth0: Reset adapter
[  555.788073][  T804] usb 6-1: new full-speed USB device number 70 using dummy_hcd
[  555.966344][  T804] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  555.974419][  T804] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x9B, changing to 0x8B
[  555.988781][  T804] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  555.996551][  T804] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23
[  556.003041][  T804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  556.006984][  T804] usb 6-1: SerialNumber: syz
[  556.015211][  T804] hub 6-1:1.0: bad descriptor, ignoring hub
[  556.022907][  T804] hub 6-1:1.0: probe with driver hub failed with error -5
[  556.025415][  T804] cdc_acm 6-1:1.0: Control and data interfaces are not separated!
[  556.237821][  T804] cdc_acm 6-1:1.0: ttyACM0: USB ACM device
[  556.254537][  T804] usb 6-1: USB disconnect, device number 70
[  558.173633][ T5063] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  558.411102][ T5063] e1000 0000:00:03.0 eth0: Reset adapter
[  560.774576][ T5063] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  563.038622][T25360] xt_cgroup: invalid path, errno=-2
[  563.084220][T25365] trusted_key: encrypted_key: insufficient parameters specified
[  563.132979][T25360] CIFS: Attempting to mount //127.0.0.1/share
[  563.135378][T25360] CIFS: VFS: Error connecting to socket. Aborting operation.
[  563.138013][T25360] CIFS: VFS: cifs_mount failed w/return code = -101
[  563.504535][   T33] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[  563.679009][   T33] usb 6-1: New USB device found, idVendor=1e7d, idProduct=fcf6, bcdDevice= 0.00
[  563.683740][   T33] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  563.687781][   T33] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  563.691783][   T33] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  563.698653][   T33] usb 6-1: config 0 descriptor??
[  563.705046][   T33] usbhid 6-1:0.0: fixing wrong optional hid class descriptors count
[  563.708378][   T33] usbhid 6-1:0.0: can't add hid device: -22
[  563.711259][   T33] usbhid 6-1:0.0: probe with driver usbhid failed with error -22
[  563.930277][   T33] usb 6-1: USB disconnect, device number 71
[  564.080459][T25399] 9pnet: p9_errstr2errno: server reported unknown error 0x00000
[  564.418860][T25420] netlink: 'syz.0.8133': attribute type 4 has an invalid length.
[  564.580117][T25428] loop5: detected capacity change from 0 to 4096
[  564.591656][T25428] ntfs3(loop5): ino=0, mi_enum_attr
[  564.614534][T25428] ntfs3(loop5): ino=0, mi_enum_attr
[  564.620054][T25428] ntfs3(loop5): ino=0, mi_enum_attr
[  565.021005][T25458] loop5: detected capacity change from 0 to 4096
[  565.521401][T25458] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  565.528907][T25458] ntfs3(loop5): Failed to load $Extend (-22).
[  565.530905][T25458] ntfs3(loop5): Failed to initialize $Extend.
[  565.855087][T25470] Invalid ELF header magic: != ELF
[  565.913764][T25475] loop5: detected capacity change from 0 to 512
[  565.939062][T25475] EXT4-fs (loop5): orphan cleanup on readonly fs
[  565.947178][T25475] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  565.976362][T25475] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  565.981475][T25475] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #13: comm syz.5.8157: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  565.995707][T25475] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  565.996009][T25475] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.8157: couldn't read orphan inode 13 (err -117)
[  565.999262][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  565.999273][    C1] EXT4-fs (loop5): last error at time 1787039654: ext4_ext_check_inode:521: inode 13
[  566.011756][T25475] loop5: lost filesystem error report for type 5 error -117
[  566.012742][T25475] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  566.033166][T25475] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  566.097740][T25475] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  566.107437][T25475] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  566.128701][T25475] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  566.160989][ T7393] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  567.432714][T25543] ip6erspan1: entered allmulticast mode
[  567.563991][T25559] netlink: 488 bytes leftover after parsing attributes in process `syz.5.8197'.
[  568.096440][T25563] loop5: detected capacity change from 0 to 131072
[  568.102052][T25563] F2FS-fs (loop5): invalid crc value
[  568.143162][T25563] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  568.152430][T25563] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  568.743663][T25607] loop5: detected capacity change from 0 to 256
[  568.759696][T25607] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  568.770067][T25607] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  568.775185][T25607] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  568.779382][   T34] audit: type=1800 audit(1787039657.486:2377): pid=25607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8218" name="file1" dev="loop5" ino=1048753 res=0 errno=0
[  568.878421][T25613] loop5: detected capacity change from 0 to 64
[  569.562952][ T5063] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[  569.726486][ T5063] usb 6-1: Using ep0 maxpacket: 16
[  569.728692][ T5063] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  569.733023][ T5063] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  569.737527][ T5063] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  569.745010][ T5063] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.754012][ T5063] usb 6-1: Product: syz
[  569.757782][ T5063] usb 6-1: Manufacturer: syz
[  569.762939][ T5063] usb 6-1: SerialNumber: syz
[  569.775605][ T5063] usb 6-1: 0:2 : does not exist
[  569.994032][ T5063] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  570.017190][ T5063] usb 6-1: USB disconnect, device number 72
[  570.045357][T25391] udevd[25391]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  570.839003][T25693] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8
[  570.895396][T25695] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8247'.
[  570.974757][   T34] audit: type=1800 audit(1787039659.516:2378): pid=25699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8248" name="ipv4_port" dev="configfs" ino=67296 res=0 errno=0
[  571.481161][ T5708] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[  571.654794][ T5708] usb 6-1: Using ep0 maxpacket: 32
[  571.676344][ T5708] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  571.734993][ T5708] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  571.739439][ T5708] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  571.746643][ T5708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  571.755256][ T5708] usb 6-1: config 0 descriptor??
[  572.210201][ T5708] kye 0003:0458:5010.0014: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  572.221102][ T5708] kye 0003:0458:5010.0014: unbalanced delimiter at end of report description
[  572.223589][T25731] ./file0: Can't open blockdev
[  572.227364][ T5708] kye 0003:0458:5010.0014: parse failed
[  572.235170][ T5708] kye 0003:0458:5010.0014: probe with driver kye failed with error -22
[  572.251531][T25733] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  572.428765][ T5063] usb 6-1: USB disconnect, device number 73
[  573.147766][T25773] netlink: 5720 bytes leftover after parsing attributes in process `syz.6.8285'.
[  573.154177][T25773] netlink: 5720 bytes leftover after parsing attributes in process `syz.6.8285'.
[  573.362578][T25791] tipc: Cannot configure node identity twice
[  573.519583][T25804] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8300'.
[  573.712162][T25822] xt_HMARK: spi-set and port-set can't be combined
[  573.841910][T25832] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8314'.
[  573.994503][T25843] libceph: resolve '96.' (ret=-3): failed
[  574.702496][T25852] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8322'.
[  574.952662][T25870] netlink: 76 bytes leftover after parsing attributes in process `syz.6.8331'.
[  575.199166][T25890] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8339'.
[  576.369260][ T5708] usb 6-1: new full-speed USB device number 74 using dummy_hcd
[  576.379830][   T55] Bluetooth: hci2: command 0x0c1a tx timeout
[  576.532143][ T5708] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  576.536220][ T5708] usb 6-1: config 8 has an invalid interface number: 177 but max is 0
[  576.538999][ T5708] usb 6-1: config 8 has no interface number 0
[  576.541154][ T5708] usb 6-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D
[  576.545536][ T5708] usb 6-1: config 8 interface 177 altsetting 9 endpoint 0x8D has invalid maxpacket 1023, setting to 64
[  576.549185][ T5708] usb 6-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0
[  576.552441][ T5708] usb 6-1: config 8 interface 177 has no altsetting 0
[  576.555384][ T5708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  576.561395][T25967] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  576.795637][ T5708] usb 6-1: string descriptor 0 read error: -71
[  576.799808][ T5708] ir_toy 6-1:8.177: required endpoints not found
[  576.803978][ T5708] usb 6-1: USB disconnect, device number 74
[  577.813290][T26016] loop5: detected capacity change from 0 to 1024
[  577.836930][T26016] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  577.847515][T26016] ext4 filesystem being mounted at /2125/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  577.910659][ T7393] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  577.963417][T26027] netlink: 'syz.6.8404': attribute type 62 has an invalid length.
[  578.025642][T26033] loop5: detected capacity change from 0 to 256
[  578.045473][   T34] audit: type=1800 audit(1787039666.030:2379): pid=26033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8406" name="file1" dev="loop5" ino=1048754 res=0 errno=0
[  578.119404][T26041] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8410'.
[  578.134788][T26041] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8410'.
[  578.188490][T26043] loop5: detected capacity change from 0 to 4096
[  578.195654][T26043] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  578.225575][T26043] ntfs3(loop5): ino=19, mi_enum_attr
[  578.227410][T26043] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  578.230247][T26043] ntfs3(loop5): Failed to initialize $Extend/$ObjId.
[  578.378662][T26055] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8415'.
[  578.703665][T26085] bridge_slave_0: left allmulticast mode
[  578.705979][T26085] bridge_slave_0: left promiscuous mode
[  578.708134][T26085] bridge0: port 1(bridge_slave_0) entered disabled state
[  578.714134][T26085] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  578.772599][T26087] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  578.799386][T26091] __nla_validate_parse: 1 callbacks suppressed
[  578.799395][T26091] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8431'.
[  578.815311][T26091] netlink: 'syz.6.8431': attribute type 16 has an invalid length.
[  581.163448][T26145] netlink: 'syz.6.8454': attribute type 10 has an invalid length.
[  581.166133][T26145] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  581.169886][T26145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  581.320328][T26147] loop5: detected capacity change from 0 to 32768
[  581.349260][T26147] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  581.356293][T26147] JBD2: Ignoring recovery information on journal
[  581.405285][T26147] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  581.542369][T26167] bridge_slave_1 (unregistering): left allmulticast mode
[  581.547276][T26167] bridge_slave_1 (unregistering): left promiscuous mode
[  581.550200][T26167] bridge0: port 2(bridge_slave_1) entered disabled state
[  581.655090][ T7393] ocfs2: Unmounting device (7,5) on (node local)
[  581.800901][T26182] netlink: 10 bytes leftover after parsing attributes in process `syz.5.8465'.
[  582.013181][T26202] loop5: detected capacity change from 0 to 256
[  582.019110][T26202] FAT-fs (loop5): bogus sectors per cluster 223
[  582.021913][T26202] FAT-fs (loop5): Can't find a valid FAT filesystem
[  582.159864][T26214] overlayfs: failed to clone upperpath
[  582.184351][T26216] openvswitch: netlink: IP tunnel attribute has 5365 unknown bytes.
[  582.547056][ T5708] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[  582.702480][   T55] Bluetooth: hci2: unexpected event for opcode 0x2003
[  582.720786][ T5708] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  582.725728][ T5708] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  582.728844][ T5708] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  582.733637][ T5708] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  582.741820][ T5708] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  582.744444][ T5708] usb 6-1: Product: syz
[  582.747626][ T5708] usb 6-1: Manufacturer: syz
[  582.755970][T26222] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  582.761561][ T5708] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected
[  582.769215][ T5708] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  582.991755][ T5708] usb 6-1: USB disconnect, device number 75
[  583.003711][ T5708] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  583.010540][ T5708] garmin_gps 6-1:1.0: device disconnected
[  583.617242][T26284] loop5: detected capacity change from 0 to 512
[  583.650340][T26284] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  583.655460][T26284] FAT-fs (loop5): Filesystem has been set read-only
[  583.661580][T26284] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  583.665935][T26284] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  583.785425][T26290] netlink: 'syz.5.8521': attribute type 2 has an invalid length.
[  583.987006][T26303] MTD: Couldn't look up './dev/mtdblock0': -2
[  584.371695][T26328] loop5: detected capacity change from 0 to 512
[  584.422313][T26328] EXT4-fs: Ignoring removed oldalloc option
[  584.444352][T26328] EXT4-fs: Ignoring removed nobh option
[  584.677323][T26328] 
[  584.678195][T26328] ======================================================
[  584.680927][T26328] WARNING: possible circular locking dependency detected
[  584.683233][T26328] syzkaller #0 Tainted: G             L     
[  584.685541][T26328] ------------------------------------------------------
[  584.687723][T26328] syz.5.8539/26328 is trying to acquire lock:
[  584.689595][T26328] ffff888118058c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[  584.692624][T26328] 
[  584.692624][T26328] but task is already holding lock:
[  584.694903][T26328] ffff888112bcd520 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3d0/0x700
[  584.697980][T26328] 
[  584.697980][T26328] which lock already depends on the new lock.
[  584.697980][T26328] 
[  584.701106][T26328] 
[  584.701106][T26328] the existing dependency chain (in reverse order) is:
[  584.703845][T26328] 
[  584.703845][T26328] -> #2 (&ei->xattr_sem){++++}-{4:4}:
[  584.706135][T26328]        down_write+0x96/0x200
[  584.707602][T26328]        ext4_inline_data_truncate+0x1cf/0xb70
[  584.709490][T26328]        ext4_truncate+0x444/0x1090
[  584.711092][T26328]        ext4_evict_inode+0xa2e/0x10c0
[  584.712753][T26328]        evict+0x624/0xb50
[  584.714149][T26328]        filename_unlinkat+0x43f/0x610
[  584.715852][T26328]        __se_sys_unlink+0x2e/0x140
[  584.717447][T26328]        do_syscall_64+0x174/0x580
[  584.719060][T26328]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  584.721034][T26328] 
[  584.721034][T26328] -> #1 (sb_internal){.+.+}-{0:0}:
[  584.723705][T26328]        percpu_down_read_internal+0x48/0x1c0
[  584.726084][T26328]        ext4_evict_inode+0x426/0x10c0
[  584.728041][T26328]        evict+0x624/0xb50
[  584.729418][T26328]        ext4_ext_migrate+0xddf/0x10e0
[  584.731150][T26328]        ext4_ioctl+0x2346/0x4b70
[  584.732727][T26328]        __se_sys_ioctl+0xfc/0x170
[  584.734437][T26328]        do_syscall_64+0x174/0x580
[  584.736124][T26328]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  584.738113][T26328] 
[  584.738113][T26328] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  584.740711][T26328]        __lock_acquire+0x1520/0x2cf0
[  584.742383][T26328]        lock_acquire+0x106/0x350
[  584.743962][T26328]        percpu_down_read_internal+0x48/0x1c0
[  584.745889][T26328]        ext4_writepages+0x205/0x3b0
[  584.747617][T26328]        do_writepages+0x338/0x560
[  584.749214][T26328]        __writeback_single_inode+0x12e/0xf90
[  584.751112][T26328]        writeback_single_inode+0x4ef/0xe70
[  584.752933][T26328]        write_inode_now+0x1c2/0x290
[  584.754534][T26328]        iput+0x98b/0xf00
[  584.756000][T26328]        ext4_xattr_block_set+0x1b0c/0x2a80
[  584.757811][T26328]        ext4_expand_extra_isize_ea+0x1342/0x1e70
[  584.759734][T26328]        __ext4_expand_extra_isize+0x30d/0x400
[  584.761587][T26328]        __ext4_mark_inode_dirty+0x455/0x700
[  584.763379][T26328]        ext4_evict_inode+0x976/0x10c0
[  584.765069][T26328]        evict+0x624/0xb50
[  584.766425][T26328]        ext4_orphan_cleanup+0xc7a/0x14c0
[  584.768211][T26328]        ext4_fill_super+0x5cb4/0x65c0
[  584.770067][T26328]        get_tree_bdev_flags+0x430/0x4f0
[  584.772251][T26328]        vfs_get_tree+0x92/0x2a0
[  584.773933][T26328]        do_new_mount+0x319/0xdc0
[  584.775577][T26328]        __se_sys_mount+0x31d/0x420
[  584.777229][T26328]        do_syscall_64+0x174/0x580
[  584.779030][T26328]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  584.781159][T26328] 
[  584.781159][T26328] other info that might help us debug this:
[  584.781159][T26328] 
[  584.784272][T26328] Chain exists of:
[  584.784272][T26328]   &sbi->s_writepages_rwsem --> sb_internal --> &ei->xattr_sem
[  584.784272][T26328] 
[  584.788364][T26328]  Possible unsafe locking scenario:
[  584.788364][T26328] 
[  584.790756][T26328]        CPU0                    CPU1
[  584.792438][T26328]        ----                    ----
[  584.794126][T26328]   lock(&ei->xattr_sem);
[  584.795528][T26328]                                lock(sb_internal);
[  584.798056][T26328]                                lock(&ei->xattr_sem);
[  584.800679][T26328]   rlock(&sbi->s_writepages_rwsem);
[  584.802723][T26328] 
[  584.802723][T26328]  *** DEADLOCK ***
[  584.802723][T26328] 
[  584.805805][T26328] 3 locks held by syz.5.8539/26328:
[  584.807813][T26328]  #0: ffff888113e300d8 (&type->s_umount_key#28/1){+.+.}-{4:4}, at: sget_fc+0x938/0x1900
[  584.811565][T26328]  #1: ffff888113e30640 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x426/0x10c0
[  584.815167][T26328]  #2: ffff888112bcd520 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3d0/0x700
[  584.818407][T26328] 
[  584.818407][T26328] stack backtrace:
[  584.820532][T26328] CPU: 1 UID: 0 PID: 26328 Comm: syz.5.8539 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  584.820551][T26328] Tainted: [L]=SOFTLOCKUP
[  584.820560][T26328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  584.820565][T26328] Call Trace:
[  584.820570][T26328]  <TASK>
[  584.820575][T26328]  dump_stack_lvl+0xe8/0x150
[  584.820588][T26328]  print_circular_bug+0x2e1/0x300
[  584.820602][T26328]  check_noncircular+0x12e/0x150
[  584.820615][T26328]  __lock_acquire+0x1520/0x2cf0
[  584.820626][T26328]  ? __lock_acquire+0x683/0x2cf0
[  584.820638][T26328]  ? ext4_writepages+0x205/0x3b0
[  584.820676][T26328]  lock_acquire+0x106/0x350
[  584.820692][T26328]  ? ext4_writepages+0x205/0x3b0
[  584.820711][T26328]  percpu_down_read_internal+0x48/0x1c0
[  584.820724][T26328]  ? ext4_writepages+0x205/0x3b0
[  584.820735][T26328]  ext4_writepages+0x205/0x3b0
[  584.820745][T26328]  ? __pfx_ext4_writepages+0x10/0x10
[  584.820758][T26328]  ? __pfx_ext4_writepages+0x10/0x10
[  584.820768][T26328]  do_writepages+0x338/0x560
[  584.820780][T26328]  ? do_raw_spin_lock+0x12b/0x2f0
[  584.820789][T26328]  __writeback_single_inode+0x12e/0xf90
[  584.820800][T26328]  writeback_single_inode+0x4ef/0xe70
[  584.820809][T26328]  write_inode_now+0x1c2/0x290
[  584.820817][T26328]  ? __pfx_write_inode_now+0x10/0x10
[  584.820830][T26328]  ? do_raw_spin_unlock+0x4d/0x210
[  584.820838][T26328]  iput+0x98b/0xf00
[  584.820848][T26328]  ext4_xattr_block_set+0x1b0c/0x2a80
[  584.820861][T26328]  ? __pfx_check_xattrs+0x10/0x10
[  584.820868][T26328]  ? xattr_find_entry+0x126/0x280
[  584.820877][T26328]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[  584.820887][T26328]  ? ext4_xattr_block_find+0x2a1/0x320
[  584.820896][T26328]  ext4_expand_extra_isize_ea+0x1342/0x1e70
[  584.820910][T26328]  __ext4_expand_extra_isize+0x30d/0x400
[  584.820920][T26328]  __ext4_mark_inode_dirty+0x455/0x700
[  584.820932][T26328]  ext4_evict_inode+0x976/0x10c0
[  584.820950][T26328]  ? __pfx_ext4_evict_inode+0x10/0x10
[  584.820961][T26328]  ? do_raw_spin_unlock+0x4d/0x210
[  584.820968][T26328]  ? __pfx_ext4_evict_inode+0x10/0x10
[  584.820978][T26328]  evict+0x624/0xb50
[  584.820986][T26328]  ? __pfx_evict+0x10/0x10
[  584.820992][T26328]  ? do_raw_spin_unlock+0x4d/0x210
[  584.821000][T26328]  ? _raw_spin_unlock+0x28/0x50
[  584.821009][T26328]  ? iput+0xb84/0xf00
[  584.821019][T26328]  ext4_orphan_cleanup+0xc7a/0x14c0
[  584.821027][T26328]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  584.821038][T26328]  ? __pfx_ext4_orphan_cleanup+0x10/0x10
[  584.821046][T26328]  ? ext4_register_li_request+0x640/0x720
[  584.821056][T26328]  ? errseq_check_and_advance+0x66/0x120
[  584.821071][T26328]  ext4_fill_super+0x5cb4/0x65c0
[  584.821085][T26328]  ? __pfx_ext4_fill_super+0x10/0x10
[  584.821094][T26328]  ? snprintf+0xe8/0x140
[  584.821102][T26328]  ? __pfx_snprintf+0x10/0x10
[  584.821110][T26328]  ? set_blocksize+0x1c9/0x440
[  584.821119][T26328]  ? sb_set_blocksize+0x155/0x240
[  584.821128][T26328]  ? setup_bdev_super+0x4c1/0x5b0
[  584.821139][T26328]  get_tree_bdev_flags+0x430/0x4f0
[  584.821150][T26328]  ? __pfx_ext4_fill_super+0x10/0x10
[  584.821159][T26328]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  584.821171][T26328]  vfs_get_tree+0x92/0x2a0
[  584.821182][T26328]  do_new_mount+0x319/0xdc0
[  584.821192][T26328]  ? __pfx_do_new_mount+0x10/0x10
[  584.821201][T26328]  ? ns_capable+0x89/0xe0
[  584.821209][T26328]  ? path_mount+0x647/0x1040
[  584.821217][T26328]  ? user_path_at+0xd4/0x160
[  584.821227][T26328]  __se_sys_mount+0x31d/0x420
[  584.821237][T26328]  ? __pfx___se_sys_mount+0x10/0x10
[  584.821246][T26328]  ? __x64_sys_mount+0x20/0xc0
[  584.821254][T26328]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  584.821262][T26328]  do_syscall_64+0x174/0x580
[  584.821272][T26328]  ? trace_irq_disable+0x3b/0x140
[  584.821281][T26328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  584.821288][T26328] RIP: 0033:0x7f853139f34a
[  584.821297][T26328] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  584.821304][T26328] RSP: 002b:00007f85322a6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  584.821313][T26328] RAX: ffffffffffffffda RBX: 00007f85322a6ee0 RCX: 00007f853139f34a
[  584.821319][T26328] RDX: 00002000000001c0 RSI: 0000200000000b80 RDI: 00007f85322a6ea0
[  584.821324][T26328] RBP: 00002000000001c0 R08: 00007f85322a6ee0 R09: 0000000000800744
[  584.821329][T26328] R10: 0000000000800744 R11: 0000000000000246 R12: 0000200000000b80
[  584.821334][T26328] R13: 00007f85322a6ea0 R14: 000000000000047a R15: 000000000000002c
[  584.821342][T26328]  </TASK>
[  585.077298][T26328] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.8539: iget: bad extra_isize 90 (inode size 256)
[  585.082998][T26328] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  585.083300][T26328] EXT4-fs (loop5): Remounting filesystem read-only
[  585.090183][T26328] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -30)
[  585.094404][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  585.094420][    C1] EXT4-fs (loop5): initial error at time 1787039672: ext4_xattr_inode_iget:441: inode 11
[  585.094440][    C1] EXT4-fs (loop5): last error at time 1787039672: ext4_xattr_inode_iget:441: inode 11
[  585.105733][T26328] EXT4-fs (loop5): 1 orphan inode deleted
[  585.109264][T26328] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  585.135723][ T7393] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  589.646479][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[  589.649271][ T1373] ieee802154 phy1 wpan1: encryption failed: -22
