last executing test programs:

2m28.444399264s ago: executing program 2 (id=51):
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x10003, 0x2})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x6})

2m28.362686082s ago: executing program 2 (id=53):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x9f527ef601c99f49, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0xc0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0)

2m28.15530557s ago: executing program 2 (id=54):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r0, 0x400c4d07, &(0x7f0000000900))

2m28.154896335s ago: executing program 2 (id=55):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
symlinkat(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')

2m27.99280198s ago: executing program 2 (id=56):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$key(0xf, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x80002, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2040)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000160007012cbd7000fedbdf25137c00000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x20048891}, 0x8090)

2m27.693131639s ago: executing program 2 (id=57):
syz_mount_image$udf(&(0x7f0000000280), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3000010, &(0x7f00000002c0)={[{@volume={'volume', 0x3d, 0xe}}, {@volume={'volume', 0x3d, 0x3}}, {@gid_ignore}, {@noadinicb}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@shortad}, {@gid}, {@uid_forget}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@dmode={'dmode', 0x3d, 0x5}}]}, 0x1, 0xc57, &(0x7f0000001640)="$eJzs3U9sHNd5APDvDXfFldxWTJwqThoHm7ZIZcVy9S+iYhXuqqbZFpBlIRR7C8CVSKkLUyRBUo1spC3TSw89BCiKHnIi0BoFEjQw2iLokWldILn4UOTUE9HCRlD0wBYBAhQIGMzsW3FFkbYikhIl/342+e3MvDfz3rzhjE3wmxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMTvvHLhxMm0xYaBR9AYAOChuDT25ROntnr+AwBPrCvb/f8/AAAAAAAAAAAAAACwX6Qo4ulIMXdpLU1Uy12Ni536rdvjI6NbVzuYqpoDVfnyq3Hy1OkzXzw7fK4XL3ZmPqD+bvt0vDZ25ULz5dmbc/NTCwtTk83xmc612cmp+97DTutvdqw6Ac2br9+avH59oXnqhdN3bb499P7gU0eGzg8/d/zZXtnxkdHRsY0ijf7ytQduSNd2GR4HoojjkeL57/wotSOiiJ2fi8bDHfvNDladOFZ1YnxktOrIdKc9s1huvNw7EUVEs69Sq3eOth6LqNUfah+214pYKptfNvhY2b2xufZ8++r0VPNye36xs9iZnbmcuq0t+9OMIs6liOWIWB28d3f1KKIWKb55eC1dzW/9qM7DF6rE4O3bUexhH+9D2c5mPWK5eAzGbB8bjCJejRQ/fudoXMv3mepe8/mIV8v43Yi3yvhSRCovjDMR721xHfF4qkURf1GO//m1NFndD3r3lYt/0Pz9meuzfWV795Wf8/lwz53iET0fDm6KD8c+vzc1ooh2dcdfSw/+HzsAAAAAAAAAAAAAAAAA7LaDUcSnIsUr//5HVV5xVHnph88P/+7QL/bnjD/zIfspy74QEUvF/eXkHsiJgZfT5ZQecS7xR1kjivjjnP/39UfdGAAAAAAAAAAAAAAAAAAAgI+0In4YKV5892hajv45xTszN5pX2lenu7PC9ub+7c2Zvr6+vt5MVYyhvDzRXV5fynE5x/U/7cbVlOcX7tUvurGV40SOSzku57iS42qOMZDr59gaiHr5YSIvL+W4nONKjqs5Ri3Xz7GV40SOSzku57iS42qOsU/m7gUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeJIUUcRPI8U3vrqWIkVEK2IiunFl8FG3DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDaYi/jFSNH+vdWddLSJS9W/X0fLbmWgdKOPHozVcxpeidSHHdhVrra8/gvazM/VUxA8ixWDj7TsDnse/3l26cxnEW1/bWPp0rRsHehuH3h986sjh88Ojn31mu89pqwYcu9iZuXW7OT4yOjrWt7qWj/7xvnVD+bjF7nSdiFh4483X29PTU/MP/qG8BB6wem8kd3D0h/kh1XaxqYP7v+9R2xfNeHQforYvmvFo+n5HuuspwJOkfP6/Fyl+893/6D3wu8//RvxCd+nOEz5+8icb18GLm3d0n8//2uZ6+flfPgm2ev4/3bfuxXwd1msRjcWbc/UjEY2FN9483rnZvjF1Y2rmzIkTXxoe/tLpE/UDEY3rnempvk+7croAAAAAAAAAAAAAAAAAHp5UxG9HivYP1lIzIm5X+VpD54efO/7sQAzcm/v32tiVC82XZ2/OzU8tLExNNsdnOtdmJ6fu93CNKt1rfGR0TzrzoQ7ucfsPNl6enXtjvnPjDxe33H6oceHqwuJ8+9rWm+NgFBGt/jXHqgaPj4xWjZ7utGeqqpd3KSGznor4z0hx7UwzfS6vy/n/mzP878r/X9q8o13M///soY38v491Q9E7ZkpF/CRS/MZfPhOfq9p5KO45Z7nc30aKY+c+k8vFgbJcrw3d9wp0MwPLsv8bKf7hp3eX7eVDPr1R9uTPfYL3uXL8D0d69dt//q341bzu7vc/bD3+hzbvaI/e//CJvnWH7npfwY67Th7/45Hipaffjl+r1vz/B77/o/fGhqPdwhvv59ij8f/lvnVD+bi/vludBwAAAAAAAAAAeIzVUxF/Fym+N1pLZ/O6+/n7v8nNO9qjv//6ZN+6yd2Zr+jDp70BAAAAgCdEPRXxw0hxY/HtOznUd+d/9+V//tZG/udI2rS1+j3fL1XvDdjN3//1G8rHndh5twEAAAAAAAAAAAAAAAAAAGBfSamIs3k+9Ykqn39y2/nUVyLFK//9fC6XjpTlevPAD1XfG5fWZ45fmJ6ebcRi++r0VHNsrn1tqqz7iUix9jefyXWLan713nzz3TneN+Zin48Uo9/ule3Oxd6bm7w7H3hjfT3iZFn2Y5Hiv/7+7rJ5auo8d3S131Nl2b+OFF/5563LHtkoe7os+61I8f2vNHtlD5Vlz+aXoX5yo+wL12aLvRkYAAAAAAAAAAAAAAAAAAAAPlLqqYg/ixT/c3P5Ti5/nv+/3rdYeetrffP9b3K7mud/qJr/f7vPDzL/f/VegaXtjgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+mFEW8GSnmLq2llcFyuatxsTNz6/b4yOjW1Q6mquZAVb78apw8dfrMF88On+vFD66/2z4Vr41dudB8efbm3PzUwsLUZHN8pnNtdnLqvvew0/qbHatOQPPm67cmr19faJ564fRdm28PvT/41JGh88PPHX+2V3Z8ZHR0rK9Mrf7AR79H2mb9gSjiryLF89/5UfreYEQROz8XH3Lt7LWDVSeOVZ0YHxmtOjLdac8slhsv905EEdHsq9TqnaOHMBY70opYKptfNvhY2b2xufZ8++r0VPNye36xs9iZnbmcuq0t+9OMIs6liOWIWB28d3f1KOL1SPHNw2vpXwYjBnrn4QuXxr584tT27Sj2sI/3oWxnsx6xXDwGY7aPDUYR/xQpfvzO0fjXwYhadL/i8xGvlvG7EW9Fd7xTeWGciXhvi+uIx1Mtivi/cvzPr6V3Bsv7QfnzVMtbZ67P9pXt3Vce++fDw7TP702NKOL71R1/Lf2bn2sAAAAAAAAAAAAAAACAfaSIX4kUL757NFX5wXdyijszN5pX2lenu2l9vdy/Xs70+vr6ejN1YyvHiRyXclzOcSXH1RyjyPVzbJWxsb4+kZeXclzOcSXH1RxjINfPsZXjRI5LOS7nuJLjao5Ry/VzbOU4keNSjss5ruS4mmPsk9w9AAAAAAAAAAAAAAAAAADgyVJU/6T4xlfX0vpgd37piejGFfOBPvF+FgAA//9oSuse")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))

2m27.590697528s ago: executing program 32 (id=57):
syz_mount_image$udf(&(0x7f0000000280), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3000010, &(0x7f00000002c0)={[{@volume={'volume', 0x3d, 0xe}}, {@volume={'volume', 0x3d, 0x3}}, {@gid_ignore}, {@noadinicb}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@shortad}, {@gid}, {@uid_forget}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@dmode={'dmode', 0x3d, 0x5}}]}, 0x1, 0xc57, &(0x7f0000001640)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))

2m2.542948572s ago: executing program 3 (id=400):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000d64000/0x3000)=nil, 0x2000000, &(0x7f0000000080)=[{0xfffffffffffffffc, 0x9, 0x800000e9e}], 0x1, 0x37, 0x40, 0x2, 0x44})

2m2.542542172s ago: executing program 3 (id=402):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000180)=[{0x5, 0x4000, 0x0, 0x0}], 0x1})

2m1.171587037s ago: executing program 3 (id=420):
syz_emit_ethernet(0x11, &(0x7f00000005c0)={@remote, @random="001a00e100", @void, {@mpls_uc={0x8847, {[], @llc={@llc={0x42, 0xaa, "d4"}}}}}}, 0x0)

2m1.032625429s ago: executing program 3 (id=423):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4a8, &(0x7f0000000300)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
io_setup(0x8, &(0x7f0000000e00)=<r1=>0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000080)='$', 0x1, 0x0, 0x0, 0x0, r2}])

2m0.745885605s ago: executing program 3 (id=428):
getegid()

2m0.459722256s ago: executing program 3 (id=433):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000140)=[{0x0, 0xffffff31}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)

2m0.340951059s ago: executing program 33 (id=433):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000140)=[{0x0, 0xffffff31}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)

1m55.361790397s ago: executing program 4 (id=495):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000100)='./file1\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=000000006,coherency=full,localflocks,coherency=full,noacl,\x00'/136], 0x1, 0x4435, &(0x7f000000cd80)="$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")
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r0, 0x8)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r1, 0x0)
r2 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6)
fallocate(r2, 0x0, 0x0, 0x1001f0)

1m55.098963094s ago: executing program 4 (id=496):
syz_mount_image$jfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1c802, &(0x7f00000022c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8=0x0], 0x1, 0x5f97, &(0x7f0000003040)="$eJzs3cuOHFcZB/CvL9NzCXGsCEXGYuE4EBJCfLch3OKwYAFIICGvsTWZRAYHkG0QiSw8kReIBZdHgE02LPIi4RUQD4Alm1UkCIVq+hy7utzjHseerp45v580rvr6VE2f8n9qqnuqqk8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPG97/74ZC8iLv46PXAw4jMxiOhHrNb1kahnzuflhxFxKLaa47mIGCxH1Otv/fNMxJmI+OhAxJ27N9brh0/tsB9nT1y/+sn3v/OP3/3p1qGfvvmTD9rtP/rs6Q9/fzPi4A9f+/CTm09m2wEAAKAUVVVVvfQ2/3B6f9/vulMAwFzk43+V5MfVarVa/UTrP/YXqz/qQuumarqbzSIiNpvr1K8ZnI4HgD1mMz7uugt0SP5FG0bEU113Alhova47wK64c/fGei/l22seD46M2/PfKSfy3+zdu79ju+ks7WtM5vXzdSsG8ew2/VmdUx8WSc6/387/4rh9lJbb7fznZbv8R+Nbn4qT8x+082+ZyP/PEbFn8+9Pzb9UOf/ho+S/OVjg/b966OkI+QMAAAAAUIL89/+DHZ//XX78TdmRh53/PTKnPgAAAAAAAADAk/a44//dY/w/AAAAWFj1e/XaXw7cf2y7z2KrH7/Qi3i6tTxQmHSzzFrX/QAAAAAAAAAAAACAkgzH1/Be6EUsRcTTa2tVVdVfTe36UT3u+ntd6dsPJev6lzwAAIx9dKB1L38vYiUiLqTP+ltaW1urqpXVtWqtWl3Or2dHyyvVauN9bZ7Wjy2PdvCCeDiq6m+20livadb75Vnt7e9XP9eoGuygY/PRYeAAEBHjo9EdR6R9pqqeia5f5bA32P/3H/s/O9H1zykAAACw+6qqqnrp47wPp3P+/a47BQDMw0o+/rfPC6jVarVarZ6s+wvWn09TN1XT3WwWEbHZXKd+zWA4fgDYYzbj4667QIfkX7RhRBzquhPAQut13QF2xZ27N9Z7Kd9e83iQxnfP14JM5L/Z21ovrz9tOkv7GpN5/XzdikE8u01/nptTHxZJzr/fzv/iuH2Ultvt/Odlu/zr7TzYQX+6lvMftPNv2T/596fmX6qc//CR8h/IHwAAAAAAFlj++/9B53/zJgMAAAAAAADAnnPn7o31fN9rPv//+SnL9Zpz7v/cN3L+vR3n7/7f/STn32/n37ogZ9CYv/3G/fz/fffG+gfX//W5PF34/JcGo/q5l3r9wTBd81MtvRWX40psxIkHlh9OtJ98oH1pov3UjPbTD7SP6vbV3H4s1uMXcSXevNe+POPCqJUZ7dWM9pz/wP5fpJz/sPFV57+W2nutae32+/0H9vvmdNrznP/bf198cO+av1sxuLdtTfX2He2gP1v/J0+N4lfXNq4e+82l69evnow0mXj0VKTJE5bzX0pfOf+XXhi359/7zf319vujR85/UdyK4bb5v9CYr7f35Tn3rQs5/1H6yvnnI9D0/X8v57/9/v9KB/0BAAAAAAAAAAAAAACAh6mqausW0fMRcS7d/9PVvZkAwHwsjyd/+EGqqyTUarVarVbv27qpmu71ZhErk+uci4jfTvtmAMAi+19E/LPrTtAZ+Rcsf95fPf1C150B5urau+/97NKVKxtXr3XdEwAAAAAAAADg08rjfx5pjP+8dR1Qa9zoifFf34gje3b8z/5osDXWedqg5+Ph438fjYeP/z2c8XxLM9pHM9qXZ7SvzGifeqNHQ87/+ZRxzv9w2rCSxn99qYP+dC3nfzSN9Zzz/1JruWb+1V/3cv79ifyPX3/nl8evvfveq5ffufT2xtsbPz954tyZ02fPnD579vhbl69snBj/22GPd1fOP4997TrQsuT8c+byL0vO/4upln9Zcv4vplr+Zcn559d78i9Lzj+/95F/WXL+L6da/mXJ+X851fIvS87/lVTLvyw5/6+kWv5lyfm/mmr5lyXnfyzV8i9Lzv94quVflpx/PsMl/7Lk/POVDfIvS87/VKrlX5ac/+lUy78sOf8zqZZ/WXL+Z1Mt/7Lk/M+lWv5lyfl/NdXyL0vO/2upln9Zcv6vpVr+Zcn5fz3V8i9Lzv8bqZZ/WXL+30y1/MuS8/9WquVflpz/t1Mt/7Lk/F9PtfzLcv/z/83MeeY/f49YgG6YMTNtpuvfTAAAAAAAAAAAAABA2zwuJ+56GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+zw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsHd3MXKV9/3Az77Za0OC/4EQQpywNoY4YfHu+g0cYjBJyJ+SNqUkpE1Lahx7bZz4rd51AgiVpdCWKEhFai/oRdMkSqNIbQWKIjWVaITUSO1duUrETdRKXFgqVA5KqqYCtjpznufZmdnZmfXL2nPO+XwQ/nlnzsw8c+bM7H7X+s4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADTb8PHpPx3Isiz/v/HHuiy7PP/7mmxP/uXczku9QgAAAOB8vdX48++uSCfsWcaFmrb5lw/82w/m5+fnsy++cfrtP5+fT2eMZdnQ6ixrnBf9669+Od+8TfBkNjow2PT1YI+bH+px/nCP80d6nL+qx/mre5w/2uP8RTtgkTXF72MaV7ap8dd1xS7NrspGGudt6nCpJwdWDw7G3+U0DDQuMz9yMDucHcmms8lFlxlo/JdlL27Ib+vuLN7WYNNtrc+y7MzPH9sf1zAQ9vGmrOXGGpofu9fvzMbe+Plj+787+9p7O82eu2HRSrNs88Z8nU9l2cKvq7KBbHXaJ3Gdg03rXN9hnUMt6xxoXC7/e/s6zyxznfF+j4Z1vtxlnevDaQ9fn2XZXLbkNu2ezAaztW23mvb3aHFE5NeRP5TvyobP6jjZsIzjJL/Mq9e3Hiftx2Tc/xvCPhleYg3ND8frT6xatN/P9TjJ73U/HKv5dd+b3+joaPOvVluO1Xybx25Y+hjo+Nh1OAbSsdx0DGzsdQwMrhpqHAODC2ve2HIMTC26zGA20Lit0zd0PwYmZo+emJh55NGbDx/dd2j60PSxqcmd27ft2L5tx46Jg4ePTE8Wf57dLi2RtdlgOgY3hteaeAx+sG3b5kNy/lsX7nkw2ifPg/y+f/bGfEGXD2ZLHOP5Nk9tPv/nQfq+3/Q8GG56HnR8Te3wPBhexvMg3+bM5uV9zxxu+r/TGlbqtXBd0zFwKb8f5rf5wIeWfi1cH9b19IfP9vvh0KJjIN6tgfDcy09JP++N3hr2y+Lj4tr8jMtWZadmpk9ueXjf7OzJqSyMi+LKpseq/XhZ23SfskXHy+BZHy97/vbNG6/tcPq6sK9Gb+r+WOXbbB/v/lg1Xt1b9+eqrNifLaduzcK4wC72/uz03SzfnylLdNmf+TZP3Xz+PwumXNL0+jfS6/VvaGS4eP0bSntjpOX1b/FDM9RYWZaduXl5r38j4f+L/fp3VZ+8/uX76oEt3Y+BfJunJ872GBju+vp3fZgDYT0fColhtCn3v904f644TJsey57HzfDwSDhuhuMtth432xZdJr+2/LY3T57bcbP5+tbHquXnlgoeN/m++ovJ7sdNvs1LU+f/2rEm/rXptWNVr2NgZGhVvt6RdBAUr3fza+IxsCXbnx3PjmQH0mXyRzm/rfGtyzsGVoX/L/ZrxzV9cgzk++q5rd2PgXybH2+7sD87bQ6npG2afnZq//3CUpn/2uGF62vfbRc68+fr/MRPPp1O65Qh8m1e2362OaP7fropnHJZh/3U/vxZ6pg+kF2c/XRNWOeRHd1/N5Vvc9XOZR5Pe7Ise2Xqlcbvu8Lvd79/6ic/aPm9b6ffKb8y9co9E/f99GzWDwDAuXu78efcquJnzaZ/sV7Ov/8DAAAApRBz/2CYifwPAAAAlRFz/1CYifwPAAAAlRFz/3CYSU3y/0O37nr+rcez9G6A80E8P+6Ge28vtosd77nw9dj8gvz0j31n5PmvPb682x7MsuzNe97XcfuHbo/rKpyI6/xI6+mLXHPdsm7/wfsXtmt+/4Qzu4rrj/dnuYdB7Cq/OLG1cb1jj0w15kv3ZI1539zTTxbXX3wdtz+9rdj+r8Kbluw5ONBy+c1hPZvCHAvvKXPvnoX9kM94uefXf+Cfr/zcwu3Fyw1sfGfjbj73h8X1xveIevbKYvt4v5da/z99/XvP59s/fEPn9T8+2Hn9p8P1vhrmr3YX2zfv8681rf+Pw/rj7cXLbfn2jzqu/4X3FNu/EI6Lb4bZvv47/+z9b3V6vOLt7LmtuFy8/cn/3t64XLy+eP3t6x99fKplf7Rf/0tvFNez+yu/GGrePp4ebyd68LbW43sgPL4tPfIsy773J1nLfs4+WlzuH9vWH6/vxG2d139T2zpPDFzXuPzC/VnXcr++8TdbO97fuJ49f7+u5f48e1fYf29M/Di/3tP3heMxnP+/LxfX1/5epi/c1fp6E7f/5rrieRuvb6Jt/c+2rX/uunzf9V7/3W8U63/hjtUt69/zyXA83V3MXus/9NdXtFz+W98tHo+TXx0/dnzm1OEDTXu1+Xm8enTN2ssuf8c7rwivpe1f7z0++9D0ybHJscksGyvhWwau9Pq/HeZ/FWPuwt9C4ae/KI67Zz5VfN/64C+Lr58Npz8YHs/4/fEbfznScry2P+5zdxTzfNf/4bCO5XrP1//jumVtePoLL576hz96rf3ngnh/Trx7tHH/nttwdeO8gZeK89tfr3r593e3Pq9/NjzZmD8M+3U+vDPzxquL22u//vjeJM98pnj+xp/k4uWztvcTWTfUej/Od/0/Cz/H/Oia1te/eHz88PG2d3Nelw3kS5gLrw/ZXHF+3Cru72fOXN3x9uL78GRz7z2bZS5p5pGZiSOHj516eGJ2emZ2YuaRR/cePX7q2OzexnuX7v1Sr8svPL/XNp7fB6Z3bs8az/bjxVhhl3r9J+7ff+CWyRsPTB/cd+rg7P0npk8e2j8zs3/6wMyN+w4enP5qr8sfPrB7auuubbdsHT90+MDuW3ft2rZr/PCx4/kyikX1sHPyy+PHTu5tXGRm9/ZdUzt2bJ8cP3r8wPTuWyYnx0/1unzje9N4fumvjJ+cPrJv9vDR6fGZw49O757atXPn1p7v/nj0xMGZsYmTp45NnJqZPjlR3Jex2cbJ+fe+XpenHmaOh9e7NgPhp/PP37QzvT9u7jtPLHlVxSatP55mr4f3gorf33p9HXP/SJhJTfI/AAAA1EHM/eGN/xfOkP8BAACgMmLuXx1mIv8DAABAZcTcXyT/0fTx73XJ/xeq//9ECfv/a5vWEen/6//r/+v/R/r/F4b+v/5/N/r//dL/H8z0//X/9f9ZCf3W/w+5P1uTZf79HwAAACoq5v61YSbyPwAAAFRGzP2XhZnI/wAAAFAZMfdfHmZSk/zv8//1//X/u/X/47b6/5n+fz/0/zf9p/7/Ivr/+v+Z/v85u9T9+bKv/yL0/7u+B0CH/v8a/X/6Tb/1/2Puf0eYSU3yPwAAANRBzP3vDDOR/wEAAKAyYu6/IsxE/gcAAIDKiLl/XZhJTfK//r/+v/6/z//X/y9N/9/n/3eg/6//n+n/n7NL3Z8v+/p9/r/+P731W/8/5v7/F2ZSk/wPAAAAdRBz/7vCTOR/AAAAqIyY+68MM5H/AQAAoDJi7r8qzKQm+b+e/f9XsyzT/8/0//X/29ap/6//vxL0//X/u9H/1/8v8/r1//X/6a3f+v8x9787zKQm+R8AAADqIOb+q8NM5H8AAACojJj73xNmIv8DAABAZcTcf02YSU3yfz37/z7/X/+/oP/fuk79f/3/laD/3xf9/zfjX/T/W++H/r/+v/6//j8rq9/6/zH3vzfMpCb5HwAAAOog5v5rw0zkfwAAAKiMmPvfF2Yi/wMAAEBlxNy/PsykJvlf/1//X/9f/1//X/9/JZWr/z+45Dkl7/8n+v+t96N/+v9zCwvQ/y/N+vX/9f/prd/6/zH3vz/MpCb5HwAAAOog5v4PhJnI/wAAAFAZMfdfF2Yi/wMAAEBlxNw/FmZSk/yv/6//r/+v/6//r/+/ksrV/1+a/n9B/7+Vz//X/9f/1/+nu37r/8fcvyHMpCb5HwAAAOog5v6NYSbyPwAAAFRGzP3Xh5nI/wAAAFAZMfdvCjOpSf7X/9f/1//X/9f/1/9fSfr/+v/d6P/r/5d5/fr/+v/01m/9/5j7bwgzqUn+BwAAgDqIuf/GMBP5HwAAACoj5v4PhpnI/wAAAFAZMfdvDjOpSf7X/9f/1/8vcf9/SP8/0//ve/r/+v/d6P/r/5d5/fr/+v/01m/9/5j7PxRmUpP8DwAAAHUQc/+Hw0zkfwAAAKiMmPtvCjOR/wEAAKAyYu4fDzOpSf7X/9f/1/8vcf/f5/+3rF//vz/p/+v/d6P/r/9f5vXr/+v/01u/9f9j7r85zKQm+R8AAADqIOb+LWEm8j8AAABURsz9E2Em8j8AAABURsz9k2EmNcn/+v/6//r/+v/6//r/K0n/X/+/G/1//f8yr1//X/+f3vqt/x9z/1SYSU3yPwAAANRBzP1bw0zkfwAAAKiMmPu3hZnI/wAAAFAZMfdvDzOpSf4vSf9/SypA6f/r/+v/6//r/5eK/r/+fzd17P+vCn/V/y//+vX/9f9pNdjhtH7r/8fcvyPMpCb5HwAAAOog5v6dYSbyPwAAAFRGzP23hJnI/wAAAFAZMfffGmZSk/xfkv6/z//X/9f/b6L/r/9fJvr/+v/d1LH/7/P/L5xLvX79f/1/euu3/n/M/bvCTGqS/wEAAKAOYu7/SJiJ/A8AAACVEXP/bWEm8j8AAACUSqfPIYxi7v9omElN8r/+f9X7//Or9f/1//X/u69f/39l6f/r/3ej/6//X+b16//r/9Nbv/X/Y+7fHWZSk/wPAAAAdRBz/+1hJvI/AAAAVEbM/XeEmcj/AAAAUBkx9+8JM6lJ/tf/r3r/3+f/6//r//dav/7/ytL/1//vRv+/nP3/8GOL/n8f9f/zY0j/n37Ub/3/mPvvDDOpSf4HAACAOoi5/2NhJvI/AAAAlNxCzo+5/+Ntp8v/AAAAUB0x938izKQm+V//X/9f/1//vwL9/+x/5uf1//uU/v+K9f8bL4X6/wX9/3NzqfvzZV9/P/X/ff4//arf+v8x998VZlKT/A8AAAB1EHP/J8NM5H8AAACojJj7/3+YifwPAAAAlRFz/91hJjXJ//r/+v/6//r/Fej/+/z/Pqb/7/P/u9H/1/8v8/r1//X/6a3f+v8x9/9amElN8j8AAADUQcz994SZyP8AAABQGTH3fyrMRP4HAACAklm15Dkx9/96mElN8n/5+v9jpez/D6br1//X/9f/1//X/7+Q9P/1/zP9/3N2qfvzZV+//r/+P731W/8/5v7fCDOpSf4HAACAOoi5/9NhJvI/AAAAVEbM/b8ZZiL/AwAAQGXE3H9vmElN8v+F7v+3X74bn/+v/5/p/+v/6//r/58n/X/9/0z//5xd6v582dev/6//T2/91v+Puf+3wkxqkv8BAACgDmLuvy/MRP4HAACAPvXQWV8i5v7PhJnI/wAAAFAZMfd/NsykJvm/fJ//r/+v/6//r/+v/18m+v/6/93o/+v/l3n9+v/6//TWb/3/mPvvDzOpSf4HAACAOoi5/3NhJvI/AAAAVEbM/b8dZiL/AwAAQGXE3P87YSY1yf/6//r/+v/6//r/+v8rSf9/cf8/fw3T/y/o/+v/l3n9+v/6//TWb/3/mPs/H2ZSk/wPAAAAdRBz/++Gmcj/AAAAUBkx9/9emIn8DwAAAJURc/8DYSY1yf/6//r/+v/6//r/+v8rSf/f5/93o/+v/1/m9ev/6//TW7/1/2Pu/0KYSU3yPwAAANRBzP2/H2Yi/wMAAEBlxNy/N8xE/gcAAIDKiLn/wTCTmuR//X/9f/1//X/9f/3/laT/r//fjf6//n+Z16//r/9Pb/3W/4+5f1+YyZ7WmwEAAADKK+b+L4aZ1OTf/wEAAKAOYu7fH2Yi/wMAAEBlxNx/IMykJvlf/1//X/9f/1//X/9/Jen/6/93o/+v/1/m9ev/6//TW7/1/2Punw4zqUn+BwAAgDqIuf9gmIn8DwAAAJURc/+hMBP5HwAAACoj5v6Hwkxqkv+r0P8faf5C/1//X/9/uf3/l7/ftk79f/3/laD/r//fjf6//n+Z16//r/9Pb/3W/4+5/3CYSU3yPwAAANRBzP1fCjOR/wEAAKAyYu7/cpiJ/A8AAACVEXP/kTCTmuT/KvT/W+j/6//r/1/Yz/9fs3C7+v/6/+dC/1//vxv9f/3/Mq9f/1//n976rf8fc//RMJOa5H8AAACog5j7j4WZyP8AAABQGTH3Hw8zkf8BAACgMmLuPxFmUpP8r/9/dv3/gSW6gfr/ndev/1+B/n8T/X/9/3Oh/6//343+v/5/mdev/6//T2/91v+Puf8Pwkxqkv8BAACgDmLuPxlmIv8DAABAZcTcPxNmIv8DAABAZcTcPxtmUpP8r//v8//1//X/9f/1/1eS/r/+fzf6//r/ZV7//7F337ueldUfx78MP/hBjPfALXgFXoLxCoyJt2BvYMeu2HvD3rAr9t57772j2Gui4cxaa5jjnL3PwPnOefazXq8/WDpj5BkBzSf4ztb/6/9ZN1r/n7v/vnFLk/0PAAAAHeTuv1/cYv8DAADANHL33z9usf8BAABgGrn7HxC3NNn/+n/9v/5f/6//1//vk/5f/387lx3+Jer/9f9bfr/+X//PutH6/9z9D4xbmux/AAAA6CB3/4PiFvsfAAAAppG7/8Fxi/0PAAAA08jd/5C4pcn+1//r//X/+n/9v/5/n/T/+v8l+n/9/5bfr//X/7NutP4/d/9D45Ym+x8AAAA6yN3/sLjF/gcAAIBp5O5/eNxi/wMAAMA0cvdfG7c02f/6f/2//n+D/f//6f/1/9uh/9f/L9H/6/+3/H79v/6fdaP1/7n7r4tbmux/AAAA6CB3/yPiFvsfAAAAppG7/5Fxi/0PAAAA08jd/6i4pcn+1//r//X/G+z/ff9f/78h+n/9/xL9v/5/y+/X/+v/WTda/5+7/9FxS5P9DwAAAB3k7n9M3GL/AwAAwDRy9z82brH/AQAAYBq5+x8XtzTZ//p//b/+X/+v/9f/75P+X/+/RP+v/9/y+/X/+n/W7b3/v8f1B/e4/X/u/uvjlib7HwAAADrI3f/4uMX+BwAAgGnk7n9C3GL/AwAAwDRy9z8xbmmy//X/+v9z/f9/LtP/6//1/+d+XP9/MvT/+v8l+n/9/5bfr//X/7Nu7/3/Su9/+J/n7n9S3NJk/wMAAEAHufufHLfY/wAAADCN3P1PiVvsfwAAAJhG7v6nxi1N9r/+X//v+//6f/2//n+f9P/D9v+H/9I7n/7/WPT/+v+j+v+7H+P9+n86GK3/z93/tLilyf4HAACADnL3Pz1usf8BAABgGrn7b4hb7H8AAACYRu7+Z8QtTfa//l//r//X/5/f/59p2f/f9mP6//3Q/w/b/y/T/x+L/l//7/v/+n+Wjdb/5+5/ZtzSZP8DAABAB7n7nxW32P8AAAAwjdz9z45b7H8AAACYRu7+58QtTfa//l//r//X/9+p7/9fPkf/7/v/+6P/1/8v0f/r/7f8fv2//p91o/X/ufufG7c02f8AAAAwvTO72v3Pi1vsfwAAAJhG7v7nxy32PwAAAEwjd/8L4pYm+1//P1r/f+XB1f/r/3db6f8n+f6//n9/9P/6/yXH7f93+v/6tej/x3m//l//z7rR+v/c/S+MW5rsfwAAAOggd/+L4hb7HwAAAKaRu//FcYv9DwAAANPI3f+SuKXJ/tf/j9b/+/6//v/8fx/9v/5f/79M/9+j//f9/3O/Fv3/OO/X/+v/WTda/5+7/6VxS5P9DwAAAB3k7n9Z3GL/AwAAwDRy9788brH/AQAAYBq5+18Rtxze/2cu5asuHf2//l//r//X/+v/90n/r/9fov+/cP9/1RG/P/3/WO/X/+v/WTda/5+7/8a4xd//BwAAgGnk7n9l3GL/AwAAwDRy978qbrH/AQAAYBq5+18dtzTZ/0f1/7fe5ezP6/+PR/9/4ffr//X/+n/9v/5f/7+kYf+/8/3/k3Pa79f/6/9ZN1r/n7v/NXFLk/0PAAAAHeTuf23cYv8DAADANHL3vy5usf8BAABgGrn7Xx+3NNn/J//9/2v0//p//X9c/b/+X/+v/9f/L2vY/x/r+//6/228X/+v/2fdaP1/7v43xC1N9j8AAAB0kLv/jXGL/Q8AAADTyN3/prjF/gcAAIBp5O5/c9zSZP+ffP/v+//6/4vs/8/o/5P+P/646v/1/xdB/6//3+n/77DT7ue3/n79v/6fdaP1/7n7bzqYev32PwAAAHRw08Fvr9q9JW6x/wEAAGAaufvfGrfY/wAAADCN3P1vi1ua7H/9v/7/1Pt/3/8v+v/446r/1/9fBP2//n+n/7/DTruf3/r79f/6f9aN1v/n7n973NJk/wMAAEAHufvfEbfY/wAAADCN2P1n/8/v9j8AAABM6Z0Hv71q9664pcn+b9z/X3Nn+/+rb/eP9f8Xfr/+/0T6/5sO/7mn/9f/b4n+X/+/RP+v/9/y+8fp/+MHrtX/M57R+v/c/e+OW5rsfwAAAOggd/974hb7HwAAAKaRu//muMX+BwAAgGnk7n9v3NJk/zfu/yf5/v+9b4kX6P/n7f99/z+u/l//fyH6f/3/Tv9/h512P7/19x+v/z/8v3Ln+P4/HYzW/+fuf1/c0mT/AwAAQAe5+98ft9j/AAAAMI3c/R+IW+x/AAAAmEbu/g/GLU32v/5/6/2/7//r//X/+v+x6f/1/0v0//r/Lb9/nO//6/8Z12j9f+7+D8UtTfY/AAAAdJC7/8Nxi/0PAAAA08jd/5G45cj9f+UleBUAAABwknL3fzRuafL3//X/+v999f+3/U70/036/+v0/zv9/5H0/9vp/8/7a1H/fyz6f/2//l//z7LR+v/c/R+LW5rsfwAAAOggd//H4xb7HwAAAKaRu/8TcYv9DwAAANPI3f/JuOFudz29J52sK4748ejN9f/6f9//1//7/r/+f5/0/9vp/8+j/z8W/b/+X/+v/2fZaP1/7v5PxS3+/j8AAABMI3f/p+MW+x8AAACmkbv/M3GL/Q8AAADTyN3/2bilyf7X/+v/9f+b7f+v1v+f/379/5j0//r/Jfp//f+W36//1/+zbrT+P3f/5+KWJvsfAAAAOsjd//m4xf4HAACAaeTu/0LcYv8DAADANHL3fzFuabL/9f/6f/3/Zvt/3/8/9H79/5j0//r/Jfp//f+W36//1/+zbrT+P3f/l+KWJvsfAAAAOsjd/+W4xf4HAACAaeTu/0rcYv8DAADANHL3fzVuabL/9f/6f/1/8/4//8PU/+v/90T/r/9fov/X/2/5/fp//T/rRuv/c/d/LW5psv8BAACgg9z9X49b7H8AAACYRu7+b8Qt9j8AAABMI3f/N+OWJvt/5v5/6V+m/z9L/6//3/n+v/5/z/T/+v8l+n/9/5bfr//X/7NutP4/d/+34pYm+x8AAAA6yN3/7bjF/gcAAIBp5O7/Ttxi/wMAAMA0cvd/N25psv9n7v+X6P/P0v/r/3f6f/3/nun/9f9L9P/6/y2/X/+v/2fdKfX/V+yO6P9z938vbmmy/wEAAKCD3P3fj1vsfwAAAJhG7v4fxC32PwAAAEwjd/8P45Z59v99bl74Sf3/iff/B38S6f/1/zv9v/5f/39A/6//X6L/1/9v+f36f/0/60b7/n/u/h/FLfPsfwAAAGgvd/+P4xb7HwAAAKaRu/8ncYv9DwAAANPI3f/TuKXJ/tf/+/6//r9V/3/5Tv9/9ufveWv9lP5/v/T/+v8l+n/9/5bfr//X/7NutP4/d//P4pYm+x8AAAA6yN3/87jF/gcAAIBp5O7/Rdxi/wMAAMA0cvf/Mm5psv/1//p//X+r/t/3/33//5LT/+v/l+j/9f9bfn/2//nnnf5f/8//Gq3/z93/q7ilyf4HAACADnL3/zpusf8BAABgGrn7fxO32P8AAAAwjdz9v41bmux//b/+X/+v/9f/6//3Sf+v/1+i/9f/b/n9vv+v/2fdaP1/7v5b4pYm+x8AAAA6yN3/u7jF/gcAAIBp5O7/fdxi/wMAAMA0cvffGrc02f/6f/3/lP3//+v/9f/6/1HcK/77baf/1/9fgP5f/7/l9+v/9f+sG63/z93/h7ilyf4HAACADnL3/zFusf8BAABgGrn7/xS32P8AAAAwjdz9f45bmux//b/+/+L7/yvq1z1s/+/7//p//f8w5v3+/5X6f/3/ne7/b7jx7A/r/7f5fv2//p91o/X/ufv/Erc02f8AAADQQe7+v8Yt9j8AAABMI3f/3+IW+x8AAACmkbv/73FLk/2v/9f/T/n9f/2//l//P4x5+3/f/9f/+/6//l//r/9nzWj9f+7+f8QtTfY/AAAAdJC7/59xi/0PAAAA08jd/6+4xf4HAACAaeTu/3fc0mT/6//1//p//b/+X/+/T/p//f8S/b/+f8vv1//r/1k3Wv+fu/+/AQAA//8o3i7/")
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x0, 0x0, &(0x7f0000000140))

1m54.610669858s ago: executing program 4 (id=497):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000e00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000002580)={r1, r2, 0x4, r0}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r1, r2, 0x4, r0}, 0x10)

1m54.522620684s ago: executing program 4 (id=498):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000001c0), 0x1, 0xbc8, &(0x7f0000002380)="$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")
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x2001091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
pivot_root(&(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00')

1m54.387636526s ago: executing program 4 (id=500):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_fuse_handle_req(r1, 0x0, 0x0, 0x0)
syz_fuse_handle_req(r1, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x5, 0xffff}]}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)

1m54.156070983s ago: executing program 4 (id=504):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x7, {{0xa, 0x4e23, 0x0, @mcast1={0xff, 0x7}, 0x4}}, {{0xa, 0xfffe, 0xda, @private2, 0x4}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0xa4fffffb, @mcast1}}}, 0x108)

1m54.044082064s ago: executing program 34 (id=504):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x7, {{0xa, 0x4e23, 0x0, @mcast1={0xff, 0x7}, 0x4}}, {{0xa, 0xfffe, 0xda, @private2, 0x4}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0xa4fffffb, @mcast1}}}, 0x108)

1m22.748680298s ago: executing program 0 (id=945):
mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x200c01, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00')
read$FUSE(r0, &(0x7f0000014340)={0x2020}, 0x2020)
read$FUSE(r0, &(0x7f0000012300)={0x2020}, 0x2020)

1m22.647181858s ago: executing program 0 (id=947):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xa8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000240)={0x1, 0xffffffff, 0x2c6338d2})
r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, <r3=>0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000003c0)={&(0x7f0000000200)=[r5], 0x1, r3, r4, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xb4b, 0x1, 0x2, 0x10, 0x12f, 0xe154, 0x1000, 0x0, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}})

1m22.533636704s ago: executing program 0 (id=948):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a010200000000000000000000000034000000140a01010000000000000000020000000900010073797a300000000008000340000000000c000640000000000000000020000000002d03000000000000000000020000000900010073797a3100000000200000000e0a01030000000000000000020000000900010073797a30"], 0xb0}}, 0x0)

1m22.444277819s ago: executing program 0 (id=950):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x516, &(0x7f0000000ac0)="$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")
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x1, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
unshare(0x20000400)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
pselect6(0x40, &(0x7f0000000100)={0x9, 0x8000000000000, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, 0x0, 0x0, 0x0, 0x0)

1m22.377958746s ago: executing program 0 (id=953):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r0, 0x5606, 0x80000000)

1m22.068386301s ago: executing program 0 (id=960):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20001f, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@noauto_da_alloc}, {@delalloc}]}, 0x3, 0x54f, &(0x7f0000000600)="$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")

1m21.988749682s ago: executing program 35 (id=960):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20001f, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@noauto_da_alloc}, {@delalloc}]}, 0x3, 0x54f, &(0x7f0000000600)="$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")

1m12.513812316s ago: executing program 1 (id=1081):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x4)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084)

1m12.513620687s ago: executing program 1 (id=1082):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x5, 0x1, 0x80000001, 0x0, 0x4, 0x5, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)

1m12.327266267s ago: executing program 1 (id=1088):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

1m12.32598796s ago: executing program 1 (id=1089):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}])

1m12.1024423s ago: executing program 1 (id=1095):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f80aad40c50f2712d82d0102030109021b0001db80f0bc"], 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r1}, 0x38)

1m11.62719507s ago: executing program 1 (id=1096):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f92024fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x200000000000000)

1m11.531486695s ago: executing program 36 (id=1096):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f92024fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x200000000000000)

23.512793775s ago: executing program 5 (id=1818):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x82802, 0x1ec541d9ca5bf0af)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}})
writev(r0, &(0x7f0000000580)=[{&(0x7f0000000040)=')', 0x1}], 0x1)

23.373344373s ago: executing program 5 (id=1820):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1000000017142d71"], 0x10}}, 0x80)

23.372977283s ago: executing program 5 (id=1822):
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000400)={0xe, 0xfffff773, 0x8, 0x4080})

23.294771584s ago: executing program 5 (id=1825):
socket(0x10, 0x3, 0x0)
close(0x3)
r0 = socket(0x10, 0x803, 0x0)
write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26)
r1 = socket$kcm(0x2d, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x8040)
mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$eJzs3E9vVFUbAPDn3k5LS/vS8ubNqxATmxjUaBwKJZiwAtdGTXThktpOSdPhj21NbMOi4F5dGOOCxPARTNzLxpWJC1wofgJiJIboBliMufOnjEyn1DLtgfL7JWfuOXNm7vM8c2HuucncBvDUGi8e8ogDEXE6ixhtPp9HxEC9Nxix2njd3dsXp4uWRa327h9ZZBFx5/bF6da+suZ2uDkYjIjrb2Tx30864y4ur8xPVauVheb48NLZC4cXl1demzs7daZypnLu2OTrxyaPT072sNabFz746rmf3nrx8tVPJ97+ct8PWZyMkeZcex29Mh7ja59Ju1JETPU6WCJ9zXra68xKCRMCAGBDedsa7v8xGn1xf/E2Gt//nDQ5AAAAoCdqfRE1AAAAYJfLXP8DAADALtf6HcCd2xenWy3tLxJ21q1TETHWqL91f3NjphSr9e1g9EfE3j+zaL+tNWu87ZGNF5G+/bFStNim+5A3snopIp5d7/hn9frH6ndxd9afR8RED+KPPzB+kuo/2YP4qesH4Ol07VTjRNZ5/svX1j+xzvmvtM65aytSn/9a67+7Heu/+/X3dVn/vbPJGAfvvXK921z7+u/9z36dKeIX20cq6l+4dSniYGm9+rO1+rMu9Z/eZIzh6ZtXus0V9Rf1ttpO11+7GnGovprrrL8l2+jvEx2enatWJhqP6+x/+fjG8duPf9GK+K1rgZ1QHP+9sbXjf2GTMcae+f1At7mH15//NpC9V+8NNJ/5eGppaeFIxED2ZufzRzfOpfWa1j6K+l9+YeP//+vVX3wnrDY/h+Jfz6XmthhffiDm8KGj32y9/u1V1D+zxeP/+SZjfP3dlQ+7zaWuHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAnQx4RI5Hl5bV+npfLEcMR8b/Ym1fPLy69Onv+o3MzxVzEWPTns3PVykREjDbGWTE+Uu/fHx99YDwZEfsj4ovRofq4PH2+OpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANYMR8RIZHk5IvKI+Gs0z8vl1FkBAAAAPTeWOgEAAABg27n+BwAAgN2v4/q/9I/R4E7mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwK60//lrN7KIWD0xVG+FgeZcf9LMgO2Wp04ASKYvdQJAMqW2fq1WqyVMBdhhrvGB7CHzg11n9vQ8FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeXy8duHYji4jVE0P1VhhozvUnzQzYbnnqBIBk+jaazHYuD2DnlVInACTjGh9oLPXv1Ro65we7vnPPdqYFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGNmpN6yvBwReb2f5+VyxH8iYiz6s9m5amUiIvZFxC+j/XuK8ZHUSQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBzi8sr81PVamVBR0enh52heCzS2HIn9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApLC6vzE9Vq5WFxdSZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKktLq/MT1WrlYVt7KSuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdP4OAAD//1rfDrQ=")
r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x20, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
write$binfmt_register(r2, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0)

23.22095666s ago: executing program 5 (id=1828):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x69, 0x10, 0xb0}, [@ldst={0x5, 0x3, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48)

22.942957211s ago: executing program 5 (id=1831):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./mnt\x00', 0x10, &(0x7f0000000200)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@shortname_lower}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@numtail}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@fat=@showexec}, {@uni_xlate}, {@utf8}, {@numtail}, {@utf8no}, {@shortname_win95}]}, 0x3, 0x27b, &(0x7f0000000640)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)

22.828948739s ago: executing program 37 (id=1831):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./mnt\x00', 0x10, &(0x7f0000000200)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@shortname_lower}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@numtail}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@fat=@showexec}, {@uni_xlate}, {@utf8}, {@numtail}, {@utf8no}, {@shortname_win95}]}, 0x3, 0x27b, &(0x7f0000000640)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)

8.203489371s ago: executing program 7 (id=2056):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000002640)={0x3, 0xa5b1}, 0x0)
dup(r0)

8.132650389s ago: executing program 7 (id=2058):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000005b00)={0x2020, 0x0, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
chown(&(0x7f0000000080)='./file1\x00', r1, r2)
capset(&(0x7f00000025c0)={0x20080522}, &(0x7f0000002600)={0x10001, 0x30001, 0x0, 0x0, 0x0, 0xfffffffc})
lchown(&(0x7f0000000140)='./file1\x00', 0x0, 0x0)

8.068183192s ago: executing program 7 (id=2059):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$eJzs3ctvW1kZAPDv3jycyWQmGZgFoAHKMFBQVTtxZ6LRbBhWI4RGQsySRSckThTFiaPYGZrQRbpkj0QlVrDiHwCJBVJX7JFYwI5NWSDxqEANEgsjX19nnIcbq03sNv79pCufe47t75xa9xzrc3NPACPrWkQcRMRkRHwcEbN5fZIf8X77aD3v8aO7y4eP7i4n0Wx+9M8ka2/VRddrWl7O33MqIr7/QcQPkxNB/xhR39vfWKpWKzt5VamxuV2q7+3fXN9cWqusVbbK5cWFxfl3b71TvqCR/vqo9LvffvHhHw6++eNWt2byuu5xXKT20CeO4rSMR8R3LyPYEIzl45l8mhc/1Yu4SGlEfCYi3syu/9kYyz7N445/TN+K/NIGAF5QzeZsNGe7zwGAqy7NcmBJWsxzATORpsViO4f3ekyn1Vq9cWO1tru10s6VzcVEurpercznucK5mEhW18crC1m5c16tlE+c34qI1yLip4WXsvPicq26MswvPgAwwl4+sf7/p9Be/wGAK67r1/zCMPsBAAyO/80HAKPH+g8Ao8f6DwCjx/oPAKPH+g8Ao8f6DwAj5Xsfftg6mof5/a9XPtnb3ah9cnOlUt8obu4uF5drO9vFtVptLbtnz+Z571et1bYX3o7dO6VGpd4o1ff2b2/Wdrcat7P7et+uTAxkVADAk7z25Qd/TiLi4L2XsiO67vd/7lr9xmX3DrhM6bA7AAzN2LA7AAzN6d2+gFEhHw90bdF7r6t66lThpPt9vX2a7xsKPEeuf/4Z8v/AC03+H0bX0+X/fZeHq0D+H0ZXs5nY8x8ARowcP5Cc0979+/98s+ukv9//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4EqayY4kLeZ7gc9EmhaLEa9ExFxMJKvr1cp8RLwaEX8qTBRa5wsRYd8gAHiRpX9L8v2/rs++NXOydbLw30L2GBE/+vlHP7uz1GjsLERMJv86qm/cz+vLw+g/AHCezjrdWcc7Hj+6u9w5Btmfv3+7vbloK+5hfrRbxmM8e5zKcg3T/07y87bW95WxC4h/cC8iPnfW+JMsNzKX73x6Mn4r9isDjZ8ei59mbe3H1r/FZy+gLzBqHrTmn/fPuv7SuJY9nn39T2Uz1LPrzH+Hp+a/9Gj+G+sx/13rN8bbv//OqcrmbLvtXsQXxiMOO2/eNf904ic94r/VZ/y/vPGlN3u1NX8RcT3OGn9yLFapsbldqu/t31zfXFqrrFW2yuXFhcX5d2+9Uy5lOepSJ1N92j/eu/Fqr/it8U/3iD91zvi/1uf4f/m/j3/wlSfE/8ZXz/78X39C/Naa+PU+4y9N/2aqV1sr/kqP8Z/3+d/oM/7Dv+6v9PlUAGAA6nv7G0vVamXnsgvp5YfICknEwQCG0y4UfvWTDwYV6xIL8Xx0Q+F5Kgx7ZgIu26cX/bB7AgAAAAAAAAAAAAAA9DKIPyca9hgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//2KH0wQ=")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000340)={0xfffffffffffffffc, 0x3, 0x102, 0x4, 0x10001, 0x6, 0x20000000ffe, 0x40, 0x2})

7.890322026s ago: executing program 7 (id=2062):
syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800702, &(0x7f0000000b80)={[{@nolazytime}, {@stripe={'stripe', 0x3d, 0xfff}}, {@norecovery}, {@sb={'sb', 0x3d, 0xc4}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@barrier}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x477, &(0x7f0000001440)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBi0YTDxhN9IDH2hZCWKihNRFCpBqDFxND1LPxaOJf4M2LUU8mXvVuSIhyAT3VzOwMbJfd0i7LLnQ/n2S278287ntv3ryZN/N2N4C+NZK9JBFbI+KPiBiqRZcnGKn9uXr57PS/l89OJ7G09PbfSZ7uyuWz02XS8v+2FJHRNCL9NCkyWW7+9JnjU9Xq7KkiPr5w4v3x+dNnnjt2Yuro7NHZk5MHDx7YP/HiC5PPr1D6jauuZ1avK7s/mtuz6/V3L7wxffjCe798n5V3a7G9vh6dMpJV/J+lXN3qL7OXJzudWY9tqwsnAz0sCGtSiYisuQbz/j8UlbjeeEPx2ic9LRxwW2XXphWuootLwDqWxCqTxeoSAneL8kKf3f+WS5eGHneESy/XboCyel/NlyvFPhmItEgz2HB/20kjEXF48b9vsiVu03MIAIB6n09/fSiebTb+S+OBunTbizmU4Yi4NyJ2RMR9EbEzIu6PyNM+GBEPtcxpQ9O1jVNDN45/0ottV24VsvHfS8XcVrkU+RYpKsOVIrYtr/9gcuRYdXZfsU9GY3BjFp9YIY8fX/39i1bb6sd/2ZLlX44Fi3JcHGh4QDcztTCVD0o74NLHEbsHmtU/uTYTkN3674qI3Wt76+1l4NjT3+1plejm9V9BB+aZlr6NeKrW/ovRUP9SsvL85Pg9UZ3dN14eFTf69bfzb7XK/5bq3wHZLty8/PhvTDKc1M/Xzq89j/N/ftbynqbd439D8k7eLuVZ5cOphYVTExEbkkN5fNn6yev/W8bL9NnxP7q3ef/fUQtsyl4ejojsIH4kIh6NiMeKsj8eEU9ExN4V6v/zK623rb39m59H25XVf6bp+e/a8d/Q/msPVI7/9EP79c/a/0AeGi3W5Oe/m1htAW9l3wEAAMDdIs0/A5+kY9fCaTo2VvsM/87YnFbn5heeOTL3wcmZ2mflh2MwLZ90DdU9D51IFot3rMUni2fF5fb9xXPjryqb8vjY9Fx1psd1h363pUX/z/xV6XXpgNuu2TzaZNN5hmVfZAPWgcb+ny6Pnnuzm4UBusr3taF/3aT/p90qB9B9rv/Qv5r1/3MNcXMBsD61df13QoB1wfgf+pf+D/1L/4e+dCvf6+/nQHbKvAOKUR0q2rH7uUd646byVyV7vlsE2g509vdFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeu3/AAAA//9qruki")
chdir(&(0x7f0000000400)='./file0\x00')
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000380)='./bus\x00', 0xe, &(0x7f0000000180)={[{@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nodiscard}]}, 0x3, 0x466, &(0x7f0000000800)="$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")
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000080)={0x8690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
futex(0x0, 0x6, 0xfffffffe, 0x0, 0x0, 0x1)

7.530030347s ago: executing program 7 (id=2063):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000180)=0x6121, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x7, @private0, 0x10001}, 0x1c)

6.746392391s ago: executing program 7 (id=2070):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000380)={0x6, 0x2000027, 0x20000000, 0x1}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0007"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x10)

6.645508358s ago: executing program 38 (id=2070):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000380)={0x6, 0x2000027, 0x20000000, 0x1}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0007"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x10)

1.349112477s ago: executing program 9 (id=2125):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f091ccf68a710300f23c58140000ffffffffffffffdf002100", "1fafb410", "ffffffffffffffff"}, 0x38)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)

1.261878112s ago: executing program 9 (id=2127):
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x2)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)

1.183070159s ago: executing program 9 (id=2131):
unshare(0x22020600)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB="00000000000000ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x64, &(0x7f0000000180)}, 0x10)

1.089447091s ago: executing program 9 (id=2133):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113400000000008510000002000000850000000a00000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)

1.076582568s ago: executing program 9 (id=2135):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x5c, r2, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x5c}, 0x1, 0x400000000000000, 0x0, 0x90}, 0x0)

997.407039ms ago: executing program 9 (id=2137):
syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_connect$printer(0x2, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x17, &(0x7f0000000100)={0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x38, 0x2, 0x2, 0x2, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x2, 0x1, 0x5}]}})
syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}}}}}}}}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)

364.372179ms ago: executing program 6 (id=2148):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x221, 0x0, 0x25dfdbfe, {{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x80, 0x2f}, {@in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x4d6, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x4e}, {0x9, 0x0, 0x0, 0x0, 0xffffffff7fffffff, 0xffffffffffffffed, 0x800}, {0x2, 0xfffffffffffffffd, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)

280.376427ms ago: executing program 6 (id=2150):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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")
r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000)
fallocate(r0, 0x10, 0x0, 0x8800000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3)

193.065901ms ago: executing program 8 (id=2153):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e4000000000000001a0100"], 0x100}, 0x0)

154.974639ms ago: executing program 8 (id=2154):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)

148.586107ms ago: executing program 6 (id=2155):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@deltfilter={0x30, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x3}, {0xfff2, 0xffff}, {0x9, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x44040)

101.620283ms ago: executing program 8 (id=2156):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x710, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x69b94bd8, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfbfffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x1, 0xd2d, 0xd9, 0x4}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400100001a000308feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107170e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe000000000000009201000000000010a39b00000000080001000100000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffff9030000000000007e00000005350000020001002000000000000000480003006465666c617465"], 0x140}}, 0x844)

101.335183ms ago: executing program 8 (id=2157):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x100007, 0x5, 0x3}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a00)={r0, &(0x7f0000000700), 0x0}, 0x20)

51.372749ms ago: executing program 6 (id=2158):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}}, 0x8000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

780.833µs ago: executing program 6 (id=2159):
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x1e)
connect$pptp(r0, &(0x7f0000002340)={0x18, 0x2, {0x3, @broadcast}}, 0x1e)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x1, @rand_addr=0x64010100}}, 0x1e)

466.528µs ago: executing program 8 (id=2160):
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000100)={0x0, 0x0, 0xb23c})

359.444µs ago: executing program 6 (id=2161):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="280000001e002102000000000000000007000000140019801000f3800c002880050041"], 0x28}}, 0x0)

0s ago: executing program 8 (id=2162):
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
epoll_create1(0x80000)

kernel console output (not intermixed with test programs):


[  136.121609][ T8815] team0: Port device team_slave_0 added
[  136.125555][ T8815] team0: Port device team_slave_1 added
[  136.139926][ T8815] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.143491][ T8815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  136.156711][ T8815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.166150][ T8815] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.168713][ T8815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  136.177066][ T8815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.204536][ T8815] hsr_slave_0: entered promiscuous mode
[  136.206888][ T8815] hsr_slave_1: entered promiscuous mode
[  136.209279][ T8815] debugfs: 'hsr0' already exists in 'hsr'
[  136.211178][ T8815] Cannot create hsr debugfs directory
[  136.275607][ T8830] loop6: detected capacity change from 0 to 131072
[  136.278753][ T8830] F2FS-fs (loop6): Invalid log sectorsize (67108873)
[  136.280790][ T8830] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  136.283931][ T8830] F2FS-fs (loop6): invalid crc value
[  136.313203][ T8830] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  136.317749][ T8830] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  136.319857][ T8830] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  136.367207][ T8815] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  136.374458][ T8815] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  136.378283][ T8815] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  136.381973][ T8815] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  136.401653][ T8815] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.403975][ T8815] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.406313][ T8815] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.408491][ T8815] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.436837][ T8815] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.446199][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.450482][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.457583][ T8815] 8021q: adding VLAN 0 to HW filter on device team0
[  136.464911][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.467021][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.474162][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.476592][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.713858][ T8815] 8021q: adding VLAN 0 to HW filter on device batadv0
[  136.846558][ T8815] veth0_vlan: entered promiscuous mode
[  136.855951][ T8815] veth1_vlan: entered promiscuous mode
[  136.917653][ T8815] veth0_macvtap: entered promiscuous mode
[  136.934996][ T8815] veth1_macvtap: entered promiscuous mode
[  136.946482][ T8815] batman_adv: batadv0: Interface activated: batadv_slave_0
[  136.955402][ T8815] batman_adv: batadv0: Interface activated: batadv_slave_1
[  136.961337][   T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.965245][   T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.967942][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.970549][   T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.031775][  T379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.038697][  T379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.062834][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.066850][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.363827][ T8896] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check.
[  137.663433][ T5060] usb 7-1: new low-speed USB device number 3 using dummy_hcd
[  137.725988][ T5600] Bluetooth: hci2: command tx timeout
[  137.780260][ T8914] loop5: detected capacity change from 0 to 4096
[  137.808227][ T8914] ntfs3(loop5): Primary boot: invalid bytes per index 31744(31).
[  137.820783][ T8914] ntfs3(loop5): try to read out of volume at offset 0x1ffe00
[  137.873928][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  137.876620][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  137.941255][ T5060] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  137.948556][ T5060] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  137.957425][ T5060] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4
[  137.961728][ T5060] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  137.966216][ T5060] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.973422][ T5060] hub 7-1:1.0: bad descriptor, ignoring hub
[  137.975319][ T5060] hub 7-1:1.0: probe with driver hub failed with error -5
[  137.978049][ T5060] cdc_wdm 7-1:1.0: skipping garbage
[  137.980169][ T5060] cdc_wdm 7-1:1.0: skipping garbage
[  137.986421][ T5060] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22
[  138.162063][ T5978] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  138.314175][  T782] usb 7-1: USB disconnect, device number 3
[  138.316119][ T5978] usb 6-1: Using ep0 maxpacket: 16
[  138.319096][ T5978] usb 6-1: config 8 has an invalid interface number: 223 but max is 0
[  138.321572][ T5978] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  138.374756][ T5978] usb 6-1: config 8 has no interface number 0
[  138.376789][ T5978] usb 6-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  138.380173][ T5978] usb 6-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  138.391299][ T5978] usb 6-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d
[  138.396150][ T5978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.398660][ T5978] usb 6-1: Product: syz
[  138.399975][ T5978] usb 6-1: Manufacturer: syz
[  138.401422][ T5978] usb 6-1: SerialNumber: syz
[  138.626044][ T5978] usb 6-1: USB disconnect, device number 14
[  138.852016][ T5060] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  139.021985][ T5060] usb 8-1: Using ep0 maxpacket: 8
[  139.026597][ T5060] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  139.029537][ T5060] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.033620][ T5060] usb 8-1: Product: syz
[  139.035140][ T5060] usb 8-1: Manufacturer: syz
[  139.036579][ T5060] usb 8-1: SerialNumber: syz
[  139.042259][ T5060] usb 8-1: config 0 descriptor??
[  139.045613][ T5060] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  139.248218][ T5060] gspca_sonixj: reg_w1 err -71
[  139.258501][ T5060] sonixj 8-1:0.0: probe with driver sonixj failed with error -71
[  139.264850][ T5060] usb 8-1: USB disconnect, device number 2
[  139.444802][ T8977] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  139.521212][ T8981] syzkaller0: entered promiscuous mode
[  139.523266][ T8981] syzkaller0: entered allmulticast mode
[  139.773842][ T5600] Bluetooth: hci2: command tx timeout
[  139.855808][ T9004] loop6: detected capacity change from 0 to 4096
[  139.864702][ T9004] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  139.879218][ T9004] ntfs3(loop6): Failed to load $Extend (-22).
[  139.881216][ T9004] ntfs3(loop6): Failed to initialize $Extend.
[  139.992041][ T5659] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  140.005510][ T9019] loop7: detected capacity change from 0 to 16
[  140.035189][ T9019] erofs (device loop7): mounted with root inode @ nid 36.
[  140.113131][ T5060] IPVS: starting estimator thread 0...
[  140.212112][ T9026] IPVS: using max 85 ests per chain, 204000 per kthread
[  140.252240][ T5659] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  140.255059][ T5659] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.444016][ T9032] loop7: detected capacity change from 0 to 32768
[  140.785262][ T5659] usb 6-1: config 0 descriptor??
[  140.823715][ T9038] binder: Binderfs stats mode cannot be changed during a remount
[  140.992587][ T5659] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  141.193826][ T5659] [drm:udl_init] *ERROR* Selecting channel failed
[  141.220202][ T5659] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 3
[  141.231804][ T5659] [drm] Initialized udl on minor 3
[  141.237136][ T5659] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  141.240796][ T5659] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  141.244381][ T5660] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  141.248455][  T782] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  141.259491][  T782] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  141.265136][ T5659] usb 6-1: USB disconnect, device number 15
[  141.270756][  T782] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  141.404484][ T5660] usb 7-1: Using ep0 maxpacket: 8
[  141.411679][ T5660] usb 7-1: unable to get BOS descriptor or descriptor too short
[  141.422827][ T5660] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  141.425747][ T5660] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.428113][ T5660] usb 7-1: Product: syz
[  141.429355][ T5660] usb 7-1: Manufacturer: syz
[  141.433995][ T5660] usb 7-1: SerialNumber: syz
[  141.440157][ T9063] loop7: detected capacity change from 0 to 512
[  141.454496][ T9063] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  141.473188][ T9063] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1178: bad orphan inode 15
[  141.477604][ T9063] loop7: lost filesystem error report for type 5 error -117
[  141.478971][ T9063] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.487116][ T9063] EXT4-fs error (device loop7): __ext4_new_inode:1073: comm syz.7.1178: reserved inode found cleared - inode=17
[  141.507312][ T8815] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.652576][ T5660] usb 7-1: selecting invalid altsetting 1
[  141.678763][ T9074] netlink: 'syz.7.1182': attribute type 9 has an invalid length.
[  141.726885][ T5660] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[  141.742214][ T5660] usb 7-1: USB disconnect, device number 4
[  141.749786][ T6783] udevd[6783]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  141.865937][ T5600] Bluetooth: hci2: command tx timeout
[  141.940278][ T9092] netlink: 1072 bytes leftover after parsing attributes in process `syz.7.1191'.
[  142.089499][ T5660] usb 6-1: new full-speed USB device number 16 using dummy_hcd
[  142.721392][ T9106] loop7: detected capacity change from 0 to 131072
[  142.727470][ T9106] F2FS-fs (loop7): invalid crc value
[  142.730852][ T5660] usb 6-1: unable to get BOS descriptor or descriptor too short
[  142.736106][ T5660] usb 6-1: not running at top speed; connect to a high speed hub
[  142.770395][ T9106] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  142.774902][ T9106] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  142.780359][ T5660] usb 6-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40
[  142.784673][ T5660] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.787451][ T5660] usb 6-1: Product: syz
[  142.788782][ T5660] usb 6-1: Manufacturer: syz
[  142.790254][ T5660] usb 6-1: SerialNumber: syz
[  143.012456][ T5660] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  143.015001][ T5660] usb 6-1: MIDIStreaming interface descriptor not found
[  143.069151][ T5660] usb 6-1: USB disconnect, device number 16
[  143.101538][ T8752] udevd[8752]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  143.293309][ T9125] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1203'.
[  143.356589][ T9129] loop7: detected capacity change from 0 to 512
[  143.376165][ T9129] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  143.400544][ T9129] EXT4-fs (loop7): 1 truncate cleaned up
[  143.412936][ T9129] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.423419][ T9132] netlink: 'syz.6.1206': attribute type 12 has an invalid length.
[  143.426652][ T9132] netlink: 'syz.6.1206': attribute type 29 has an invalid length.
[  143.433654][ T9132] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1206'.
[  143.437016][ T9132] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1206'.
[  143.479527][ T8815] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.512342][ T9134] loop6: detected capacity change from 0 to 256
[  143.655618][ T9144] loop7: detected capacity change from 0 to 8
[  143.666667][ T9144] unable to read inode lookup table
[  143.706091][ T9146] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1213'.
[  143.832440][ T5660] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  143.935411][ T5600] Bluetooth: hci2: command tx timeout
[  143.981758][ T5660] usb 6-1: Using ep0 maxpacket: 16
[  143.987442][ T5660] usb 6-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  143.990262][ T5660] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.993183][ T5660] usb 6-1: Product: syz
[  143.994682][ T5660] usb 6-1: Manufacturer: syz
[  143.996645][ T5660] usb 6-1: SerialNumber: syz
[  144.007794][ T5660] usb 6-1: config 0 descriptor??
[  144.013135][ T5660] gspca_main: spca508-2.14.0 probing 041e:4018
[  144.031975][  T782] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  144.181722][  T782] usb 8-1: Using ep0 maxpacket: 8
[  144.186796][  T782] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  144.192938][  T782] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  144.196683][  T782] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.206392][  T782] usb 8-1: config 0 descriptor??
[  144.223651][ T5660] gspca_spca508: reg_read err -32
[  144.226490][ T5660] gspca_spca508: reg_read err -32
[  144.229258][ T5660] gspca_spca508: reg_read err -32
[  144.233243][ T5660] gspca_spca508: reg_read err -32
[  144.341930][   T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  144.422686][  T782] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  144.436492][ T5660] gspca_spca508: reg write: error -71
[  144.441834][ T5660] spca508 6-1:0.0: probe with driver spca508 failed with error -71
[  144.447093][ T5660] usb 6-1: USB disconnect, device number 17
[  144.502967][   T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  144.506207][   T10] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  144.510226][   T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  144.513199][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.518479][   T10] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -22
[  144.734223][ T5660] usb 7-1: USB disconnect, device number 5
[  144.935228][   T10] usb 8-1: USB disconnect, device number 3
[  145.443371][ T9174] loop5: detected capacity change from 0 to 65536
[  145.477175][ T9174] XFS (loop5): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  145.508146][ T9174] XFS (loop5): Ending clean mount
[  145.583501][ T9200] loop7: detected capacity change from 0 to 4096
[  145.619416][ T9204] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  145.663022][ T9200] NILFS (loop7): nilfs_palloc_freev (ino=3): entry number 1882 already freed
[  145.666944][ T9200] NILFS (loop7): nilfs_sufile_do_free: segment 9 is already clean
[  145.684621][ T7176] XFS (loop5): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  145.690958][ T9207] loop6: detected capacity change from 0 to 512
[  145.724655][ T9207] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  145.727167][ T9207] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  145.729706][ T9207] System zones: 0-1, 15-15, 18-18, 34-34
[  145.758914][ T9207] EXT4-fs (loop6): orphan cleanup on readonly fs
[  145.761048][ T9207] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0
[  145.776586][ T9207] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  145.792979][ T9207] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  145.796181][ T9207] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1231: bg 0: block 40: padding at end of block bitmap is not set
[  145.801455][ T9207] loop6: lost filesystem error report for type 5 error -117
[  145.813176][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  145.818843][    C1] EXT4-fs (loop6): initial error at time 1785564008: ext4_validate_block_bitmap:441
[  145.822745][    C1] EXT4-fs (loop6): last error at time 1785564008: ext4_validate_block_bitmap:441
[  145.842963][ T9207] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  145.846380][ T9207] loop6: lost filesystem error report for type 5 error -117
[  145.846638][ T9207] EXT4-fs (loop6): 1 truncate cleaned up
[  145.851452][ T9207] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  145.869657][ T9207] EXT4-fs error (device loop6): ext4_encrypted_get_link:46: inode #16: comm syz.6.1231: bad symlink.
[  145.906528][ T8422] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.006812][ T9225] loop6: detected capacity change from 0 to 4096
[  146.023342][ T9225] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.138106][ T8422] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.191789][ T5659] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  146.297201][ T9244] loop6: detected capacity change from 0 to 4096
[  146.298571][ T9248] usb usb5: usbfs: process 9248 (syz.7.1247) did not claim interface 0 before use
[  146.301094][ T9244] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512).
[  146.308468][ T9244] ntfs3(loop6): ino=0, mi_enum_attr
[  146.310482][ T9244] ntfs3(loop6): Failed to load $MFT.
[  146.347369][ T5659] usb 6-1: Using ep0 maxpacket: 16
[  146.354995][ T5659] usb 6-1: config index 0 descriptor too short (expected 51443, got 18)
[  146.359361][ T5659] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  146.368008][ T5659] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.370669][ T5659] usb 6-1: Product: syz
[  146.380227][ T5659] usb 6-1: Manufacturer: syz
[  146.382068][ T5659] usb 6-1: SerialNumber: syz
[  146.382230][ T9253] loop6: detected capacity change from 0 to 512
[  146.387316][ T9253] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  146.395990][ T5659] r8152-cfgselector 6-1: Unknown version 0x0000
[  146.398039][ T5659] r8152-cfgselector 6-1: config 0 descriptor??
[  146.408024][ T9253] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.414565][ T9253] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.433940][ T9253] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  146.438858][ T9253] EXT4-fs (loop6): Remounting filesystem read-only
[  146.453672][ T8422] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.457162][ T5789] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  146.463560][ T5789] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  146.516252][ T9261] loop6: detected capacity change from 0 to 8192
[  146.542915][ T6783]  loop6: p1 p2 p3
[  146.544276][ T6783] loop6: partition table partially beyond EOD, truncated
[  146.546980][ T6783] loop6: p1 start 51379968 is beyond EOD, truncated
[  146.549998][ T6783] loop6: p3 size 100663552 extends beyond EOD, truncated
[  146.557275][ T9261]  loop6: p1 p2 p3
[  146.558512][ T9261] loop6: partition table partially beyond EOD, truncated
[  146.563593][ T9261] loop6: p1 start 51379968 is beyond EOD, truncated
[  146.566695][ T9261] loop6: p3 size 100663552 extends beyond EOD, truncated
[  146.623289][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  146.642298][ T5598] udevd[5598]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  146.657425][   T33] audit: type=1326 audit(1785564008.981:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9267 comm="syz.6.1256" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af759e019 code=0x7ffc0000
[  146.674871][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  146.678099][   T33] audit: type=1326 audit(1785564008.991:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9267 comm="syz.6.1256" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af759e019 code=0x7ffc0000
[  146.681847][ T6783] udevd[6783]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  146.698095][   T33] audit: type=1326 audit(1785564008.991:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9267 comm="syz.6.1256" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af759e019 code=0x7ffc0000
[  146.710458][   T33] audit: type=1326 audit(1785564008.991:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9267 comm="syz.6.1256" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af759e019 code=0x7ffc0000
[  146.717757][   T33] audit: type=1326 audit(1785564008.991:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9267 comm="syz.6.1256" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9af759e019 code=0x7ffc0000
[  146.734046][   T33] audit: type=1326 audit(1785564008.991:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9267 comm="syz.6.1256" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af759e019 code=0x7ffc0000
[  146.751299][   T33] audit: type=1326 audit(1785564008.991:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9267 comm="syz.6.1256" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af759e019 code=0x7ffc0000
[  146.768933][ T9276] vim2m vim2m.0: vidioc_s_fmt queue busy
[  146.815086][   T10] r8152-cfgselector 6-1: USB disconnect, device number 18
[  147.162262][ T5659] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  147.314825][ T5659] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  147.317758][ T5659] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.320787][ T5659] usb 7-1: Product: syz
[  147.322505][ T5659] usb 7-1: Manufacturer: syz
[  147.324380][ T5659] usb 7-1: SerialNumber: syz
[  147.327679][ T5659] usb 7-1: config 0 descriptor??
[  147.331589][ T5659] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  147.467489][ T9311] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1275'.
[  147.470288][ T9311] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1275'.
[  147.713947][ T5600] Bluetooth: hci0: unexpected event for opcode 0x0c24
[  147.912914][ T9331] xt_CT: No such helper "snmp_trap"
[  147.985526][ T9302] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  147.987474][ T9302] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  147.998582][ T9302] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  148.000535][ T9302] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  148.006117][ T9302] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  148.008025][ T9302] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  148.137923][ T5659] gspca_sunplus: reg_w_riv err -71
[  148.146803][ T5659] sunplus 7-1:0.0: probe with driver sunplus failed with error -71
[  148.152978][ T5659] usb 7-1: USB disconnect, device number 6
[  148.210232][ T9350] loop7: detected capacity change from 0 to 512
[  148.215062][ T9350] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  148.221521][   T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  148.227916][ T9350] EXT4-fs (loop7): 1 truncate cleaned up
[  148.230493][ T9350] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.255389][ T8815] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.314814][ T9356] input: syz0 as /devices/virtual/input/input9
[  148.396731][   T10] usb 6-1: Using ep0 maxpacket: 16
[  148.409986][   T10] usb 6-1: config index 0 descriptor too short (expected 37359, got 202)
[  148.413843][   T10] usb 6-1: config 33 has too many interfaces: 95, using maximum allowed: 32
[  148.416988][   T10] usb 6-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config
[  148.424327][   T10] usb 6-1: config 33 has 1 interface, different from the descriptor's value: 95
[  148.435250][   T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  148.438177][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.440551][   T10] usb 6-1: Product: syz
[  148.445105][   T10] usb 6-1: Manufacturer: syz
[  148.446570][   T10] usb 6-1: SerialNumber: syz
[  148.653806][   T10] usb 6-1: 0:2 : does not exist
[  148.658766][   T10] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  148.694853][   T10] usb 6-1: USB disconnect, device number 19
[  148.728506][ T6783] udevd[6783]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  149.340116][ T9401] dlm: Using TCP for communications
[  149.453914][ T9408] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1319'.
[  149.519010][ T5659] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  149.635031][ T9423] loop6: detected capacity change from 0 to 4096
[  149.645059][ T9423] ntfs3(loop6): ino=b, mi_enum_attr
[  149.646747][ T9423] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  149.649127][ T9423] ntfs3(loop6): Failed to load $Extend (-22).
[  149.651544][ T9423] ntfs3(loop6): Failed to initialize $Extend.
[  149.671446][ T5659] usb 6-1: Using ep0 maxpacket: 32
[  149.682625][ T5659] usb 6-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30
[  149.685829][ T5659] usb 6-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223
[  149.689747][ T5659] usb 6-1: config 0 interface 0 has no altsetting 0
[  149.698792][ T5659] usb 6-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00
[  149.709980][ T5659] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.718762][ T5659] usb 6-1: config 0 descriptor??
[  149.871384][   T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  150.004383][ T9438] program syz.6.1333 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  150.032093][   T10] usb 8-1: Using ep0 maxpacket: 32
[  150.035938][   T10] usb 8-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=8c.92
[  150.039513][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.068030][   T10] gspca_main: nw80x-2.14.0 probing 055f:d001
[  150.073599][ T9440] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1334'.
[  150.112761][ T9442] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1335'.
[  150.129920][ T5659] wacom 0003:056A:00C5.0006: ignoring exceeding usage max
[  150.134047][ T5659] wacom 0003:056A:00C5.0006: unknown main item tag 0x6
[  150.136532][ T5659] wacom 0003:056A:00C5.0006: unknown main item tag 0x0
[  150.138728][ T5659] wacom 0003:056A:00C5.0006: unknown main item tag 0x0
[  150.140775][ T5659] wacom 0003:056A:00C5.0006: unknown main item tag 0x0
[  150.152261][ T5659] wacom 0003:056A:00C5.0006: hidraw0: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.5-1/input0
[  150.305003][ T9452] loop6: detected capacity change from 0 to 128
[  150.325475][ T9452] syz.6.1340: attempt to access beyond end of device
[  150.325475][ T9452] loop6: rw=8388611, sector=138, nr_sectors = 6 limit=128
[  150.331104][ T9452] syz.6.1340: attempt to access beyond end of device
[  150.331104][ T9452] loop6: rw=8390659, sector=144, nr_sectors = 42 limit=128
[  150.336556][ T5060] usb 6-1: USB disconnect, device number 20
[  150.670825][   T10] gspca_nw80x: reg_w err -71
[  150.677414][   T10] nw80x 8-1:16.0: probe with driver nw80x failed with error -71
[  150.682620][ T9468] netlink: 'syz.6.1348': attribute type 4 has an invalid length.
[  150.686114][   T10] usb 8-1: USB disconnect, device number 4
[  150.701107][ T9468] netlink: 'syz.6.1348': attribute type 4 has an invalid length.
[  150.898934][ T9478] loop6: detected capacity change from 0 to 256
[  150.909147][ T9478] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  151.124071][ T9498] input: syz1 as /devices/virtual/input/input13
[  151.540711][ T9525] loop6: detected capacity change from 0 to 4096
[  151.551505][ T9525] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  151.578556][ T9525] ntfs3(loop6): ino=3, ntfs_set_state failed, -22.
[  151.627965][ T3406] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22.
[  151.630722][ T8422] ntfs3(loop6): ino=3, ntfs_set_state failed, -22.
[  151.636557][ T8422] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  151.639526][ T8422] ntfs3(loop6): ino=3, ntfs_set_state failed, -22.
[  151.647509][   T32] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22.
[  151.696089][ T9536] loop5: detected capacity change from 0 to 16
[  151.711370][ T9536] erofs (device loop5): mounted with root inode @ nid 36.
[  151.739568][ T9540] vxcan3: entered promiscuous mode
[  151.812528][ T9544] loop5: detected capacity change from 0 to 128
[  151.815898][ T9544] EXT4-fs: Ignoring removed orlov option
[  151.828512][ T9544] EXT4-fs: Ignoring removed mblk_io_submit option
[  151.835286][ T9544] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  151.840250][ T9544] ext4 filesystem being mounted at /219/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  151.951660][ T9550] overlayfs: failed to resolve './bus': -2
[  152.052693][ T7176] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  152.335668][   T10] IPVS: starting estimator thread 0...
[  152.421523][ T9566] IPVS: using max 50 ests per chain, 120000 per kthread
[  153.430719][ T9603] loop6: detected capacity change from 0 to 8192
[  153.535790][ T9603]  loop6: p1 p2 p3 p4 < >
[  153.537252][ T9603] loop6: partition table partially beyond EOD, truncated
[  153.651937][ T9603] loop6: p1 start 100663296 is beyond EOD, truncated
[  153.659922][ T9603] loop6: p2 size 590592 extends beyond EOD, truncated
[  153.670765][ T9603] loop6: p3 start 4294967295 is beyond EOD, truncated
[  153.673116][ T9603] loop6: p4 start 117440516 is beyond EOD, truncated
[  154.232018][ T9633] evm: overlay not supported
[  154.322850][ T9644] loop5: detected capacity change from 0 to 128
[  154.328171][ T9644] ufs: You didn't specify the type of your ufs filesystem
[  154.328171][ T9644] 
[  154.328171][ T9644] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  154.328171][ T9644] 
[  154.328171][ T9644] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  154.365960][ T9644] ufs: ufstype=old is supported read-only
[  154.373951][ T9644] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  154.418966][ T9652] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1425'.
[  154.465677][ T9656] loop6: detected capacity change from 0 to 512
[  154.470507][ T9656] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  154.494478][ T9656] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1427: bad orphan inode 131083
[  154.497627][ T9656] loop6: lost filesystem error report for type 5 error -117
[  154.501050][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  154.505395][    C1] EXT4-fs (loop6): initial error at time 1785564016: ext4_orphan_get:1417
[  154.508042][    C1] EXT4-fs (loop6): last error at time 1785564016: ext4_orphan_get:1417
[  154.520253][ T9656] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.543987][ T9656] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #12: block 7: comm syz.6.1427: bad entry in directory: directory entry overrun - offset=16, inode=1560281102, rec_len=1024, size=56 fake=0
[  154.599130][ T8422] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.662252][ T9673] netlink: 'syz.7.1435': attribute type 12 has an invalid length.
[  154.664901][ T9673] netlink: 'syz.7.1435': attribute type 29 has an invalid length.
[  154.667495][ T9673] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1435'.
[  154.670356][ T9673] netlink: 'syz.7.1435': attribute type 1 has an invalid length.
[  154.678130][ T9673] netlink: 47 bytes leftover after parsing attributes in process `syz.7.1435'.
[  154.821278][ T9679] nbd6: detected capacity change from 0 to 63
[  154.826831][ T9683] block nbd6: NBD_DISCONNECT
[  154.842055][ T9683] block nbd6: Disconnected due to user request.
[  154.847763][ T9683] block nbd6: shutting down sockets
[  154.852575][ T5659] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  154.862370][    C0] blk_print_req_error: 11 callbacks suppressed
[  154.862385][    C0] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  154.868578][    C0] Buffer I/O error on dev nbd6, logical block 0, async page read
[  154.874339][    C0] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  154.878018][    C0] Buffer I/O error on dev nbd6, logical block 1, async page read
[  154.882040][    C0] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  154.885864][    C0] Buffer I/O error on dev nbd6, logical block 2, async page read
[  154.889083][    C0] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  154.892969][    C0] Buffer I/O error on dev nbd6, logical block 3, async page read
[  154.900536][ T6783] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  154.906205][ T6783] Buffer I/O error on dev nbd6, logical block 0, async page read
[  154.909383][ T6783] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  154.913194][ T6783] Buffer I/O error on dev nbd6, logical block 1, async page read
[  154.916264][ T6783] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  154.920284][ T6783] Buffer I/O error on dev nbd6, logical block 2, async page read
[  154.923522][ T6783] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  154.927197][ T6783] Buffer I/O error on dev nbd6, logical block 3, async page read
[  154.930251][ T6783] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  154.951548][ T6783] Buffer I/O error on dev nbd6, logical block 0, async page read
[  154.954720][ T6783] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  154.958391][ T6783] Buffer I/O error on dev nbd6, logical block 1, async page read
[  154.969419][ T6783] ldm_validate_partition_table(): Disk read failed.
[  154.972491][ T6783] Dev nbd6: unable to read RDB block 0
[  154.980763][ T6783]  nbd6: unable to read partition table
[  154.990319][ T6783] ldm_validate_partition_table(): Disk read failed.
[  154.993089][ T6783] Dev nbd6: unable to read RDB block 0
[  154.995405][ T6783]  nbd6: unable to read partition table
[  155.004025][ T5659] usb 6-1: Using ep0 maxpacket: 32
[  155.008334][ T5659] usb 6-1: unable to get BOS descriptor or descriptor too short
[  155.013770][ T5659] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  155.017045][ T5659] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  155.029244][ T5659] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  155.032963][ T5659] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.035465][ T5659] usb 6-1: Product: syz
[  155.036845][ T5659] usb 6-1: Manufacturer: syz
[  155.038433][ T5659] usb 6-1: SerialNumber: syz
[  155.082808][ T9687] loop7: detected capacity change from 0 to 32768
[  155.093148][ T9687] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  155.113036][ T9687] XFS (loop7): Ending clean mount
[  155.172630][ T8815] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  155.254584][ T5659] usb 6-1: unit 4 not found!
[  155.256118][ T5659] usb 6-1: unit 0 not found!
[  155.355956][ T9703] loop7: detected capacity change from 0 to 64
[  155.664344][ T5659] usb 6-1: USB disconnect, device number 21
[  156.091139][ T5660] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  156.241629][ T5660] usb 8-1: Using ep0 maxpacket: 16
[  156.244775][ T5660] usb 8-1: config 0 has an invalid interface number: 68 but max is 0
[  156.247267][ T5660] usb 8-1: config 0 has no interface number 0
[  156.249193][ T5660] usb 8-1: config 0 interface 68 altsetting 0 endpoint 0x81 has invalid maxpacket 254, setting to 64
[  156.254069][ T9738] loop6: detected capacity change from 0 to 128
[  156.258984][ T5660] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4
[  156.262923][ T5660] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.272232][ T5660] usb 8-1: Product: syz
[  156.273819][ T5660] usb 8-1: Manufacturer: syz
[  156.292753][ T5660] usb 8-1: SerialNumber: syz
[  156.301087][ T5660] usb 8-1: config 0 descriptor??
[  156.324801][ T5660] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  156.519946][   T13] usb 8-1: Failed to submit usb control message: -71
[  156.522315][   T13] usb 8-1: unable to send the bmi data to the device: -71
[  156.525078][   T13] usb 8-1: unable to get target info from device
[  156.527530][   T13] usb 8-1: could not get target info (-71)
[  156.530005][   T13] usb 8-1: could not probe fw (-71)
[  156.531345][   T10] usb 8-1: USB disconnect, device number 5
[  156.549291][ T9749] loop6: detected capacity change from 0 to 4096
[  156.554961][ T9749] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512).
[  156.612355][ T9749] ntfs3(loop6): Failed to initialize $Extend/$ObjId.
[  156.749556][ T9761] loop6: detected capacity change from 0 to 512
[  156.773610][ T9761] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  156.778874][ T9761] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002]
[  156.786311][ T9761] EXT4-fs (loop6): orphan cleanup on readonly fs
[  156.789742][ T9761] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1471: bg 0: block 361: padding at end of block bitmap is not set
[  156.798032][ T9761] loop6: lost filesystem error report for type 5 error -117
[  156.798355][ T9761] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  156.801197][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  156.801206][    C1] EXT4-fs (loop6): initial error at time 1785564019: ext4_validate_block_bitmap:441
[  156.801215][    C1] EXT4-fs (loop6): last error at time 1785564019: ext4_validate_block_bitmap:441
[  156.837201][ T9761] loop6: lost filesystem error report for type 5 error -117
[  156.837479][ T9761] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #11: comm syz.6.1471: attempt to clear invalid blocks 33619980 len 1
[  156.851556][ T9761] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  156.852448][ T9761] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1471: invalid indirect mapped block 1811939328 (level 0)
[  156.861923][ T9761] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  156.869824][ T9761] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1471: invalid indirect mapped block 2185560079 (level 1)
[  156.881814][ T9761] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  156.882194][ T9761] EXT4-fs (loop6): 1 truncate cleaned up
[  156.889257][ T9761] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  156.993088][ T8422] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  157.366999][ T9768] loop5: detected capacity change from 0 to 131072
[  157.372007][ T9768] F2FS-fs (loop5): invalid crc value
[  157.429975][ T9768] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  157.437537][ T9768] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  157.480920][   T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  157.657471][   T10] usb 8-1: config 0 has too many interfaces: 129, using maximum allowed: 32
[  157.670952][   T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 129
[  157.684199][   T10] usb 8-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  157.688506][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.692826][   T10] usb 8-1: Product: syz
[  157.694590][   T10] usb 8-1: Manufacturer: syz
[  157.696512][   T10] usb 8-1: SerialNumber: syz
[  157.715039][   T10] usb 8-1: config 0 descriptor??
[  157.787438][ T9784] xt_SECMARK: invalid mode: 2
[  158.059244][   T10] mos7840 8-1:0.0: required endpoints missing
[  158.073085][   T10] usb 8-1: USB disconnect, device number 6
[  158.225848][ T9792] cgroup: Need name or subsystem set
[  159.304728][ T9818] comedi comedi0: dt2815: I/O port conflict (0x3,2)
[  159.351797][   T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  159.394148][ T9824] loop5: detected capacity change from 0 to 512
[  159.439913][ T9824] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.448909][ T9824] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.461446][ T9824] EXT4-fs: Ignoring sb option on remount
[  159.463507][ T9824] EXT4-fs: Remounting fs w/o journal so ignoring data_err option
[  159.466730][ T9824] EXT4-fs: Cannot change journaled quota options when quota turned on
[  159.522040][   T10] usb 7-1: Using ep0 maxpacket: 8
[  159.543383][   T10] usb 7-1: unable to get BOS descriptor or descriptor too short
[  159.554872][   T10] usb 7-1: config 4 has an invalid interface number: 133 but max is 0
[  159.558117][   T10] usb 7-1: config 4 has no interface number 0
[  159.569756][ T7176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.574004][   T10] usb 7-1: New USB device found, idVendor=12d1, idProduct=8b88, bcdDevice=f3.59
[  159.577751][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.581054][   T10] usb 7-1: Product: syz
[  159.590994][   T10] usb 7-1: Manufacturer: syz
[  159.592476][   T10] usb 7-1: SerialNumber: syz
[  159.819233][   T10] huawei_cdc_ncm 7-1:4.133: CDC Union missing and no IAD found
[  159.824348][   T10] huawei_cdc_ncm 7-1:4.133: bind() failure
[  159.853607][   T10] usb 7-1: USB disconnect, device number 7
[  160.562265][ T9851] loop7: detected capacity change from 0 to 128
[  160.571651][ T9851] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  160.861680][ T9863] loop6: detected capacity change from 0 to 32768
[  161.008803][ T9863] JBD2: Ignoring recovery information on journal
[  161.023102][ T9863] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  161.048958][ T9863] OCFS2: ERROR (device loop6): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #20 has bad signature 
[  161.055044][ T9863] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  161.058688][ T9863] OCFS2: File system is now read-only.
[  161.060394][ T9863] (syz.6.1515,9863,0):ocfs2_search_chain:1888 ERROR: status = -30
[  161.062482][ T9869] loop5: detected capacity change from 0 to 8
[  161.064493][ T9863] (syz.6.1515,9863,0):ocfs2_search_chain:2011 ERROR: status = -30
[  161.069595][ T9863] (syz.6.1515,9863,0):ocfs2_claim_suballoc_bits:2098 ERROR: status = -30
[  161.073151][ T9863] (syz.6.1515,9863,0):ocfs2_claim_suballoc_bits:2151 ERROR: status = -30
[  161.075687][ T9863] (syz.6.1515,9863,0):ocfs2_claim_metadata:2176 ERROR: status = -30
[  161.078020][ T9863] (syz.6.1515,9863,0):ocfs2_claim_metadata:2189 ERROR: status = -30
[  161.080422][ T9863] (syz.6.1515,9863,0):ocfs2_create_refcount_tree:596 ERROR: status = -30
[  161.083223][ T9863] (syz.6.1515,9863,0):ocfs2_reflink_remap_blocks:4649 ERROR: status = -30
[  161.086040][ T9863] (syz.6.1515,9863,0):ocfs2_remap_file_range:2754 ERROR: status = -30
[  161.169352][ T8422] ocfs2: Unmounting device (7,6) on (node local)
[  161.303935][ T9876] loop6: detected capacity change from 0 to 64
[  161.339829][ T9877] loop5: detected capacity change from 0 to 16
[  161.722733][ T9893] loop7: detected capacity change from 0 to 2048
[  161.735308][ T9893] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  161.748506][ T9893] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  161.751208][ T9893] UDF-fs: Scanning with blocksize 512 failed
[  161.755898][ T9893] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  161.919252][ T9903] syz.7.1530 uses obsolete (PF_INET,SOCK_PACKET)
[  162.100713][ T5706] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  162.250798][ T5706] usb 7-1: Using ep0 maxpacket: 32
[  162.254186][ T5706] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.257390][ T5706] usb 7-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00
[  162.260196][ T5706] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.269093][ T5706] usb 7-1: config 0 descriptor??
[  162.337555][ T9920] loop5: detected capacity change from 0 to 32768
[  162.341970][ T9920] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1537 (9920)
[  162.377646][ T9920] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  162.390611][ T9920] BTRFS info (device loop5): using blake2b checksum algorithm
[  162.468605][ T9920] BTRFS info (device loop5 state EC): setting nodatasum
[  162.478252][ T9920] BTRFS info (device loop5 state EC): setting nodatacow
[  162.486862][ T9920] BTRFS info (device loop5 state EC): force clearing of disk cache
[  162.492211][ T9920] BTRFS info (device loop5 state EC): enabling auto defrag
[  162.495518][ T9920] BTRFS info (device loop5 state EC): ignoring data csums
[  162.547589][ T9943] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  162.587183][ T7176] BTRFS info (device loop5 state EC): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  162.703571][ T5706] wacom 0003:056A:00BB.0007: unbalanced delimiter at end of report description
[  162.706635][ T5706] wacom 0003:056A:00BB.0007: parse failed
[  162.713706][ T5706] wacom 0003:056A:00BB.0007: probe with driver wacom failed with error -22
[  162.875294][ T9949] loop7: detected capacity change from 0 to 4096
[  162.908182][ T5060] usb 7-1: USB disconnect, device number 8
[  164.410631][   T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  164.660515][   T10] usb 8-1: Using ep0 maxpacket: 16
[  164.664154][   T10] usb 8-1: config 8 has an invalid interface number: 206 but max is 0
[  164.667365][   T10] usb 8-1: config 8 has no interface number 0
[  164.669713][   T10] usb 8-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87
[  164.673636][   T10] usb 8-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024
[  164.677135][   T10] usb 8-1: config 8 interface 206 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0
[  164.680702][   T10] usb 8-1: config 8 interface 206 altsetting 1 bulk endpoint 0xC has invalid maxpacket 0
[  164.684044][   T10] usb 8-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  164.688097][   T10] usb 8-1: config 8 interface 206 has no altsetting 0
[  164.692326][   T10] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[  164.695212][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.697883][   T10] usb 8-1: Product: syz
[  164.699365][   T10] usb 8-1: Manufacturer: syz
[  164.701267][   T10] usb 8-1: SerialNumber: syz
[  164.923327][   T10] garmin_gps 8-1:8.206: Garmin GPS usb/tty converter detected
[  164.934214][   T10] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90
[  164.948183][   T10] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90
[  164.958667][   T10] usb 8-1: USB disconnect, device number 7
[  164.963650][   T10] garmin_gps 8-1:8.206: device disconnected
[  165.240058][ T9994] loop6: detected capacity change from 0 to 256
[  165.403946][ T9992] loop5: detected capacity change from 0 to 131072
[  165.470160][ T9992] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  165.480142][ T9992] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  166.059801][T10025] sg_write: data in/out 306688/136 bytes for SCSI command 0x0-- guessing data in;
[  166.059801][T10025]    program syz.5.1575 not setting count and/or reply_len properly
[  166.132074][T10029] loop5: detected capacity change from 0 to 128
[  166.222122][T10029] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  166.226462][T10029] ext4 filesystem being mounted at /286/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  166.427140][ T7176] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  166.469695][T10037] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1579'.
[  166.667509][T10053] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1585'.
[  166.679911][T10053] netlink: 67 bytes leftover after parsing attributes in process `syz.5.1585'.
[  167.021063][T10072] loop6: detected capacity change from 0 to 128
[  167.033535][T10072] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  167.037646][T10072] hpfs: filesystem error: improperly stopped
[  167.040110][T10072] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  167.042824][T10072] hpfs: You really don't want any checks? You are crazy...
[  167.045707][T10072] hpfs: Code page index out of array
[  167.047620][T10072] hpfs: code page support is disabled
[  167.050770][T10072] hpfs: hpfs_map_4sectors(): unaligned read
[  167.053430][T10072] hpfs: hpfs_map_4sectors(): unaligned read
[  167.055519][T10072] hpfs: filesystem error: unable to find root dir
[  167.063163][T10072] hpfs: hpfs_map_4sectors(): unaligned read
[  167.076191][T10070] loop7: detected capacity change from 0 to 4096
[  167.132760][T10070] NILFS error (device loop7): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  167.134625][T10075] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  167.152933][T10070] NILFS (loop7): mounting fs with errors
[  167.176945][T10070] NILFS (loop7): DAT doesn't have a block to manage vblocknr = 159744
[  167.179620][T10070] NILFS error (device loop7): nilfs_bmap_truncate: broken bmap (inode number=15)
[  167.186587][T10070] NILFS (loop7): error -5 truncating bmap (ino=15)
[  167.493925][T10090] dummy0: entered promiscuous mode
[  167.498360][T10090] gretap0: entered promiscuous mode
[  167.513712][T10090] debugfs: 'hsr1' already exists in 'hsr'
[  167.516312][T10090] Cannot create hsr debugfs directory
[  167.518600][T10090] hsr1: entered allmulticast mode
[  167.525855][T10090] dummy0: entered allmulticast mode
[  167.528900][T10090] gretap0: entered allmulticast mode
[  167.700436][T10099] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  168.050954][T10100] loop6: detected capacity change from 0 to 131072
[  168.056134][T10100] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0)
[  168.058631][T10100] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  168.062017][T10100] F2FS-fs (loop6): invalid crc value
[  168.103135][T10100] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  168.106752][T10100] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  168.109115][T10100] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  168.954527][T10115] loop7: detected capacity change from 0 to 32768
[  168.999494][T10115] XFS (loop7): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent.
[  169.079884][ T8815] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  169.101605][T10117] loop5: detected capacity change from 0 to 32768
[  169.149370][T10117] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  169.331114][ T7176] ocfs2: Unmounting device (7,5) on (node local)
[  169.540339][  T833] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  169.578830][T10131] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1615'.
[  169.581995][T10131] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1615'.
[  169.585013][T10131] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1615'.
[  169.592761][T10131] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1615'.
[  169.597779][T10131] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1615'.
[  169.710564][  T833] usb 8-1: config 220 has an invalid interface number: 142 but max is 0
[  169.713247][  T833] usb 8-1: config 220 has no interface number 0
[  169.715190][  T833] usb 8-1: config 220 interface 142 has no altsetting 0
[  169.726449][T10141] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  169.729013][  T833] usb 8-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=ab.0e
[  169.731874][  T833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.740668][  T833] usb 8-1: Product: syz
[  169.742055][  T833] usb 8-1: Manufacturer: syz
[  169.743644][  T833] usb 8-1: SerialNumber: syz
[  169.805478][T10147] bond1: entered promiscuous mode
[  169.807344][T10147] bond1: entered allmulticast mode
[  169.966111][  T833] ttusb_dec_send_command: command bulk message failed: error -22
[  169.969480][  T833] ttusb-dec 8-1:220.142: probe with driver ttusb-dec failed with error -22
[  169.976493][  T833] usb 8-1: USB disconnect, device number 8
[  170.047194][T10158] netlink: 'syz.5.1626': attribute type 21 has an invalid length.
[  170.059609][   T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  170.072388][   T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  170.079120][   T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  170.083275][   T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  170.125471][T10162] netdevsim netdevsim5: Direct firmware load for .. @ failed with error -2
[  170.128420][T10162] netdevsim netdevsim5: Falling back to sysfs fallback for: .. @
[  170.579480][T10168] loop7: detected capacity change from 0 to 128
[  170.589991][T10168] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  170.595539][T10168] ext4 filesystem being mounted at /186/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  170.611644][ T8815] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  170.639072][T10172] netlink: 'syz.7.1632': attribute type 19 has an invalid length.
[  170.645275][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1632'.
[  170.667611][   T13] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  170.671700][T10172] netlink: 'syz.7.1632': attribute type 19 has an invalid length.
[  170.675013][   T13] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  170.678815][   T13] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  170.682816][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1632'.
[  170.688525][   T13] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  170.874426][T10174] loop7: detected capacity change from 0 to 32768
[  170.911465][ T6783] Dev loop7: RDB in block 0 has bad checksum
[  170.918040][T10174] Dev loop7: RDB in block 0 has bad checksum
[  171.276972][   T33] kauditd_printk_skb: 10 callbacks suppressed
[  171.276981][   T33] audit: type=1326 audit(1785564033.603:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10195 comm="syz.5.1640" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c8ab9e019 code=0x0
[  171.363349][T10197] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  171.640151][ T5060] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[  171.801583][ T5060] usb 7-1: not running at top speed; connect to a high speed hub
[  171.808251][ T5060] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=fe.8c
[  171.811827][ T5060] usb 7-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3
[  171.815262][ T5060] usb 7-1: Product: syz
[  171.817083][ T5060] usb 7-1: Manufacturer: syz
[  171.818951][ T5060] usb 7-1: SerialNumber: syz
[  172.044822][ T5060] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state.
[  172.054362][ T5060] usb 7-1: setting power ON
[  172.056706][ T5060] dvb-usb: bulk message failed: -22 (2/0)
[  172.058857][T10200] loop7: detected capacity change from 0 to 512
[  172.074949][T10200] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.078993][T10200] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.081780][ T5060] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  172.134881][ T5060] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19)
[  172.138952][ T5060] dvb_usb_cxusb 7-1:105.0: probe with driver dvb_usb_cxusb failed with error -22
[  172.148045][ T5060] usb 7-1: USB disconnect, device number 9
[  172.321889][T10206] xt_connbytes: Forcing CT accounting to be enabled
[  172.324327][T10206] set match dimension is over the limit!
[  172.604226][T10210] loop5: detected capacity change from 0 to 512
[  172.627323][T10210] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.640166][T10210] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.715620][ T7176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.782336][T10216] loop5: detected capacity change from 0 to 4096
[  172.823391][T10216] ntfs3(loop5): ino=1e, "file1" fiemap(xattr) is not supported
[  173.182567][ T8815] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.254716][T10220] loop5: detected capacity change from 0 to 256
[  173.307388][T10222] xt_socket: unknown flags 0xe4
[  173.336425][T10220] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  173.384689][T10220] exFAT-fs (loop5): start_clu is invalid cluster(0xffffffff)
[  173.691496][T10244] loop5: detected capacity change from 0 to 1764
[  173.729775][T10250] Unsupported ieee802154 address type: 0
[  173.799622][T10254] loop7: detected capacity change from 0 to 256
[  173.802789][T10254] exfat: Deprecated parameter 'namecase'
[  173.808511][T10254] exfat: Deprecated parameter 'namecase'
[  173.814443][T10254] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 1538)
[  174.120477][ T5706] usb 8-1: new full-speed USB device number 9 using dummy_hcd
[  174.283200][ T5706] usb 8-1: config index 0 descriptor too short (expected 164, got 36)
[  174.286705][ T5706] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  174.291604][ T5706] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.295587][ T5706] usb 8-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  174.299321][ T5706] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.305845][ T5706] usb 8-1: config 0 descriptor??
[  174.716407][T10273] ip6gretap0: entered promiscuous mode
[  174.719760][ T5706] logitech 0003:046D:C29C.0008: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.7-1/input0
[  174.729211][T10275] loop6: detected capacity change from 0 to 2048
[  174.763992][T10275] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #2: comm syz.6.1673: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5)
[  174.774459][T10275] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  174.774806][T10275] EXT4-fs (loop6): get root inode failed
[  174.780557][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  174.780570][    C0] EXT4-fs (loop6): initial error at time 1785564037: ext4_ext_check_inode:521: inode 2
[  174.780590][    C0] EXT4-fs (loop6): last error at time 1785564037: ext4_ext_check_inode:521: inode 2
[  174.792643][T10275] EXT4-fs (loop6): mount failed
[  174.813618][T10281] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  175.018595][T10283] loop6: detected capacity change from 0 to 32768
[  175.046912][T10283] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  175.061250][T10283] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  175.068166][T10283] XFS (loop6): Starting recovery (logdev: internal)
[  175.075998][T10283] XFS (loop6): Ending recovery (logdev: internal)
[  175.081960][T10283] XFS (loop6): Quotacheck needed: Please wait.
[  175.102467][T10283] XFS (loop6): Quotacheck: Done.
[  175.113218][ T5706] logitech 0003:046D:C29C.0008: no inputs found
[  175.121870][ T8422] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  175.125311][ T5706] usb 8-1: USB disconnect, device number 9
[  175.170594][ T5659] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  175.331274][ T5659] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  175.342596][ T5659] usb 6-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00
[  175.345471][ T5659] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  175.348148][ T5659] usb 6-1: Product: syz
[  175.349491][ T5659] usb 6-1: Manufacturer: syz
[  175.358779][T10307] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring
[  175.364455][ T5659] usb_debug 6-1:1.0: debug converter detected
[  175.371151][ T5659] usb 6-1: debug converter now attached to ttyUSB0
[  175.570510][ T5659] usb 6-1: USB disconnect, device number 22
[  175.576718][ T5659] debug ttyUSB0: debug converter now disconnected from ttyUSB0
[  175.579556][ T5659] usb_debug 6-1:1.0: device disconnected
[  176.554591][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1691'.
[  176.560913][T10332] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1691'.
[  176.614373][T10340] netlink: 'syz.7.1696': attribute type 4 has an invalid length.
[  176.657332][T10342] loop7: detected capacity change from 0 to 128
[  176.971922][T10348] loop6: detected capacity change from 0 to 256
[  176.998773][ T5659] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  176.999859][T10348] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d)
[  177.865310][T10363] loop6: detected capacity change from 0 to 128
[  177.930137][ T5659] usb 8-1: Using ep0 maxpacket: 16
[  177.935518][ T5659] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.947905][ T5659] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.956491][ T5659] usb 8-1: config 0 interface 0 has no altsetting 0
[  177.960555][ T5659] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  177.964417][ T5659] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.980386][ T5659] usb 8-1: config 0 descriptor??
[  178.048854][T10375] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  178.086889][T10377] loop6: detected capacity change from 0 to 2048
[  178.095415][T10378] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  178.149906][  T782] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  178.309914][  T782] usb 6-1: Using ep0 maxpacket: 32
[  178.313180][  T782] usb 6-1: config 247 has an invalid interface number: 221 but max is 0
[  178.315916][  T782] usb 6-1: config 247 has no interface number 0
[  178.318451][  T782] usb 6-1: config 247 interface 221 has no altsetting 0
[  178.323181][  T782] usb 6-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice=70.55
[  178.326112][  T782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.329269][  T782] usb 6-1: Product: syz
[  178.331126][  T782] usb 6-1: Manufacturer: syz
[  178.333001][  T782] usb 6-1: SerialNumber: syz
[  178.343058][  T782] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:247.221/input/input14
[  178.404297][T10344] loop7: detected capacity change from 0 to 512
[  178.427623][ T5659] hid (null): unknown global tag 0xe
[  178.429839][ T5659] hid (null): invalid report_size 24934
[  178.432262][ T5659] hid (null): report_id 13918 is invalid
[  178.434097][ T5659] hid (null): unknown global tag 0xe
[  178.436022][ T5659] hid (null): report_id 0 is invalid
[  178.437931][ T5659] hid (null): unknown global tag 0x8b
[  178.439602][ T5659] hid (null): report_id 7281 is invalid
[  178.441737][ T5659] hid (null): unknown global tag 0xd
[  178.485733][T10386] loop6: detected capacity change from 0 to 40427
[  178.494647][T10386] F2FS-fs (loop6): invalid crc value
[  178.544225][ T5027] bcm5974 6-1:247.221: could not read from device
[  178.549170][ T5027] bcm5974 6-1:247.221: could not read from device
[  178.551217][T10386] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  178.557620][T10386] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  178.562439][ T5027] bcm5974 6-1:247.221: could not read from device
[  178.567576][  T782] usb 6-1: USB disconnect, device number 23
[  178.632456][ T5659] usb 8-1: USB disconnect, device number 10
[  178.744372][T10392] netdevsim netdevsim6: Firmware load for '../file0/file0' refused, path contains '..' component
[  179.331051][T10416] loop5: detected capacity change from 0 to 16
[  179.345165][T10416] erofs (device loop5): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  179.348877][T10416] erofs (device loop5): mounted with root inode @ nid 36.
[  179.363970][T10418] loop7: detected capacity change from 0 to 4096
[  179.376860][T10418] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.384221][T10416] syz.5.1728: attempt to access beyond end of device
[  179.384221][T10416] loop5: rw=0, sector=301990144, nr_sectors = 257 limit=16
[  179.402203][   T33] audit: type=1800 audit(1785564041.713:51): pid=10418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1729" name="file1" dev="loop7" ino=15 res=0 errno=0
[  179.410796][ T8815] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.412810][T10416] syz.5.1728: attempt to access beyond end of device
[  179.412810][T10416] loop5: rw=0, sector=301990400, nr_sectors = 2 limit=16
[  179.432342][T10416] erofs (device loop5): read error -5 @ 0 of nid 36
[  179.481677][T10425] loop5: detected capacity change from 0 to 512
[  179.486327][T10425] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  179.494996][T10425] EXT4-fs error (device loop5): __ext4_fill_super:5563: inode #2: comm syz.5.1731: iget: special inode unallocated
[  179.499020][T10425] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  179.499252][T10425] EXT4-fs (loop5): get root inode failed
[  179.502193][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  179.502203][    C0] EXT4-fs (loop5): initial error at time 1785564041: __ext4_fill_super:5563: inode 2
[  179.502214][    C0] EXT4-fs (loop5): last error at time 1785564041: __ext4_fill_super:5563: inode 2
[  179.514112][T10425] EXT4-fs (loop5): mount failed
[  179.866157][T10456] sctp: [Deprecated]: syz.6.1747 (pid 10456) Use of int in maxseg socket option.
[  179.866157][T10456] Use struct sctp_assoc_value instead
[  179.995877][T10473] loop5: detected capacity change from 0 to 512
[  180.012956][T10473] EXT4-fs (loop5): Test dummy encryption mode enabled
[  180.029066][T10473] EXT4-fs (loop5): 1 truncate cleaned up
[  180.040538][T10473] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.087791][ T7176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.294922][   T33] audit: type=1326 audit(1785564042.623:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10480 comm="syz.5.1757" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c8ab9e019 code=0x0
[  180.591951][T10495] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1764'.
[  180.620034][T10497] loop5: detected capacity change from 0 to 4096
[  180.648154][T10497] ntfs3(loop5): ino=4, mi_enum_attr
[  180.655855][T10497] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  180.660543][T10497] ntfs3(loop5): Failed to load $AttrDef (-22)
[  180.663514][T10495] bond1: option resend_igmp: invalid value (511)
[  180.672109][T10495] bond1: option resend_igmp: allowed values 0 - 255
[  180.683120][T10495] bond1 (unregistering): Released all slaves
[  180.881256][T10500] loop5: detected capacity change from 0 to 32768
[  180.920082][T10505] raw_sendmsg: syz.7.1768 forgot to set AF_INET. Fix it!
[  181.449416][T10542] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1785'.
[  181.455696][T10542] netlink: 'syz.6.1785': attribute type 10 has an invalid length.
[  181.456118][   T33] audit: type=1326 audit(1785564043.783:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.5.1784" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8ab9e019 code=0x7ffc0000
[  181.459756][T10542] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1785'.
[  181.465889][   T33] audit: type=1326 audit(1785564043.783:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.5.1784" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8ab9e019 code=0x7ffc0000
[  181.472023][T10542] geneve2: entered promiscuous mode
[  181.475628][   T33] audit: type=1326 audit(1785564043.783:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.5.1784" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8ab9e019 code=0x7ffc0000
[  181.476545][T10542] geneve2: entered allmulticast mode
[  181.484457][   T33] audit: type=1326 audit(1785564043.783:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.5.1784" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8ab9e019 code=0x7ffc0000
[  181.506365][   T33] audit: type=1326 audit(1785564043.793:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.5.1784" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c8ab9e019 code=0x7ffc0000
[  181.522203][   T33] audit: type=1326 audit(1785564043.793:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.5.1784" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8ab9e019 code=0x7ffc0000
[  181.533012][   T33] audit: type=1326 audit(1785564043.793:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.5.1784" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8ab9e019 code=0x7ffc0000
[  181.542821][   T33] audit: type=1326 audit(1785564043.793:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.5.1784" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8ab9e019 code=0x7ffc0000
[  181.595129][T10550] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.609399][T10550] EXT4-fs warning (device loop6): ext4_rmdir:3185: inode #11: comm syz.6.1789: empty directory 'file1' has too many links (111)
[  181.628314][ T8422] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.690491][T10559] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  181.705033][T10559] EXT4-fs (loop6): 1 truncate cleaned up
[  181.707578][T10559] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.193843][T10568] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.206793][T10568] ext4 filesystem being mounted at /228/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  182.244861][ T8815] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.344157][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1796'.
[  182.347156][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1796'.
[  182.581587][ T8422] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.863596][T10601] EXT4-fs (loop5): 1 orphan inode deleted
[  182.866206][T10601] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.870984][T10601] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.111586][   T27] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u10:0: Failed to release dquot type 1
[  183.121428][ T7176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.207021][T10611] syz.7.1810 (10611): /proc/10611/oom_adj is deprecated, please use /proc/10611/oom_score_adj instead.
[  183.305680][T10619] netlink: 74 bytes leftover after parsing attributes in process `syz.5.1814'.
[  183.357943][T10623] set_capacity_and_notify: 5 callbacks suppressed
[  183.357953][T10623] loop5: detected capacity change from 0 to 128
[  183.374655][T10623] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  183.384710][T10623] ext4 filesystem being mounted at /386/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  183.403238][T10615] loop7: detected capacity change from 0 to 32768
[  183.412488][T10615] XFS (loop7): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  183.428641][ T7176] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  183.476444][T10615] XFS (loop7): Starting recovery (logdev: internal)
[  183.491727][T10615] XFS (loop7): Ending recovery (logdev: internal)
[  183.514832][ T8815] XFS (loop7): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  183.518347][T10636] loop5: detected capacity change from 0 to 7
[  183.529451][ T6783] Dev loop5: unable to read RDB block 7
[  183.542500][ T6783]  loop5: unable to read partition table
[  183.544828][ T6783] loop5: partition table beyond EOD, truncated
[  183.554419][T10636] Dev loop5: unable to read RDB block 7
[  183.565905][T10636]  loop5: unable to read partition table
[  183.570131][T10636] loop5: partition table beyond EOD, truncated
[  183.572967][    C1] blk_print_req_error: 138 callbacks suppressed
[  183.572975][    C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2
[  183.578139][    C1] buffer_io_error: 138 callbacks suppressed
[  183.578146][    C1] Buffer I/O error on dev loop5, logical block 0, lost async page write
[  183.583133][T10636] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X	%`ր{֐ȵ4FLQk݊) failed (rc=-5)
[  183.756455][T10651] loop5: detected capacity change from 0 to 4096
[  183.771222][T10651] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  183.796790][T10651] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.1825: Failed to acquire dquot type 1
[  183.801239][T10651] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix.
[  183.829726][ T7176] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109
[  183.834430][ T7176] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109
[  183.948201][  T833] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  184.086268][T10670] loop6: detected capacity change from 0 to 256
[  184.099424][  T833] usb 8-1: Using ep0 maxpacket: 8
[  184.104968][  T833] usb 8-1: config 0 has an invalid interface number: 131 but max is 0
[  184.109899][  T833] usb 8-1: config 0 has no interface number 0
[  184.117878][  T833] usb 8-1: config 0 interface 131 has no altsetting 0
[  184.122076][  T833] usb 8-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= a.10
[  184.125438][  T833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.129144][  T833] usb 8-1: Product: syz
[  184.137244][  T833] usb 8-1: Manufacturer: syz
[  184.138711][  T833] usb 8-1: SerialNumber: syz
[  184.142788][  T833] usb 8-1: config 0 descriptor??
[  184.287621][ T5597] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  184.293339][ T5597] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  184.296812][ T5597] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  184.300585][ T5597] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  184.303637][ T5597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  184.312399][ T5600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  184.316552][ T5600] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  184.319655][ T5600] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  184.323023][ T5600] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  184.326143][ T5600] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  184.362914][  T833] ims_pcu 8-1:0.131: Missing CDC union descriptor
[  184.370819][  T833] ims_pcu 8-1:0.131: probe with driver ims_pcu failed with error -22
[  184.377341][  T833] usb 8-1: USB disconnect, device number 11
[  184.602568][T10674] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.605571][T10674] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.608438][T10674] bridge_slave_0: entered allmulticast mode
[  184.612479][T10674] bridge_slave_0: entered promiscuous mode
[  184.617920][T10674] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.625988][T10674] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.628952][T10674] bridge_slave_1: entered allmulticast mode
[  184.633192][T10674] bridge_slave_1: entered promiscuous mode
[  184.655002][T10674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  184.662201][T10674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  184.677459][T10674] team0: Port device team_slave_0 added
[  184.680821][T10674] team0: Port device team_slave_1 added
[  184.693582][T10674] batman_adv: batadv0: Adding interface: batadv_slave_0
[  184.696175][T10674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  184.704898][T10674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  184.708993][T10674] batman_adv: batadv0: Adding interface: batadv_slave_1
[  184.711357][T10674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  184.720044][T10674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  184.747551][T10674] hsr_slave_0: entered promiscuous mode
[  184.750042][T10674] hsr_slave_1: entered promiscuous mode
[  184.752214][T10674] debugfs: 'hsr0' already exists in 'hsr'
[  184.754005][T10674] Cannot create hsr debugfs directory
[  184.846763][T10674] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  184.855302][T10674] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  184.862100][T10674] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  184.866874][T10674] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  184.898896][T10674] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.901355][T10674] bridge0: port 2(bridge_slave_1) entered forwarding state
[  184.903811][T10674] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.906162][T10674] bridge0: port 1(bridge_slave_0) entered forwarding state
[  184.920584][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.923867][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.976972][T10674] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.996233][T10674] 8021q: adding VLAN 0 to HW filter on device team0
[  185.005183][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.007510][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[  185.020987][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.023542][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[  185.273798][T10674] 8021q: adding VLAN 0 to HW filter on device batadv0
[  185.442970][T10674] veth0_vlan: entered promiscuous mode
[  185.448921][T10674] veth1_vlan: entered promiscuous mode
[  185.466290][T10674] veth0_macvtap: entered promiscuous mode
[  185.472014][T10674] veth1_macvtap: entered promiscuous mode
[  185.484436][T10674] batman_adv: batadv0: Interface activated: batadv_slave_0
[  185.493941][T10674] batman_adv: batadv0: Interface activated: batadv_slave_1
[  185.507457][   T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.511025][   T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.513948][   T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.517003][   T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.574822][  T379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.579572][  T379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.596826][  T379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.600690][  T379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.644521][   T33] kauditd_printk_skb: 15 callbacks suppressed
[  185.644536][   T33] audit: type=1326 audit(1785564047.974:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.8.1832" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3cef9e019 code=0x7ffc0000
[  185.660992][   T33] audit: type=1326 audit(1785564047.974:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.8.1832" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3cef9e019 code=0x7ffc0000
[  185.672292][   T33] audit: type=1326 audit(1785564048.004:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.8.1832" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3cef9e019 code=0x7ffc0000
[  185.683696][   T33] audit: type=1326 audit(1785564048.004:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.8.1832" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3cef9e019 code=0x7ffc0000
[  185.692928][   T33] audit: type=1326 audit(1785564048.004:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.8.1832" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3cef9e019 code=0x7ffc0000
[  185.701542][   T33] audit: type=1326 audit(1785564048.004:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.8.1832" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3cef9e019 code=0x7ffc0000
[  185.710710][   T33] audit: type=1326 audit(1785564048.004:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.8.1832" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3cef9e019 code=0x7ffc0000
[  185.720631][   T33] audit: type=1326 audit(1785564048.004:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.8.1832" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3cef9e019 code=0x7ffc0000
[  185.727438][   T33] audit: type=1326 audit(1785564048.004:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.8.1832" exe="/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc3cef9e019 code=0x7ffc0000
[  185.734620][ T5060] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  185.738187][   T33] audit: type=1326 audit(1785564048.004:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.8.1832" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3cef9e019 code=0x7ffc0000
[  185.879777][ T5060] usb 7-1: Using ep0 maxpacket: 32
[  185.882748][ T5060] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=8c.92
[  185.885701][ T5060] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.902968][ T5060] gspca_main: nw80x-2.14.0 probing 055f:d001
[  186.069372][ T5706] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  186.100700][ T5060] gspca_nw80x: reg_w err -71
[  186.102274][ T5060] nw80x 7-1:16.0: probe with driver nw80x failed with error -71
[  186.106370][ T5060] usb 7-1: USB disconnect, device number 10
[  186.229728][ T5706] usb 9-1: Using ep0 maxpacket: 16
[  186.234197][ T5706] usb 9-1: unable to get BOS descriptor or descriptor too short
[  186.238382][ T5706] usb 9-1: config 3 has an invalid interface number: 105 but max is 1
[  186.242014][ T5706] usb 9-1: config 3 has an invalid interface number: 164 but max is 1
[  186.245432][ T5706] usb 9-1: config 3 has no interface number 0
[  186.247927][ T5706] usb 9-1: config 3 has no interface number 1
[  186.251248][ T5706] usb 9-1: config 3 interface 105 has no altsetting 0
[  186.255244][ T5706] usb 9-1: config 3 interface 164 has no altsetting 0
[  186.265687][ T5706] usb 9-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=4c.06
[  186.274247][ T5706] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.277537][ T5706] usb 9-1: Product: syz
[  186.279495][ T5706] usb 9-1: Manufacturer: syz
[  186.283413][ T5706] usb 9-1: SerialNumber: syz
[  186.401683][T10758] loop7: detected capacity change from 0 to 1024
[  186.406147][T10758] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  186.419486][ T5597] Bluetooth: hci0: command tx timeout
[  186.506362][ T5706] uvcvideo 9-1:3.164: Found multiple Units with ID 5
[  186.511791][ T5706] uvcvideo 9-1:3.164: Found multiple Units with ID 1
[  186.519881][ T5706] uvcvideo 9-1:3.164: Found UVC 0.03 device syz (04c8:0720)
[  186.522899][ T5706] uvcvideo 9-1:3.164: Entity type for entity Output 32773 was not initialized!
[  186.525923][T10762] syzkaller0: entered promiscuous mode
[  186.528340][ T5706] uvcvideo 9-1:3.164: Entity type for entity Input 65535 was not initialized!
[  186.528683][T10762] syzkaller0: entered allmulticast mode
[  186.532659][ T5706] uvcvideo 9-1:3.164: Failed to create links for entity 32773
[  186.536962][ T5706] uvcvideo 9-1:3.164: Failed to register entities (-22).
[  186.547064][ T5706] usb 9-1: USB disconnect, device number 2
[  186.676504][T10766] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1855'.
[  186.815833][T10772] input: syz0 as /devices/virtual/input/input15
[  186.949961][ T5060] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  187.099629][ T5060] usb 7-1: Using ep0 maxpacket: 16
[  187.106841][ T5060] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  187.113919][ T5060] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  187.122978][ T5060] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  187.126581][ T5060] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.130635][ T5060] usb 7-1: Product: syz
[  187.132360][ T5060] usb 7-1: Manufacturer: syz
[  187.134290][ T5060] usb 7-1: SerialNumber: syz
[  187.138477][ T5060] usb 7-1: config 0 descriptor??
[  187.143987][ T5060] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  187.147784][ T5060] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[  187.151083][   T10] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  187.319337][  T833] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  187.322642][   T10] usb 8-1: Using ep0 maxpacket: 32
[  187.327714][   T10] usb 8-1: config 9 has an invalid interface number: 178 but max is 0
[  187.331560][   T10] usb 8-1: config 9 has no interface number 0
[  187.333946][   T10] usb 8-1: config 9 interface 178 has no altsetting 0
[  187.337381][   T10] usb 8-1: language id specifier not provided by device, defaulting to English
[  187.346168][   T10] usb 8-1: New USB device found, idVendor=06a3, idProduct=f921, bcdDevice=89.69
[  187.350103][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.353608][   T10] usb 8-1: Product: syz
[  187.355411][   T10] usb 8-1: Manufacturer: 磌⨶럯셳検봗☹簑ޱ뢨좛陊㹠ࠅ취䴮ᢍਏ鬱﶐攍钃텈퉨௨혼螰攎
[  187.361051][   T10] usb 8-1: SerialNumber: syz
[  187.499293][  T833] usb 9-1: Using ep0 maxpacket: 32
[  187.503540][  T833] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  187.507300][  T833] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  187.510608][  T833] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  187.517361][  T833] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9
[  187.520556][  T833] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.523001][  T833] usb 9-1: Product: syz
[  187.524329][  T833] usb 9-1: Manufacturer: syz
[  187.525860][  T833] usb 9-1: SerialNumber: syz
[  187.529793][  T833] usb 9-1: config 0 descriptor??
[  187.536226][T10782] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  187.542171][  T833] input: KB Gear Tablet as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input16
[  187.597021][   T10] usb 8-1: USB disconnect, device number 12
[  187.751439][ T5660] usb 9-1: USB disconnect, device number 3
[  187.763931][ T5060] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  187.766350][ T5060] em28xx 7-1:0.0: Config register raw data: 0xfffffffb
[  188.131845][T10784] loop7: detected capacity change from 0 to 8
[  188.489689][ T5597] Bluetooth: hci0: command tx timeout
[  188.629190][   T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  188.777449][ T5060] em28xx 7-1:0.0: Unknown AC97 audio processor detected!
[  188.780518][   T10] usb 9-1: Using ep0 maxpacket: 16
[  188.782780][ T5060] em28xx 7-1:0.0: couldn't setup AC97 register 2
[  188.786062][ T5060] em28xx 7-1:0.0: couldn't setup AC97 register 4
[  188.792014][   T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  188.796149][   T10] usb 9-1: New USB device found, idVendor=0830, idProduct=0002, bcdDevice= 0.00
[  188.796314][ T5060] em28xx 7-1:0.0: couldn't setup AC97 register 6
[  188.801806][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.805055][ T5060] em28xx 7-1:0.0: couldn't setup AC97 register 54
[  188.808252][ T5060] em28xx 7-1:0.0: couldn't setup AC97 register 56
[  188.811181][   T10] usb 9-1: config 0 descriptor??
[  188.818965][ T5060] usb 7-1: USB disconnect, device number 11
[  188.824414][   T10] usb 9-1: active config #0 != 1 ??
[  189.023853][ T5706] usb 9-1: USB disconnect, device number 4
[  189.298969][T10797] loop7: detected capacity change from 0 to 32768
[  189.311632][T10799] loop6: detected capacity change from 0 to 256
[  189.314665][T10799] exfat: Deprecated parameter 'utf8'
[  189.315667][T10797] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1871 (10797)
[  189.316557][T10799] exfat: Deprecated parameter 'namecase'
[  189.326198][T10799] exfat: Deprecated parameter 'namecase'
[  189.328534][T10799] exfat: Deprecated parameter 'utf8'
[  189.335313][T10799] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  189.341084][T10799] exFAT-fs (loop6): failed to test first cluster bit of root dir(5)
[  189.366265][T10797] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  189.372473][T10797] BTRFS info (device loop7): using sha256 checksum algorithm
[  189.461803][T10797] BTRFS info (device loop7): enabling ssd optimizations
[  189.464492][T10797] BTRFS info (device loop7): turning on async discard
[  189.481543][T10797] BTRFS info (device loop7): enabling free space tree
[  189.540347][ T8815] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  189.698922][T10825] loop6: detected capacity change from 0 to 256
[  189.722137][T10825] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  189.849850][T10829] loop6: detected capacity change from 0 to 16
[  189.870363][T10829] erofs (device loop6): mounted with root inode @ nid 36.
[  189.915022][T10821] loop8: detected capacity change from 0 to 32768
[  189.924101][T10821] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1876 (10821)
[  189.967438][T10821] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  189.971508][T10821] BTRFS info (device loop8): using blake2b checksum algorithm
[  190.004315][T10836] CIFS: Attempting to mount //127.0.0.1/share
[  190.039552][T10850] CIFS: VFS: Invalid response size 266 for command 0
[  190.042696][T10850] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1
[  190.046165][T10850] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0xfe
[  190.058351][T10836] CIFS: VFS: cifs_mount failed w/return code = -112
[  190.086252][T10821] BTRFS info (device loop8): enabling ssd optimizations
[  190.088340][T10821] BTRFS info (device loop8): turning on async discard
[  190.099923][T10821] BTRFS info (device loop8): enabling free space tree
[  190.105637][T10821] BTRFS info (device loop8): use zstd compression, level 3
[  190.169759][T10674] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  190.375381][T10868] loop8: detected capacity change from 0 to 1024
[  190.378856][T10868] EXT4-fs: Ignoring removed bh option
[  190.405919][T10870] loop6: detected capacity change from 0 to 128
[  190.420814][T10868] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.431909][T10870] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[  190.491716][T10674] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.570417][ T5597] Bluetooth: hci0: command tx timeout
[  190.701656][T10866] loop7: detected capacity change from 0 to 32768
[  190.719771][T10866] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1889 (10866)
[  190.733381][T10866] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  190.736490][T10866] BTRFS info (device loop7): using blake2b checksum algorithm
[  190.791858][T10866] BTRFS info (device loop7): enabling ssd optimizations
[  190.796616][T10866] BTRFS info (device loop7): turning on async discard
[  190.799946][T10866] BTRFS info (device loop7): enabling free space tree
[  190.802846][T10866] BTRFS info (device loop7): use zstd compression, level 3
[  190.835032][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  190.835045][   T33] audit: type=1800 audit(1785564053.164:88): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1889" name="file1" dev="loop7" ino=260 res=0 errno=0
[  190.928300][ T8815] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  191.335316][T10915] loop7: detected capacity change from 0 to 32768
[  191.340289][T10915] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1901 (10915)
[  191.352020][T10915] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  191.355881][T10915] BTRFS info (device loop7): using sha256 checksum algorithm
[  191.383086][T10915] BTRFS info (device loop7): enabling ssd optimizations
[  191.385768][T10915] BTRFS info (device loop7): turning on async discard
[  191.388150][T10915] BTRFS info (device loop7): enabling free space tree
[  191.417832][ T8815] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  191.503330][   T33] audit: type=1326 audit(1785564053.834:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.7.1905" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4819e019 code=0x7ffc0000
[  191.521847][   T33] audit: type=1326 audit(1785564053.834:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.7.1905" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4819e019 code=0x7ffc0000
[  191.534284][   T33] audit: type=1326 audit(1785564053.854:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.7.1905" exe="/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f2a4819e019 code=0x7ffc0000
[  191.549080][   T33] audit: type=1326 audit(1785564053.854:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.7.1905" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4819e019 code=0x7ffc0000
[  191.567047][   T33] audit: type=1326 audit(1785564053.854:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.7.1905" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4819e019 code=0x7ffc0000
[  191.588202][   T33] audit: type=1326 audit(1785564053.854:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.7.1905" exe="/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f2a4819e019 code=0x7ffc0000
[  191.595868][   T33] audit: type=1326 audit(1785564053.854:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.7.1905" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4819e019 code=0x7ffc0000
[  191.626870][   T33] audit: type=1326 audit(1785564053.854:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.7.1905" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4819e019 code=0x7ffc0000
[  191.649983][T10945] loop8: detected capacity change from 0 to 512
[  191.663067][T10945] EXT4-fs (loop8): 1 truncate cleaned up
[  191.668292][T10945] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.703295][T10674] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.781842][T10954] batadv_slave_1: entered promiscuous mode
[  191.797905][T10953] batadv_slave_1: left promiscuous mode
[  192.237535][T10997] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  192.245909][T10997] ext4 filesystem being mounted at /323/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  192.284475][ T8422] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  192.289011][  T782] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  192.439503][  T782] usb 9-1: Using ep0 maxpacket: 32
[  192.443545][  T782] usb 9-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  192.447088][  T782] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.457958][  T782] usb 9-1: config 0 descriptor??
[  192.471105][  T782] gspca_main: sq930x-2.14.0 probing 041e:403c
[  192.608998][ T5706] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  192.650499][ T5597] Bluetooth: hci0: command tx timeout
[  192.679885][  T782] gspca_sq930x: reg_r 001f failed -71
[  192.682846][  T782] sq930x 9-1:0.0: probe with driver sq930x failed with error -71
[  192.688334][  T782] usb 9-1: USB disconnect, device number 5
[  192.760444][ T5706] usb 7-1: Using ep0 maxpacket: 16
[  192.765803][ T5706] usb 7-1: config 0 has an invalid interface number: 105 but max is 0
[  192.768763][ T5706] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  192.774043][ T5706] usb 7-1: config 0 has no interface number 0
[  192.777859][ T5706] usb 7-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[  192.780777][ T5706] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.783346][ T5706] usb 7-1: Product: syz
[  192.784731][ T5706] usb 7-1: Manufacturer: syz
[  192.786480][ T5706] usb 7-1: SerialNumber: syz
[  192.789939][ T5706] usb 7-1: config 0 descriptor??
[  192.997477][ T5706] uvcvideo 7-1:0.105: Found UVC 0.00 device syz (046c:14e8)
[  193.000098][ T5706] uvcvideo 7-1:0.105: No valid video chain found.
[  193.026623][T11044] vim2m vim2m.0: vidioc_s_fmt queue busy
[  193.211669][ T5060] usb 7-1: USB disconnect, device number 12
[  193.349105][T11056] find_entry called with index = 0
[  193.351404][T11056] read_mapping_page failed!
[  193.352845][T11056] ERROR: (device loop8): txCommit: 
[  193.352845][T11056] 
[  193.361445][T11056] ERROR: (device loop8): remounting filesystem as read-only
[  193.492161][T11061] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  193.505760][T11061] XFS (loop7): Ending clean mount
[  193.522957][   T33] audit: type=1800 audit(1785564055.854:97): pid=11061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1958" name="file1" dev="loop7" ino=4422 res=0 errno=0
[  193.547544][ T8815] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  193.675222][T11077] xt_addrtype: ipv6 does not support BROADCAST matching
[  193.744862][T11083] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  193.767509][T11083] exFAT-fs (loop7): valid_size(150994954) is greater than size(10)
[  193.876167][T11097] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.1971: Unrecognised inode hash code 4
[  193.883183][T11097] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.1971: Corrupt directory, running e2fsck is recommended
[  193.892976][T11097] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117
[  193.895555][T11097] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #15: comm syz.8.1971: corrupted in-inode xattr: invalid ea_ino
[  193.900556][T11097] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  193.900767][T11097] EXT4-fs (loop8): Remounting filesystem read-only
[  193.911923][T11097] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.940444][T10674] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.989113][ T5706] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  194.024916][T11108] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1975'.
[  194.140296][ T5706] usb 7-1: Using ep0 maxpacket: 8
[  194.148968][ T5706] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  194.152262][ T5706] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  194.155733][ T5706] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  194.176149][ T5706] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  194.183634][ T5706] usb 7-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  194.213305][ T5706] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  194.216111][ T5706] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.218723][ T5706] usb 7-1: Product: syz
[  194.221871][ T5706] usb 7-1: Manufacturer: syz
[  194.223703][ T5706] usb 7-1: SerialNumber: syz
[  194.229674][ T5706] usb 7-1: config 0 descriptor??
[  194.503895][T11121] set_capacity_and_notify: 8 callbacks suppressed
[  194.503910][T11121] loop8: detected capacity change from 0 to 64
[  194.656843][ T5706] iowarrior 7-1:0.0: IOWarrior product=0x1505, serial= interface=0 now attached to iowarrior0
[  194.668076][ T5706] usb 7-1: USB disconnect, device number 13
[  194.836259][T11127] loop8: detected capacity change from 0 to 40427
[  194.845377][T11127] F2FS-fs (loop8): build fault injection rate: 174
[  194.857947][T11127] F2FS-fs (loop8): build fault injection type: 0x3bfe8c
[  194.866106][T11127] F2FS-fs (loop8): invalid crc value
[  194.924040][T11127] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  194.928499][T11127] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  195.254901][T11146] loop6: detected capacity change from 0 to 1024
[  195.294469][T11146] hfsplus: xattr exists yet
[  195.346227][T11154] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1398
[  195.423246][T11164] loop8: detected capacity change from 0 to 512
[  195.545715][T11172] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2000'.
[  197.006619][T11208] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2016'.
[  197.023768][T11208] 8021q: adding VLAN 0 to HW filter on device team1
[  197.354982][T11233] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2028'.
[  197.358269][T11233] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.367013][T11233] batman_adv: batadv0: Removing interface: batadv_slave_1
[  197.445334][T11241] loop6: detected capacity change from 0 to 64
[  197.460922][T11241] syz.6.2032: attempt to access beyond end of device
[  197.460922][T11241] loop6: rw=8388608, sector=2590, nr_sectors = 2 limit=64
[  197.600721][T11251] vxfs: unable to read disk superblock at 1
[  197.603127][T11251] vxfs: unable to read disk superblock at 8
[  197.605993][T11251] vxfs: can't find superblock.
[  197.881397][T11259] loop7: detected capacity change from 0 to 40427
[  197.895033][T11259] F2FS-fs (loop7): Small segment_count (9 < 1 * 24)
[  197.897532][T11259] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  197.900708][T11259] F2FS-fs (loop7): invalid crc value
[  197.934356][T11259] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  197.937947][T11259] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  197.940585][T11259] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  197.948659][  T782] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  198.092055][T11268] loop8: detected capacity change from 0 to 2048
[  198.095467][T11268] EXT4-fs: Ignoring removed i_version option
[  198.101505][  T782] usb 7-1: Using ep0 maxpacket: 32
[  198.110796][  T782] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  198.114277][  T782] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.126756][  T782] usb 7-1: config 0 descriptor??
[  198.146751][  T782] gspca_main: sunplus-2.14.0 probing 041e:400b
[  198.153710][T11268] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.160757][T11268] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.359913][T11268] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.413844][T11289] loop7: detected capacity change from 0 to 256
[  198.426868][T11289] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  198.627968][T11295] loop7: detected capacity change from 0 to 512
[  198.633320][T11295] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  198.655613][T11295] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.663029][T11295] ext4 filesystem being mounted at /337/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.683065][ T8815] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.858247][T11268] syz.8.2045 (11268) used greatest stack depth: 19088 bytes left
[  198.892121][T11305] loop7: detected capacity change from 0 to 512
[  198.925266][T11305] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.930363][T11305] ext4 filesystem being mounted at /341/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  198.964171][ T8815] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.082006][T11314] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.2059: bad orphan inode 11862016
[  199.085552][T11314] loop7: lost filesystem error report for type 5 error -117
[  199.087592][T11314] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  199.094216][T11314] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.112188][ T8815] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  199.166945][T11320] EXT4-fs (loop7): VFS: Can't find ext4 filesystem
[  199.171783][  T782] gspca_sunplus: reg_w_riv err -71
[  199.173777][  T782] sunplus 7-1:0.0: probe with driver sunplus failed with error -71
[  199.187291][  T782] usb 7-1: USB disconnect, device number 14
[  199.281759][T11320] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  199.290575][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  199.292782][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  199.297006][T11320] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2062: invalid indirect mapped block 9 (level 0)
[  199.301028][T11320] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  199.301473][T11320] EXT4-fs (loop7): 1 truncate cleaned up
[  199.307041][T11320] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.567376][T11321] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.790088][T11333] gadgetfs: bound to dummy_udc driver
[  200.050300][ T5462] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  200.055233][ T5462] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.301186][  T833] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  200.304393][    C0] gadgetfs: connected
[  200.311099][  T833] gadgetfs: disconnected
[  200.338143][ T5462] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  200.341969][ T5462] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.358717][   T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  200.421678][ T5462] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  200.425486][ T5462] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.458782][    C0] gadgetfs: connected
[  200.469182][ T5600] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  200.471947][  T833] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  200.471967][  T833] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[  200.471982][  T833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.482351][    C0] gadgetfs: configuration #1
[  200.488372][ T5600] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  200.494427][ T5600] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  200.497924][ T5600] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  200.508373][ T5600] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  200.516784][   T10] usb 7-1: config 0 has no interfaces?
[  200.529960][   T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  200.534133][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.535754][ T5462] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  200.544017][ T5462] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.547989][   T10] usb 7-1: config 0 descriptor??
[  200.665776][ T5462] bridge_slave_1: left allmulticast mode
[  200.667631][ T5462] bridge_slave_1: left promiscuous mode
[  200.670345][ T5462] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.678815][ T5462] bridge_slave_0: left allmulticast mode
[  200.681167][ T5462] bridge_slave_0: left promiscuous mode
[  200.683256][ T5462] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.793391][ T5660] usb 7-1: USB disconnect, device number 15
[  200.799150][T11333] gadgetfs: suspended from state 3
[  200.807182][  T782] usb 1-1: USB disconnect, device number 18
[  200.813819][T11333] gadgetfs: disconnected
[  200.853536][ T5462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  200.857963][ T5462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.863498][ T5462] bond0 (unregistering): Released all slaves
[  201.163242][ T5462] hsr_slave_0: left promiscuous mode
[  201.165696][ T5462] hsr_slave_1: left promiscuous mode
[  201.170458][ T5462] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  201.173232][ T5462] batman_adv: batadv0: Removing interface: batadv_slave_0
[  201.176338][ T5462] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  201.179856][ T5462] batman_adv: batadv0: Removing interface: batadv_slave_1
[  201.190143][ T5462] veth1_macvtap: left promiscuous mode
[  201.192160][ T5462] veth0_macvtap: left promiscuous mode
[  201.194174][ T5462] veth1_vlan: left promiscuous mode
[  201.196179][ T5462] veth0_vlan: left promiscuous mode
[  201.333758][ T5462] team0 (unregistering): Port device team_slave_1 removed
[  201.343404][ T5462] team0 (unregistering): Port device team_slave_0 removed
[  201.803715][T11339] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.806301][T11339] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.809066][T11339] bridge_slave_0: entered allmulticast mode
[  201.811889][T11339] bridge_slave_0: entered promiscuous mode
[  201.815129][T11339] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.817727][T11339] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.822676][T11339] bridge_slave_1: entered allmulticast mode
[  201.825732][T11339] bridge_slave_1: entered promiscuous mode
[  201.859086][T11339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.879323][T11339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  201.913067][T11339] team0: Port device team_slave_0 added
[  201.916807][T11339] team0: Port device team_slave_1 added
[  201.970474][T11339] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.972700][T11339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  201.987149][T11339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  202.016615][T11339] batman_adv: batadv0: Adding interface: batadv_slave_1
[  202.021665][T11339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  202.057500][T11339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.115815][ T5462] IPVS: stop unused estimator thread 0...
[  202.122346][T11339] hsr_slave_0: entered promiscuous mode
[  202.126727][T11339] hsr_slave_1: entered promiscuous mode
[  202.133328][T11339] debugfs: 'hsr0' already exists in 'hsr'
[  202.137821][T11339] Cannot create hsr debugfs directory
[  202.578420][ T5600] Bluetooth: hci2: command tx timeout
[  202.665421][T11339] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  202.671517][T11339] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  202.676360][T11339] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  202.682813][T11339] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  202.719957][T11339] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.722574][T11339] bridge0: port 2(bridge_slave_1) entered forwarding state
[  202.731018][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.768608][T11339] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.777791][T11339] 8021q: adding VLAN 0 to HW filter on device team0
[  202.789826][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.792164][ T5788] bridge0: port 1(bridge_slave_0) entered forwarding state
[  202.801181][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.803861][ T5788] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.036213][T11339] 8021q: adding VLAN 0 to HW filter on device batadv0
[  203.044982][T11430] syzkaller0: entered promiscuous mode
[  203.047178][T11430] syzkaller0: entered allmulticast mode
[  203.051165][T11430] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487
[  203.172673][T11339] veth0_vlan: entered promiscuous mode
[  203.181025][T11339] veth1_vlan: entered promiscuous mode
[  203.196156][T11339] veth0_macvtap: entered promiscuous mode
[  203.209259][T11339] veth1_macvtap: entered promiscuous mode
[  203.229784][T11339] batman_adv: batadv0: Interface activated: batadv_slave_0
[  203.234763][T11339] batman_adv: batadv0: Interface activated: batadv_slave_1
[  203.245686][   T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.248656][   T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.251604][   T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.254561][   T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  203.365436][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.371312][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.373343][T11444] set_capacity_and_notify: 3 callbacks suppressed
[  203.373354][T11444] loop6: detected capacity change from 0 to 8
[  203.382591][T11444] SQUASHFS error: lzo decompression failed, data probably corrupt
[  203.386791][T11444] SQUASHFS error: Failed to read block 0x144: -5
[  203.393424][T11444] SQUASHFS error: Unable to read metadata cache entry [142]
[  203.396447][T11444] SQUASHFS error: Unable to read inode 0x11f
[  203.419567][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.423615][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.649130][ T5600] Bluetooth: hci2: command tx timeout
[  204.877817][T11485] netlink: 19 bytes leftover after parsing attributes in process `syz.6.2103'.
[  204.897862][T11485] netlink: 19 bytes leftover after parsing attributes in process `syz.6.2103'.
[  205.118803][T11499] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2110'.
[  205.122614][T11499] netlink: 65011 bytes leftover after parsing attributes in process `syz.6.2110'.
[  205.331291][T11513] vivid-000: disconnect
[  205.333502][T11512] vivid-000: reconnect
[  205.385122][T11515] loop9: detected capacity change from 0 to 8192
[  205.428814][T11518] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  205.888034][T11542] xt_CT: No such helper "pptp"
[  206.093799][T11564] loop6: detected capacity change from 0 to 128
[  206.110913][T11564] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  206.119012][T11564] hpfs: filesystem error: improperly stopped
[  206.121431][T11564] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  206.124005][T11564] hpfs: You really don't want any checks? You are crazy...
[  206.127021][T11564] hpfs: hpfs_map_sector(): read error
[  206.137947][T11564] hpfs: code page support is disabled
[  206.140993][T11564] hpfs: hpfs_map_4sectors(): unaligned read
[  206.143114][T11564] hpfs: hpfs_map_4sectors(): unaligned read
[  206.144901][T11564] hpfs: filesystem error: unable to find root dir
[  206.304194][T11570] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664
[  206.319068][  T833] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  206.472664][  T833] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  206.475779][  T833] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.484354][  T833] usb 10-1: Product: syz
[  206.486125][  T833] usb 10-1: Manufacturer: syz
[  206.493415][  T833] usb 10-1: SerialNumber: syz
[  206.577032][T11580] bond1: left promiscuous mode
[  206.581374][T11580] 8021q: adding VLAN 0 to HW filter on device bond1
[  206.584416][T11580] geneve2: left promiscuous mode
[  206.599529][ T5462] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  206.602689][ T5462] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  206.606079][ T5462] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  206.609990][ T5462] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  206.679152][T11583] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2148'.
[  206.721054][ T5600] Bluetooth: hci2: Unknown advertising packet type: 0x76
[  206.721106][ T5600] Bluetooth: hci2: Malformed LE Event: 0x0d
[  206.729008][ T5600] Bluetooth: hci2: command tx timeout
[  206.762351][  T833] rtl8150 10-1:1.0: couldn't reset the device
[  206.765098][  T833] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5
[  206.773390][T11587] loop6: detected capacity change from 0 to 1024
[  206.787711][  T833] usb 10-1: USB disconnect, device number 2
[  206.807220][T11587] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  206.909015][ T8422] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.920887][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2156'.
[  206.981763][T11606] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2158'.
[  207.056744][ T5600] ------------[ cut here ]------------
[  207.058679][ T5600] refcnt < 0
[  207.058685][ T5600] WARNING: net/bluetooth/hci_conn.c:567 at hci_conn_timeout+0xff/0x2c0, CPU#1: kworker/u11:3/5600
[  207.062962][ T5600] Modules linked in:
[  207.064453][ T5600] CPU: 1 UID: 0 PID: 5600 Comm: kworker/u11:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  207.067917][ T5600] Tainted: [L]=SOFTLOCKUP
[  207.069483][ T5600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  207.072774][ T5600] Workqueue: hci0 hci_conn_timeout
[  207.075000][ T5600] RIP: 0010:hci_conn_timeout+0xff/0x2c0
[  207.076739][ T5600] Code: 48 89 df e8 23 8e 09 00 eb 07 e8 3c 7f 1e f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 97 ab fe ff e8 22 7f 1e f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff
[  207.082892][ T5600] RSP: 0018:ffffc90004f1fad0 EFLAGS: 00010293
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  207.084794][ T5600] RAX: ffffffff8aa67fae RBX: ffff88816c614000 RCX: ffff88810fba8000
[  207.087332][ T5600] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  207.090376][ T5600] RBP: 00000000ffffffff R08: ffff88816c614013 R09: 1ffff1102d8c2802
[  207.093509][ T5600] R10: dffffc0000000000 R11: ffffed102d8c2803 R12: dffffc0000000000
[  207.095922][ T5600] R13: ffffffff818e35dd R14: ffff88816c614a40 R15: ffff88816c614010
[  207.098646][ T5600] FS:  0000000000000000(0000) GS:ffff8882a9452000(0000) knlGS:0000000000000000
[  207.101566][ T5600] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  207.103555][ T5600] CR2: 00007fc3cfd556c8 CR3: 000000016defc000 CR4: 00000000000006f0
[  207.105958][ T5600] Call Trace:
[  207.107158][ T5600]  <TASK>
[  207.108162][ T5600]  process_scheduled_works+0xa2f/0x1470
[  207.109961][ T5600]  ? __pfx_process_scheduled_works+0x10/0x10
[  207.112173][ T5600]  ? assign_work+0x3cf/0x5d0
[  207.113621][ T5600]  worker_thread+0xa44/0xfb0
[  207.115040][ T5600]  ? __kthread_parkme+0x71/0x1f0
[  207.116711][ T5600]  kthread+0x388/0x470
[  207.117990][ T5600]  ? __pfx_worker_thread+0x10/0x10
[  207.119605][ T5600]  ? __pfx_kthread+0x10/0x10
[  207.121194][ T5600]  ret_from_fork+0x51e/0xb90
[  207.122957][ T5600]  ? __pfx_ret_from_fork+0x10/0x10
[  207.124672][ T5600]  ? __switch_to+0xc7d/0x1450
[  207.126292][ T5600]  ? __pfx_kthread+0x10/0x10
[  207.128013][ T5600]  ret_from_fork_asm+0x1a/0x30
[  207.129943][ T5600]  </TASK>
[  207.131210][ T5600] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  207.134132][ T5600] CPU: 1 UID: 0 PID: 5600 Comm: kworker/u11:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  207.137584][ T5600] Tainted: [L]=SOFTLOCKUP
[  207.138928][ T5600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  207.142123][ T5600] Workqueue: hci0 hci_conn_timeout
[  207.144042][ T5600] Call Trace:
[  207.145423][ T5600]  <TASK>
[  207.146677][ T5600]  vpanic+0x56c/0xa60
[  207.147951][ T5600]  ? __pfx__printk+0x10/0x10
[  207.149435][ T5600]  ? __pfx_vpanic+0x10/0x10
[  207.151154][ T5600]  ? is_bpf_text_address+0x292/0x2b0
[  207.152858][ T5600]  ? is_bpf_text_address+0x26/0x2b0
[  207.154535][ T5600]  panic+0xc5/0xd0
[  207.155729][ T5600]  ? __pfx_panic+0x10/0x10
[  207.157191][ T5600]  ? ret_from_fork_asm+0x1a/0x30
[  207.158864][ T5600]  __warn+0x315/0x4f0
[  207.160274][ T5600]  ? hci_conn_timeout+0xff/0x2c0
[  207.161877][ T5600]  ? hci_conn_timeout+0xff/0x2c0
[  207.163553][ T5600]  __report_bug+0x28e/0x530
[  207.164947][ T5600]  ? __pfx_stack_trace_save+0x10/0x10
[  207.166601][ T5600]  ? hci_conn_timeout+0xff/0x2c0
[  207.168126][ T5600]  ? __pfx___report_bug+0x10/0x10
[  207.169735][ T5600]  ? add_lock_to_list+0xc7/0x100
[  207.171726][ T5600]  ? lockdep_unlock+0x5d/0xd0
[  207.173271][ T5600]  ? __lock_acquire+0x13e8/0x2cd0
[  207.174927][ T5600]  ? hci_conn_timeout+0xff/0x2c0
[  207.176591][ T5600]  report_bug+0x16a/0x220
[  207.178022][ T5600]  ? hci_conn_timeout+0xff/0x2c0
[  207.179580][ T5600]  ? hci_conn_timeout+0x101/0x2c0
[  207.181243][ T5600]  handle_bug+0x9c/0x200
[  207.182707][ T5600]  exc_invalid_op+0x1a/0x50
[  207.184666][ T5600]  asm_exc_invalid_op+0x1a/0x20
[  207.186421][ T5600] RIP: 0010:hci_conn_timeout+0xff/0x2c0
[  207.188406][ T5600] Code: 48 89 df e8 23 8e 09 00 eb 07 e8 3c 7f 1e f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 97 ab fe ff e8 22 7f 1e f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff
[  207.195262][ T5600] RSP: 0018:ffffc90004f1fad0 EFLAGS: 00010293
[  207.197152][ T5600] RAX: ffffffff8aa67fae RBX: ffff88816c614000 RCX: ffff88810fba8000
[  207.199597][ T5600] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  207.202135][ T5600] RBP: 00000000ffffffff R08: ffff88816c614013 R09: 1ffff1102d8c2802
[  207.204778][ T5600] R10: dffffc0000000000 R11: ffffed102d8c2803 R12: dffffc0000000000
[  207.207434][ T5600] R13: ffffffff818e35dd R14: ffff88816c614a40 R15: ffff88816c614010
[  207.210066][ T5600]  ? process_scheduled_works+0x9bd/0x1470
[  207.211835][ T5600]  ? hci_conn_timeout+0xfe/0x2c0
[  207.213447][ T5600]  process_scheduled_works+0xa2f/0x1470
[  207.215177][ T5600]  ? __pfx_process_scheduled_works+0x10/0x10
[  207.217017][ T5600]  ? assign_work+0x3cf/0x5d0
[  207.218407][ T5600]  worker_thread+0xa44/0xfb0
[  207.219864][ T5600]  ? __kthread_parkme+0x71/0x1f0
[  207.221863][ T5600]  kthread+0x388/0x470
[  207.223139][ T5600]  ? __pfx_worker_thread+0x10/0x10
[  207.224763][ T5600]  ? __pfx_kthread+0x10/0x10
[  207.226397][ T5600]  ret_from_fork+0x51e/0xb90
[  207.227849][ T5600]  ? __pfx_ret_from_fork+0x10/0x10
[  207.229527][ T5600]  ? __switch_to+0xc7d/0x1450
[  207.231076][ T5600]  ? __pfx_kthread+0x10/0x10
[  207.232575][ T5600]  ret_from_fork_asm+0x1a/0x30
[  207.234198][ T5600]  </TASK>
[  207.236018][ T5600] Kernel Offset: disabled
[  207.237534][ T5600] Rebooting in 86400 seconds..
