last executing test programs:

3m18.137957309s ago: executing program 0 (id=171):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000c56000/0x4000)=nil, 0x4000}})

3m17.980153934s ago: executing program 0 (id=173):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xf8cde000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

3m16.667615285s ago: executing program 0 (id=186):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

3m16.456339522s ago: executing program 0 (id=189):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x808, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c666c7573685f6d657267652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c61636c2c6e6f61636c2c636f6d70726573735f63616368652c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c636f6d70726573735f63616368652c6661756c745f747970653d30303030303030303030303030303030303030342c001efbb4aa1245a33decab682eae7ff7f61a0b"], 0x1, 0x5505, &(0x7f0000002480)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

3m14.627109548s ago: executing program 0 (id=203):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
setuid(0xee00)
unshare(0x24060400)
ioctl$KDDELIO(r0, 0x4b34, 0x3bf)

3m13.443891515s ago: executing program 0 (id=211):
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x2}, &(0x7f0000001380)="f40fc2af4fc54077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285ec080000005c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb002a1a65a187c5f0bb35436929ddabce530b63fab525337057438cf64a506d545d69d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddadf2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b919600db6b157538f46e83cb10e7b7feb75b9138d", 0xd1, 0xfffffffffffffffb)
r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000001180)={'syz', 0x3}, &(0x7f0000001240)='%8', 0x2, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000001340)={r0, r1, r2}, &(0x7f0000000180)=""/4093, 0xffd, 0x0)

3m13.003135018s ago: executing program 32 (id=211):
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x2}, &(0x7f0000001380)="f40fc2af4fc54077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285ec080000005c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb002a1a65a187c5f0bb35436929ddabce530b63fab525337057438cf64a506d545d69d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddadf2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b919600db6b157538f46e83cb10e7b7feb75b9138d", 0xd1, 0xfffffffffffffffb)
r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000001180)={'syz', 0x3}, &(0x7f0000001240)='%8', 0x2, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000001340)={r0, r1, r2}, &(0x7f0000000180)=""/4093, 0xffd, 0x0)

2m16.025821477s ago: executing program 1 (id=597):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000002400090228bd7000fedbdf250800000006000400006b"], 0x1c}}, 0x8800)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}}}, 0xb8}}, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000500)={@local, @random="cce390677742", @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0cbb05", 0x30, 0x2f, 0x0, @private1, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "0120d2", 0x0, 0x0, 0x0, @mcast2, @remote}}}}}}}, 0x0)

2m15.877174212s ago: executing program 1 (id=598):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="c60a0100000000006111b400000000008510000002000000850000000700000095000e000000000095000000000000003764e7be95cd1b051a0f3cd983c673d1cc389e632d686ff6bfc1884d28861b616a4e21cc0c6b735256c1d8389642393b41331d67072eac14cc61e5392e2bfdb6c35de4"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYRES64=0x0], 0x1, 0x24a, &(0x7f00000005c0)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)

2m15.60152739s ago: executing program 1 (id=599):
unshare(0x480)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x4000000, 0x81, 0xfffffdff, 0x10})
r0 = socket$netlink(0x10, 0x3, 0xb)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140)=0x10, 0x4)

2m15.430959396s ago: executing program 1 (id=602):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000001080)=ANY=[@ANYBLOB="2c00125c6f3ad370264551ecffff7e80e44939e902bdf75947e3eae71f277e8a229bd4827cfac3e02dbdff45399cd965a877fb80b6f99d249537cb3c3525b10558", @ANYRES32=0x0, @ANYRESDEC=0x0], 0x1, 0x570, &(0x7f00000012c0)="$eJzs3MFuG8cZAOBZmbIVFXUDBI0dxYeN04MLNAxJ1zKEAAHY1VLahOISu6vAPhVpLQVCpbRIUqDxzRe3BfoSaW99gp76RkGPPabgLuk4lkTLthoa7fcB9gy5/8z8syRmQArDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEKNnsdLpRGGaj3Tvx6ZLNIt+Zc33W3z++U8wZN4Ro8i+srISrzVNXX/v28o8n/10PV5pHV8LKpFgJ93/w+qvvvdZamrWfk9D3YHma7OHeZ8euvfL4gyh8E32fiZ2/7ZNudSveSkdZmWc7/a00zso83lhf77y7PSjjQTZMy7tlle7ESSv0q7yIbyQ/jbsbGzfjtH033x1tbfaH6ezJ2+/0Op31+IP2OO0XZT5694N2mWxnw2E22qpjJpcnMbcnb8QPsyq+9Oje33xa7vsHh3vdswT1nhbU6/R63W6v112/tXHrdqfTOvZE5wnhWMSi37Qs2jmt3PDiZvs/AAAA8L8rqr9jn3z+X66/h4/CIPqmsejUAAAAgHNS/+X/yt+iyef/EMLVEA2yYdpZdFoAAADAOfrTU8/YleNL0T//FYpiOXowvvOT6Kg/iesfXWjaXXiyx2rQii5PO6mL9db0UZJei95ogt6YRX89Lfaflkf0DAmsnZJA+EtYa2LW7jXlvdmVZpTVQTZM20k+fK8b+v3LS1V6p/r9pwd/CPX0/zzauRyF/YPDvfavf3t4r87lwaSXB0fTAxTHzlHMyeWLR+cen5jxV01Xy5Ncoum4q824ncfnv9Q0X3qGMR+GN5uYN1ebcrW58qtp05XJmN32abNfjX5YH6Z7wZk/DNeamGs33p4Ub9/47qtQZ9E7KYuL087r03qPZ/Fc9+IMWdyccy/C/sGlEMKZsnjltCwAFmX/tF3o0f7/5L7beo619tvd/f3/4u7+MLzVxLy1Vi+srbUTVvROOwpzVvTZHvvg4vPubn8P15uY67PgE7Lott//UT1ueHU2brOr1pv/V6eOWw570eSFuvDF0e/C659/ef+dg6OPP9n7ZO/TXu/meufnnc6tXliupzEt5mQKwP+vtPg6Wq3+GBVFNv5ld2Oj26+207jIkw/jItvcSuNsVKVFst0fbaXxuMirPMmHk8pH2WZaxuXueJwXVTzIi3icl9md+pdf4ulPv5Rp+NmoypJyPEz7ZRon+ajqJ1W8mZVJPN79xTArt9OiblyO0yQbZEm/yvJR3Mp3/5qk7Tgu0/SxwGwzHVXZIJtUR/G4yHb6xd34o3y4u5PGm2mZFNm4ypsOZ2Nlo0Fe7PSr7EJoL/pmA8BL4vMv7//m48PDvc/OWPn39HDgs7Q6PurFRUwVAJiat0sDAAAAAAAAAAAAAAAvh2c9/3eOleVpCosZXeVslbDyUqSxmMrSC/fTeglmcWpltgicGLO4NQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATvOfAAAA//8Ptpz7")
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', 0x80000, 0x100)
getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000)

2m14.96598835s ago: executing program 1 (id=606):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendmsg$inet(r0, &(0x7f00000043c0)={0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000003200)="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", 0x261}, {&(0x7f0000004200)="358d0b262ea2d25b2daa20e4d13b89b592302ba3b40a9aaa193f14e193e97e8ff79b4bc51af6dfcc8fcb1db4efa233dafe013af373dbc0d311eb7da45c8579b8df6a", 0x42}], 0x2}, 0x4000000)

2m14.456043046s ago: executing program 1 (id=611):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c0000000800e4", @ANYRES32, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3c1bd441ada5266780599eaf18965bbfcc07c2037129672275c399e1e03f8a0664d807385cc4d566f230400db800400498096d9641e8b1887b25501b11ecd71313a47df368b078d7b825bff33b9eab3964d7b2394"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8000)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000307000000000000000000000005001a"], 0x38}}, 0x40000)

2m13.971391841s ago: executing program 33 (id=611):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c0000000800e4", @ANYRES32, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3c1bd441ada5266780599eaf18965bbfcc07c2037129672275c399e1e03f8a0664d807385cc4d566f230400db800400498096d9641e8b1887b25501b11ecd71313a47df368b078d7b825bff33b9eab3964d7b2394"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8000)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000307000000000000000000000005001a"], 0x38}}, 0x40000)

2.671403357s ago: executing program 5 (id=1491):
socket$inet(0xa, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x208440, 0x26)
recvmsg$inet_nvme(r0, 0x0, 0x0)

2.506008772s ago: executing program 4 (id=1493):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
close_range(r0, 0xffffffffffffffff, 0x2)
writev(r1, 0x0, 0x0)

2.495963242s ago: executing program 5 (id=1494):
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000000280)={[{@errors_continue}, {@errors_continue}, {}, {@errors_continue}, {@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@fmask={'fmask', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@namecase}, {@namecase}]}, 0x1, 0x1530, &(0x7f0000006800)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40042, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)

2.267182209s ago: executing program 4 (id=1497):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000000)={0x5c, r1, 0x1, 0x470bd2a, 0x25dfcbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0xf6ce, 0xe, 0x7]}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800)

2.140459703s ago: executing program 5 (id=1499):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})

2.085181255s ago: executing program 4 (id=1501):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bond\x00', <r1=>0x0})
syz_genetlink_get_family_id$tipc2(0x0, r0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x50, 0x24, 0xf0b, 0x400000, 0x2, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x1, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x2, 0x34, 0x2, 0x0, 0x80}}, {0x4}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40810}, 0x24040040)

1.892043421s ago: executing program 5 (id=1502):
clock_getres(0x7, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020592500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000020850000007000000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1.796181454s ago: executing program 5 (id=1505):
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="40eeffffff0022f8f46748e457afc265ab8ee7c61a7bac62225219ad2de477e5ed6a72f268"], 0x0, 0x0})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"})

1.717067967s ago: executing program 4 (id=1506):
r0 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4)
sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x48840, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvmmsg(r0, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10102, 0x0)

1.561419381s ago: executing program 4 (id=1509):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x7d, &(0x7f0000000340)=@assoc_value={r1, 0xdcb}, &(0x7f0000000380)=0x8)

1.404066076s ago: executing program 4 (id=1510):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x1, 0x6d, 0x2, &(0x7f0000000240)={0xa1, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9951cf5a1dee93"}})

1.216388932s ago: executing program 3 (id=1514):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10010, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020)

1.113333035s ago: executing program 5 (id=1516):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001400000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x1, 0xb, 0x0, 0x0})

1.039318568s ago: executing program 3 (id=1517):
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
read$FUSE(r0, &(0x7f0000003780)={0x2020}, 0x2020)
write$binfmt_script(r1, &(0x7f0000020480)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xfe24)
write$UHID_INPUT(r1, &(0x7f0000002740)={0x8, {"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", 0x1000}}, 0x1006)

1.039087557s ago: executing program 2 (id=1518):
r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x180000a, 0x12, r0, 0x0)
ftruncate(r0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="62c46f636b3d3078303030303030303030303030303430302c6e6f636f6d70726573732c6e6f726f636b2c756e686964652c636865636b3d72656c617865642c696f636861727365743d69736f383835392d362c756e686964652c6d61703d61636f726e2c63727566742c646d6f64653d3078303030303030303030303030303030312c00"], 0x0, 0x53f, &(0x7f0000000540)="$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")

947.72194ms ago: executing program 2 (id=1519):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x11, 0x6fd, &(0x7f0000000ac0)="$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")
setxattr$security_ima(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000500)=ANY=[], 0x700, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')

859.416573ms ago: executing program 3 (id=1520):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x60081, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000480)={0x6, 0x0, [{0x40000000, 0xffffffff, 0x5, 0xffffff89, 0x1000000, 0x6, 0x3}, {0x1, 0x4000004, 0x0, 0x8, 0x4ae9, 0xfffffffe, 0xae66}, {0x0, 0x8, 0x1, 0x80000000, 0x7ffffdff, 0x8005, 0x31}, {0x80000000, 0x2ab, 0x1, 0xd, 0x3, 0x7ff, 0x400}, {0xc0000000, 0x100, 0x4, 0x7, 0x400003, 0x40000005, 0xe0000}, {0x80000000, 0x2, 0x3f91c194927b8e21, 0xfffffff7, 0xfffffff9, 0xfe, 0x7}]})

664.165129ms ago: executing program 2 (id=1521):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000800)={'b', ' *:* ', 'rwm\x00'}, 0xa)

584.036492ms ago: executing program 3 (id=1522):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x145a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)

481.723155ms ago: executing program 2 (id=1523):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x11, r0, 0x0)
io_setup(0xc00, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f0000000140)="1e", 0x1, 0x4b, 0x0, 0x2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x8227, r0, 0x0, 0x0, 0x9, 0x0, 0x2}])

445.523756ms ago: executing program 3 (id=1524):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}}, 0x24000000)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a6c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2800128014000180090001006c61737400000000040100000000000000000100636f756e7465720008000340000001"], 0x94}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000)

311.27871ms ago: executing program 3 (id=1525):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000080)=ANY=[], 0x5, 0x150d, &(0x7f0000001540)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120)
getdents(r0, &(0x7f0000000440)=""/4090, 0xffa)

162.814515ms ago: executing program 2 (id=1526):
r0 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @rand_addr=0x64010102}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x6f631b4376e74f1e, {0x2, 0x0, @rand_addr=0x44010100}})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x6, @multicast}, 0x5a, {0x2, 0x1104, @broadcast}, 'geneve1\x00'})

0s ago: executing program 2 (id=1527):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94)
syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaac437bf8cb64c86dd6bcce16400000000000000000001000000000000000000000000000000002c0200000000000005020009"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

kernel console output (not intermixed with test programs):

system 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  200.551477][ T8133] reiserfs: using flush barriers
[  200.618217][ T8133] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  200.638873][ T8128] loop5: detected capacity change from 0 to 32768
[  200.690376][ T8133] REISERFS (device loop3): checking transaction log (loop3)
[  200.716700][ T8122] XFS (loop4): Ending clean mount
[  200.724458][ T8128] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  200.870207][ T8122] XFS (loop4): User initiated shutdown received.
[  200.890016][ T8122] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[  200.949701][ T8122] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  201.048308][ T6394] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  201.071414][ T8133] REISERFS (device loop3): Using tea hash to sort names
[  201.078925][ T8133] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  201.127520][ T8133] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  201.273390][ T8128] XFS (loop5): Ending clean mount
[  201.827730][ T7661] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  202.908562][ T8207] loop5: detected capacity change from 0 to 128
[  203.004661][ T8207] syz.5.766: attempt to access beyond end of device
[  203.004661][ T8207] loop5: rw=2049, sector=138, nr_sectors = 112 limit=128
[  203.096847][ T8212] loop4: detected capacity change from 0 to 256
[  203.138379][ T8212] FAT-fs (loop4): unable to read block(1029) for building NFS inode
[  203.450215][ T8196] loop3: detected capacity change from 0 to 32768
[  203.539899][ T8196] 
[  203.539899][ T8196]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  203.539899][ T8196] 
[  203.672704][ T8196] 
[  203.672704][ T8196]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  203.672704][ T8196] 
[  203.698142][ T8196] 
[  203.698142][ T8196]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  203.698142][ T8196] 
[  203.734361][ T8196] 
[  203.734361][ T8196]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  203.734361][ T8196] 
[  203.736377][ T8225] loop4: detected capacity change from 0 to 512
[  203.774991][ T8196] 
[  203.774991][ T8196]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  203.774991][ T8196] 
[  203.868776][  T113] 
[  203.868776][  T113]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  203.868776][  T113] 
[  203.875025][ T8226] ialloc: diAlloc returned -5!
[  204.052503][ T5775] 
[  204.052503][ T5775]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  204.052503][ T5775] 
[  204.100918][ T5775] 
[  204.100918][ T5775]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  204.100918][ T5775] 
[  204.245085][ T8231] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  204.402299][ T8232] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  204.517906][ T8238] netlink: 188 bytes leftover after parsing attributes in process `syz.4.778'.
[  205.009689][ T5861] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  205.211956][ T5861] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  205.234130][ T5861] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  205.269815][ T5861] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  205.305789][ T5861] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  205.319569][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  205.327711][ T5861] usb 6-1: Product: syz
[  205.332071][ T5861] usb 6-1: Manufacturer: syz
[  205.338041][ T5861] usb 6-1: SerialNumber: syz
[  205.342006][ T8254] loop2: detected capacity change from 0 to 32768
[  205.356750][ T8254] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.784 (8254)
[  205.393138][ T8254] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  205.423200][ T8254] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  205.432648][ T8254] BTRFS info (device loop2): enabling auto defrag
[  205.439216][ T8254] BTRFS info (device loop2): enabling ssd optimizations
[  205.448053][ T8254] BTRFS info (device loop2): use no compression
[  205.456415][ T8254] BTRFS info (device loop2): max_inline at 4096
[  205.463150][ T8254] BTRFS info (device loop2): using free space tree
[  205.513290][ T8254] BTRFS info (device loop2): auto enabling async discard
[  205.605007][ T5861] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  205.631938][ T5784] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  205.838925][    T9] usb 6-1: USB disconnect, device number 2
[  205.880451][    T9] usblp0: removed
[  206.095425][ T8277] loop4: detected capacity change from 0 to 1024
[  206.203251][ T8277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.382850][ T8277] fscrypt (loop4, inode 18): Direct key flag not allowed with different contents and filenames modes
[  206.450152][ T8281] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  206.496379][ T6394] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.651046][ T8285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  206.734731][ T5780] Bluetooth: hci0: command 0x0406 tx timeout
[  206.741476][ T5778] Bluetooth: hci2: command 0x0406 tx timeout
[  207.999781][ T5818] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  208.037720][ T8296] loop5: detected capacity change from 0 to 32768
[  208.112798][ T8296] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  208.191376][ T5818] usb 3-1: Using ep0 maxpacket: 32
[  208.201745][ T5818] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  208.239661][ T5818] usb 3-1: config 1 interface 0 has no altsetting 0
[  208.265896][ T8296] XFS (loop5): Ending clean mount
[  208.273150][ T5818] usb 3-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.40
[  208.296285][ T8296] XFS (loop5): Quotacheck needed: Please wait.
[  208.301944][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.338720][ T5818] usb 3-1: Product: syz
[  208.363099][ T5818] usb 3-1: Manufacturer: syz
[  208.381826][ T5818] usb 3-1: SerialNumber: syz
[  208.387175][ T8296] XFS (loop5): Quotacheck: Done.
[  208.500306][   T27] audit: type=1804 audit(1780308204.203:23): pid=8296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.793" name="/newroot/28/file2/file1" dev="loop5" ino=6150 res=1 errno=0
[  208.610828][ T7661] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  208.710436][ T5818] usbhid 3-1:1.0: can't add hid device: -71
[  208.716886][ T5818] usbhid: probe of 3-1:1.0 failed with error -71
[  208.754142][ T5818] usb 3-1: USB disconnect, device number 10
[  208.865103][ T8317] loop3: detected capacity change from 0 to 32768
[  208.899151][ T8317] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  208.951129][ T8317] XFS (loop3): Ending clean mount
[  208.983455][ T8317] XFS (loop3): Quotacheck needed: Please wait.
[  209.025897][ T5861] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  209.105567][ T8317] XFS (loop3): Quotacheck: Done.
[  209.241882][ T5861] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  209.281211][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.351850][ T5861] usb 5-1: config 0 descriptor??
[  209.374677][ T5861] cp210x 5-1:0.0: cp210x converter detected
[  209.409649][ T5775] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  209.788955][ T5861] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  209.827455][ T5861] usb 5-1: cp210x converter now attached to ttyUSB0
[  210.016187][  T787] usb 5-1: USB disconnect, device number 5
[  210.049944][  T787] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  210.146804][  T787] cp210x 5-1:0.0: device disconnected
[  211.087900][ T8391] loop5: detected capacity change from 0 to 4096
[  211.141301][ T8391] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512).
[  211.523292][ T8407] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  211.822810][ T8417] batadv_slave_1: entered promiscuous mode
[  211.845819][ T8416] batadv_slave_1: left promiscuous mode
[  212.130751][ T8432] loop3: detected capacity change from 0 to 136
[  212.168435][ T8432] Attempt to read inode for relocated directory
[  212.363781][ T8436] loop2: detected capacity change from 0 to 128
[  212.490148][ T5088] Bluetooth: hci1: command tx timeout
[  212.720692][ T5813] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  212.867226][ T8454] loop5: detected capacity change from 0 to 128
[  212.888819][ T8454] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  212.903152][ T8454] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  212.911987][  T787] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  212.929622][ T5813] usb 4-1: Using ep0 maxpacket: 8
[  212.942691][ T5813] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  212.959678][ T5813] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  212.985562][ T5813] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  212.999296][ T5813] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  213.009433][ T5813] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  213.022809][ T5813] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  213.030316][ T7661] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  213.032867][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.174231][  T787] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  213.194613][  T787] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  213.227599][  T787] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  213.240809][  T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  213.249275][  T787] usb 3-1: SerialNumber: syz
[  213.286211][ T5813] usb 4-1: GET_CAPABILITIES returned 0
[  213.292438][ T5813] usbtmc 4-1:16.0: can't read capabilities
[  213.459795][ T5818] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  213.476869][  T787] usb 3-1: 0:2 : does not exist
[  213.512666][  T787] usb 3-1: 0:0: failed to get current value for ch 0 (-22)
[  213.559932][  T787] usb 3-1: USB disconnect, device number 11
[  213.615115][ T5813] usb 4-1: USB disconnect, device number 9
[  213.663794][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.695512][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  213.717675][ T5776] udevd[5776]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  213.754657][ T5818] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  213.789720][ T5818] usb 6-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[  213.805052][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.835251][ T5818] usb 6-1: config 0 descriptor??
[  214.073715][ T8483] loop4: detected capacity change from 0 to 1024
[  214.121366][ T8483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.323943][ T5818] playstation 0003:054C:09CC.0006: unknown main item tag 0x0
[  214.352298][ T5818] playstation 0003:054C:09CC.0006: unknown main item tag 0x0
[  214.369490][ T6394] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.384436][ T5818] playstation 0003:054C:09CC.0006: unknown main item tag 0x0
[  214.393543][ T5818] playstation 0003:054C:09CC.0006: unknown main item tag 0x0
[  214.409667][ T5818] playstation 0003:054C:09CC.0006: unknown main item tag 0x0
[  214.418966][ T5818] playstation 0003:054C:09CC.0006: unknown main item tag 0x0
[  214.467666][ T5818] playstation 0003:054C:09CC.0006: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.5-1/input0
[  214.619837][ T5818] playstation 0003:054C:09CC.0006: Invalid byte count transferred, expected 16 got 0
[  214.629375][ T5818] playstation 0003:054C:09CC.0006: Failed to retrieve DualShock4 pairing info: -22
[  214.681587][ T5818] playstation 0003:054C:09CC.0006: Failed to get MAC address from DualShock4
[  214.715030][ T5818] playstation 0003:054C:09CC.0006: Failed to create dualshock4.
[  214.746389][ T5818] playstation: probe of 0003:054C:09CC.0006 failed with error -22
[  214.972245][ T5813] usb 6-1: USB disconnect, device number 3
[  215.463078][ T8526] loop2: detected capacity change from 0 to 8
[  215.794908][ T8541] loop3: detected capacity change from 0 to 512
[  215.849379][ T8541] EXT4-fs (loop3): 1 truncate cleaned up
[  215.868299][ T8541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  216.050014][  T787] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  216.087715][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.262903][  T787] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  216.303242][  T787] usb 6-1: config 220 has no interface number 2
[  216.320407][  T787] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  216.380259][  T787] usb 6-1: config 220 interface 0 has no altsetting 0
[  216.399850][  T787] usb 6-1: config 220 interface 76 has no altsetting 0
[  216.422503][ T8563] loop3: detected capacity change from 0 to 16
[  216.437991][  T787] usb 6-1: config 220 interface 1 has no altsetting 0
[  216.468435][  T787] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  216.489928][  T787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.496072][ T8563] erofs: (device loop3): mounted with root inode @ nid 36.
[  216.497960][  T787] usb 6-1: Product: syz
[  216.497979][  T787] usb 6-1: Manufacturer: syz
[  216.497993][  T787] usb 6-1: SerialNumber: syz
[  216.519555][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.855'.
[  216.612946][ T8563] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 36
[  216.778236][  T787] usb 6-1: selecting invalid altsetting 0
[  216.828264][ T5088] Bluetooth: hci0: unexpected event for opcode 0x0c5b
[  216.829665][  T787] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  216.855624][ T8573] lo: Caught tx_queue_len zero misconfig
[  216.878493][  T787] usb 6-1: No valid video chain found.
[  216.901256][  T787] usb 6-1: selecting invalid altsetting 0
[  216.909584][  T787] usbtest: probe of 6-1:220.1 failed with error -22
[  216.950495][  T787] usb 6-1: USB disconnect, device number 4
[  217.127756][ T8583] loop2: detected capacity change from 0 to 1024
[  217.193348][ T8583] netlink: 24 bytes leftover after parsing attributes in process `syz.2.861'.
[  217.213971][ T8583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.861'.
[  217.554784][ T8598] loop2: detected capacity change from 0 to 64
[  217.601266][   T27] audit: type=1800 audit(1780308213.303:24): pid=8598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.866" name="file1" dev="loop2" ino=21 res=0 errno=0
[  217.687684][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.867'.
[  217.698300][ T8601] netlink: 60 bytes leftover after parsing attributes in process `syz.3.867'.
[  217.847217][ T8605] vxcan0: tx address claim with dest, not broadcast
[  218.724986][ T8625] pim6reg: entered allmulticast mode
[  218.782800][ T8625] pim6reg: left allmulticast mode
[  219.089178][ T8615] loop3: detected capacity change from 0 to 40427
[  219.137179][ T8615] F2FS-fs (loop3): build fault injection attr: rate: 684, type: 0x7ffff
[  219.155831][ T8615] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7
[  219.174666][ T8615] F2FS-fs (loop3): Image doesn't support compression
[  219.193581][ T8617] loop4: detected capacity change from 0 to 32768
[  219.201636][ T8615] F2FS-fs (loop3): invalid crc value
[  219.222904][ T8615] F2FS-fs (loop3): Found nat_bits in checkpoint
[  219.314891][ T8617] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  219.373914][ T8615] F2FS-fs (loop3): Start checkpoint disabled!
[  219.419259][ T8617] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  219.485700][ T8615] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  219.518608][ T8617] XFS (loop4): Tail block (0x29) overwrite detected. Updated to 0x30
[  219.585282][ T8617] XFS (loop4): Ending clean mount
[  219.663128][ T8650] loop5: detected capacity change from 0 to 128
[  219.815194][ T1080] kworker/u4:5: attempt to access beyond end of device
[  219.815194][ T1080] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  219.829967][ T1080] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  219.838282][ T1080] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  219.850785][ T8650] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  219.914614][ T1080] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  219.914757][ T6394] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  219.931396][ T8650] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.209102][ T7661] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  220.456713][ T8661] loop4: detected capacity change from 0 to 128
[  220.522718][ T8661] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  220.583664][ T8661] ext4 filesystem being mounted at /160/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  220.595510][ T8664] loop3: detected capacity change from 0 to 128
[  220.647114][ T8664] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  220.743532][ T6394] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  220.759740][ T8664] ext4 filesystem being mounted at /253/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  220.918303][ T8664] fscrypt (loop3, inode 12): Direct key flag not allowed with different contents and filenames modes
[  220.991304][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  221.124639][ T8673] input: syz0 as /devices/virtual/input/input17
[  221.540848][ T8687] loop2: detected capacity change from 0 to 128
[  221.610037][ T8687] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  221.661676][ T8687] ext4 filesystem being mounted at /228/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  221.806593][ T5784] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  221.914663][ T8695] loop2: detected capacity change from 0 to 128
[  222.278077][ T8699] loop2: detected capacity change from 0 to 8192
[  222.293640][ T8699] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  222.308545][ T8699] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  222.329762][ T8699] REISERFS (device loop2): using ordered data mode
[  222.336341][ T8699] reiserfs: using flush barriers
[  222.346352][ T8699] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  222.363539][ T8699] REISERFS (device loop2): checking transaction log (loop2)
[  222.637790][ T8699] REISERFS (device loop2): Using tea hash to sort names
[  222.667825][ T8699] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  222.699249][ T8713] loop5: detected capacity change from 0 to 512
[  222.749836][   T28] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  222.759477][ T8713] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  222.804489][ T8713] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[  222.858765][ T8713] System zones: 1-12
[  222.875047][ T8713] EXT4-fs (loop5): 1 truncate cleaned up
[  222.901883][ T8713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  222.917012][ T8718] loop4: detected capacity change from 0 to 256
[  222.939866][ T8718] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  222.957464][ T8718] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  222.979892][   T28] usb 4-1: Using ep0 maxpacket: 16
[  222.994570][   T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  223.021912][ T8718] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d)
[  223.041860][   T28] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  223.079852][   T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.102628][   T28] usb 4-1: config 0 descriptor??
[  223.137972][ T7661] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.566763][   T28] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[  223.797509][ T8733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.922'.
[  223.825003][ T8733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.922'.
[  224.000231][ T8735] netlink: 48 bytes leftover after parsing attributes in process `syz.4.923'.
[  224.048918][   T28] usb 4-1: USB disconnect, device number 10
[  224.424140][ T8729] loop2: detected capacity change from 0 to 32768
[  224.512031][ T8729] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  224.721493][ T8729] XFS (loop2): Ending clean mount
[  224.855712][ T8737] loop5: detected capacity change from 0 to 40427
[  224.900699][ T8737] F2FS-fs (loop5): Fix alignment : internally, start(4096) end(16896) block(12288)
[  224.941930][ T8737] F2FS-fs (loop5): invalid crc value
[  224.978105][ T8737] F2FS-fs (loop5): Found nat_bits in checkpoint
[  225.079730][ T5784] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  225.171206][ T8737] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  225.272549][ T8758] loop4: detected capacity change from 0 to 256
[  225.357085][ T8758] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  225.499729][ T8737] F2FS-fs (loop5): Try to recover all the superblocks, ret: 0
[  225.851867][ T8769] mmap: syz.4.932 (8769) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  226.243224][ T8777] loop4: detected capacity change from 0 to 512
[  226.296067][ T8777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.309037][ T8777] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  226.334716][ T8782] loop5: detected capacity change from 0 to 16
[  226.350000][   T28] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  226.367385][   T27] audit: type=1800 audit(1780308222.073:25): pid=8777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.935" name="file1" dev="loop4" ino=15 res=0 errno=0
[  226.380335][ T8782] erofs: (device loop5): mounted with root inode @ nid 36.
[  226.462856][ T8782] syz.5.936: attempt to access beyond end of device
[  226.462856][ T8782] loop5: rw=524288, sector=8, nr_sectors = 24 limit=16
[  226.465705][ T6394] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.489425][ T8782] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4096]
[  226.501714][   T27] audit: type=1800 audit(1780308222.213:26): pid=8782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.936" name="file2" dev="loop5" ino=89 res=0 errno=0
[  226.510596][ T8765] loop2: detected capacity change from 0 to 32768
[  226.583609][   T28] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  226.596046][   T28] usb 4-1: config 0 has no interface number 0
[  226.625004][   T28] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  226.642836][   T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.661861][   T28] usb 4-1: Product: syz
[  226.666109][   T28] usb 4-1: Manufacturer: syz
[  226.676766][   T28] usb 4-1: SerialNumber: syz
[  226.695764][   T28] usb 4-1: config 0 descriptor??
[  226.731802][ T8765] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  226.810988][ T8765] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  226.906454][ T8765] XFS (loop2): Tail block (0x29) overwrite detected. Updated to 0x30
[  226.923339][   T28] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  226.943048][   T28] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  226.960240][   T28] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  226.968536][   T28] usb 4-1: media controller created
[  226.991187][ T8765] XFS (loop2): Ending clean mount
[  227.005922][   T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  227.078525][ T8796] loop4: detected capacity change from 0 to 4096
[  227.166167][ T5784] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  227.650430][ T5818] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  227.734077][ T8804] netlink: 27 bytes leftover after parsing attributes in process `syz.2.941'.
[  227.849949][ T5818] usb 6-1: Using ep0 maxpacket: 16
[  227.858010][ T5818] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  227.867889][ T5818] usb 6-1: config 0 has no interface number 0
[  227.883342][ T5818] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  227.893344][ T5818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.901864][ T5818] usb 6-1: Product: syz
[  227.916408][ T5818] usb 6-1: Manufacturer: syz
[  227.933005][ T5818] usb 6-1: SerialNumber: syz
[  227.951106][ T8810] tipc: Started in network mode
[  227.954889][ T5818] usb 6-1: config 0 descriptor??
[  227.956518][ T8810] tipc: Node identity ac14140f, cluster identity 4711
[  227.968203][ T8810] tipc: New replicast peer: 255.255.255.255
[  227.975231][ T8810] tipc: Enabled bearer <udp:syz2>, priority 10
[  227.986428][ T5818] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  228.056169][ T8808] loop2: detected capacity change from 0 to 4096
[  228.075520][ T8808] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  228.132556][ T8808] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  228.144696][ T8808] ntfs3: loop2: Failed to initialize $Extend/$Reparse.
[  228.176035][   T28] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[  228.342792][   T28] usb 4-1: USB disconnect, device number 11
[  228.803152][ T5818] gspca_spca1528: reg_w err -71
[  228.829870][ T5818] spca1528: probe of 6-1:0.1 failed with error -71
[  228.847283][ T5818] usb 6-1: USB disconnect, device number 5
[  229.099977][  T787] tipc: Node number set to 2886997007
[  229.196003][ T8834] syz.3.956 uses obsolete (PF_INET,SOCK_PACKET)
[  229.298563][ T8838] loop2: detected capacity change from 0 to 64
[  229.372141][ T8834] loop3: detected capacity change from 0 to 4096
[  229.390855][ T8834] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  229.453140][ T8834] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  229.500113][ T8834] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  229.530249][ T8834] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  229.543078][ T8842] loop5: detected capacity change from 0 to 64
[  229.589438][ T8842] hfs: unable to locate alternate MDB
[  229.599637][ T8842] hfs: continuing without an alternate MDB
[  229.609839][ T8834] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  229.626588][ T8834] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  229.660185][ T8834] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  229.669319][ T8834] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  229.761022][ T8834] ntfs: volume version 3.1.
[  230.149795][    T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  230.301205][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.966'.
[  230.396498][    T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  230.414538][    T9] usb 3-1: config 0 has no interface number 0
[  230.426968][ T8861] loop4: detected capacity change from 0 to 128
[  230.440173][    T9] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  230.462486][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.488114][    T9] usb 3-1: Product: syz
[  230.506580][ T8861] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  230.524462][    T9] usb 3-1: Manufacturer: syz
[  230.529111][    T9] usb 3-1: SerialNumber: syz
[  230.537070][ T8861] hpfs: filesystem error: improperly stopped
[  230.551062][    T9] usb 3-1: config 0 descriptor??
[  230.567156][ T8861] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  230.577740][ T8861] hpfs: You really don't want any checks? You are crazy...
[  230.588680][ T8861] hpfs: hpfs_map_sector(): read error
[  230.597876][ T8861] hpfs: code page support is disabled
[  230.617116][ T8861] hpfs: hpfs_map_4sectors(): unaligned read
[  230.660144][ T8861] hpfs: hpfs_map_4sectors(): unaligned read
[  230.679873][ T8861] hpfs: filesystem error: unable to find root dir
[  230.757889][ T8861] hpfs: hpfs_map_4sectors(): unaligned read
[  230.775318][ T8861] hpfs: hpfs_map_sector(): read error
[  230.794928][    T9] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  230.834090][    T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  230.890281][    T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  230.898389][    T9] usb 3-1: media controller created
[  230.987248][ T8866] netlink: 12 bytes leftover after parsing attributes in process `syz.5.979'.
[  231.004844][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  231.023964][ T8870] loop4: detected capacity change from 0 to 2048
[  231.034317][ T8866] ipvlan2: entered allmulticast mode
[  231.045645][ T8866] syz_tun: entered allmulticast mode
[  231.060809][    T9] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  231.090918][ T8870] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8802c029, mo2=0003]
[  231.141855][ T8870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.195198][    T9] usb 3-1: USB disconnect, device number 12
[  231.211094][ T8870] EXT4-fs error (device loop4): ext4_ext_precache:655: inode #2: comm syz.4.972: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  231.306450][ T8870] EXT4-fs (loop4): Remounting filesystem read-only
[  231.326181][ T5813] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  231.381277][ T6394] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.523818][ T8882] dccp_invalid_packet: pskb_may_pull failed
[  231.525004][ T8881] loop5: detected capacity change from 0 to 128
[  231.532445][ T5813] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  231.553991][ T8881] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  231.570997][ T8881] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  231.581699][ T5813] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  231.654897][ T8881] fscrypt (loop5, inode 12): Unsupported encryption flags (0x10)
[  231.670287][ T5813] usb 4-1: config 220 has no interface number 2
[  231.707179][ T5813] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  231.785132][ T5813] usb 4-1: config 220 interface 0 has no altsetting 0
[  231.800496][ T5813] usb 4-1: config 220 interface 76 has no altsetting 0
[  231.814737][ T5813] usb 4-1: config 220 interface 1 has no altsetting 0
[  231.823963][ T7661] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  231.828828][ T5813] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  231.835510][ T8887] loop2: detected capacity change from 0 to 512
[  231.862554][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.899667][ T5813] usb 4-1: Product: syz
[  231.905335][ T5813] usb 4-1: Manufacturer: syz
[  231.915480][ T5813] usb 4-1: SerialNumber: syz
[  231.918987][ T8887] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  231.934461][ T8887] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  232.033498][ T8887] EXT4-fs (loop2): 1 truncate cleaned up
[  232.082995][ T8887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.181748][ T5813] usb 4-1: selecting invalid altsetting 0
[  232.189214][ T5813] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[  232.218681][ T5813] usb 4-1: No valid video chain found.
[  232.253308][ T5813] usb 4-1: selecting invalid altsetting 0
[  232.261858][ T5813] usbtest: probe of 4-1:220.1 failed with error -22
[  232.275291][ T5813] usb 4-1: USB disconnect, device number 12
[  232.295456][ T7381] udevd[7381]: setting mode of /dev/bus/usb/004/012 to 020664 failed: No such file or directory
[  232.326757][ T7381] udevd[7381]: setting owner of /dev/bus/usb/004/012 to uid=0, gid=0 failed: No such file or directory
[  232.350726][ T8897] loop4: detected capacity change from 0 to 512
[  232.369229][ T8897] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  232.383061][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.436903][ T8897] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.982: invalid indirect mapped block 256 (level 2)
[  232.534592][ T8897] EXT4-fs (loop4): Remounting filesystem read-only
[  232.555900][ T8897] EXT4-fs (loop4): 2 truncates cleaned up
[  232.598112][ T8897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.640428][ T5088] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  232.651771][ T5088] CPU: 1 PID: 5088 Comm: kworker/u5:1 Not tainted syzkaller #0
[  232.659371][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  232.669477][ T5088] Workqueue: hci3 hci_rx_work
[  232.674214][ T5088] Call Trace:
[  232.677534][ T5088]  <TASK>
[  232.680498][ T5088]  dump_stack_lvl+0x18c/0x250
[  232.685239][ T5088]  ? show_regs_print_info+0x20/0x20
[  232.690488][ T5088]  ? load_image+0x420/0x420
[  232.695048][ T5088]  sysfs_create_dir_ns+0x26e/0x2a0
[  232.700207][ T5088]  ? sysfs_warn_dup+0xa0/0xa0
[  232.704931][ T5088]  ? do_raw_spin_unlock+0x121/0x230
[  232.710192][ T5088]  kobject_add_internal+0x61c/0xcc0
[  232.715464][ T5088]  kobject_add+0x164/0x240
[  232.719945][ T5088]  ? __rwlock_init+0x150/0x150
[  232.724747][ T5088]  ? kobject_init+0x1e0/0x1e0
[  232.729477][ T5088]  ? _raw_spin_unlock+0x28/0x40
[  232.734376][ T5088]  ? get_device_parent+0x366/0x390
[  232.739548][ T5088]  device_add+0x408/0xc50
[  232.743933][ T5088]  hci_conn_add_sysfs+0xd5/0x1e0
[  232.748926][ T5088]  le_conn_complete_evt+0xf5d/0x1540
[  232.754254][ T5088]  ? hci_event_packet+0x4cb/0x1270
[  232.759426][ T5088]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[  232.765718][ T5088]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  232.771373][ T5088]  ? skb_pull_data+0xfb/0x200
[  232.776066][ T5088]  hci_le_enh_conn_complete_evt+0x189/0x460
[  232.781976][ T5088]  ? hci_le_remote_conn_param_req_evt+0xce0/0xce0
[  232.788405][ T5088]  ? hci_remote_host_features_evt+0x150/0x150
[  232.794496][ T5088]  hci_event_packet+0x7ba/0x1270
[  232.799466][ T5088]  ? bis_list+0x290/0x290
[  232.803820][ T5088]  ? lockdep_hardirqs_on+0x98/0x150
[  232.809042][ T5088]  ? hci_send_to_monitor+0xd7/0x4f0
[  232.814260][ T5088]  hci_rx_work+0x43a/0xd60
[  232.818706][ T5088]  ? process_scheduled_works+0x96f/0x15d0
[  232.824445][ T5088]  process_scheduled_works+0xa5d/0x15d0
[  232.830294][ T5088]  ? worker_attach_to_pool+0x380/0x380
[  232.835776][ T5088]  ? assign_work+0x3d2/0x5d0
[  232.840383][ T5088]  worker_thread+0xa55/0xfc0
[  232.845029][ T5088]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  232.850940][ T5088]  ? _raw_spin_unlock+0x40/0x40
[  232.855805][ T5088]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  232.861737][ T5088]  kthread+0x2fa/0x390
[  232.865813][ T5088]  ? pr_cont_work+0x560/0x560
[  232.870509][ T5088]  ? kthread_blkcg+0xd0/0xd0
[  232.875107][ T5088]  ret_from_fork+0x48/0x80
[  232.879541][ T5088]  ? kthread_blkcg+0xd0/0xd0
[  232.884140][ T5088]  ret_from_fork_asm+0x11/0x20
[  232.888933][ T5088]  </TASK>
[  232.900452][ T5088] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  232.914784][ T5088] Bluetooth: hci3: failed to register connection device
[  232.955703][ T8903] pim6reg0: tun_chr_ioctl cmd 1074025677
[  232.961711][ T8903] pim6reg0: linktype set to 1
[  232.963678][ T8895] loop5: detected capacity change from 0 to 32768
[  232.992615][ T8895] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.981 (8895)
[  233.033962][ T8895] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  233.044343][ T8895] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  233.079930][ T8895] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  233.119682][ T8895] BTRFS info (device loop5): use zstd compression, level 3
[  233.126947][ T8895] BTRFS info (device loop5): using free space tree
[  233.231866][ T8917] loop3: detected capacity change from 0 to 128
[  233.255654][ T8917] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  233.396749][ T8895] BTRFS info (device loop5): enabling ssd optimizations
[  233.422476][ T8895] BTRFS info (device loop5): auto enabling async discard
[  233.444786][ T8917] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  233.466892][ T6394] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.846117][ T7661] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  233.956217][ T8935] syz.4.993 (8935) used greatest stack depth: 19080 bytes left
[  234.453661][ T8943] loop3: detected capacity change from 0 to 1764
[  234.570820][ T8943] iso9660: Corrupted directory entry in block 0 of inode 1920
[  234.711155][ T5088] block nbd0: Receive control failed (result -32)
[  234.720372][   T51] block nbd0: Receive control failed (result -32)
[  234.739699][ T8951] program syz.4.1000 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  234.881970][ T8955] loop2: detected capacity change from 0 to 128
[  234.952301][ T8957] netlink: 'syz.5.1003': attribute type 32 has an invalid length.
[  234.985603][ T8957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1003'.
[  235.017348][ T8957] (unnamed net_device) (uninitialized): option coupled_control: invalid value (7)
[  235.366060][ T8969] loop2: detected capacity change from 0 to 2048
[  235.393703][ T8969] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  235.671459][ T8976] loop5: detected capacity change from 0 to 256
[  235.689242][ T8978] loop2: detected capacity change from 0 to 512
[  235.696793][ T8976] exfat: Deprecated parameter 'namecase'
[  235.723156][ T8976] exfat: Deprecated parameter 'namecase'
[  235.794593][ T8978] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.1012: inode has both inline data and extents flags
[  235.829930][ T8976] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  235.866981][ T8978] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1012: couldn't read orphan inode 15 (err -117)
[  235.933983][ T8978] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  236.136687][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.224622][ T8987] loop3: detected capacity change from 0 to 2048
[  236.342125][ T8992] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  236.651387][ T8996] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  236.898652][ T9003] loop3: detected capacity change from 0 to 64
[  236.979994][   T27] kauditd_printk_skb: 11 callbacks suppressed
[  236.980022][   T27] audit: type=1800 audit(1780308232.693:27): pid=9003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1023" name="file1" dev="loop3" ino=21 res=0 errno=0
[  237.099882][ T9007] Bluetooth: hci4: Frame reassembly failed (-84)
[  237.108196][ T2892] Bluetooth: hci4: Frame reassembly failed (-84)
[  237.199317][ T9010] loop5: detected capacity change from 0 to 1024
[  237.238527][ T9010] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.337792][ T7661] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.662199][ T9023] loop2: detected capacity change from 0 to 128
[  237.680423][ T9023] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  237.697087][ T9023] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  238.497117][ T9036] loop3: detected capacity change from 0 to 4096
[  238.829483][ T9042] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1041'.
[  239.118425][ T9051] loop5: detected capacity change from 0 to 512
[  239.132939][   T51] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  239.142440][ T5088] Bluetooth: hci4: command 0xfc11 tx timeout
[  239.613498][ T9063] netlink: 'syz.5.1048': attribute type 6 has an invalid length.
[  239.893239][ T9068] loop5: detected capacity change from 0 to 128
[  239.935159][ T9068] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  239.987726][ T9068] hpfs: filesystem error: improperly stopped
[  240.008340][ T9068] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  240.023802][ T9068] hpfs: You really don't want any checks? You are crazy...
[  240.032389][ T9068] hpfs: hpfs_map_sector(): read error
[  240.037815][ T9068] hpfs: code page support is disabled
[  240.045389][ T9068] hpfs: hpfs_map_4sectors(): unaligned read
[  240.055939][ T9068] hpfs: hpfs_map_4sectors(): unaligned read
[  240.066102][ T9068] hpfs: filesystem error: unable to find root dir
[  240.129892][ T9068] hpfs: hpfs_map_4sectors(): unaligned read
[  240.154351][ T9068] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib
[  240.345086][ T9075] loop5: detected capacity change from 0 to 128
[  240.358559][ T9075] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  240.412421][ T9075] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  240.848446][ T9089] loop4: detected capacity change from 0 to 128
[  240.872383][ T9089] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  240.930953][   T27] audit: type=1800 audit(1780308236.633:28): pid=9089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1063" name="file1" dev="loop4" ino=94 res=0 errno=0
[  242.056575][ T9108] loop3: detected capacity change from 0 to 32768
[  242.081392][ T9108] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1070 (9108)
[  242.120765][ T9108] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  242.149659][ T9108] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  242.158505][ T9108] BTRFS info (device loop3): enabling auto defrag
[  242.182442][ T9108] BTRFS info (device loop3): force clearing of disk cache
[  242.190090][ T9108] BTRFS info (device loop3): turning off barriers
[  242.202434][ T9108] BTRFS info (device loop3): use no compression
[  242.208746][ T9108] BTRFS info (device loop3): disabling free space tree
[  242.239929][ T9108] BTRFS info (device loop3): turning on sync discard
[  242.360890][ T9108] BTRFS info (device loop3): enabling ssd optimizations
[  242.383223][ T9108] BTRFS info (device loop3): rebuilding free space tree
[  242.481479][ T9108] BTRFS info (device loop3): disabling free space tree
[  242.488544][ T9108] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  242.500959][ T9108] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  242.553251][ T9108] BTRFS info (device loop3): checking UUID tree
[  242.569888][ T5088] Bluetooth: hci3: command 0x0406 tx timeout
[  242.979769][ T5775] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  243.029217][ T9121] loop2: detected capacity change from 0 to 40427
[  243.089428][ T9121] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288)
[  243.133763][ T9121] F2FS-fs (loop2): invalid crc value
[  243.221539][ T9121] F2FS-fs (loop2): Found nat_bits in checkpoint
[  243.343222][ T9157] loop4: detected capacity change from 0 to 128
[  243.498500][   T27] audit: type=1326 audit(1780308240.204:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz.4.1084" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cf19ce59 code=0x7ffc0000
[  243.551247][ T9121] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  243.630565][   T27] audit: type=1326 audit(1780308240.204:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz.4.1084" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cf19ce59 code=0x7ffc0000
[  243.737070][   T27] audit: type=1326 audit(1780308240.204:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz.4.1084" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cf19ce59 code=0x7ffc0000
[  243.789557][ T9121] F2FS-fs (loop2): Try to recover all the superblocks, ret: 0
[  243.797266][   T27] audit: type=1326 audit(1780308240.234:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz.4.1084" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cf19ce59 code=0x7ffc0000
[  243.924805][   T27] audit: type=1326 audit(1780308240.234:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz.4.1084" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc9cf19ce59 code=0x7ffc0000
[  244.000299][   T27] audit: type=1326 audit(1780308240.264:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz.4.1084" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cf19ce59 code=0x7ffc0000
[  244.048545][   T27] audit: type=1326 audit(1780308240.264:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz.4.1084" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cf19ce59 code=0x7ffc0000
[  244.139596][   T27] audit: type=1326 audit(1780308240.264:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz.4.1084" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cf19ce59 code=0x7ffc0000
[  244.187469][   T27] audit: type=1326 audit(1780308240.284:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz.4.1084" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cf19ce59 code=0x7ffc0000
[  244.223383][   T27] audit: type=1326 audit(1780308240.284:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz.4.1084" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fc9cf19ce59 code=0x7ffc0000
[  244.289019][ T9176] ip6_vti0: Caught tx_queue_len zero misconfig
[  244.371345][ T9178] loop5: detected capacity change from 0 to 128
[  244.439721][ T9178] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  244.491271][ T9178] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  244.653580][ T7661] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  244.955751][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1098'.
[  245.201176][ T9197] loop3: detected capacity change from 0 to 8192
[  245.228354][ T9197] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  245.241755][ T9197] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  245.256460][ T9197] REISERFS (device loop3): using ordered data mode
[  245.263440][ T9197] reiserfs: using flush barriers
[  245.280508][ T9197] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  245.302321][ T9197] REISERFS (device loop3): checking transaction log (loop3)
[  245.347339][ T9197] REISERFS (device loop3): Using r5 hash to sort names
[  245.356367][ T9197] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  245.432531][ T9197] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "ÿÿ18446744073709551615ÿÿÿÿ0177777777777777777777701777777777777777777777ÿÿ18446744073709551615ÿÿ"
[  245.669781][    T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  245.797047][ T9189] loop2: detected capacity change from 0 to 32768
[  245.829692][ T9189] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1089 (9189)
[  245.868454][ T9189] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  245.879487][    T9] usb 5-1: Using ep0 maxpacket: 32
[  245.896647][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  245.916976][ T9189] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  245.925960][    T9] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  245.952006][ T9189] BTRFS info (device loop2): turning on sync discard
[  245.960535][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  245.977680][ T9189] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  246.004840][    T9] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  246.019682][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.039734][ T9189] BTRFS info (device loop2): use zstd compression, level 3
[  246.047042][ T9189] BTRFS info (device loop2): turning on async discard
[  246.069747][    T9] usb 5-1: Product: syz
[  246.074003][    T9] usb 5-1: Manufacturer: syz
[  246.133408][ T9189] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  246.145603][    T9] usb 5-1: SerialNumber: syz
[  246.160867][    T9] usb 5-1: config 0 descriptor??
[  246.169307][ T9189] BTRFS info (device loop2): trying to use backup root at mount time
[  246.184610][ T9189] BTRFS info (device loop2): enabling auto defrag
[  246.191927][ T9189] BTRFS info (device loop2): using free space tree
[  246.335149][ T2927] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  246.352029][ T9189] BTRFS error (device loop2): failed to load root extent
[  246.359189][ T9189] BTRFS warning (device loop2): try to load backup roots slot 1
[  246.385694][ T2927] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  246.412414][ T9189] BTRFS warning (device loop2): couldn't read tree root
[  246.419423][ T9189] BTRFS warning (device loop2): try to load backup roots slot 2
[  246.450022][ T2927] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  246.485275][ T9189] BTRFS warning (device loop2): couldn't read tree root
[  246.543597][ T9189] BTRFS warning (device loop2): try to load backup roots slot 3
[  246.589777][    T9] gs_usb 5-1:0.0: Configuring for 1 interfaces
[  246.644326][ T9189] BTRFS info (device loop2): enabling ssd optimizations
[  246.664847][ T9189] BTRFS info (device loop2): rebuilding free space tree
[  246.743210][ T9189] BTRFS info (device loop2): checking UUID tree
[  246.787947][ T9240] loop5: detected capacity change from 0 to 64
[  247.014132][    T9] usb 5-1: USB disconnect, device number 6
[  247.047773][ T5784] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  247.541833][ T9247] loop5: detected capacity change from 0 to 4096
[  247.796350][ T9236] loop3: detected capacity change from 0 to 32768
[  247.844544][ T9236] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.1105 (9236)
[  247.948390][ T9236] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  248.006503][ T9236] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  248.049276][ T9236] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  248.078297][ T9236] BTRFS info (device loop3): use zstd compression, level 3
[  248.128837][ T9236] BTRFS info (device loop3): using free space tree
[  248.313838][ T9236] BTRFS info (device loop3): enabling ssd optimizations
[  248.339564][ T9236] BTRFS info (device loop3): auto enabling async discard
[  248.479682][  T787] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  248.663394][ T5775] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  248.695482][  T787] usb 3-1: Using ep0 maxpacket: 32
[  248.725248][  T787] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  248.750960][  T787] usb 3-1: config 0 has no interface number 0
[  248.775873][  T787] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  248.807492][  T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.832414][  T787] usb 3-1: Product: syz
[  248.870972][  T787] usb 3-1: Manufacturer: syz
[  248.875645][  T787] usb 3-1: SerialNumber: syz
[  248.921463][  T787] usb 3-1: config 0 descriptor??
[  248.964876][  T787] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  248.998220][ T9293] loop5: detected capacity change from 0 to 4096
[  249.139018][  T787] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  249.156282][ T5776] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop3 scanned by udevd (5776)
[  249.194429][  T787] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  249.588292][ T9293] ntfs3: loop5: failed to convert "0080" to macinuit
[  249.590280][    C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  249.605170][  T787] usb 3-1: USB disconnect, device number 13
[  249.695442][  T787] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  249.778919][  T787] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  249.829062][  T787] quatech2 3-1:0.51: device disconnected
[  250.606559][ T9298] loop3: detected capacity change from 0 to 32768
[  250.660538][ T9298] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop3 scanned by syz.3.1114 (9298)
[  250.711937][ T9298] BTRFS info (device loop3): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  250.748757][ T9298] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  250.759827][ T9298] BTRFS info (device loop3): using free space tree
[  250.819693][ T5861] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  250.962163][ T9298] BTRFS info (device loop3): enabling ssd optimizations
[  250.969460][ T9298] BTRFS info (device loop3): auto enabling async discard
[  251.009682][ T5861] usb 6-1: Using ep0 maxpacket: 16
[  251.016959][ T5861] usb 6-1: config 1 has an invalid interface number: 105 but max is 0
[  251.039673][ T5861] usb 6-1: config 1 has no interface number 0
[  251.045853][ T5861] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  251.089587][ T5861] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  251.111397][ T5861] usb 6-1: config 1 interface 105 has no altsetting 0
[  251.147079][ T5861] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  251.171652][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  251.209660][ T5861] usb 6-1: Product: syz
[  251.217328][ T5861] usb 6-1: Manufacturer: syz
[  251.226893][ T5861] usb 6-1: SerialNumber: syz
[  251.246068][ T9323] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  251.269856][ T9323] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  251.397801][ T5775] BTRFS info (device loop3): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  251.698221][ T9323] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  251.709737][ T9323] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  251.767235][ T5776] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 10 /dev/loop3 scanned by udevd (5776)
[  252.139204][ T5861] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  252.182863][ T5861] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  252.224734][ T5861] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  252.297001][ T5861] aqc111 6-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, ca:b7:7b:b8:8c:a0
[  252.333168][ T9351] loop2: detected capacity change from 0 to 32768
[  252.351554][ T5861] usb 6-1: USB disconnect, device number 6
[  252.359088][ T5861] aqc111 6-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  252.425344][ T9351] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  252.481151][ T5861] aqc111 6-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  252.523662][ T5861] aqc111 6-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  252.533543][ T5861] aqc111 6-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  252.589858][ T9351] XFS (loop2): Ending clean mount
[  252.619293][ T5813] XFS (loop2): Corruption warning: Metadata has LSN (1:256) ahead of current LSN (1:80). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  252.709941][ T5813] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 
[  252.764200][ T5813] XFS (loop2): Unmount and run xfs_repair
[  252.789739][ T5813] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  252.799721][ T5813] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  252.829906][ T5813] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 01 00  ................
[  252.838821][ T5813] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  252.881636][ T5813] 00000030: 00 00 00 00 66 dd 03 89 00 00 18 00 00 00 40 37  ....f.........@7
[  252.909708][ T5813] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  252.918630][ T5813] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  252.964251][ T5813] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  252.986874][ T5813] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  253.009954][ T9351] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 4 error 74
[  253.030603][ T9351] XFS (loop2): Failed to initialize disk quotas.
[  253.091690][   T27] kauditd_printk_skb: 10 callbacks suppressed
[  253.091707][   T27] audit: type=1800 audit(1780308249.804:49): pid=9351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1125" name="file1" dev="loop2" ino=6150 res=0 errno=0
[  253.229658][ T5818] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  253.425824][ T9376] loop3: detected capacity change from 0 to 2048
[  253.442280][ T5818] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  253.464085][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.486607][ T5784] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  253.497561][ T5818] usb 6-1: config 0 descriptor??
[  253.513007][ T5818] cp210x 6-1:0.0: cp210x converter detected
[  253.528858][ T9376] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  253.951560][ T5818] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32
[  253.973212][ T5818] usb 6-1: cp210x converter now attached to ttyUSB0
[  254.210198][ T5818] usb 6-1: USB disconnect, device number 7
[  254.227429][ T5818] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  254.253050][ T5818] cp210x 6-1:0.0: device disconnected
[  254.493788][ T9389] loop3: detected capacity change from 0 to 40427
[  254.507575][ T9389] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  254.516414][ T9389] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  254.540495][ T9389] F2FS-fs (loop3): invalid crc value
[  254.883826][ T9389] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  254.894704][ T9389] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  255.082917][ T9389] syz.3.1138: attempt to access beyond end of device
[  255.082917][ T9389] loop3: rw=10241, sector=53248, nr_sectors = 8 limit=40427
[  255.247253][ T5775] syz-executor: attempt to access beyond end of device
[  255.247253][ T5775] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  255.272056][ T5775] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  255.698387][ T9413] loop2: detected capacity change from 0 to 8
[  255.826810][ T9413] SQUASHFS error: Failed to read block 0x2fc: -5
[  255.840992][ T9413] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  255.848345][ T9413] SQUASHFS error: Unable to read directory block [2fa:0]
[  255.880294][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  255.886681][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  256.087684][ T9396] loop4: detected capacity change from 0 to 40427
[  256.114644][ T9396] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  256.134918][ T9396] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  256.227459][ T9396] F2FS-fs (loop4): Found nat_bits in checkpoint
[  256.437163][ T9396] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  256.450809][ T9396] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  256.963664][ T9415] loop5: detected capacity change from 0 to 32768
[  257.039462][ T9415] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  257.146263][ T9415] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  257.202553][ T9415] XFS (loop5): Tail block (0x29) overwrite detected. Updated to 0x30
[  257.206244][ T9425] loop2: detected capacity change from 0 to 32768
[  257.261101][ T9415] XFS (loop5): Ending clean mount
[  257.272528][ T5776] blk_print_req_error: 26 callbacks suppressed
[  257.272545][ T5776] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  257.629880][ T7661] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  258.528706][ T9462] netlink: 'syz.2.1163': attribute type 12 has an invalid length.
[  259.310067][ T9452] loop3: detected capacity change from 0 to 131072
[  259.330136][ T9452] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0)
[  259.339691][ T9452] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  259.349102][ T9452] F2FS-fs (loop3): invalid crc value
[  259.384963][ T9452] F2FS-fs (loop3): Found nat_bits in checkpoint
[  259.454700][ T9452] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  259.461970][ T9452] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  260.225702][ T9477] loop5: detected capacity change from 0 to 32768
[  260.788348][ T9489] loop2: detected capacity change from 0 to 2048
[  260.922055][ T9489] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  260.949144][ T9483] loop4: detected capacity change from 0 to 32768
[  260.973355][   T51] Bluetooth: hci1: command tx timeout
[  261.011151][ T9483] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  261.261287][ T6475] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  261.448646][ T9495] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1177'.
[  261.539651][  T787] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  261.751869][  T787] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  261.779920][  T787] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  261.793910][ T9513] program syz.5.1181 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  261.819614][  T787] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  261.830259][  T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.860627][ T9491] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  261.894430][  T787] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  262.103623][ T5813] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  262.159172][    T9] usb 4-1: USB disconnect, device number 13
[  262.299928][ T5813] usb 5-1: Using ep0 maxpacket: 32
[  262.316993][ T5813] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  262.343130][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.375145][ T5813] usb 5-1: config 0 descriptor??
[  262.619057][ T5813] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  262.638992][ T5813] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  262.660700][ T5813] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  262.669011][ T5813] usb 5-1: media controller created
[  262.705760][ T5813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  262.749637][  T787] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  262.826397][ T5813] az6027: usb out operation failed. (-71)
[  262.841984][ T5813] az6027: usb out operation failed. (-71)
[  262.847780][ T5813] stb0899_attach: Driver disabled by Kconfig
[  262.865180][ T5813] az6027: no front-end attached
[  262.865180][ T5813] 
[  262.880310][ T5813] az6027: usb out operation failed. (-71)
[  262.893398][ T5813] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  262.898345][ T9525] loop2: detected capacity change from 0 to 32768
[  262.922503][ T5813] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18
[  262.970137][  T787] usb 6-1: Using ep0 maxpacket: 16
[  262.982625][ T5813] dvb-usb: schedule remote query interval to 400 msecs.
[  262.997725][  T787] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  263.005659][ T5813] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  263.038549][ T5813] usb 5-1: USB disconnect, device number 7
[  263.051286][  T787] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  263.103624][  T787] usb 6-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00
[  263.145306][  T787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.176851][  T787] usb 6-1: config 0 descriptor??
[  263.226960][ T5813] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  263.662062][  T787] wacom 0003:056A:0084.0008: unbalanced delimiter at end of report description
[  263.685838][  T787] wacom 0003:056A:0084.0008: parse failed
[  263.709972][  T787] wacom: probe of 0003:056A:0084.0008 failed with error -22
[  263.889305][ T9536] loop3: detected capacity change from 0 to 32768
[  263.936304][ T9536] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  263.944026][ T5818] usb 6-1: USB disconnect, device number 8
[  264.114717][ T9536] XFS (loop3): Ending clean mount
[  264.147201][  T787] XFS (loop3): Corruption warning: Metadata has LSN (1:256) ahead of current LSN (1:80). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  264.184101][  T787] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 
[  264.214523][  T787] XFS (loop3): Unmount and run xfs_repair
[  264.238366][  T787] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  264.275842][  T787] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  264.299071][  T787] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 01 00  ................
[  264.319689][  T787] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  264.341701][  T787] 00000030: 00 00 00 00 66 dd 03 89 00 00 18 00 00 00 40 37  ....f.........@7
[  264.357384][  T787] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  264.377640][  T787] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  264.396876][  T787] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  264.406632][  T787] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  264.416310][ T9536] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 4 error 74
[  264.429129][ T9536] XFS (loop3): Failed to initialize disk quotas.
[  264.429812][ T5813] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  264.541287][   T27] audit: type=1800 audit(1780308261.254:50): pid=9536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1191" name="file1" dev="loop3" ino=6150 res=0 errno=0
[  264.642697][ T5813] usb 5-1: Using ep0 maxpacket: 32
[  264.651681][ T5813] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  264.671812][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.692861][ T5813] usb 5-1: config 0 descriptor??
[  264.872474][ T9569] loop2: detected capacity change from 0 to 256
[  264.886717][ T9569] exfat: Deprecated parameter 'utf8'
[  264.919763][ T5813] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  264.920269][ T9569] exfat: Deprecated parameter 'utf8'
[  264.936413][ T5813] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  264.946733][ T5775] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  264.998843][ T5813] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  265.004314][ T9569] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  265.008166][ T5813] usb 5-1: media controller created
[  265.132181][ T5813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  265.145993][ T9573] loop5: detected capacity change from 0 to 256
[  265.218967][ T5813] az6027: usb out operation failed. (-71)
[  265.239711][ T5813] az6027: usb out operation failed. (-71)
[  265.249732][ T5813] stb0899_attach: Driver disabled by Kconfig
[  265.286126][ T5813] az6027: no front-end attached
[  265.286126][ T5813] 
[  265.322135][ T9573] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  265.323369][ T5813] az6027: usb out operation failed. (-71)
[  265.372374][ T9575] input: syz0 as /devices/virtual/input/input19
[  265.385316][ T5813] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  265.458277][ T5813] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input20
[  265.522351][ T5813] dvb-usb: schedule remote query interval to 400 msecs.
[  265.543489][ T5813] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  265.603668][ T5813] usb 5-1: USB disconnect, device number 8
[  265.671400][ T9580] loop3: detected capacity change from 0 to 256
[  265.841879][ T5813] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  266.004501][ T9588] loop3: detected capacity change from 0 to 256
[  266.738915][ T9581] loop2: detected capacity change from 0 to 32768
[  266.777786][ T9581] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  266.927506][ T9589] loop5: detected capacity change from 0 to 32768
[  266.976904][ T9589] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  267.005068][ T9608] loop3: detected capacity change from 0 to 64
[  267.123636][ T5776] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  267.178221][ T9589] XFS (loop5): Ending clean mount
[  267.429717][ T7661] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  267.507799][ T9618] loop3: detected capacity change from 0 to 64
[  267.575093][   T27] audit: type=1800 audit(1780308264.284:51): pid=9618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1220" name="file1" dev="loop3" ino=21 res=0 errno=0
[  267.599661][  T787] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  267.829869][  T787] usb 5-1: Using ep0 maxpacket: 32
[  267.845303][  T787] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  267.874994][  T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.911861][  T787] usb 5-1: config 0 descriptor??
[  267.935975][  T787] gspca_main: sunplus-2.14.0 probing 041e:400b
[  268.030646][ T9624] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  268.052143][ T9624] iommufd_mock iommufd_mock2: Adding to iommu group 1
[  268.187747][ T9626] loop3: detected capacity change from 0 to 256
[  268.257087][ T9626] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  268.455978][ T5813] hid (null): global environment stack underflow
[  268.556612][ T5813] hid-generic 0005:0458:8000.0009: global environment stack underflow
[  268.617080][ T5813] hid-generic 0005:0458:8000.0009: item 0 1 1 11 parsing failed
[  268.638576][ T5813] hid-generic: probe of 0005:0458:8000.0009 failed with error -22
[  268.748734][  T787] gspca_sunplus: reg_r err -71
[  268.762610][  T787] sunplus: probe of 5-1:0.0 failed with error -71
[  268.784885][  T787] usb 5-1: USB disconnect, device number 9
[  268.935904][ T9628] loop5: detected capacity change from 0 to 32768
[  269.019201][ T9628] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  269.409648][  T787] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  269.439379][ T9635] loop3: detected capacity change from 0 to 32768
[  269.450391][ T7661] ocfs2: Unmounting device (7,5) on (node local)
[  269.631861][  T787] usb 3-1: unable to get BOS descriptor or descriptor too short
[  269.664339][  T787] usb 3-1: not running at top speed; connect to a high speed hub
[  269.736558][  T787] usb 3-1: string descriptor 0 read error: -22
[  269.744099][  T787] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40
[  269.784420][  T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.809155][  T787] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[  270.020636][  T787] snd-usb-audio: probe of 3-1:1.0 failed with error -2
[  270.029059][ T9655] bond_slave_0: entered promiscuous mode
[  270.035447][ T9655] bond_slave_1: entered promiscuous mode
[  270.043507][  T787] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[  270.082994][ T9655] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  270.096091][ T9655] bond_slave_0: left promiscuous mode
[  270.101719][ T9655] bond_slave_1: left promiscuous mode
[  270.154283][ T9657] loop3: detected capacity change from 0 to 1024
[  270.231856][  T787] snd-usb-audio: probe of 3-1:1.1 failed with error -2
[  270.257305][  T787] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[  270.340553][  T787] snd-usb-audio: probe of 3-1:1.2 failed with error -2
[  270.375075][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  270.399414][  T787] usb 3-1: USB disconnect, device number 14
[  270.594085][ T9666] loop4: detected capacity change from 0 to 256
[  270.635172][ T9666] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  271.360906][ T9662] loop3: detected capacity change from 0 to 40427
[  271.385507][ T9662] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff
[  271.426309][ T9662] F2FS-fs (loop3): invalid crc value
[  271.469649][ T9662] F2FS-fs (loop3): Found nat_bits in checkpoint
[  271.721036][ T9662] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  271.779271][ T9695] loop2: detected capacity change from 0 to 128
[  271.833707][ T9695] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  271.871885][ T9695] hpfs: filesystem error: improperly stopped
[  271.897974][ T5775] syz-executor: attempt to access beyond end of device
[  271.897974][ T5775] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  271.898327][ T9695] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  271.947457][ T9695] hpfs: You really don't want any checks? You are crazy...
[  271.977420][ T5775] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  271.980016][ T9695] hpfs: hpfs_map_sector(): read error
[  271.994915][ T9695] hpfs: code page support is disabled
[  272.010446][ T9695] hpfs: hpfs_map_4sectors(): unaligned read
[  272.016530][ T9695] hpfs: hpfs_map_4sectors(): unaligned read
[  272.029701][ T9695] hpfs: filesystem error: unable to find root dir
[  272.249169][ T9695] hpfs: hpfs_map_4sectors(): unaligned read
[  272.279863][ T9695] hpfs: hpfs_map_sector(): read error
[  272.285332][ T9695] hpfs: hpfs_map_sector(): read error
[  272.833081][ T9715] loop2: detected capacity change from 0 to 128
[  272.921171][ T9715] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  273.043211][ T9715] ext4 filesystem being mounted at /317/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  273.073948][ T9723] loop4: detected capacity change from 0 to 1024
[  273.116512][ T9723] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  273.176773][ T9723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  273.195597][ T9723] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  273.228409][ T9723] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1262: bg 0: block 112: padding at end of block bitmap is not set
[  273.330092][ T5784] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  273.353030][ T6394] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  273.935835][ T9727] loop3: detected capacity change from 0 to 32768
[  273.969998][ T9727] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  274.055195][ T9744] loop4: detected capacity change from 0 to 1024
[  274.110809][ T9744] EXT4-fs: Ignoring removed bh option
[  274.143603][ T5788] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  274.172342][ T9744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  274.274217][ T9744] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1270'.
[  274.422237][ T6394] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.141006][ T9750] loop3: detected capacity change from 0 to 32768
[  275.165741][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1279'.
[  275.190970][ T9750] 
[  275.190970][ T9750]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  275.190970][ T9750] 
[  275.231045][ T9767] Attempt to restore checkpoint with obsolete wellknown handles
[  275.287162][ T9750] 
[  275.287162][ T9750]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  275.287162][ T9750] 
[  275.343640][ T9768] 
[  275.343640][ T9768]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  275.343640][ T9768] 
[  275.400670][ T9750] 
[  275.400670][ T9750]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  275.400670][ T9750] 
[  275.429696][ T9750] 
[  275.429696][ T9750]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  275.429696][ T9750] 
[  275.494925][ T9768] 
[  275.494925][ T9768]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  275.494925][ T9768] 
[  275.546102][  T113] 
[  275.546102][  T113]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  275.546102][  T113] 
[  275.656027][ T5775] 
[  275.656027][ T5775]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  275.656027][ T5775] 
[  275.682679][ T5775] 
[  275.682679][ T5775]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  275.682679][ T5775] 
[  275.790392][ T9758] loop5: detected capacity change from 0 to 32768
[  275.808544][ T9758] XFS: attr2 mount option is deprecated.
[  275.876425][ T9758] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  275.970922][ T9758] XFS (loop5): Ending clean mount
[  275.986871][ T9758] XFS (loop5): Quotacheck needed: Please wait.
[  276.122008][ T9758] XFS (loop5): Quotacheck: Done.
[  276.252327][ T9772] loop2: detected capacity change from 0 to 256
[  276.282960][ T7661] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  276.530587][   T27] audit: type=1326 audit(1780308273.244:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.4.1288" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cf19ce59 code=0x7ffc0000
[  276.556851][   T27] audit: type=1326 audit(1780308273.244:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.4.1288" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cf19ce59 code=0x7ffc0000
[  276.587390][ T9791] loop4: detected capacity change from 0 to 256
[  276.595776][ T9791] exfat: Deprecated parameter 'utf8'
[  276.610187][ T9791] exfat: Deprecated parameter 'utf8'
[  276.615629][ T9791] exfat: Deprecated parameter 'utf8'
[  276.628639][   T27] audit: type=1326 audit(1780308273.264:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.4.1288" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cf19ce59 code=0x7ffc0000
[  276.679681][   T28] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  276.682190][ T9791] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x117c3960, utbl_chksum : 0xe619d30d)
[  276.720354][   T27] audit: type=1326 audit(1780308273.264:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.4.1288" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cf19ce59 code=0x7ffc0000
[  276.754933][   T27] audit: type=1326 audit(1780308273.294:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.4.1288" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc9cf19ce59 code=0x7ffc0000
[  276.780583][   T27] audit: type=1326 audit(1780308273.294:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.4.1288" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc9cf19cbc2 code=0x7ffc0000
[  276.829629][   T27] audit: type=1326 audit(1780308273.294:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.4.1288" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc9cf15d68e code=0x7ffc0000
[  276.871189][   T27] audit: type=1326 audit(1780308273.294:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.4.1288" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc9cf19cc87 code=0x7ffc0000
[  276.872871][   T28] usb 4-1: no configurations
[  276.897039][   T27] audit: type=1326 audit(1780308273.294:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.4.1288" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc9cf15d68e code=0x7ffc0000
[  276.943886][   T28] usb 4-1: can't read configurations, error -22
[  277.029648][   T27] audit: type=1326 audit(1780308273.294:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.4.1288" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc9cf19caeb code=0x7ffc0000
[  277.130446][   T28] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  277.205163][ T5813] hid (null): global environment stack underflow
[  277.235103][ T5813] hid-generic 0005:0458:8000.000A: global environment stack underflow
[  277.253644][ T5813] hid-generic 0005:0458:8000.000A: item 0 1 1 11 parsing failed
[  277.270658][ T5813] hid-generic: probe of 0005:0458:8000.000A failed with error -22
[  277.310905][   T28] usb 4-1: no configurations
[  277.315577][   T28] usb 4-1: can't read configurations, error -22
[  277.322422][   T28] usb usb4-port1: attempt power cycle
[  277.739921][   T28] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  277.800964][   T28] usb 4-1: no configurations
[  277.805875][   T28] usb 4-1: can't read configurations, error -22
[  277.970707][   T28] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  278.036461][   T28] usb 4-1: no configurations
[  278.041854][   T28] usb 4-1: can't read configurations, error -22
[  278.059698][   T28] usb usb4-port1: unable to enumerate USB device
[  278.308467][ T9800] loop2: detected capacity change from 0 to 32768
[  278.425981][ T9800] ERROR: (device loop2): dbAlloc: the hint is outside the map
[  278.425981][ T9800] 
[  278.589759][ T2892] read_mapping_page failed!
[  278.607695][ T2892] ERROR: (device loop2): txCommit: 
[  278.607695][ T2892] 
[  278.633193][ T2892] jfs_write_inode: jfs_commit_inode failed!
[  278.959144][ T9813] loop5: detected capacity change from 0 to 32768
[  278.967409][ T9811] loop4: detected capacity change from 0 to 40427
[  279.009332][ T9811] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  279.012035][ T9813] 
[  279.012035][ T9813]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  279.012035][ T9813] 
[  279.033406][ T9811] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  279.088166][ T9811] F2FS-fs (loop4): invalid crc value
[  279.191686][ T9813] 
[  279.191686][ T9813]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  279.191686][ T9813] 
[  279.203488][ T9813] 
[  279.203488][ T9813]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  279.203488][ T9813] 
[  279.234956][ T9813] JFS: metapage_get_blocks failed
[  279.244513][ T9815] loop2: detected capacity change from 0 to 8192
[  279.256422][ T9813] 
[  279.256422][ T9813]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  279.256422][ T9813] 
[  279.285798][ T9815] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  279.310456][ T9813] 
[  279.310456][ T9813]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  279.310456][ T9813] 
[  279.321809][ T9815] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  279.331358][ T9815] REISERFS (device loop2): using ordered data mode
[  279.337920][ T9815] reiserfs: using flush barriers
[  279.359621][ T9815] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  279.389428][ T9819] ERROR: (device loop5): diWrite: ixpxd invalid
[  279.389428][ T9819] 
[  279.399063][ T9815] REISERFS (device loop2): checking transaction log (loop2)
[  279.406432][ T9811] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  279.406465][ T9811] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  279.441745][ T9819] ERROR: (device loop5): txCommit: 
[  279.441745][ T9819] 
[  279.449932][ T9819] ERROR: (device loop5): diFree: invalid inoext
[  279.449932][ T9819] 
[  279.668025][ T9811] syz.4.1296: attempt to access beyond end of device
[  279.668025][ T9811] loop4: rw=10241, sector=53248, nr_sectors = 8 limit=40427
[  279.682645][ T1080] ERROR: (device loop5): diWrite: ixpxd invalid
[  279.682645][ T1080] 
[  279.715233][ T1080] ERROR: (device loop5): txCommit: 
[  279.715233][ T1080] 
[  279.732985][ T1080] jfs_write_inode: jfs_commit_inode failed!
[  279.761322][ T7661] 
[  279.761322][ T7661]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  279.761322][ T7661] 
[  279.783908][ T9815] REISERFS (device loop2): Using tea hash to sort names
[  279.793987][ T7661] 
[  279.793987][ T7661]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  279.793987][ T7661] 
[  279.815828][ T9815] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  279.941049][ T6394] syz-executor: attempt to access beyond end of device
[  279.941049][ T6394] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  280.011104][ T6394] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  280.324694][ T9815] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "ÿÿ0x0000000000000000"
[  281.570527][ T9847] loop4: detected capacity change from 0 to 8192
[  281.594331][ T9847] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  281.629633][ T9847] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  281.673246][ T9847] REISERFS (device loop4): using ordered data mode
[  281.685295][ T9847] reiserfs: using flush barriers
[  281.699844][ T9847] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  281.761017][ T9847] REISERFS (device loop4): checking transaction log (loop4)
[  282.136306][ T9847] REISERFS (device loop4): Using tea hash to sort names
[  282.163302][ T9847] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  282.726816][ T9874] loop2: detected capacity change from 0 to 8
[  282.756953][ T9874] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  283.029473][ T9885] loop5: detected capacity change from 0 to 1024
[  283.062113][ T9885] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  283.154111][ T9885] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  283.196986][ T9885] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  283.307325][ T9885] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.1323: bg 0: block 112: padding at end of block bitmap is not set
[  283.550477][ T7661] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  284.452224][ T9927] loop2: detected capacity change from 0 to 512
[  284.480746][ T9927] EXT4-fs: Ignoring removed oldalloc option
[  284.510878][ T9927] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  284.575848][ T9927] EXT4-fs error (device loop2): ext4_iget_extra_inode:4739: inode #11: comm syz.2.1341: corrupted in-inode xattr: invalid ea_ino
[  284.671274][ T9927] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1341: couldn't read orphan inode 11 (err -117)
[  284.703170][ T9927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.917841][ T9940] loop3: detected capacity change from 0 to 2048
[  285.079641][ T5861] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  285.109755][    T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  285.314421][    T9] usb 3-1: Using ep0 maxpacket: 8
[  285.329772][ T5861] usb 5-1: Using ep0 maxpacket: 16
[  285.351169][    T9] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[  285.370525][ T5861] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 126, using maximum allowed: 30
[  285.390362][    T9] usb 3-1: config 0 has no interface number 0
[  285.398097][ T5861] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 126
[  285.430724][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  285.452032][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.460238][ T5861] usb 5-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00
[  285.469353][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.479615][    T9] usb 3-1: Product: syz
[  285.483854][    T9] usb 3-1: Manufacturer: syz
[  285.488477][    T9] usb 3-1: SerialNumber: syz
[  285.513220][ T5861] usb 5-1: config 0 descriptor??
[  285.522658][    T9] usb 3-1: config 0 descriptor??
[  285.815458][ T9939] loop5: detected capacity change from 0 to 40427
[  285.851233][ T9939] F2FS-fs (loop5): invalid crc value
[  285.904250][ T9939] F2FS-fs (loop5): Found nat_bits in checkpoint
[  285.957598][ T5861] lenovo 0003:17EF:60B5.000B: ignoring exceeding usage max
[  286.005850][    T9] usb 3-1: Found UVC 0.04 device syz (046d:08c3)
[  286.014011][ T5861] lenovo 0003:17EF:60B5.000B: hidraw0: USB HID v0.01 Device [HID 17ef:60b5] on usb-dummy_hcd.4-1/input0
[  286.033998][    T9] usb 3-1: No valid video chain found.
[  286.106986][ T9939] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  286.210277][ T5861] usb 5-1: USB disconnect, device number 10
[  286.258394][   T27] kauditd_printk_skb: 24 callbacks suppressed
[  286.258412][   T27] audit: type=1800 audit(1780308282.964:86): pid=9939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1345" name="file1" dev="loop5" ino=10 res=0 errno=0
[  286.314899][ T9939] syz.5.1345: attempt to access beyond end of device
[  286.314899][ T9939] loop5: rw=34817, sector=77824, nr_sectors = 8 limit=40427
[  286.315505][ T5818] usb 3-1: USB disconnect, device number 15
[  286.492194][ T7661] syz-executor: attempt to access beyond end of device
[  286.492194][ T7661] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  286.547741][ T7661] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  286.934939][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.222421][ T9966] loop4: detected capacity change from 0 to 512
[  287.398630][ T9966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.520914][ T9966] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  287.842734][ T6394] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.075268][ T9984] loop3: detected capacity change from 0 to 4096
[  288.141862][ T9984] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  288.166371][ T9984] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
[  288.262903][ T9984] ntfs: volume version 3.1.
[  288.500040][ T9990] lo: Caught tx_queue_len zero misconfig
[  288.869640][    T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  289.072009][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  289.099557][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  289.130678][    T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  289.149555][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  289.166259][ T9999] loop2: detected capacity change from 0 to 8192
[  289.172805][    T9] usb 4-1: SerialNumber: syz
[  289.450285][    T9] usb 4-1: 0:2 : does not exist
[  289.501538][T10006] loop4: detected capacity change from 0 to 8
[  289.535097][    T9] usb 4-1: USB disconnect, device number 18
[  289.641714][ T5776] udevd[5776]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  289.860209][ T5818] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  290.022414][T10014] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1376'.
[  290.070164][ T5818] usb 6-1: Using ep0 maxpacket: 8
[  290.079224][ T5818] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  290.081713][T10016] loop4: detected capacity change from 0 to 256
[  290.092565][ T5818] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  290.104617][ T5818] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  290.139626][ T5818] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  290.150680][T10018] loop2: detected capacity change from 0 to 128
[  290.164476][ T5818] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  290.170366][T10018] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  290.221326][ T5818] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  290.263504][T10018] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  290.277671][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.282276][T10016] FAT-fs (loop4): Directory bread(block 64) failed
[  290.299896][T10016] FAT-fs (loop4): Directory bread(block 65) failed
[  290.341083][T10016] FAT-fs (loop4): Directory bread(block 66) failed
[  290.361811][T10016] FAT-fs (loop4): Directory bread(block 67) failed
[  290.385138][T10016] FAT-fs (loop4): Directory bread(block 68) failed
[  290.400845][T10016] FAT-fs (loop4): Directory bread(block 69) failed
[  290.407577][T10016] FAT-fs (loop4): Directory bread(block 70) failed
[  290.415126][T10016] FAT-fs (loop4): Directory bread(block 71) failed
[  290.422928][T10016] FAT-fs (loop4): Directory bread(block 72) failed
[  290.429145][T10018] overlayfs: upper fs needs to support d_type.
[  290.429926][T10016] FAT-fs (loop4): Directory bread(block 73) failed
[  290.447534][T10018] overlayfs: upper fs does not support tmpfile.
[  290.529961][ T5818] usb 6-1: GET_CAPABILITIES returned 0
[  290.549915][ T5818] usbtmc 6-1:16.0: can't read capabilities
[  290.609708][   T28] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  290.799644][   T28] usb 4-1: Using ep0 maxpacket: 16
[  290.819190][   T28] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  290.847524][   T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.869632][ T5818] usb 6-1: USB disconnect, device number 9
[  290.879397][   T28] usb 4-1: Product: syz
[  290.895139][   T28] usb 4-1: Manufacturer: syz
[  290.907500][   T28] usb 4-1: SerialNumber: syz
[  291.153839][   T28] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  291.196737][   T28] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  291.216515][   T28] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  291.225428][   T28] usb 4-1: media controller created
[  291.264287][   T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  291.510528][   T28] zl10353_read_register: readreg error (reg=127, ret==-110)
[  291.580442][T10042] netlink: 'syz.5.1389': attribute type 1 has an invalid length.
[  291.600058][T10042] netlink: 'syz.5.1389': attribute type 2 has an invalid length.
[  291.620018][   T28] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5
[  291.642884][   T28] usb 4-1: USB disconnect, device number 19
[  291.972757][T10049] loop2: detected capacity change from 0 to 64
[  292.333236][T10057] ip6tnl1: entered allmulticast mode
[  292.415814][T10055] loop4: detected capacity change from 0 to 8192
[  292.494207][T10062] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  292.559562][T10055] NILFS error (device loop4): nilfs_readdir: zero-length directory entry
[  292.605458][T10055] Remounting filesystem read-only
[  292.942735][T10071] loop4: detected capacity change from 0 to 4096
[  293.026227][T10076] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  293.365045][T10087] loop2: detected capacity change from 0 to 512
[  293.387438][T10087] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  293.420402][    T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  293.443692][T10087] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.1410: iget: bad i_size value: 360287970189639680
[  293.468145][T10087] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1410: couldn't read orphan inode 15 (err -117)
[  293.492835][T10087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.557181][T10087] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  293.626030][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  293.650513][    T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  293.670866][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.683196][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.801895][    T9] usb 6-1: config 0 descriptor??
[  294.495222][    T9] ath6kl: mismatched byte count 0 vs. expected 12
[  294.513623][    T9] ath6kl: Failed to init ath6kl core: -22
[  294.557832][    T9] ath6kl_usb: probe of 6-1:0.0 failed with error -22
[  294.766299][    T9] usb 6-1: USB disconnect, device number 10
[  294.774122][T10091] loop4: detected capacity change from 0 to 131072
[  294.803295][T10091] F2FS-fs (loop4): Found nat_bits in checkpoint
[  294.864828][T10091] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  294.935458][T10105] loop3: detected capacity change from 0 to 256
[  294.967760][T10091] F2FS-fs (loop4): list inode (7) has corrupted xattr
[  295.501081][T10114] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1416'.
[  295.890906][T10124] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1424'.
[  296.698679][T10120] loop3: detected capacity change from 0 to 32768
[  296.743198][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1428'.
[  296.770199][T10120] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  296.805370][T10122] loop4: detected capacity change from 0 to 32768
[  296.838722][T10120] JBD2: Ignoring recovery information on journal
[  296.926261][T10122] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  296.977082][T10122] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  297.007083][T10120] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  297.192280][T10122] XFS (loop4): Ending clean mount
[  297.242300][T10122] XFS (loop4): Quotacheck needed: Please wait.
[  297.255970][T10146] loop5: detected capacity change from 0 to 256
[  297.439433][T10122] XFS (loop4): Quotacheck: Done.
[  297.472018][T10126] loop2: detected capacity change from 0 to 32768
[  297.515968][T10126] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  297.552345][T10126] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  297.719191][   T27] audit: type=1326 audit(1780308294.424:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.5.1431" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe120f9ce59 code=0x7ffc0000
[  297.832580][ T6394] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  297.852529][   T27] audit: type=1326 audit(1780308294.424:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.5.1431" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe120f9ce59 code=0x7ffc0000
[  297.876543][    C0] vkms_vblank_simulate: vblank timer overrun
[  297.894784][T10126] gfs2: fsid=syz:syz.0: journal 0 mapped with 11 extents in 0ms
[  297.910826][   T27] audit: type=1326 audit(1780308294.424:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.5.1431" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe120f9ce59 code=0x7ffc0000
[  297.953825][ T5818] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  297.977704][ T5818] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  298.020506][   T27] audit: type=1326 audit(1780308294.424:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.5.1431" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe120f9ce59 code=0x7ffc0000
[  298.050557][ T5775] ocfs2: Unmounting device (7,3) on (node local)
[  298.062164][ T5818] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 84ms
[  298.093152][   T27] audit: type=1326 audit(1780308294.424:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.5.1431" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe120f9ce59 code=0x7ffc0000
[  298.109998][ T5818] gfs2: fsid=syz:syz.0: jid=0: Done
[  298.126043][T10154] loop5: detected capacity change from 0 to 512
[  298.162448][T10126] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  298.193962][   T27] audit: type=1326 audit(1780308294.424:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.5.1431" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe120f9ce59 code=0x7ffc0000
[  298.497482][T10126] gfs2: fsid=syz:syz.0: found 1 quota changes
[  298.939747][    T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  298.959674][   T28] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  298.960801][T10169] netlink: 'syz.5.1440': attribute type 6 has an invalid length.
[  298.998604][T10169] netlink: 'syz.5.1440': attribute type 6 has an invalid length.
[  299.171973][   T28] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  299.173359][    T9] usb 3-1: config 1 interface 0 has no altsetting 0
[  299.181074][   T28] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  299.229656][   T28] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  299.231698][    T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40
[  299.268587][   T28] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  299.295584][   T28] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  299.299541][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.305683][   T28] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  299.327810][    T9] usb 3-1: Product: syz
[  299.339709][    T9] usb 3-1: Manufacturer: syz
[  299.344381][    T9] usb 3-1: SerialNumber: syz
[  299.352472][   T28] usb 4-1: Product: syz
[  299.366986][   T28] usb 4-1: Manufacturer: syz
[  299.390047][   T28] cdc_wdm 4-1:1.0: skipping garbage
[  299.395335][   T28] cdc_wdm 4-1:1.0: skipping garbage
[  299.440001][   T28] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  299.449432][   T28] cdc_wdm 4-1:1.0: Unknown control protocol
[  299.507148][T10177] dummy0: Caught tx_queue_len zero misconfig
[  299.598630][T10126] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  299.598630][T10126]   inode = 11 2339
[  299.598630][T10126]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 417
[  299.654023][T10126] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[  299.700635][T10126] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:10126 [syz.2.1425] gfs2_quota_sync+0x411/0x5a0
[  299.720661][T10126] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[  299.728964][T10126] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  299.772297][    C1] wdm_int_callback: 11 callbacks suppressed
[  299.772320][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  299.772723][ T5815] usb 4-1: USB disconnect, device number 20
[  299.778263][    C1] wdm_int_callback: 11 callbacks suppressed
[  299.778279][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  299.778304][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  299.818002][T10126] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  299.827076][T10126] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  299.883119][T10126] gfs2: fsid=syz:syz.0: File system withdrawn
[  299.892040][T10126] CPU: 0 PID: 10126 Comm: syz.2.1425 Not tainted syzkaller #0
[  299.899567][T10126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  299.909672][T10126] Call Trace:
[  299.912986][T10126]  <TASK>
[  299.915963][T10126]  dump_stack_lvl+0x18c/0x250
[  299.920697][T10126]  ? kobject_uevent_env+0x363/0x8b0
[  299.925949][T10126]  ? show_regs_print_info+0x20/0x20
[  299.931192][T10126]  ? load_image+0x420/0x420
[  299.935740][T10126]  ? kobject_uevent_env+0x363/0x8b0
[  299.940997][T10126]  gfs2_withdraw+0xb24/0x13d0
[  299.945750][T10126]  ? gfs2_lm+0x240/0x240
[  299.950056][T10126]  ? gfs2_consist_inode_i+0xf5/0x110
[  299.955372][T10126]  gfs2_inode_refresh+0xc50/0x1160
[  299.960508][T10126]  ? gfs2_inode_metasync+0xf0/0xf0
[  299.965652][T10126]  ? gfs2_glock_nq+0xd4f/0x1420
[  299.970621][T10126]  gfs2_instantiate+0x162/0x220
[  299.975515][T10126]  gfs2_glock_wait+0x1d4/0x2a0
[  299.980313][T10126]  do_sync+0x4c6/0xe50
[  299.984401][T10126]  ? gfs2_quota_sync+0x411/0x5a0
[  299.989353][T10126]  ? bh_get+0x760/0x760
[  299.993526][T10126]  ? gfs2_quota_sync+0x31a/0x5a0
[  299.998479][T10126]  ? gfs2_quota_sync+0x411/0x5a0
[  300.003424][T10126]  ? do_raw_spin_unlock+0x121/0x230
[  300.008646][T10126]  ? do_raw_spin_unlock+0x121/0x230
[  300.013870][T10126]  gfs2_quota_sync+0x411/0x5a0
[  300.018659][T10126]  gfs2_sync_fs+0x4c/0xb0
[  300.023012][T10126]  sync_filesystem+0xea/0x220
[  300.027705][T10126]  gfs2_reconfigure+0xbb/0xb10
[  300.032495][T10126]  ? hook_sb_remount+0x1b/0xc0
[  300.037274][T10126]  ? bpf_lsm_sb_remount+0x9/0x10
[  300.042233][T10126]  reconfigure_super+0x21e/0x8a0
[  300.047194][T10126]  vfs_fsconfig_locked+0x16c/0x320
[  300.052325][T10126]  __se_sys_fsconfig+0x70d/0x850
[  300.057288][T10126]  ? __x64_sys_fsconfig+0xc0/0xc0
[  300.062337][T10126]  ? lockdep_hardirqs_on+0x98/0x150
[  300.067571][T10126]  ? __x64_sys_fsconfig+0x20/0xc0
[  300.072623][T10126]  do_syscall_64+0x55/0xb0
[  300.077052][T10126]  ? clear_bhb_loop+0x40/0x90
[  300.081747][T10126]  ? clear_bhb_loop+0x40/0x90
[  300.086442][T10126]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  300.092352][T10126] RIP: 0033:0x7f285f59ce59
[  300.096781][T10126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  300.116853][T10126] RSP: 002b:00007f286042e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  300.125411][T10126] RAX: ffffffffffffffda RBX: 00007f285f815fa0 RCX: 00007f285f59ce59
[  300.134099][T10126] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004
[  300.142122][T10126] RBP: 00007f285f632d6f R08: 0000000000000000 R09: 0000000000000000
[  300.150130][T10126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  300.158146][T10126] R13: 00007f285f816038 R14: 00007f285f815fa0 R15: 00007fff7e6b0678
[  300.167048][T10126]  </TASK>
[  300.205211][T10186] loop5: detected capacity change from 0 to 1024
[  300.218426][T10186] EXT4-fs: Ignoring removed orlov option
[  300.324742][T10186] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  300.384520][    T9] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input21
[  300.426957][ T7661] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.455321][ T5128] bcm5974 3-1:1.0: could not read from device
[  300.505070][ T5128] bcm5974 3-1:1.0: could not read from device
[  300.518916][    T9] usb 3-1: USB disconnect, device number 16
[  300.537977][ T5128] bcm5974 3-1:1.0: could not read from device
[  300.599604][   T28] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  300.699177][T10197] loop5: detected capacity change from 0 to 16
[  300.708608][T10197] erofs: (device loop5): mounted with root inode @ nid 36.
[  300.742664][T10197] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  300.758813][T10197] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851]
[  300.775318][T10197] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  300.791619][   T28] usb 5-1: config 246 has an invalid interface number: 166 but max is 0
[  300.819579][   T28] usb 5-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config
[  300.841969][   T28] usb 5-1: config 246 has no interface number 0
[  300.848420][   T28] usb 5-1: config 246 interface 166 altsetting 118 endpoint 0xB has invalid wMaxPacketSize 0
[  300.902558][   T28] usb 5-1: config 246 interface 166 altsetting 118 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  300.936848][   T28] usb 5-1: config 246 interface 166 has no altsetting 0
[  300.959707][   T28] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63
[  300.977313][   T28] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.990653][   T28] usb 5-1: Product: syz
[  300.995253][   T28] usb 5-1: Manufacturer: syz
[  301.008200][   T28] usb 5-1: SerialNumber: syz
[  301.286286][T10205] loop2: detected capacity change from 0 to 128
[  301.674629][   T28] usb 5-1: Limiting number of CPorts to U8_MAX
[  301.704059][   T28] usb 5-1: Not enough endpoints found in device, aborting!
[  301.891128][   T28] usb 5-1: USB disconnect, device number 11
[  302.220904][  T787] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  302.238223][T10216] loop5: detected capacity change from 0 to 8192
[  302.258178][T10216] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  302.272546][ T5818] usb 3-1: new low-speed USB device number 17 using dummy_hcd
[  302.279732][T10216] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  302.290442][T10216] REISERFS (device loop5): using ordered data mode
[  302.297014][T10216] reiserfs: using flush barriers
[  302.306487][T10216] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  302.324935][T10216] REISERFS (device loop5): checking transaction log (loop5)
[  302.431132][  T787] usb 4-1: Using ep0 maxpacket: 16
[  302.449015][  T787] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  302.465311][ T5818] usb 3-1: config 0 has no interfaces?
[  302.474947][  T787] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  302.486110][ T5818] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  302.492870][  T787] usb 4-1: config 0 interface 0 has no altsetting 0
[  302.510977][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.511616][  T787] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  302.519140][T10216] REISERFS (device loop5): Using tea hash to sort names
[  302.535696][  T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.543501][T10216] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  302.554815][ T5818] usb 3-1: config 0 descriptor??
[  302.594486][  T787] usb 4-1: config 0 descriptor??
[  302.799040][    T9] usb 3-1: USB disconnect, device number 17
[  303.052445][  T787] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0
[  303.086378][  T787] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0
[  303.103296][  T787] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0
[  303.139684][  T787] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0
[  303.167156][  T787] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0
[  303.193822][  T787] nzxt-smart2 0003:1E71:2009.000C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0
[  303.333789][  T787] usb 4-1: USB disconnect, device number 21
[  304.428264][T10251] loop5: detected capacity change from 0 to 2048
[  304.531145][T10251] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  304.650949][T10251] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  304.732969][T10251] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  304.757211][T10251] EXT4-fs (loop5): This should not happen!! Data will be lost
[  304.757211][T10251] 
[  304.798353][T10234] loop4: detected capacity change from 0 to 40427
[  304.804932][T10251] EXT4-fs (loop5): Total free blocks count 0
[  304.805002][T10251] EXT4-fs (loop5): Free/Dirty block details
[  304.805042][T10251] EXT4-fs (loop5): free_blocks=4096
[  304.805082][T10251] EXT4-fs (loop5): dirty_blocks=32
[  304.805099][T10251] EXT4-fs (loop5): Block reservation details
[  304.805114][T10251] EXT4-fs (loop5): i_reserved_data_blocks=2
[  304.856252][T10234] F2FS-fs (loop4): invalid crc value
[  304.894808][T10234] F2FS-fs (loop4): Found nat_bits in checkpoint
[  304.968224][ T1080] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28
[  305.015466][T10234] F2FS-fs (loop4): Start checkpoint disabled!
[  305.090389][T10234] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  305.370252][T10268] loop3: detected capacity change from 0 to 8192
[  305.463606][   T49] kworker/u4:3: attempt to access beyond end of device
[  305.463606][   T49] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  305.519353][   T49] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  306.292360][T10279] debugfs: Directory 'netdev:syzkaller0' with parent 'phy11' already present!
[  306.296437][T10281] loop5: detected capacity change from 0 to 512
[  306.340969][T10281] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  306.363148][T10281] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm syz.5.1482: bg 0: block 104: invalid block bitmap
[  306.385129][T10281] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  306.420133][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1483'.
[  306.447218][T10281] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1482: invalid indirect mapped block 1 (level 1)
[  306.468528][T10284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1483'.
[  306.478283][T10284] netlink: 'syz.3.1483': attribute type 6 has an invalid length.
[  306.502747][T10281] EXT4-fs (loop5): 1 truncate cleaned up
[  306.525422][T10281] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  306.752690][ T7661] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.754603][T10293] bond0: entered promiscuous mode
[  306.767002][T10293] bond_slave_0: entered promiscuous mode
[  306.778135][T10293] bond_slave_1: entered promiscuous mode
[  306.804313][T10291] bond0: left promiscuous mode
[  306.809305][T10291] bond_slave_0: left promiscuous mode
[  306.820639][T10291] bond_slave_1: left promiscuous mode
[  307.305076][T10308] loop5: detected capacity change from 0 to 256
[  307.330907][T10308] exfat: Deprecated parameter 'namecase'
[  307.349391][T10308] exfat: Deprecated parameter 'namecase'
[  307.384232][T10308] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  308.157887][T10337] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1507'.
[  308.559795][ T5818] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  308.767213][T10362] loop2: detected capacity change from 0 to 1024
[  308.781512][ T5818] usb 5-1: Using ep0 maxpacket: 16
[  308.797253][ T5818] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  308.810133][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.818338][ T5818] usb 5-1: Product: syz
[  308.822761][ T5818] usb 5-1: Manufacturer: syz
[  308.827523][ T5818] usb 5-1: SerialNumber: syz
[  308.939965][   T28] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  308.973298][ T1080] hfsplus: b-tree write err: -5, ino 8
[  309.091813][ T5818] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  309.120457][ T5818] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  309.131163][   T28] usb 6-1: Using ep0 maxpacket: 32
[  309.148830][   T28] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  309.160185][ T5818] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  309.175040][   T28] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.199604][ T5818] usb 5-1: media controller created
[  309.256149][ T5818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  309.315932][T10374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1524'.
[  309.415556][T10376] loop3: detected capacity change from 0 to 256
[  309.422783][   T28] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  309.437259][   T28] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  309.469255][   T28] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  309.481776][   T28] usb 6-1: media controller created
[  309.510740][ T5818] zl10353_read_register: readreg error (reg=127, ret==-71)
[  309.532684][T10376] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d)
[  309.555181][   T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  309.640425][T10356] ------------[ cut here ]------------
[  309.646743][T10356] usb 5-1: BOGUS control dir, pipe 80000c80 doesn't match bRequestType c0
[  309.660374][T10356] WARNING: CPU: 0 PID: 10356 at drivers/usb/core/urb.c:413 usb_submit_urb+0x10ac/0x17d0
[  309.670631][T10356] Modules linked in:
[  309.674945][T10356] CPU: 0 PID: 10356 Comm: syz.5.1516 Not tainted syzkaller #0
[  309.682886][T10356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  309.694188][T10356] RIP: 0010:usb_submit_urb+0x10ac/0x17d0
[  309.701500][T10356] Code: df 0f b6 44 05 00 84 c0 0f 85 29 06 00 00 45 0f b6 45 00 48 c7 c7 c0 77 6b 8b 48 8b 74 24 20 4c 89 fa 44 89 f1 e8 94 8c ed fa <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 96 f4 ff ff 89 e9 80 e1 07
[  309.718877][ T5088] Bluetooth: hci1: command tx timeout
[  309.721421][T10356] RSP: 0018:ffffc9000b777510 EFLAGS: 00010246
[  309.732796][T10356] RAX: a4318a03d4a56200 RBX: ffff888025fc8400 RCX: 0000000000080000
[  309.740848][T10356] RDX: ffffc9000caa2000 RSI: 0000000000006cc0 RDI: 0000000000006cc1
[  309.748866][T10356] RBP: 1ffff11004d8ac73 R08: ffffc9000b777107 R09: 1ffff920016eee20
[  309.757026][T10356] R10: dffffc0000000000 R11: fffff520016eee21 R12: dffffc0000000000
[  309.765071][T10356] R13: ffff888026c56398 R14: 0000000080000c80 R15: ffff888026025e10
[  309.776303][T10356] FS:  00007fe121e846c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  309.785403][T10356] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  309.792060][T10356] CR2: 00007f28603456b8 CR3: 000000002b69f000 CR4: 00000000003506f0
[  309.801075][T10356] Call Trace:
[  309.804395][T10356]  <TASK>
[  309.807377][T10356]  usb_start_wait_urb+0x140/0x580
[  309.813024][T10356]  ? usb_api_blocking_completion+0xb0/0xb0
[  309.818910][T10356]  usb_control_msg+0x235/0x3e0
[  309.823945][T10356]  gl861_ctrl_msg+0x215/0x3d0
[  309.828675][T10356]  ? kernel_text_address+0xa0/0xd0
[  309.833905][T10356]  ? gl861_i2c_functionality+0x10/0x10
[  309.839413][T10356]  ? __copy_xstate_to_uabi_buf+0xaf0/0xbc0
[  309.845393][T10356]  ? mark_lock+0x94/0x320
[  309.849808][T10356]  gl861_i2c_master_xfer+0x434/0x640
[  309.855131][T10356]  ? stack_trace_snprint+0xf0/0xf0
[  309.860318][T10356]  ? gl861_init+0x40/0x40
[  309.864687][T10356]  __i2c_transfer+0x884/0x20c0
[  309.869652][T10356]  ? mark_lock+0x94/0x320
[  309.874050][T10356]  ? i2c_cmd+0x110/0x110
[  309.878326][T10356]  __i2c_smbus_xfer+0x1048/0x1e70
[  309.883464][T10356]  ? rt_mutex_slowlock+0x368/0x610
[  309.888622][T10356]  ? i2c_smbus_write_i2c_block_data+0x1e0/0x1e0
[  309.894945][T10356]  ? rt_mutex_adjust_prio_chain+0x2260/0x2260
[  309.901679][T10356]  ? tomoyo_path_number_perm+0x500/0x620
[  309.907348][T10356]  ? i2c_smbus_xfer+0x124/0x3b0
[  309.912452][T10356]  i2c_smbus_xfer+0x276/0x3b0
[  309.917181][T10356]  ? i2c_smbus_read_byte+0x1d0/0x1d0
[  309.922571][T10356]  i2cdev_ioctl_smbus+0x1e8/0x680
[  309.927655][T10356]  ? i2cdev_ioctl_rdwr+0x690/0x690
[  309.932939][T10356]  ? __might_fault+0xaa/0x120
[  309.937680][T10356]  ? __might_fault+0xc6/0x120
[  309.942444][T10356]  ? __might_fault+0xaa/0x120
[  309.947155][T10356]  i2cdev_ioctl+0x613/0x840
[  309.951731][T10356]  ? i2cdev_write+0x120/0x120
[  309.956464][T10356]  ? bpf_lsm_file_ioctl+0x9/0x10
[  309.961487][T10356]  ? security_file_ioctl+0x80/0xa0
[  309.966628][T10356]  ? i2cdev_write+0x120/0x120
[  309.971401][T10356]  __se_sys_ioctl+0xfd/0x170
[  309.976045][T10356]  do_syscall_64+0x55/0xb0
[  309.980534][T10356]  ? clear_bhb_loop+0x40/0x90
[  309.985249][T10356]  ? clear_bhb_loop+0x40/0x90
[  309.990010][T10356]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  309.995952][T10356] RIP: 0033:0x7fe120f9ce59
[  310.001108][T10356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  310.020936][T10356] RSP: 002b:00007fe121e84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  310.029401][T10356] RAX: ffffffffffffffda RBX: 00007fe121215fa0 RCX: 00007fe120f9ce59
[  310.037583][T10356] RDX: 00002000000000c0 RSI: 0000000000000720 RDI: 0000000000000004
[  310.045630][T10356] RBP: 00007fe121032d6f R08: 0000000000000000 R09: 0000000000000000
[  310.053684][T10356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  310.061854][T10356] R13: 00007fe121216038 R14: 00007fe121215fa0 R15: 00007ffdba59a258
[  310.069918][T10356]  </TASK>
[  310.072973][T10356] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  310.080275][T10356] CPU: 0 PID: 10356 Comm: syz.5.1516 Not tainted syzkaller #0
[  310.087762][T10356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  310.097843][T10356] Call Trace:
[  310.101154][T10356]  <TASK>
[  310.104111][T10356]  dump_stack_lvl+0x18c/0x250
[  310.108838][T10356]  ? show_regs_print_info+0x20/0x20
[  310.114073][T10356]  ? load_image+0x420/0x420
[  310.118626][T10356]  panic+0x2dc/0x730
[  310.122574][T10356]  ? bpf_jit_dump+0xd0/0xd0
[  310.127135][T10356]  __warn+0x2e0/0x470
[  310.131249][T10356]  ? usb_submit_urb+0x10ac/0x17d0
[  310.136318][T10356]  ? usb_submit_urb+0x10ac/0x17d0
[  310.141387][T10356]  report_bug+0x2be/0x4f0
[  310.145763][T10356]  ? usb_submit_urb+0x10ac/0x17d0
[  310.150832][T10356]  ? usb_submit_urb+0x10ac/0x17d0
[  310.155909][T10356]  ? usb_submit_urb+0x10ae/0x17d0
[  310.160980][T10356]  handle_bug+0xcf/0x120
[  310.165270][T10356]  exc_invalid_op+0x1a/0x50
[  310.169815][T10356]  asm_exc_invalid_op+0x1a/0x20
[  310.174721][T10356] RIP: 0010:usb_submit_urb+0x10ac/0x17d0
[  310.180388][T10356] Code: df 0f b6 44 05 00 84 c0 0f 85 29 06 00 00 45 0f b6 45 00 48 c7 c7 c0 77 6b 8b 48 8b 74 24 20 4c 89 fa 44 89 f1 e8 94 8c ed fa <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 96 f4 ff ff 89 e9 80 e1 07
[  310.200182][T10356] RSP: 0018:ffffc9000b777510 EFLAGS: 00010246
[  310.206264][T10356] RAX: a4318a03d4a56200 RBX: ffff888025fc8400 RCX: 0000000000080000
[  310.214247][T10356] RDX: ffffc9000caa2000 RSI: 0000000000006cc0 RDI: 0000000000006cc1
[  310.222233][T10356] RBP: 1ffff11004d8ac73 R08: ffffc9000b777107 R09: 1ffff920016eee20
[  310.230214][T10356] R10: dffffc0000000000 R11: fffff520016eee21 R12: dffffc0000000000
[  310.238193][T10356] R13: ffff888026c56398 R14: 0000000080000c80 R15: ffff888026025e10
[  310.246202][T10356]  usb_start_wait_urb+0x140/0x580
[  310.251259][T10356]  ? usb_api_blocking_completion+0xb0/0xb0
[  310.257110][T10356]  usb_control_msg+0x235/0x3e0
[  310.261898][T10356]  gl861_ctrl_msg+0x215/0x3d0
[  310.266608][T10356]  ? kernel_text_address+0xa0/0xd0
[  310.271740][T10356]  ? gl861_i2c_functionality+0x10/0x10
[  310.277206][T10356]  ? __copy_xstate_to_uabi_buf+0xaf0/0xbc0
[  310.283029][T10356]  ? mark_lock+0x94/0x320
[  310.287387][T10356]  gl861_i2c_master_xfer+0x434/0x640
[  310.292682][T10356]  ? stack_trace_snprint+0xf0/0xf0
[  310.297817][T10356]  ? gl861_init+0x40/0x40
[  310.302156][T10356]  __i2c_transfer+0x884/0x20c0
[  310.306941][T10356]  ? mark_lock+0x94/0x320
[  310.311301][T10356]  ? i2c_cmd+0x110/0x110
[  310.315561][T10356]  __i2c_smbus_xfer+0x1048/0x1e70
[  310.320606][T10356]  ? rt_mutex_slowlock+0x368/0x610
[  310.325735][T10356]  ? i2c_smbus_write_i2c_block_data+0x1e0/0x1e0
[  310.332014][T10356]  ? rt_mutex_adjust_prio_chain+0x2260/0x2260
[  310.338106][T10356]  ? tomoyo_path_number_perm+0x500/0x620
[  310.343746][T10356]  ? i2c_smbus_xfer+0x124/0x3b0
[  310.348609][T10356]  i2c_smbus_xfer+0x276/0x3b0
[  310.353302][T10356]  ? i2c_smbus_read_byte+0x1d0/0x1d0
[  310.358607][T10356]  i2cdev_ioctl_smbus+0x1e8/0x680
[  310.363741][T10356]  ? i2cdev_ioctl_rdwr+0x690/0x690
[  310.368873][T10356]  ? __might_fault+0xaa/0x120
[  310.373569][T10356]  ? __might_fault+0xc6/0x120
[  310.378260][T10356]  ? __might_fault+0xaa/0x120
[  310.382958][T10356]  i2cdev_ioctl+0x613/0x840
[  310.387476][T10356]  ? i2cdev_write+0x120/0x120
[  310.392181][T10356]  ? bpf_lsm_file_ioctl+0x9/0x10
[  310.397128][T10356]  ? security_file_ioctl+0x80/0xa0
[  310.402256][T10356]  ? i2cdev_write+0x120/0x120
[  310.406946][T10356]  __se_sys_ioctl+0xfd/0x170
[  310.411556][T10356]  do_syscall_64+0x55/0xb0
[  310.416070][T10356]  ? clear_bhb_loop+0x40/0x90
[  310.420762][T10356]  ? clear_bhb_loop+0x40/0x90
[  310.425462][T10356]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  310.431371][T10356] RIP: 0033:0x7fe120f9ce59
[  310.435799][T10356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  310.455432][T10356] RSP: 002b:00007fe121e84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  310.463858][T10356] RAX: ffffffffffffffda RBX: 00007fe121215fa0 RCX: 00007fe120f9ce59
[  310.471842][T10356] RDX: 00002000000000c0 RSI: 0000000000000720 RDI: 0000000000000004
[  310.479828][T10356] RBP: 00007fe121032d6f R08: 0000000000000000 R09: 0000000000000000
[  310.487805][T10356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  310.495793][T10356] R13: 00007fe121216038 R14: 00007fe121215fa0 R15: 00007ffdba59a258
[  310.503794][T10356]  </TASK>
[  310.506952][T10356] Kernel Offset: disabled
[  310.511376][T10356] Rebooting in 86400 seconds..