last executing test programs:

7.242888184s ago: executing program 3 (id=3321):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xa, 't|'}, @global=@item_012={0x1, 0x1, 0x4, "8e"}, @global=@item_012={0x2, 0x1, 0x6, "6d1d"}]}}, 0x0}, 0x0)

6.740237031s ago: executing program 4 (id=3324):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x4}, 0x62, 0x0, 0x0)

6.393078227s ago: executing program 2 (id=3325):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x8000000003c)
io_uring_setup(0x76d0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)=0x1, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x38)
r4 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f0000000500)="6b8ab7e6d61d55c6065fbd783a9ff5c44ff2f19d7571b70ac0f7179e6959618d193e39b75c08f6de11b79c3c27903c85f21f6b6bf6f86b3f000096dee718882185344a92f0863d37082be57c99fb3467e33850a9aa39581e1459459744c40f09faaf3e1a49d475185530049489cea9a13431b836fbed1db10f83354cebed4277b6054ea1694f8844efdc6e64395fb9077eb3ca7f40c020d0bbd120dff1f4d738c7062a8dbe499c82573bc0f8e092617fdff53ec04b8001193018697b672e4df4aaec94a4f8fc88f027ccbecff06d4448a0be60473b836396991565ef8ccc9b4666a03e6c16d653", 0xe7, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r4, r4, r4}, &(0x7f00000002c0)=""/38, 0x26, &(0x7f0000000340)={&(0x7f0000000080)={'sha256-avx2\x00'}, &(0x7f0000000040)="6b10b7d462", 0x5})
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)

6.0863761s ago: executing program 0 (id=3326):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

5.488800224s ago: executing program 4 (id=3327):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
dup(0xffffffffffffffff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="dd", 0xffffff23}], 0x1}], 0x1, 0x2c004080)
accept4(r1, 0x0, 0x0, 0x80000)
recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000140)=@qipcrtr, 0x80, 0x0, 0x0, &(0x7f0000000880)=""/9, 0x9}, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)

5.419101099s ago: executing program 0 (id=3328):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$PIO_UNIMAP(r0, 0x4b67, 0x0)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)

5.397287s ago: executing program 2 (id=3329):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0x1, 0x14fe, &(0x7f0000001580)="$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")
r1 = open(&(0x7f0000000080)='./file1\x00', 0x1cf542, 0x60)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='./file0/file0\x00')
ftruncate(r1, 0x96ef)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000a40)={'#! ', './file0', [{0x20, '}.e-{*D'}, {0x20, '\xc2n\xcf\x03SI'}, {0x20, '{{#'}, {0x20, '@'}, {0x20, '@'}], 0xa, "70869e19fcc73d48605f3855a2490e79b9c20c243e82183c57fac5779a7c535bf192b5d26581"}, 0x48)
rmdir(&(0x7f0000000040)='./file0\x00')

5.190505346s ago: executing program 4 (id=3330):
r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0)
r1 = dup(r0)
r2 = fanotify_init(0x0, 0x0)
fanotify_mark(r2, 0x1, 0x40000033, r1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2)
write$binfmt_misc(r4, 0x0, 0xff9d)
sendfile(r3, r4, &(0x7f0000000100), 0x2)

4.989885441s ago: executing program 4 (id=3331):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x8000000, &(0x7f0000000500)="a36ac0518d3deefef754658b64f1b4e766d16dad431bde34f0d6b7fce669776c9de68af8ad7df3f598b593432e6e293ad4d6a53d5fadea38b183665078974d4f9f1dcf0e855636f659c0d3c97dae0fb0cd80ed1724a4b4b2073b41232f0aaf2e0152815b53a817028324313d310518bc0d51821ffedd0a6ed7096de1a8ead4a3e99e4e47c7914724aa386fcc8dcb7162e21fed49252e1ba543a733cc95d185feeca70737aa62a6435514d712abd92d10509793e89f82acf350b7575e33", 0xbd, 0x0, 0x0, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)

4.891303958s ago: executing program 2 (id=3332):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
io_cancel(0x0, 0x0, 0x0)

4.662425155s ago: executing program 2 (id=3333):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x0, 0x0)
getgid()
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r3 = getpid()
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, &(0x7f0000000000))
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
waitid(0x0, 0x0, 0x0, 0x8, &(0x7f0000000500))
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0)

4.350769178s ago: executing program 1 (id=3334):
socket(0x1e, 0x4, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
close(r1)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x1}, 0xe)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}}}, 0x84)

4.149332053s ago: executing program 3 (id=3335):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000d0000000000000000010000ff0100"])
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.850564155s ago: executing program 1 (id=3336):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$EBT_SO_GET_INFO(r1, 0x10d, 0xb2, 0x0, &(0x7f00000016c0))

3.727102194s ago: executing program 1 (id=3337):
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000001e40)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES16=0x0], 0x6, 0x2d1, &(0x7f0000000740)="$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")
r0 = open(&(0x7f0000000500)='./bus\x00', 0x14927e, 0x0)
lseek(r0, 0x0, 0x4)

3.607784973s ago: executing program 4 (id=3338):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='attr/current\x00')
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
pwrite64(r2, &(0x7f0000000280)='+', 0x1, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
fallocate(r3, 0x0, 0x8, 0x10000)
read$FUSE(r0, &(0x7f000000ac40)={0x2020}, 0x2020)
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000600)=ANY=[@ANYBLOB="0400000000000000000000000040"])

3.451318785s ago: executing program 1 (id=3339):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x8000000003c)
io_uring_setup(0x76d0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)=0x1, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x38)
r4 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f0000000500)="6b8ab7e6d61d55c6065fbd783a9ff5c44ff2f19d7571b70ac0f7179e6959618d193e39b75c08f6de11b79c3c27903c85f21f6b6bf6f86b3f000096dee718882185344a92f0863d37082be57c99fb3467e33850a9aa39581e1459459744c40f09faaf3e1a49d475185530049489cea9a13431b836fbed1db10f83354cebed4277b6054ea1694f8844efdc6e64395fb9077eb3ca7f40c020d0bbd120dff1f4d738c7062a8dbe499c82573bc0f8e092617fdff53ec04b8001193018697b672e4df4aaec94a4f8fc88f027ccbecff06d4448a0be60473b836396991565ef8ccc9b4666a03e6c16d653", 0xe7, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r4, r4, r4}, &(0x7f00000002c0)=""/38, 0x26, &(0x7f0000000340)={&(0x7f0000000080)={'sha256-avx2\x00'}, &(0x7f0000000040)="6b10b7d4620000", 0x7})
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)

3.222386541s ago: executing program 0 (id=3340):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
dup(0xffffffffffffffff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58)
r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
sendmmsg$alg(r0, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="dd", 0xffffff23}], 0x1}], 0x1, 0x2c004080)
accept4(r0, 0x0, 0x0, 0x80000)
recvmsg(r0, &(0x7f00000008c0)={&(0x7f0000000140)=@qipcrtr, 0x80, 0x0, 0x0, &(0x7f0000000880)=""/9, 0x9}, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)

3.019558037s ago: executing program 0 (id=3341):
r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0)
r1 = dup(r0)
r2 = fanotify_init(0x0, 0x0)
fanotify_mark(r2, 0x1, 0x40000033, r1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2)
write$binfmt_misc(r4, 0x0, 0xff9d)
sendfile(r3, r4, &(0x7f0000000100), 0x2)

2.56224898s ago: executing program 3 (id=3342):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x4}, 0x62, 0x0, 0x0)

2.470455467s ago: executing program 0 (id=3343):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0x1, 0x14fe, &(0x7f0000001580)="$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")
r1 = open(&(0x7f0000000080)='./file1\x00', 0x1cf542, 0x60)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='./file0/file0\x00')
ftruncate(r1, 0x96ef)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000a40)={'#! ', './file0', [{0x20, '}.e-{*D'}, {0x20, '\xc2n\xcf\x03SI'}, {0x20, '{{#'}, {0x20, '@'}, {0x20, '@'}], 0xa, "70869e19fcc73d48605f3855a2490e79b9c20c243e82183c57fac5779a7c535bf192b5d26581"}, 0x48)
rmdir(&(0x7f0000000040)='./file0\x00')

2.422426641s ago: executing program 1 (id=3344):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
io_cancel(0x0, 0x0, 0x0)

2.2845298s ago: executing program 0 (id=3345):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x28108c0, &(0x7f0000006740)=ANY=[@ANYBLOB="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", @ANYRES32], 0xfe, 0x6180, &(0x7f0000000340)="$eJzs3c1vHGcdB/DfvvqltLV6qEqEkJuWl1KaxEkJgQJtD3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz4A3rgyo0TJyLZSKCeGDT288TjzW7t1PHO2s/nIzkzv3lmvc/kO/vmmdknAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID4/vd+sNKJiGs/TwuWIj4TvYhuxEJdL0fEwvJSXr8fEc/FTnM8GxGDuYj69jv/PB3xakR89FTE1vb6ar344iH78d0//v13P3zirb/9YXD+v3+603tt0np37/7qP3++d7RtBgAAgNJUVVV10sf8M+nzfbftTgEAU5Ff/6skLz/19a//+dZfZqk/arVarVZPoW6qxrvXLCJio3mb+j2Dw/EAcMJsxMdtd4EWyb9o/Yh4ou1OADOt03YHOBZb2+urnZRvp/l6sLzbns8F2Zf/RufB9R2TpgcZPcdkWvvXZvTimQn9WZhSH2ZJzr87mv+13fZhWu+485+WSfkPdy99Kk7Ovzea/4jTk393bP6lyvn3Hyn/nvwBAAAAAGCG5b//L7V8/Hfu6JtyKJ90/Hd5Sn0AAAAAAAAAgMftqOP/PWD8PwAAAJhZ9Wf12m+e2ls26bvY6uVXOxFPjqwPFCZdLLPYdj8AAAAAAAAAAAAAoCT93XN4r3YiBhHx5OJiVVX1T9No/aiOevuTrvTth5K1/SQPAAC7Pnpq5Fr+TsR8RFxN3/U3WFxcrKr5hcVqsVqYy+9nh3Pz1ULjc22e1svmhod4Q9wfVvUvm2/crumgz8sHtY/+vvq+hlXvEB17TAbpf3NCc0thA0Cy+2q05RXplKmqpye9+YB9PP5PoaVYanu/Yva1vZsCAAAAx6+qqqqTvs77TDrm3227UwDAVOTX/9HjAkequxPaIx7P71er1Wq1Wv2p6qZqvHvNIiI2mrep3zMYjh8ATpiN+LjtLtAi+RetHxHPtd0JYKZ12u4Ax2Jre321k/LtNF8P0vju+VyQfflvdHZul28/bnqQ0XNMprV/bUYvnpnQn2en1IdZkvPvjuZ/bbd9mNY77vynZVL+w51L5sqT8++N5j/i9OTfHZt/qXL+/UfKvyd/AAAAAACYYfnv/0uO/+ZNBgAAAAAAAIATZ2t7fTVf95qP/39uzHqu/zydcv6dR81/Ic3L/0TL+XdH8v/yyHq9xvz9N/ce///eXl/9/Z1/fTZPD5v/XJ7ppD2rk/aITrqnTj9Nj7J1D9sc9Ib1PQ063V4/nfNTDd6JG3Ez1uLCvnW76f9jr31lX3vd08G+9ov72vsPtV/a1z5I3ztQLeT2c7EaP4mb8fZOe902d8D2zx/QXh3QnvPvef4vUs6/3/ip819M7Z2Rae3+h92HHvfN6bj7eePG53954fg350CbMT92eb19Z6fem9h9xnliGD+7vXbr3N3rd+7cWok02bf0YqTJY5bzH+z8zO09/7+w256f95uP1/sfDh85/1mxGf0H+3ZTnf8Ljfl6e1+act/akPMfpp+c/9upffzj/yTn35uY/8st9AcAAAAAAAAAAAAAAAA+SVVVO5eIvhERl9P1P21dmwkATFd+/a+SvFytVqvVavXpq5uq8V5vFhHx1+Zt6vcMvxj3ywCAWfa/iPhH252gNfIvWP6+v3r6YtudAabq9vsf/Oj6zZtrt2633RMAAAAAAAAA4NPK438uN8Z/fjEilkbW2zf+65uxfNTxP/t55sEAo495oO8JNrvDXrcx3PjzsTM+97lJ43+fjYfH/85j4vaa2zHB4ID24QHtcwe0jx/NeC+tsRd6NOT8n2+Md17nf2Zk+PUSxn8dHfO+BDn/s439uc7/SyPrNfOvfjtz+W8cdsXN6O7L//yd9356/vb7H7xy473r7669u/bjSysrFy5dvnzlypXz79y4uXZh99/j6fUMyPnnsa+dB1qWnH/OXP5lyfl/IdXyL0vO/4upln9Zcv75/Z78y5Lzz5995F+WnP9LqZZ/WXL+X0m1/Muytb0+V+f/cqrlX5b8+P9qquVflpz/K6mWf1ly/udSLf+y5PzPp/oQ+ft6+FMk55+PcHn8lyXnv5Jq+Zcl538x1fIvS87/UqrlX5ac/6upln9Zcv5fS7X8y5Lzv5xq+Zcl5//1VMu/LDn/K6mWf1ly/t9ItfzLkvP/ZqrlX5ac/2upln9Zcv7fSrX8y5Lz/3aq5V+WnP93Ui3/suT8X0+1/Muy9/3/ZsyYMZNn2n5mAgAAAAAAAAAAAABGTeN04ra3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwt69xch113cAP7MXe+0QYiAEJzWwSUwwzpJdX+ILrRsTrg1QCiQUesF2vWuz4BteuwSKZNNAiYRRUUXV9KEtINRGqiqsigdaUZqHqpen0j7Ql4qqElKjKqCAitRWlK1mzv//98zs7Mysd7yePf/PR7J/uzNn5pw5c2Z2v2t/9wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ7O43zH2mVhRF/U/jry1F8YL6x5smtzQue93N3kIAAABgtf6v8ffzt6ULDvdxo6Zl/u4V//i1xcXFxeJ9o787/oXFxXTFZFGMbyyKxnXR1X9/f615meCJYqI20vT5SI/Vj/a4fqzH9eM9rt/Q4/qNPa6f6HH9kh2wxKby5zGNO9ve+HBLuUuL24vxxnXbO9zqidrGkZH4s5yGWuM2i+MnivniVDFXzLQsXy5bayz/jbvr63prEdc10rSubfUj5AefOB63oRb28faWdV27z+h7ry8mf/iDTxz/4wvP3dlp9twNLfdXbueOe+rb+alwSbmttWJj2idxO0eatnNbh+dktGU7a43b1T9u387n+9zO0Wubuaban/OJYqTx8bca+2ms+cd6aT9tC5f9971FUVy+ttntyyxZVzFSbG65ZOTa8zNRHpH1+6gfSi8uxlZ0nN7dx3Fan7PbW4/T9tdEfP7vDrcbW2Ybmp+m731yw5LnfaXHaVR/1Mu9VtqPwUG/VoblGIzHxbcaD/rJjsfg9vD4P3Hf8sdgx2OnwzGYHnfTMXhPr2NwZMNoY5vTk1Br3ObaMbirZfnRxppqjfnsfd2PwekLp89NL3zs46+dP33s5NzJuTN7du2a2bNv34EDB6ZPzJ+amyn/vs69Pfw2FyPpNXBP2HfxNfDqtmWbD9XFLw3udTjR5XW4pW3ZQb8Ox9ofXG1tXpBLj+nytfFofadPXBkplnmNNZ6fnat/HabH3fQ6HGt6HXb8mtLhdTjWx+uwvsy5nf19zzLW9KfTNtyorwVbmo7B9u9H2o/BQX8/MizH4EQ4Lv515/JfC7aF7X1yaqXfj4wuOQbTww3vPfVL0vf7Ewcao9NxeVf9ils2FBcX5s4/8PixCxfO7yrCWBMvaTpW2o/XzU2PqVhyvI6s+Hg9PP+KJ+/qcPmWsK8mXlv/a2LZ56q+zN4Huj9Xja9unfdny6W7izAGbK33Z6ev5vX9mbJkl/1ZX+ZT06v/Xjzl0qb33/Fl3n9j7v9Jub50V0+Mjo+Vr9/RtHfGW96PW5+qscZ7V62x7uen+3s/Hg9/1vr9+PYu78db25Yd9PvxePuDi+/HtV4/7Vid9udzIhwnp2a6vx/Xl9m6e6XH5FjX9+N7w6yF/f+akBRSLmo6dpY7btO6xsbGw+Mai2toPU73tCw/HrJZfV1P776+43THveV9jaZHd81aHaeTbcsO+jhN71fLHae1Xj99uz7tz+dEOC5u39P9OK0v88ze1b93boofNr13buh1DI6Pbqhv83g6CMv3+8VN8Rh8oDhenC1OFbONazc0jqdaY11TD/Z3DG4If9b6vXJrl2NwR9uygz4G09ex5Y692tjSBz8A7c/nRDgunnqw+zFYX+aN+wf7veuOcElapul71/afry33M6+72nbTjfyZV307/2Z/95/N1pc5dWClObP7fro/XHJLh/3U/vpd7jU1W6zNftoatvO5A8vvp/r21Jf5wsE+j6fDRVFc+sjDjZ/3hn9f+fOL3/5ay7+7dPo3nUsfefj7t57425VsPwDr30/Ksbn8Wtf0L1P9/Ps/AAAAsC7E3D8SZiL/AwAAQGXE3B//V3gi/wMAAEBlxNw/FmaSSf7f+sbn5n9yqUjN/MUgXp92wyPlcrHjOhM+n1y8pn75w1+Z+9FfXupv3SNFUfz4kd/ouPzWR+J2lSbDdl59U+vlS294qa/1H33s2nLN/fUvhvuPj6ffw6BTBXemKIpv3Pa5xnom33+lMZ955Ghjvvvyk0/Ul3n+YPl5vP2zLymX/4NQ/j184ljL7Z8N++G7Yc68rfP+iLf76pXXbNv/3mvri7er3fPCxsN+6gPl/cbfk/P5J8rl435ebvv/6rNPf7W+/OOv6rz9l0Y6b//T4X6/Eub/vLxcvvk5qH8eb/fpsP1xffF2D3z5mx23/+pnyuXPvblc7miYcf07wufb3/zcfPP+erx2rOVxFW8pl4vrn/n2bzeuj/cX7799+yeOXGnZH+3HxzP/XN7PdNvy8fK4nugv2tZfv5/m4zOu/+nfOtqyn3ut/+q7n315/X7b139/23Kjbbdv/41Nf/jpz3VcX9yew392ruXxHH5XeB2H9T/1gXA8huv/9+rnWtYbHX1X6/tPXP6LWy61PJ7orT8s13/1oZON+R+TP/r9W15w6wsvv7K+74riW+8p76/X+k/+0dmW7f/SHTsbz0e8Pnb029e/nLj+8x+dOnN24eL8bNNebfzunLeX27NxYtPm+vbeFt5b2z8/cvbCB+fOT85MzhTFZHV/hd51+3KY3y/H5ZXefudj4fm86/e+sfm+f/psvPxfHi0vv/K28uvWq8Nynw+Xbymfv8XaKtf/1N13NF7ftWfKz1t67AOwbft/HuhrwfD4278viMf7uZd+sLEf6tc1vm7E1/Uqt/87s+X9fD3s18Xwm5nvuePa+pqXj78b4cp7ytf7qvdfeJuLz+ufhOf7Hd8t7z9uV3y83wnfx3xza+v7XTw+vn5ppP3+G7/F43J4Pykul9fHpeL+vvL8HR03L/4ekuLynY3Pfyfdz50repjLWfjYwvSp+TMXH5++MLdwYXrhYx8/cvrsxTMXjjR+l+eRD/W6/bX3p82N96fZuX17i5lNRVGcLWbW4A3rxmx//aP+tv/cY8dn98/cNzt34tjFExceOzd3/uTxhYXjc7ML9x07cWLuo71uPz97aNfug3v27546OT976MDBg3sOTs2fOVvfjHKjetg38+GpM+ePNG6ycGjvwV0PPrh3Zur02dm5Q/tnZqYu9rp942vTVP3Wvz51fu7UsQvzp+emFuY/Pndo18F9+3b3/G2Ap8+dWJicPn/xzPTFhbnz0+VjmbzQuLj+ta/X7ammhX8rv59tVyt/EV/xzvv3pd/PWveVTy57V+Uibb9A9Lnwu2j+4UXnDvTzecz942EmmeR/AAAAyEHM/RvCTOR/AAAAqIyY+zeGmcj/AAAAUBkx90+EmWSS//X/9f/76/+X1+v/59X/P/eRsle63vv/sT+v/5+Hm9z/X/X69f/1/6vX/++/P7/et1//X/+fpYat/x9z/6aiyDL/AwAAQA5i7t8cZiL/AwAAQGXE3H9LmIn8DwAAAJURc/8Lwkwyyf/6/331/3f3KlxVv//v/P/6/8X67P/HJ0f/Pxsr7t+/99GWT/X/A/1//X/9f/1//X9WbXzZa25W/z/m/lvDTDLJ/wAAAJCDmPtfGGYi/wMAAEBlxNx/W5iJ/A8AAACVEXP/ljCTTPK//r/z/+v/6/9Xuv+/2vP/N22M/v/64Pz/3en/93Dd/f8J/f/12P8fH+z2D3f/v+fm6/9zQwzb+f9j7n9RmEkm+R8AAAByEHP/i8NM5H8AAACojJj7XxJmIv8DAABAZcTcf3uYSSb5X/9f/1//X/9f/7/z+nuf/7/8SP9/uOj/d6f/34Pz/+fV/x/w9g93/3/Q5/8ff1P77fX/6WTY+v8x9780zCST/A8AAAA5iLn/jjAT+R8AAAAqI+b+l4WZyP8AAABQGTH3bw0zyST/6//r/+v/6//r/3def+/+f0n/f7jo/3en/9+D/r/+v/5/f/3/Dt/86v/TybD1/2PuvzPMJJP8DwAAADmIuf+uMBP5HwAAACoj5v6fCjOR/wEAAKAyYu7fFmaSSf7X/9f/1//Pq/9//wb9f/3/atP/707/vwf9f/1//f8+z/+/1Er6/xt73RmVMWz9/5j7Xx5mkkn+BwAAgBzE3P+KMBP5HwAAACoj5v5XhpnI/wAAAFAZMfdPhplkkv/1/6vV///Tv37qlYX+v/5/j/UPov9fC5cOUf8/HgZD3/9/SP//htL/707/vwf9f/1//f816f+Tj2Hr/8fcf3eYSSb5HwAAAHIQc/89YSbyPwAAAFRGzP33hpnI/wAAAFAZMfdvDzPJJP/r/1er/x/p/+v/d1u/8/87/3+V6f930PQi1f/vQf9f/z/7/n/87lf/n8EYtv5/zP2vCjPJJP8DAABADmLuvy/MRP4HAACAyoi5/9VhJvI/AAAAVEbM/TvCTDLJ//r/+v/6//r/+v+d16//vz7p/3e30v7/Bv1//X/9/8z6/6s7//+m8LH+P9Gw9f9j7n9NmEkm+R8AAAByEHP/zjAT+R8AAAAqI/7/zfL/vcr/AAAAUEUx90+FmWSS//X/9f9z6v/X9P/1//X/K0//vzvn/+9B/1//X/9/Vf1/5/+n3bD1/2Puf22YSSb5HwAAAHIQc/8DYSbyPwAAAFRGzP3TYSbyPwAAAFRGzP0zYSaZ5H/9f/3/nPr/zv+v/6//X336/93p//eg/6//X7X+f1Ho/3NTDVv/P+b+XWEmmeR/AAAAyEHM/bvDTOR/AAAAqIyY+/eEmcj/AAAAUBkx9+8NM8kk/+v/6//r/+v/6/93Xr/+//qk/9+d/n8P+v/6/1Xr/zv/PzfZsPX/Y+5/MMwkk/wPAAAAOYi5f1+YifwPAAAAlRFz//4wk5D/O/2/bgAAAGB9ibn/QJhJJv/+r/9fkf7/b/59y7r1//X/u61/MP3/Tfr/Yer/D5eK9v/bXxbXTf+/B/1//X/9f/1/BmrY+v8x9x8MM8kk/wMAAEAOYu5/XZiJ/A8AAACVEXP/T4eZyP8AAABQGTH3/0yYSSb5X/+/Iv3/Nvr/+v/d1u/8//r/VVbR/v/AVKr/P6L/r/8/XNuv/6//z1I3vv8fP+qv/x9z/6Ewk0zyPwAAAOQg5v6fDTOR/wEAAKAyYu5/KMxE/gcAAIDKiLn/cJhJJvlf/1//X/9f///G9P8fKtoNY/+/fvDo/1eL/n93ler/O/+//v+Qbb/+v/4/Sw3b+f9j7n99mEkm+R8AAAByEHP/w2Em8j8AAABURsz9bwgzkf8BAACgMmLuf2OYSSb5X/9f/1//X//f+f87r1//f33S/+9O/78H/X/9f/1//X8Gatj6/zH3vynMJJP8DwAAADmIuf/NYSbyPwAAAFRGzP1vCTOR/wEAAKAyYu5/a5hJJvlf/1//X/9f/1//v/P69f/XJ/3/7vT/e9D/1//X/9f/Z6CGrf8fc//PhZlkkv8BAAAgBzH3PxJmIv8DAABAZcTc/7YwE/kfAAAAKiPm/reHmWSS//X/13H/f0z/X/9f/1//v/d6c6P/353+fw/6//r/+v/6/wzUsPX/Y+5/R5hJJvkfAAAAchBz/8+Hmcj/AAAAUBkx978zzET+BwAAgMqIuf8Xwkwyyf/6/+u4/1/J8/8vXmq+XcX6//XF9P9vVv+/fiP9/yzo/3en/99Dh/7/Rv1//X/9f/1/rtuw9f9j7n9XmEkm+R8AAAByEHP/u8NM5H8AAACojJj73xNmIv8DAABAZcTc/2iYSSb5X/8/y/5/esjD1/93/n/9f+f/1/9fner2/1d8Vx3p//fg/P/6//r/+v8M1LD1/2PufyzMJJP8DwAAADmIuf+9YSbyPwAAAFRGzP2/GGYi/wMAAEBlxNz/vjCTTPK//n+W/f8hPv9/1fr/Yy3HR079/4mm5zMdl/r/+v9roLr9/8HQ/+9B/1//f5j7/+Fo3rTM7fX/GUbD1v+Puf/9YSaZ5H8AAADIQcz9vxRmIv8DAABAZcTc/8thJvI/AAAAVEbM/b8SZpJJ/tf/1//X/3f+f+f/77x+/f/1Sf+/O/3/HvT/9f+Huf/fg/4/w2jY+v8x9/9qmMmywe/7/9XHwwQAAACGSMz9HwgzyeTf/wEAACAHMfcfCTOR/wEAAKAyYu4/GmaSSf7X/2/v/8czqur/6//r/+v/6/+vR4Pr/7/s1qLQ/69M/3+izw3Q/9f/1//X/2eghq3/H3P/sTCTTPI/AAAA5CDm/l8LM5H/AQAAoDJi7j8eZiL/AwAAQGXE3D8bZpJJ/r+J/f/x4ez/O///9fb/f6z/r/8f6P93pv+/Npz/v7ts+//90v/X/9f/1/9noIat/x9z/1yYSSb5HwAAACos/Tg45v4TYSbyPwAAAFRGzP0nw0zkfwAAAKiMmPs/GGaSSf53/n/9f+f/vxn9/7GW5fX/S/r/+v+DoP/fnf5/D/r/+v/6//r/DNSw9f9j7p8PM8kk/wMAAEAOYu7/UJiJ/A8AAACVEXP/h8NM5H8AAACojJj7T4WZZJL/9f/1/3Pv/9eK4rLz/+v/d1q//v/6pP/fnf5/D/r/+v/6//r/DNSw9f9j7j8dZpJJ/gcAAIAcxNx/JsxE/gcAAPh/9u6jObK76uN4P37GE9jAS/CaFUtYmZfAlh1VrCmSycEecgaTczDZ5JzB5JxzNjlHEw1Voqw558xI3bpXM7qjvvf//3w2B02N6JZHNvys+taFZuTuv3fcYv8DAABAM3L33ydu6WT/6//1/733/6utPP9/7+/X/5+j/9f/T2Gtvz+x+fcdFIUf2P/f6c7X3EP/r//X/w/S/+v/9f/sN7f+P3f/feOWTvY/AAAA9CB3//3iFvsfAAAAmpG7//5xi/0PAAAAzcjdf03c0sn+1//r//X/+v89/f9N+n/9/7J5/v8w/f8I/b/+X/+v/2dSc+v/c/c/IG7pZP8DAABAD3L3PzBusf8BAACgGbn7HxS32P8AAADQjNz9D45bOtn/+n/9v/5/Kf3/Sc//3/f16P/1/5vo/4fp/0fo//X/+n/9P5OaW/+fu/8hcUsn+x8AAAB6kLv/oXGL/Q8AAADNyN3/sLjF/gcAAIBm5O5/eNzSyf7X/+v/9f9L6f+P6fn/+n/9/8LdsDr/zwT9/zr9/4iR/n+10v8POXQ/v/nLW877P4D+X//Purn1/7n7HxG33HW1OnmpXyQAAAAwK7n7Hxm3dPLzfwAAAOhB7v5r4xb7HwAAAJqRu/+6uKWT/a//1//r//X/+v/Nr6//XybP/x929P7/jne41z377f+bef7/zqb/57L9fv6otv3+p+//b/vO0P+zbHPr/3P3n41bOtn/AAAA0IPc/Y+KW+x/AAAAaEbu/kfHLfY/AAAANCN3/2Pilk72v/6/tf7///d83gX9/27tov/X/+v/9f+t0/8P8/z/Ebv/mDtTHzbb/x9g2/380t+/5//r/1k3t/4/d/9j45ZO9j8AAAD0IHf/4+IW+x8AAACakbv/8XGL/Q8AAADNyN3/hLilk/2v/2+t/9/7eZ7/r//f9Pr6f/1/y/T/w/T/I1p5/v8lftdsu58/qm2/f/2//p91c+v/c/c/MW7pZP8DAABAD3L3Pylusf8BAACgGbn7nxy32P8AAADQjNz9T4lbOtn/+n/9/zL6/3wF/b/+//L3/0n/vzy30/+P0v+PaKX/v0Tb7ueX/v71//p/1s2t/8/d/9S4pZP9DwAAAD3I3f+0uMX+BwAAgGbk7n963GL/AwAAQDNy9z8jbulk/+v/9f/L6P89/1//7/n/+v/D0f8P0/+P0P/r//X/+n8mNbf+P3f/9XFLJ/sfAAAAepC7/5lxi/0PAAAAzcjd/6y4xf4HAACAZuTuf3bc0sn+1//r//X/+n/9/+bX1/8vk/5/mP5/hP5f/6//1/8zqRn1/xd81unVc+KWTvY/AAAA9CB3/3PjFvsfAAAAmpG7/3lxi/0PAAAAzcjd//y4pZP9r/+fTf+/m/O11f+fWa1W+v9Vp/3/mQv+POv7Uv+v/z8G+v9h+v8R+n/9v/5f/8+kZtT/736cu/8FcUsn+x8AAAB6kLv/hXGL/Q8AAADNyN3/orjF/gcAAIBm5O5/cdzSyf7X/8+m/9/VVv/v+f/7vz966v89/3+d/v946P+H6f9H6P/1//p//T+Tmlv/n7v/JXHTySsv+UsEAAAAZiZ3/0vjlk5+/g8AAAA9yN3/srjF/gcAAICFun7tV3L3vzxu6WT/6/+n7f9PXvBr+n/9//7vD/2//l//f/np/4fp/0fo//X/+n/9P5OaW/+fu/8VcUsn+x8AAAB6kLv/hrjF/gcAAIBm5O5/Zdxi/wMAAEAzcve/Km7pZP/r/z3/X/+v/9f/b359/f8y6f+H6f9H6P/1/9vt/0+d/4/6f9pwEf3/zs7OtZe9/8/d/+q4pZP9DwAAAE3a97PS3P2viVvsfwAAAGhG7v7Xxi32PwAAADQjd//r4pZO9r/+v9P+P7/Vl9X/X7da6f/1//p//f8w/f8w/f8I/b/+3/P/9f9Mam7P/8/d//q4pZP9DwAAAD3I3X9j3GL/AwAAQDNy978hbrH/AQAAoBm5+98Yt3Sy//X/nfb/nv+v/9f/H3f/f+tK/38sFtH/nzn49efe/5/V/+v/B3TX/9/tLns+1P/r/1k3t/4/d/+b4pZO9j8AAAD0IHf/m+MW+x8AAACakbv/LXGL/Q8AAADNyN3/1rjpRCf7X/+v/9f/6//1/5tf/5if/39ytVrp/yewiP5/wNz7/2me/7//7/Lz9P/6/yW/f/2//p91c+v/c/e/LW7pZP8DAABAD3L3vz1usf8BAACgGbn73xG32P8AAADQjNz974xbOtn/+n/9v/5f/998/392Ef2/5/9PRP8/bB79/8H0//r/Jb9//b/+n8PbVv+fu/9dcUsn+x8AAAB6kLv/3XGL/Q8AAADNyN3/nrjF/gcAAIBm5O5/b9zSyf7X/+v/L6b/z/ep/2+r/z81u/7/9J7/vk6e/6//n4j+f5j+f4T+X/+v/79e/8+U5vb8/9z974tbOtn/AAAA0IPc/e+PW//q1v4HAACAZuTu/0DcYv8DAABAM3L3fzBu6WT/6//1/57/r/9v/vn/+v+u6P+H6f9H6P/1//p/z/9nUnPr/3P3fyhu6WT/AwAAQA9y9384brH/AQAAoBm5+z8St9j/AAAA0Izc/TfFLZ3sf/2//l//r//X/5/7M9T/t0H/P+x4+v8z+n/9f/Xz/xd/F+j/9f9jn0+b5tb/5+7/aNzSyf4HAACAHuTu/1jcYv8DAABAM3L3fzxusf8BAABgkU5s+LXc/Z+IWzrZ//p//b/+X/+v/9/8+vr/ZdpK/5/fFPp/z/8P/fT/V+35aGnP/9//v1/6f/0/05tb/5+7/5NxSyf7HwAAAHqQu/9TcYv9DwAAAM3I3f/puMX+BwAAgGbk7v9M3NLJ/tf/6/+P0P+f1f/r//X/+v+58fz/Yfr/Efr/rT4/f+nvX/+v/2fd3Pr/3P2fjVs62f8AAADQg9z9n4tb7H8AAABoRu7+z8ct9j8AAAA0Y3f3Z1zW4f7X/+v/Pf9f/6//3/z6+v9l0v8P0/+P0P/r//X/+n8mNbf+/wu7n3V69cW4pZP9DwAAAD3I3f+luMX+BwAAgGbk7v9y3GL/AwAAQDNy938lbulk/+v/9f/L6P93dnau1f/r//d+Pef7/5v1/xT9/zD9/wj9v/5f/6//Z1Jz6/9z9381bulk/wMAAEAPcvd/LW6x/wEAAKAZufu/HrfY/wAAANCM3P3fiFs62f/6/xn0/6f1/57/r/9fef6//n8i+v9h+v8RLfb/pw//5W+7nz+qbb9//b/+n3Vz6/9z938zbulk/wMAAEAPcvd/K26x/wEAAKAZufu/HbfY/wAAANCM3P3fiVs62f/6/+Pr/2/7a9fL8//PrDa/f/2//l//r/+/3PT/w/T/I1rs/y/Ctvv5pb9//b/+n3Vz6/9z9383btk7/K68uK8SAAAAmJPc/d+LWzr5+T8AAAD0IHf/9+MW+x8AAACakbv/B3FLJ/tf/z+D5/832P97/v/m7w/9/6z7/yv0/23Q/w/T/4/Q/+v/9f8T9f/53az/793c+v/c/T+MWzrZ/wAAANCD3P0/ilvsfwAAAGhG7v4fxy32PwAAADQjd//NccsF+39T290K/b/+X/+v/9f/b359/f8y6f+HHbb/P7U6Wv+f9P/6f/1/r/2/5/9zztz6/9z9P4lb/PwfAAAAFufKA349d/9P4xb7HwAAAJqRu/9ncYv9DwAAAM3I3f/zuOWWK7b1lo6V/l//r//X/+v/N7++/n+Z9P/DPP9/hP5/in7+av1/G/3/aqX/5+jm1v/n7v9F3OLn/wAAANCM3P2/jFvsfwAAAGhG7v5fxS32PwAAADQjd/+v45ZO9r/+X/9/xP5/N83U/5+j/z9H/7+Z/v946P+H6f9H6P89/1//7/n/TGpu/X/u/t/ELZ3sfwAAAOhB7v7fxi32PwAAADQjd//v4hb7HwAAAJqRu//3cUsn+3/S/v/GqLAP0//HX2r9/+L7f8//1//r//X/s6L/H6b/H6H/1//r//X/TGpu/X/u/j/ELZ3sfwAAAOhB7v4/xi32PwAAADQjd/+f4hb7HwAAAJqRu//PcUsn+9/z//X/+n/9v/5/8+vr/5dJ/z9M/79Z/UHp//X/+n/9P5OaW/+fu/8vcUsn+x8AAAB6kLv/r3GL/Q8AAADNyN1/S9xi/wMAAEAzcvf/LW7pZP/r//X/+n/9v/5/8+vr/5dpVv3/Cf3/hZ9799uPv6zn/2+9/8+3oP/X/+v/mcTc+v/c/X+PWzrZ/wAAANCD3P3/iFvsfwAAAGhG7v5/xi32PwAAADQjd/+/4pZO9v9I/3+qfqP+f5D+f+/71/9v/v7Q/+v/9f+X36z6f8//X8zz/4v+3/P/9f/6fyY1t/4/d/+/45ZO9j8AAAD0IHf/rXGL/Q8AAADNyN3/n7jF/gcAAIBm5O7/b9zSyf73/P8l9f9X6//1//p//b/+f4T+f5j+f4T+X/9/Ee//qn0f6//1/6ybW/+fu/9/AQAA//9hG03z")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES64], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x80)
close(0x3)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'dvmrp1\x00'})
syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mount(0x0, 0x0, &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x0, 0x98, 0x1c8, 0x98, 0x1c8, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'macvtap0\x00', 'bridge_slave_0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418)
socket$inet_smc(0x2b, 0x1, 0x0)
shutdown(0xffffffffffffffff, 0x1)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x802090, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x3, 0x2d9, &(0x7f0000000440)="$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")
sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x40810)
unlink(0x0)

2.214513936s ago: executing program 1 (id=3346):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xa, 't|'}, @global=@item_012={0x1, 0x1, 0x4, "8e"}, @global=@item_012={0x2, 0x1, 0x6, "6d1d"}]}}, 0x0}, 0x0)

2.093517295s ago: executing program 3 (id=3347):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

2.052293248s ago: executing program 2 (id=3348):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x8000000, &(0x7f0000000500)="a36ac0518d3deefef754658b64f1b4e766d16dad431bde34f0d6b7fce669776c9de68af8ad7df3f598b593432e6e293ad4d6a53d5fadea38b183665078974d4f9f1dcf0e855636f659c0d3c97dae0fb0cd80ed1724a4b4b2073b41232f0aaf2e0152815b53a817028324313d310518bc0d51821ffedd0a6ed7096de1a8ead4a3e99e4e47c7914724aa386fcc8dcb7162e21fed49252e1ba543a733cc95d185feeca70737aa62a6435514d712abd92d10509793e89f82acf350b7575e33", 0xbd, 0x0, 0x0, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)

1.901801419s ago: executing program 3 (id=3349):
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$EBT_SO_GET_INFO(r0, 0x10d, 0xb2, 0x0, &(0x7f00000016c0))

1.825783685s ago: executing program 3 (id=3350):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$PIO_UNIMAP(r0, 0x4b67, 0x0)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)

642.685423ms ago: executing program 2 (id=3351):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000380)=ANY=[@ANYBLOB="696f636861727365743d63703836342c6e6f7374726963742c6c617374626c6f636b3d30303030303030303030303030303030303534362c6769643d666f726765742c6c6f6e6761642c6e6f7672732c756e64656c6574652c6c617374626c6f636b3d30303030303030303030303030303030303030372c66696c657365743d30303030303030303030303030303030303030362c00507e813eabdb64dfa553fbca2888d9549d26d91e12ecff6265"], 0x1, 0xc4d, &(0x7f0000001040)="$eJzs3U9sHNd5APDvjZbiUm5rJnYVJ42DTVukMmO5+hdTsQp3VdNsA8gyEYq5BeBKpNSFKZIgqUY20oLppYceAhRFDzkRaI0CKRoYTRH0yLQukFx8KHLqiWhhIyh6YIsAAQoELGb2rbikSVsWSYmSfz+b+nZmvjfz3sx6Rhb0zQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xr546nTaYcORB9AZAOC+uDz+1VNndnr+AwCPrCu7/f//bjb6D7A3AAAAAAAAAAAAAADADlIU8USkmL+8niar5Y76pXbfrdsTI6M7NxtIVcsjVX75Uz995uy5Lz0/fL4bL7VnP6D9fvtMvDp+5WLjpbmb8wvTi4vTU42J2fa1uanpu97DXttvN1SdgMbN125NXb++2Djz3Nktm28Pvtf/2PHBC8PPnHy6mzsxMjo6vplS782v3XNHOnar8DgaRZyMFM9+76epFRFF7P1c1O/vtd9uoBrEUDWIiZHRaiAz7dbsUrlxrHsiiohGT6Nm9xztfC2i1ndfx7C7ZsRy2f2yw0Pl8MbnWwutqzPTjbHWwlJ7qT03O5Y6vS3H04gizqeIlYhY26Fypy+KqEWK7zy+nq7mt35U5+GLVWHw7v0oDnCMd6HsZ6MvYqV4CK7ZIdYfRbwSKX729om4lu8z1b3mCxGvlPEHEW+W8cWIVH4xzkW8qwLskVGLIv68vP4X1tNUdT/o3lcufa3xldnrcz253fvKR3w+vO9O8YCeDwPb4v1xyO9N9SiiVd3x19O9/2YHAAAAAAAAAAAAAAAAgP02EEV8OlK8/G9/VNUVR1WX/viF4d8f/OXemvGnPmQ/Ze5zEbFc3F1N7tFcGDiWxlJ6wLXEH2f1KOKPc/3ftx50ZwAAAAAAAAAAAAAAAAAAAD7WivhJpHjhnRNpJXrnFG/P3mhcaV2d6cwK2537tztn+sbGxkYjdWIzx8kcl3NcyXE1x7Uco8jtc2zmOJnjchmPbmys5OXVHNdyjCO5fY7NHCdzXM5xJcfVHNdyjFpun2Mzx4E8ruW8vJLjao5rOcYhmbsXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBRUkQRv4gU3/7GeooUEc2IyejE1f4H3TsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoNSfivh+pGj8QfPOulpEpOrfjhPlL+eiebSMn4zmcBlfjObFHFtVrDW/9QD6z970pSJ+HCn662/dueD5+vd1lu58DeLNb24ufabWiUe6Gwff63/s+OMXhkc/99Run9NOHRi61J69dbsxMTI6Ot6zupaP/smedYP5uMX+DJ2IWHz9jddaMzPTC/f+ofwK7KH5Q/Qh1T4uI/Wh+hC1Q9GNBzP2LeoP6gbFgSqf/+9Git9+59+7D/zO878ev9RZuvOEj5//yebz/4XtO7rL539te7v8/C+f6Ts9/5/oWfdC/t1IXy2ivnRzvu94RH3x9TdOtm+2bkzfmJ49d+rUl4eHv3z2VN/RiPr19sx0z6d9OV0AAAAAAAAAAAAAAAAA908q4ncjRevH66kREbereq3BC8PPnHz6SByp6q221G2/On7lYuOluZvzC9OLi9NTjYnZ9rW5qem7PVy9KveaGBk9kMF8qIED7v9A/aW5+dcX2jf+cGnH7cfqF68uLi20ru28OQaiiGj2rhmqOjwxMlp1eqbdmq2aju1YTP/R9aUi/iNSXDvXSJ/P63L9//YK/y31/8vbd7SP9f+fO7ZZ//eJntTymCkV8fNI8Vt/8VR8vurnsXjfOct5fxMphs5/NufF0TKv24fOewU6lYFl7v9Ein/4xdbcbj3kE5u5pz/SyX0IlNf/8Ujx/T/7bvx6Xrf1/Q87X/9j23d0QO9/eLJn3bEt7yvY89DJ1/9kpHjxibfiN6o1//eB7//ovnvjRCd58/0cB3T9f7Vn3WA+7m/u1+ABAAAAAAAAAAAeYn2piL+NFD8craXn87q7+ft/U9t3dEB//+tTPeum9me+og/9sOeTCgAAAACHRF8q4ieR4sbSW3dqqLfWf/fUf/7OZv3nSNq2tfpzvl+p3huwn3/+12swH3dy78MGAAAAAAAAAAAAAAAAAACAQyWlIp7P86lPVvX8U7vOp74aKV7+r2dzXjpe5nXngR+sfq1fnps9eXFmZq4eS62rM9ON8fnWtemy7ZORYv2vP5vbFtX86t355jtzvG/Oxb4QKUb/rpvbmYu9Ozf5k5u5p8vcT0SK//z7rbl5auo8d3SVe6bM/atI8fV/2jn3+Gbu2TL3u5HiR19vdHOPlbnd96N+ajP3uWtzxQFcFQAAAAAAAAAAAAAAAAAAAD5u+lIRfxop/vvmyp1a/jz/f1/PYuXNb/bM97/N7Wqe/8Fq/v/dPt/L/P/VewWWdzsqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8mlIU8UakmL+8nlb7y+WO+qX27K3bEyOjOzcbSFXLI1V++VM/febsuS89P3y+Gz+4/X77dLw6fuVi46W5m/ML04uL01ONidn2tbmp6bvew17bbzdUnYDGzdduTV2/vtg489zZLZtvD77X/9jxwQvDz5x8ups7MTI6Ot6TU+u756O/T9pl/dEo4i8jxbPf+2n6YX9EEXs/Fx/y3TloA9UghqpBTIyMVgOZabdml8qNY90TUUQ0eho1u+foPlyLPWlGLJfdLzs8VA5vfL610Lo6M90Yay0stZfac7NjqdPbcjyNKOJ8iliJiLX+9++uL4p4LVJ85/H19M/9EUe65+GLl8e/eurM7v0oDnCMd6HsZ6MvYqV4CK7ZIdYfRfxjpPjZ2yfiX/ojatH5iS9EvFLGH0S8GZ3rncovxrmId3f4HvFwqkUR/1te/wvr6e3+8n7Qva9c+lrjK7PX53pyu/eVh/75cD8d8ntTPYr4UXXHX0//6r9rAAAAAAAAAAAAAAAAgEOkiF+LFC+8cyJV9cF3aorbszcaV1pXZzplfd3av27N9MbGxkYjdWIzx8kcl3NcyXE1x7Uco8jtc2yWsb6xMZmXl3NcyXE1x7Uc40hun2Mzx8kcl3NcyXE1x7Uco5bb59jMcTLH5RxXclzNcS3HOCS1ewAAAAAAAAAAAAAAAAAAwKOlqP5J8e1vrKeN/s780pPRiavmA33k/X8AAAD//57T+M4=")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0)
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00')

0s ago: executing program 4 (id=3352):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@delnexthop={0x18, 0x2a, 0x503}, 0x18}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
io_submit(0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x12, 0x4, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001580)='ns/uts\x00')
mmap(&(0x7f00005a3000/0x1000)=nil, 0x1000, 0x1000000, 0x810, r0, 0x1b9a6000)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write$bt_hci(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="0e00010002"], 0x8)
ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000000))
r6 = fsmount(0xffffffffffffffff, 0x0, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000280), 0x12)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x60}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)

kernel console output (not intermixed with test programs):

ort 6081 - 0
[  527.925295][ T3650] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  527.935575][ T3648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  527.943575][ T3648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  527.953757][ T3650] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  527.961380][ T3650] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  527.968671][ T3648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  528.027505][T12586] loop2: detected capacity change from 0 to 128
[  528.112287][T12586] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  528.131093][ T3692] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.159403][T12586] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  528.483250][ T3650] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  528.497699][ T3650] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  528.507725][ T3650] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  528.521222][ T3650] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  528.540501][ T3650] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  528.550564][ T3648] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  528.945916][T12063] EXT4-fs (loop2): unmounting filesystem.
[  529.098635][T12612] random: crng reseeded on system resumption
[  529.448554][T12583] chnl_net:caif_netlink_parms(): no params data found
[  529.553439][T12627] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.2993' sets config #0
[  529.794860][T12596] chnl_net:caif_netlink_parms(): no params data found
[  529.969039][T12640] loop2: detected capacity change from 0 to 512
[  530.039069][T12583] bridge0: port 1(bridge_slave_0) entered blocking state
[  530.091598][ T3651] Bluetooth: hci1: command tx timeout
[  530.382854][T12640] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.2995: casefold flag without casefold feature
[  530.434474][T12583] bridge0: port 1(bridge_slave_0) entered disabled state
[  530.555560][T12640] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.2995: missing EA_INODE flag
[  530.610373][T12583] device bridge_slave_0 entered promiscuous mode
[  530.641681][T12583] bridge0: port 2(bridge_slave_1) entered blocking state
[  530.648775][T12583] bridge0: port 2(bridge_slave_1) entered disabled state
[  530.659297][T12640] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.2995: error while reading EA inode 12 err=-117
[  530.689100][T12583] device bridge_slave_1 entered promiscuous mode
[  530.708019][ T3651] Bluetooth: hci2: command tx timeout
[  530.721965][T12640] EXT4-fs (loop2): 1 orphan inode deleted
[  530.727722][T12640] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  531.481055][ T3692] device hsr_slave_0 left promiscuous mode
[  531.540431][ T3692] device hsr_slave_1 left promiscuous mode
[  531.560458][ T3692] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  531.567874][ T3692] batman_adv: batadv0: Removing interface: batadv_slave_0
[  531.661456][ T3692] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  531.668868][ T3692] batman_adv: batadv0: Removing interface: batadv_slave_1
[  531.790863][ T3692] device bridge_slave_1 left promiscuous mode
[  531.797099][ T3692] bridge0: port 2(bridge_slave_1) entered disabled state
[  531.871464][ T3692] device bridge_slave_0 left promiscuous mode
[  531.877682][ T3692] bridge0: port 1(bridge_slave_0) entered disabled state
[  532.080707][ T3692] device veth1_macvtap left promiscuous mode
[  532.086765][ T3692] device veth0_macvtap left promiscuous mode
[  532.180347][ T3692] device veth1_vlan left promiscuous mode
[  532.186179][ T3692] device veth0_vlan left promiscuous mode
[  532.200559][ T3651] Bluetooth: hci1: command tx timeout
[  532.770427][ T3651] Bluetooth: hci2: command tx timeout
[  534.280829][ T3651] Bluetooth: hci1: command tx timeout
[  534.532380][T12063] EXT4-fs (loop2): unmounting filesystem.
[  534.850592][ T3651] Bluetooth: hci2: command tx timeout
[  534.910110][T12663] kvm [12662]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x3800000058
[  534.983898][T12663] kvm [12662]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0xf6000000f0
[  535.037993][T12663] kvm [12662]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1410000005b, nop
[  535.077581][T12679] loop2: detected capacity change from 0 to 2048
[  535.087863][T12663] kvm [12662]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x16b0000004b, nop
[  535.109198][T12663] kvm [12662]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x17a00000002
[  535.131605][ T3692] team0 (unregistering): Port device team_slave_1 removed
[  535.132225][T12663] kvm [12662]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x17e0000004a
[  535.171632][T12679] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  535.227013][ T3692] team0 (unregistering): Port device team_slave_0 removed
[  535.255352][T12679] EXT4-fs (loop2): shut down requested (2)
[  535.274387][ T3692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  535.279479][T12663] kvm [12662]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x252000000c6
[  535.331757][ T3692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  535.354300][T12663] kvm [12662]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x2b30000006c
[  535.379511][T12063] EXT4-fs (loop2): unmounting filesystem.
[  535.383049][T12663] kvm [12662]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x2b50000004f, nop
[  535.766859][T12689] Process accounting resumed
[  536.362229][ T3651] Bluetooth: hci1: command tx timeout
[  536.421340][ T3692] bond0 (unregistering): Released all slaves
[  536.920883][ T3651] Bluetooth: hci2: command tx timeout
[  537.141329][T12703] netlink: 'syz.1.3008': attribute type 6 has an invalid length.
[  537.199195][T12660] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3001'.
[  537.270737][T12583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  537.378644][T12596] bridge0: port 1(bridge_slave_0) entered blocking state
[  537.408861][T12596] bridge0: port 1(bridge_slave_0) entered disabled state
[  537.409864][T12706] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10)
[  537.422696][T12706] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  537.452068][T12712] Bluetooth: MGMT ver 1.22
[  537.466021][T12706] vhci_hcd vhci_hcd.0: Device attached
[  537.467642][T12596] device bridge_slave_0 entered promiscuous mode
[  537.510431][T12583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  537.530515][T12596] bridge0: port 2(bridge_slave_1) entered blocking state
[  537.537614][T12596] bridge0: port 2(bridge_slave_1) entered disabled state
[  537.579514][T12596] device bridge_slave_1 entered promiscuous mode
[  537.601937][T12583] team0: Port device team_slave_0 added
[  537.669664][T12583] team0: Port device team_slave_1 added
[  537.671772][T12710] vhci_hcd: connection closed
[  537.688463][ T4296] vhci_hcd: stop threads
[  537.709997][ T4296] vhci_hcd: release socket
[  537.724949][ T4296] vhci_hcd: disconnect device
[  537.770386][T12583] batman_adv: batadv0: Adding interface: batadv_slave_0
[  537.777980][T12583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  537.804712][   T22] usb 12-1: enqueue for inactive port 0
[  537.818821][T12583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  537.859813][T12596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  537.880776][T12583] batman_adv: batadv0: Adding interface: batadv_slave_1
[  537.894512][T12583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  537.928278][T12583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  537.942782][T12596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  537.969008][ T3678] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  538.069813][T12596] team0: Port device team_slave_0 added
[  538.092949][T12583] device hsr_slave_0 entered promiscuous mode
[  538.110674][T12583] device hsr_slave_1 entered promiscuous mode
[  538.121076][T12583] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  538.142308][T12583] Cannot create hsr debugfs directory
[  538.148999][T12596] team0: Port device team_slave_1 added
[  538.241213][T12596] batman_adv: batadv0: Adding interface: batadv_slave_0
[  538.248196][T12596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  538.275547][T12596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  538.350465][ T3678] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  538.371259][ T3678] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  538.415063][ T3692] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.494080][   T22] usb usb12-port1: attempt power cycle
[  538.510914][ T3678] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  538.521451][T12596] batman_adv: batadv0: Adding interface: batadv_slave_1
[  538.528393][T12596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  538.767651][T12596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  539.164149][T12596] device hsr_slave_0 entered promiscuous mode
[  539.182361][   T22] usb usb12-port1: unable to enumerate USB device
[  539.200488][T12596] device hsr_slave_1 entered promiscuous mode
[  539.216905][T12596] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  539.240369][T12596] Cannot create hsr debugfs directory
[  539.264651][ T3678] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  539.283548][ T3678] usb 3-1: SerialNumber: syz
[  539.352249][T12751] fuse: Bad value for 'fd'
[  539.370803][ T3692] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  539.445467][T12754] Process accounting resumed
[  539.538931][ T3692] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  539.582316][ T3678] usb 3-1: 0:2 : does not exist
[  539.653712][ T3692] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  539.697760][ T3678] usb 3-1: USB disconnect, device number 10
[  539.784047][ T3627] udevd[3627]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  540.730303][ T6276] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  540.920671][ T6276] usb 1-1: device descriptor read/64, error -71
[  541.177206][T12583] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  541.194213][ T6276] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  541.214531][T12583] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  541.302025][T12583] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  541.324871][T12583] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  541.390329][ T6276] usb 1-1: device descriptor read/64, error -71
[  541.524452][ T6276] usb usb1-port1: attempt power cycle
[  541.569926][T12596] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  541.599338][T12596] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  541.731613][T12596] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  541.753572][T12596] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  541.930348][ T6276] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  541.949678][T12583] 8021q: adding VLAN 0 to HW filter on device bond0
[  542.032689][ T3692] device hsr_slave_0 left promiscuous mode
[  542.040610][ T6276] usb 1-1: device descriptor read/8, error -71
[  542.049282][ T3692] device hsr_slave_1 left promiscuous mode
[  542.069627][ T3692] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  542.079116][ T3692] batman_adv: batadv0: Removing interface: batadv_slave_0
[  542.109681][ T3692] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  542.120295][ T3692] batman_adv: batadv0: Removing interface: batadv_slave_1
[  542.138246][ T3692] device bridge_slave_1 left promiscuous mode
[  542.147969][ T3692] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.174045][ T3692] device bridge_slave_0 left promiscuous mode
[  542.190626][ T3692] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.241194][ T3692] device veth1_macvtap left promiscuous mode
[  542.247387][ T3692] device veth0_macvtap left promiscuous mode
[  542.260396][ T3692] device veth1_vlan left promiscuous mode
[  542.266205][ T3692] device veth0_vlan left promiscuous mode
[  542.310609][ T6276] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  542.410645][ T6276] usb 1-1: device descriptor read/8, error -71
[  542.531118][ T6276] usb usb1-port1: unable to enumerate USB device
[  542.965580][T12811] loop1: detected capacity change from 0 to 256
[  542.992860][T12811] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  543.017364][   T26] audit: type=1800 audit(1725523665.104:91): pid=12811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3028" name="file1" dev="loop1" ino=1049028 res=0 errno=0
[  543.183075][ T3692] team0 (unregistering): Port device team_slave_1 removed
[  543.236268][ T3692] team0 (unregistering): Port device team_slave_0 removed
[  543.289446][ T3692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  543.328029][ T3692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  543.794353][ T3692] bond0 (unregistering): Released all slaves
[  543.874523][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  543.889032][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  543.914867][T12583] 8021q: adding VLAN 0 to HW filter on device team0
[  543.960463][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  543.969901][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  544.039048][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state
[  544.046228][ T4300] bridge0: port 1(bridge_slave_0) entered forwarding state
[  544.095009][T12596] 8021q: adding VLAN 0 to HW filter on device bond0
[  544.104216][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  544.113020][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  544.122306][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  544.131813][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state
[  544.138917][ T4300] bridge0: port 2(bridge_slave_1) entered forwarding state
[  544.147309][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  544.156999][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  544.195499][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  544.240706][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  544.249291][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  544.275287][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  544.297379][T12596] 8021q: adding VLAN 0 to HW filter on device team0
[  544.311706][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  544.329401][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  544.351292][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  544.359615][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  544.375047][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  544.401172][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  544.413718][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  544.424198][T12583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  544.441144][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  544.490664][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  544.506976][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state
[  544.514105][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state
[  544.531766][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  544.563601][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  544.584344][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  544.611593][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  544.618780][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  544.658646][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  544.699091][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  544.710918][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  544.727655][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  544.767679][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  544.789513][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  544.814058][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  544.827228][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  544.839315][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  544.849171][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  544.858063][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  544.868903][T12596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  545.024308][T12851] loop2: detected capacity change from 0 to 256
[  545.074950][T12851] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  545.131900][   T26] audit: type=1800 audit(1725523667.224:92): pid=12851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3037" name="file1" dev="loop2" ino=1049032 res=0 errno=0
[  545.254547][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  545.270434][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  545.379566][T12583] 8021q: adding VLAN 0 to HW filter on device batadv0
[  545.922787][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  546.007097][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  546.076630][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  546.100603][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  546.121275][T12596] 8021q: adding VLAN 0 to HW filter on device batadv0
[  546.159128][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  546.191513][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  546.229616][T12583] device veth0_vlan entered promiscuous mode
[  546.251340][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  546.305993][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  546.337865][T12583] device veth1_vlan entered promiscuous mode
[  546.466593][T12583] device veth0_macvtap entered promiscuous mode
[  546.527654][T12583] device veth1_macvtap entered promiscuous mode
[  546.573803][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  546.592572][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  546.872266][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  547.103981][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  547.269676][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  547.300441][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  547.396222][T12888] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3041'.
[  547.471960][T12583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  547.520411][T12583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.572149][T12583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  547.592717][T12583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.620325][T12583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  547.624992][T12897] loop2: detected capacity change from 0 to 128
[  547.650435][T12583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.673243][T12583] batman_adv: batadv0: Interface activated: batadv_slave_0
[  547.684875][T12897] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  547.712473][T12897] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  547.768405][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  547.788697][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  547.831754][T12583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  547.860599][T12583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.887413][T12583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  547.936255][T12583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.946322][T12583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  547.956861][T12583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.969614][T12063] EXT4-fs (loop2): unmounting filesystem.
[  547.976215][T12583] batman_adv: batadv0: Interface activated: batadv_slave_1
[  548.007470][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  548.038031][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  548.073794][T12583] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  548.083952][T12583] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  548.094092][T12583] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  548.104956][T12910] loop2: detected capacity change from 0 to 256
[  548.107753][T12583] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  548.136553][T12910] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  548.201313][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  548.216189][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  548.277139][   T26] audit: type=1800 audit(1725523670.364:93): pid=12910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3046" name="file1" dev="loop2" ino=1049036 res=0 errno=0
[  548.368470][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  548.405244][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  548.449090][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  548.479631][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  548.505235][T12596] device veth0_vlan entered promiscuous mode
[  548.554257][T12596] device veth1_vlan entered promiscuous mode
[  548.571848][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  548.606322][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  548.685849][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  548.698520][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  548.714248][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  548.725150][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  548.736012][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  548.753836][T12596] device veth0_macvtap entered promiscuous mode
[  548.761142][ T4288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  548.777067][T12596] device veth1_macvtap entered promiscuous mode
[  548.784438][ T4288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  548.813348][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  548.848696][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  548.876825][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  548.901765][T12596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  548.926413][T12596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  548.945291][T12596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  549.137443][T12596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  549.147962][T12596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  549.163875][T12596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  549.173920][T12596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  549.184571][T12596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  549.359921][T12596] batman_adv: batadv0: Interface activated: batadv_slave_0
[  549.870486][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  549.935773][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  550.005641][T12596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  550.050786][T12596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  550.083105][T12596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  550.145340][T12596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  550.196379][T12596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  550.230315][T12596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  550.240636][T12596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  550.251799][T12596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  550.263631][T12596] batman_adv: batadv0: Interface activated: batadv_slave_1
[  550.274861][T12596] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  550.284419][T12596] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  550.298605][T12596] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  550.308456][T12596] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  550.319765][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  550.328210][T12769] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  550.337876][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  550.434897][ T4790] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  550.448234][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  550.484953][ T3746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  550.499641][ T3746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  550.507812][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  550.531661][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  550.549077][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  550.616511][   T22] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  550.670361][T12769] usb 2-1: Using ep0 maxpacket: 8
[  550.850771][T12769] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  550.900628][   T22] usb 3-1: Using ep0 maxpacket: 16
[  551.020436][ T4790] usb 4-1: config index 0 descriptor too short (expected 45, got 36)
[  551.413221][T12769] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  551.423148][ T4790] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  551.434977][T12769] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  551.447110][ T4790] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  551.460708][T12769] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  551.470844][ T4790] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  551.479946][T12769] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  551.493348][ T4790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.503423][ T4790] usb 4-1: config 0 descriptor??
[  551.508465][T12769] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  551.517882][T12769] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.531133][T12947] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  551.550560][   T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  551.563982][ T4790] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  551.572993][   T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  551.582952][   T22] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00
[  551.592488][   T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.603709][   T22] usb 3-1: config 0 descriptor??
[  551.780323][ T6276] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  551.814045][T12944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  551.826777][T12944] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  551.830409][T12769] usb 2-1: usb_control_msg returned -32
[  551.840592][T12769] usbtmc 2-1:16.0: can't read capabilities
[  552.093995][   T22] chicony 0003:04F2:1421.0003: unknown main item tag 0x0
[  552.101239][   T22] chicony 0003:04F2:1421.0003: item fetching failed at offset 4/5
[  552.110604][   T22] chicony 0003:04F2:1421.0003: Chicony hid parse failed: -22
[  552.118637][   T22] chicony: probe of 0003:04F2:1421.0003 failed with error -22
[  552.160513][ T6276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  552.171735][ T6276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  552.181833][ T6276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  552.194051][ T6276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  552.293317][ T3637] usb 3-1: USB disconnect, device number 11
[  552.370829][ T6276] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  552.379926][ T6276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.388439][ T6276] usb 5-1: Product: syz
[  552.392885][ T6276] usb 5-1: Manufacturer: syz
[  552.397499][ T6276] usb 5-1: SerialNumber: syz
[  552.406104][ T6276] usb 5-1: config 0 descriptor??
[  552.660412][ T6276] adutux 5-1:0.0: Could not retrieve serial number
[  552.667240][ T6276] adutux: probe of 5-1:0.0 failed with error -5
[  552.927064][T12974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  552.941224][T12974] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  553.056690][ T3637] usb 2-1: USB disconnect, device number 34
[  553.140487][ T6276] usb 3-1: new low-speed USB device number 12 using dummy_hcd
[  553.512193][ T3637] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  553.540287][ T4032] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  553.540499][ T6276] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  553.558370][ T6276] usb 3-1: config 179 has no interface number 0
[  553.561924][T12769] usb 4-1: USB disconnect, device number 17
[  553.615711][ T6276] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  553.630120][ T6276] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  553.644972][ T6276] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  553.655946][ T6276] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  553.670105][ T6276] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  553.682808][ T6276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.910923][ T4032] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  553.925479][ T4032] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  553.936236][ T4032] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[  553.940437][ T3637] usb 2-1: config 223 has an invalid interface number: 1 but max is 0
[  553.953535][ T4032] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.969589][ T4032] usb 1-1: config 0 descriptor??
[  553.980304][ T3637] usb 2-1: config 223 has no interface number 0
[  553.990355][T12769] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  554.007375][ T6276] usb 3-1: USB disconnect, device number 12
[  554.053468][ T3678] usb 5-1: USB disconnect, device number 20
[  554.180589][ T3637] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  554.189676][ T3637] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  554.197924][ T3637] usb 2-1: Product: syz
[  554.202499][ T3637] usb 2-1: Manufacturer: syz
[  554.207076][ T3637] usb 2-1: SerialNumber: syz
[  554.230566][T12769] usb 4-1: Using ep0 maxpacket: 32
[  554.350411][T12769] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  554.358498][T12769] usb 4-1: config 0 has no interface number 0
[  554.366911][T12769] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  554.377863][T12769] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  554.387626][T12769] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  554.396680][T12769] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  554.406779][T12769] usb 4-1: config 0 descriptor??
[  554.468141][ T4032] logitech-djreceiver 0003:046D:C534.0004: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.0-1/input0
[  554.490569][ T3678] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  554.560548][ T3637] dvb_usb_ec168: probe of 2-1:223.1 failed with error -71
[  554.576569][ T3637] usb 2-1: USB disconnect, device number 35
[  554.654548][ T4790] usb 1-1: USB disconnect, device number 32
[  554.740488][ T3678] usb 5-1: Using ep0 maxpacket: 16
[  554.870367][ T3678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  554.885578][ T3678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  554.890369][ T4032] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  554.895485][ T3678] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  554.915768][ T3678] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  554.924960][ T3678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  554.937915][ T3678] usb 5-1: config 0 descriptor??
[  555.100411][T12769] uclogic 0003:28BD:0094.0005: failed retrieving string descriptor #100: -71
[  555.116924][T12769] uclogic 0003:28BD:0094.0005: failed retrieving pen parameters: -71
[  555.125940][T12769] uclogic 0003:28BD:0094.0005: pen probing failed: -71
[  555.138363][T12769] uclogic 0003:28BD:0094.0005: failed probing parameters: -71
[  555.146364][T12769] uclogic: probe of 0003:28BD:0094.0005 failed with error -71
[  555.185710][T12769] usb 4-1: USB disconnect, device number 18
[  555.225443][ T4032] usb 3-1: not running at top speed; connect to a high speed hub
[  555.390458][ T4032] usb 3-1: config 9 has an invalid interface number: 223 but max is 0
[  555.404096][ T4032] usb 3-1: config 9 has no interface number 0
[  555.415010][ T4032] usb 3-1: config 9 interface 223 altsetting 8 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  555.427765][ T4032] usb 3-1: config 9 interface 223 altsetting 8 has an invalid endpoint with address 0xC2, skipping
[  555.439789][ T4032] usb 3-1: config 9 interface 223 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  555.442564][ T3678] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  555.457284][ T4032] usb 3-1: config 9 interface 223 has no altsetting 0
[  555.471135][ T3678] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  555.478654][ T3678] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  555.481275][T12998] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  555.486223][ T3678] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  555.502582][ T3678] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  555.510180][ T3678] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  555.520895][ T3678] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  555.528241][ T3678] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  555.535615][ T3678] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  555.543049][ T3678] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  555.554678][ T3678] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0006/input/input20
[  555.620579][ T4032] usb 3-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=5f.6a
[  555.639778][ T4032] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.673778][ T4032] usb 3-1: Product: syz
[  555.679615][ T4032] usb 3-1: Manufacturer: syz
[  555.685771][ T4032] usb 3-1: SerialNumber: syz
[  555.711372][T12986] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  555.767815][ T3678] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  555.798852][ T3678] usb 5-1: USB disconnect, device number 21
[  556.011398][ T4032] s2255 3-1:9.223: Could not find bulk-in endpoint
[  556.018145][ T4032] Sensoray 2255 driver load failed: 0xfffffff4
[  556.025032][ T4032] s2255: probe of 3-1:9.223 failed with error -12
[  556.031717][ T4790] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  556.044923][ T4032] usb 3-1: USB disconnect, device number 13
[  556.120312][ T6278] usb 2-1: new full-speed USB device number 36 using dummy_hcd
[  556.420315][ T3678] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  556.430625][ T4790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  556.442068][ T4790] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  556.451463][ T4790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  556.462724][ T4790] usb 4-1: config 0 descriptor??
[  556.480435][ T6278] usb 2-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6
[  556.499737][ T6278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  556.512129][ T6278] usb 2-1: config 0 descriptor??
[  556.540814][ T3637] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  556.564333][ T6278] gspca_main: etoms-2.14.0 probing 102c:6151
[  556.670328][ T3678] usb 1-1: Using ep0 maxpacket: 8
[  556.710538][T13001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  556.721872][T13001] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  556.800557][ T3637] usb 5-1: Using ep0 maxpacket: 8
[  556.820440][ T3684] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  556.935384][T13001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  556.942697][ T3637] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  556.953765][T13001] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  556.955218][ T3637] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  556.972806][ T3678] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  556.973337][T13001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  556.983894][ T3678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.998498][ T3678] usb 1-1: Product: syz
[  556.998676][T13001] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  557.004191][ T3678] usb 1-1: Manufacturer: syz
[  557.015204][ T3678] usb 1-1: SerialNumber: syz
[  557.034745][ T3678] usb 1-1: config 0 descriptor??
[  557.035042][T13001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  557.048785][T13001] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  557.085805][ T3684] usb 3-1: Using ep0 maxpacket: 32
[  557.210428][ T3637] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  557.219618][ T3637] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.227686][ T3637] usb 5-1: Product: syz
[  557.232870][ T3684] usb 3-1: config 0 has an invalid interface number: 237 but max is 0
[  557.241081][ T3637] usb 5-1: Manufacturer: syz
[  557.246600][ T3684] usb 3-1: config 0 has no interface number 0
[  557.253703][ T3637] usb 5-1: SerialNumber: syz
[  557.258764][ T3684] usb 3-1: config 0 interface 237 has no altsetting 0
[  557.266415][ T3637] usb 5-1: config 0 descriptor??
[  557.291922][ T4790] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor
[  557.295127][ T3678] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  557.325742][ T4790] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0007/input/input21
[  557.349553][T13018] loop1: detected capacity change from 0 to 512
[  557.368482][T13018] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.3073: casefold flag without casefold feature
[  557.393811][T13018] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.3073: missing EA_INODE flag
[  557.407609][T13018] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.3073: error while reading EA inode 12 err=-117
[  557.423358][T13018] EXT4-fs (loop1): 1 orphan inode deleted
[  557.431686][T13018] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  557.445802][ T4790] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  557.461884][ T3684] usb 3-1: New USB device found, idVendor=1f4d, idProduct=3100, bcdDevice= 7.e4
[  557.487713][ T3684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.496033][ T3684] usb 3-1: Product: syz
[  557.500587][ T3684] usb 3-1: Manufacturer: syz
[  557.513560][ T3684] usb 3-1: SerialNumber: syz
[  557.521449][T13018] loop1: detected capacity change from 512 to 0
[  557.530781][    C0] blk_print_req_error: 4 callbacks suppressed
[  557.530790][    C0] I/O error, dev loop1, sector 72 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  557.546594][T13021] EXT4-fs error (device loop1): __ext4_find_entry:1685: inode #2: comm syz.1.3073: reading directory lblock 0
[  557.569965][ T4292] lo_write_bvec: 4 callbacks suppressed
[  557.569978][ T4292] loop: Write error at byte offset 9223372036854776831, length 1024.
[  557.571158][ T3684] usb 3-1: config 0 descriptor??
[  557.576181][    C1] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  557.598346][    C1] buffer_io_error: 4 callbacks suppressed
[  557.598358][    C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[  557.615904][T13021] EXT4-fs (loop1): I/O error while writing superblock
[  557.662483][ T3684] dw2102: su3000_identify_state
[  557.665885][    C1] I/O error, dev loop1, sector 72 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  557.667357][ T3684] dvb-usb: found a 'X3M TV SPC1400HD PCI' in warm state.
[  557.676867][ T6601] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block
[  557.685090][ T3684] dw2102: su3000_power_ctrl: 1, initialized 0
[  557.707790][ T3684] dvb-usb: bulk message failed: -22 (2/0)
[  557.724366][ T3684] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  557.737931][    C0] I/O error, dev loop1, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  557.747571][    C0] I/O error, dev loop1, sector 14 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  557.757211][    C0] I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  557.766822][    C0] I/O error, dev loop1, sector 18 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  557.776419][    C0] I/O error, dev loop1, sector 20 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  557.786022][    C0] I/O error, dev loop1, sector 22 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  557.786048][    C0] I/O error, dev loop1, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  557.786193][    T9] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4629: inode #2: block 5: comm kworker/u4:0: unable to read itable block
[  557.788480][ T3684] dvbdev: DVB: registering new adapter (X3M TV SPC1400HD PCI)
[  557.797907][ T4294] loop: Write error at byte offset 9223372036854776831, length 1024.
[  557.815716][ T3684] usb 3-1: media controller created
[  557.822767][    C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[  557.836101][ T3684] dvb-usb: bulk message failed: -22 (6/0)
[  557.857572][    T9] EXT4-fs (loop1): I/O error while writing superblock
[  557.858276][ T3684] dw2102: i2c transfer failed.
[  557.872554][ T6601] EXT4-fs (loop1): unmounting filesystem.
[  557.886233][ T3684] dvb-usb: bulk message failed: -22 (6/0)
[  557.892453][ T4294] loop: Write error at byte offset 9223372036854776831, length 1024.
[  557.895938][ T3684] dw2102: i2c transfer failed.
[  557.905598][ T3684] dvb-usb: bulk message failed: -22 (6/0)
[  557.906644][    C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[  557.911618][ T3684] dw2102: i2c transfer failed.
[  557.921034][ T6601] EXT4-fs (loop1): I/O error while writing superblock
[  557.936367][ T3684] dvb-usb: bulk message failed: -22 (6/0)
[  557.943056][ T3684] dw2102: i2c transfer failed.
[  557.943078][ T3684] dvb-usb: bulk message failed: -22 (6/0)
[  557.943093][ T3684] dw2102: i2c transfer failed.
[  557.943108][ T3684] dvb-usb: bulk message failed: -22 (6/0)
[  557.964905][ T3684] dw2102: i2c transfer failed.
[  557.969667][ T3684] dvb-usb: MAC address: 02:02:02:02:02:02
[  557.985922][ T3684] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  558.001683][ T6276] usb 5-1: USB disconnect, device number 22
[  558.037929][ T3684] dvb-usb: bulk message failed: -22 (3/0)
[  558.044102][ T3684] dw2102: command 0x0e transfer failed.
[  558.050148][ T3684] dvb-usb: bulk message failed: -22 (3/0)
[  558.057411][ T3684] dw2102: command 0x0e transfer failed.
[  558.326457][ T4292] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  558.370392][ T3684] dvb-usb: bulk message failed: -22 (3/0)
[  558.376146][ T3684] dw2102: command 0x0e transfer failed.
[  558.390315][ T3684] dvb-usb: bulk message failed: -22 (3/0)
[  558.396143][   T22] usb 4-1: USB disconnect, device number 19
[  558.402308][ T3684] dw2102: command 0x0e transfer failed.
[  558.419509][ T3684] dvb-usb: bulk message failed: -22 (1/0)
[  558.437539][ T3684] dw2102: command 0x51 transfer failed.
[  558.456673][ T4292] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  558.551156][ T3684] DVB: Unable to find symbol ds3000_attach()
[  558.557181][ T3684] dvb-usb: no frontend was attached by 'X3M TV SPC1400HD PCI'
[  558.587843][ T4292] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  558.669183][ T3648] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  558.680666][ T3648] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  558.688575][ T3648] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  558.699227][ T3648] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  558.707220][ T3648] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  558.714792][ T3648] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  558.762339][ T4292] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  558.810575][ T3684] rc_core: IR keymap rc-su3000 not found
[  558.816670][ T3684] Registered IR keymap rc-empty
[  558.844660][ T3684] rc rc0: X3M TV SPC1400HD PCI as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  558.882912][ T3684] input: X3M TV SPC1400HD PCI as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input22
[  558.962765][ T3684] dvb-usb: schedule remote query interval to 150 msecs.
[  558.969734][ T3684] dw2102: su3000_power_ctrl: 0, initialized 1
[  558.983349][T13028] chnl_net:caif_netlink_parms(): no params data found
[  559.040452][ T3684] dvb-usb: X3M TV SPC1400HD PCI successfully initialized and connected.
[  559.118732][ T6278] usb 2-1: USB disconnect, device number 36
[  559.122434][ T3684] usb 3-1: USB disconnect, device number 14
[  559.357700][T13028] bridge0: port 1(bridge_slave_0) entered blocking state
[  559.367671][T13028] bridge0: port 1(bridge_slave_0) entered disabled state
[  559.372504][ T3684] dvb-usb: X3M TV SPC1400HD PCI successfully deinitialized and disconnected.
[  559.446566][T13028] device bridge_slave_0 entered promiscuous mode
[  559.605359][T13028] bridge0: port 2(bridge_slave_1) entered blocking state
[  559.614758][T13028] bridge0: port 2(bridge_slave_1) entered disabled state
[  559.639392][T13028] device bridge_slave_1 entered promiscuous mode
[  559.851771][T13028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  559.890447][T13028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  559.990876][T13028] team0: Port device team_slave_0 added
[  560.065382][T13028] team0: Port device team_slave_1 added
[  560.199233][T13028] batman_adv: batadv0: Adding interface: batadv_slave_0
[  560.224664][T13028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  560.322400][T13028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  560.444613][T13028] batman_adv: batadv0: Adding interface: batadv_slave_1
[  560.458876][T13028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  560.637043][T13028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  560.760726][ T3648] Bluetooth: hci3: command tx timeout
[  560.825807][T13071] loop2: detected capacity change from 0 to 512
[  560.901876][T13071] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.3084: casefold flag without casefold feature
[  560.918999][T13028] device hsr_slave_0 entered promiscuous mode
[  560.932916][T13028] device hsr_slave_1 entered promiscuous mode
[  560.942329][T13071] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.3084: missing EA_INODE flag
[  560.957949][T13071] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3084: error while reading EA inode 12 err=-117
[  560.970538][T13028] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  560.971263][T13071] EXT4-fs (loop2): 1 orphan inode deleted
[  560.978079][T13028] Cannot create hsr debugfs directory
[  561.026822][T13071] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  561.200549][ T3678] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71
[  561.224253][T13071] loop2: detected capacity change from 512 to 0
[  561.236647][ T3678] usb 1-1: USB disconnect, device number 33
[  561.283023][T13078] EXT4-fs error (device loop2): __ext4_find_entry:1685: inode #2: comm syz.2.3084: reading directory lblock 0
[  561.317857][ T4294] loop: Write error at byte offset 9223372036854776831, length 1024.
[  561.330955][    C0] Buffer I/O error on dev loop2, logical block 1, lost sync page write
[  561.339320][T13078] EXT4-fs (loop2): I/O error while writing superblock
[  561.432216][T12063] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block
[  561.534623][ T4292] device hsr_slave_0 left promiscuous mode
[  561.551915][ T4292] device hsr_slave_1 left promiscuous mode
[  561.564668][ T4292] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  561.572684][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_0
[  561.601834][ T4292] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  561.612241][ T4294] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4629: inode #2: block 5: comm kworker/u4:18: unable to read itable block
[  561.644003][ T3746] loop: Write error at byte offset 9223372036854776831, length 1024.
[  561.662409][    C0] Buffer I/O error on dev loop2, logical block 1, lost sync page write
[  561.670922][ T4294] EXT4-fs (loop2): I/O error while writing superblock
[  561.688031][T12063] EXT4-fs (loop2): unmounting filesystem.
[  561.752098][ T3692] loop: Write error at byte offset 9223372036854776831, length 1024.
[  561.779344][    C0] Buffer I/O error on dev loop2, logical block 1, lost sync page write
[  561.787696][T12063] EXT4-fs (loop2): I/O error while writing superblock
[  561.797939][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_1
[  562.427769][ T4292] device bridge_slave_1 left promiscuous mode
[  562.454675][ T4292] bridge0: port 2(bridge_slave_1) entered disabled state
[  562.479115][ T4292] device bridge_slave_0 left promiscuous mode
[  562.496419][ T4292] bridge0: port 1(bridge_slave_0) entered disabled state
[  562.536294][ T4292] device veth1_macvtap left promiscuous mode
[  562.551017][ T4292] device veth0_macvtap left promiscuous mode
[  562.690130][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  562.696515][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  562.840360][ T3648] Bluetooth: hci3: command tx timeout
[  564.185329][ T4292] team0 (unregistering): Port device team_slave_1 removed
[  564.301229][ T4292] team0 (unregistering): Port device team_slave_0 removed
[  564.421224][ T4292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  564.598263][ T4292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  564.920505][ T3648] Bluetooth: hci3: command tx timeout
[  565.480371][ T4790] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  565.694681][ T4292] bond0 (unregistering): Released all slaves
[  565.730324][ T4790] usb 5-1: Using ep0 maxpacket: 16
[  565.850384][ T4790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  565.916542][ T4790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  565.987253][ T4790] usb 5-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00
[  566.038267][ T4790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  566.077024][ T4790] usb 5-1: config 0 descriptor??
[  566.741939][ T4790] acrux 0003:1A34:F705.0008: unknown main item tag 0x0
[  566.780734][ T4790] acrux 0003:1A34:F705.0008: hidraw0: USB HID v0.00 Device [HID 1a34:f705] on usb-dummy_hcd.4-1/input0
[  566.856682][ T4790] acrux 0003:1A34:F705.0008: no inputs found
[  566.888710][ T4790] acrux 0003:1A34:F705.0008: Failed to enable force feedback support, error: -19
[  567.000319][ T3648] Bluetooth: hci3: command tx timeout
[  567.024694][ T4790] usb 5-1: USB disconnect, device number 23
[  567.178573][T13028] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  567.234182][T13028] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  567.279246][T13028] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  567.303355][T13028] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  567.380824][ T4292] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.480577][ T3651] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  567.485562][ T4292] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.506444][ T3651] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  567.520462][ T3651] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  567.529499][ T3651] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  567.537267][ T3651] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  567.546862][ T3651] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  567.590594][   T22] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  567.598453][T13028] 8021q: adding VLAN 0 to HW filter on device bond0
[  567.646462][ T4292] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.679245][T13028] 8021q: adding VLAN 0 to HW filter on device team0
[  567.688018][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  567.701849][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  567.797681][ T4292] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.864954][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  567.874843][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  567.884017][ T3692] bridge0: port 1(bridge_slave_0) entered blocking state
[  567.891148][ T3692] bridge0: port 1(bridge_slave_0) entered forwarding state
[  568.536096][T13028] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  568.567113][T13028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  568.630360][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  568.669752][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  568.670421][   T22] usb 4-1: Using ep0 maxpacket: 16
[  568.698843][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  568.713785][ T3692] bridge0: port 2(bridge_slave_1) entered blocking state
[  568.720930][ T3692] bridge0: port 2(bridge_slave_1) entered forwarding state
[  568.750691][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  568.760999][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  568.780697][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  568.810417][   T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  568.824074][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  568.840360][   T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  568.850127][   T22] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00
[  568.860445][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  568.869058][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  568.910257][   T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  568.925513][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  568.935032][   T22] usb 4-1: config 0 descriptor??
[  568.948944][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  568.958240][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  568.966861][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  568.984633][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  568.997945][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  569.470514][   T22] usbhid 4-1:0.0: can't add hid device: -71
[  569.476709][   T22] usbhid: probe of 4-1:0.0 failed with error -71
[  569.523603][   T22] usb 4-1: USB disconnect, device number 20
[  569.640470][ T3648] Bluetooth: hci0: command tx timeout
[  569.662277][T13136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  569.679151][T13136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  569.847207][T13028] 8021q: adding VLAN 0 to HW filter on device batadv0
[  569.905794][T13121] chnl_net:caif_netlink_parms(): no params data found
[  570.175210][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  570.223817][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  570.785570][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  570.805007][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  570.836065][   T26] audit: type=1326 audit(1725523692.924:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13202 comm="syz.4.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c6b7cef9 code=0x7ffc0000
[  570.870600][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  570.894353][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  570.899603][   T26] audit: type=1326 audit(1725523692.924:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13202 comm="syz.4.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5c6b7cef9 code=0x7ffc0000
[  571.001351][T13121] bridge0: port 1(bridge_slave_0) entered blocking state
[  571.011888][T13121] bridge0: port 1(bridge_slave_0) entered disabled state
[  571.015752][   T26] audit: type=1326 audit(1725523692.924:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13202 comm="syz.4.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c6b7cef9 code=0x7ffc0000
[  571.067833][T13121] device bridge_slave_0 entered promiscuous mode
[  571.075097][   T26] audit: type=1326 audit(1725523692.944:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13202 comm="syz.4.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7ff5c6b7cef9 code=0x7ffc0000
[  571.104650][T13207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3115'.
[  571.190546][   T26] audit: type=1326 audit(1725523692.944:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13202 comm="syz.4.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c6b7cef9 code=0x7ffc0000
[  571.278739][   T26] audit: type=1326 audit(1725523692.944:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13202 comm="syz.4.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5c6b7cef9 code=0x7ffc0000
[  571.321750][T13207] device hsr_slave_1 left promiscuous mode
[  571.357480][T13028] device veth0_vlan entered promiscuous mode
[  571.364610][   T26] audit: type=1326 audit(1725523692.944:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13202 comm="syz.4.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c6b7cef9 code=0x7ffc0000
[  571.433364][T13121] bridge0: port 2(bridge_slave_1) entered blocking state
[  571.443374][T13121] bridge0: port 2(bridge_slave_1) entered disabled state
[  571.455049][   T26] audit: type=1326 audit(1725523692.954:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13202 comm="syz.4.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ff5c6b7cef9 code=0x7ffc0000
[  571.477357][T13121] device bridge_slave_1 entered promiscuous mode
[  571.506914][   T26] audit: type=1326 audit(1725523692.954:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13202 comm="syz.4.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c6b7cef9 code=0x7ffc0000
[  571.537284][T13028] device veth1_vlan entered promiscuous mode
[  571.553444][   T26] audit: type=1326 audit(1725523692.954:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13202 comm="syz.4.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7ff5c6b7cef9 code=0x7ffc0000
[  571.726767][ T3648] Bluetooth: hci0: command tx timeout
[  571.792226][T13121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  571.830702][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  571.851333][T13218] loop4: detected capacity change from 0 to 4096
[  571.855201][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  571.906119][T13218] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  571.933799][T13121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  571.976798][T13028] device veth0_macvtap entered promiscuous mode
[  572.026631][T13218] device vlan2 entered promiscuous mode
[  572.038469][T13218] device dummy0 entered promiscuous mode
[  572.071643][T13218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  572.159174][T12596] EXT4-fs (loop4): unmounting filesystem.
[  572.228445][T13028] device veth1_macvtap entered promiscuous mode
[  572.311851][ T4292] device hsr_slave_0 left promiscuous mode
[  572.329251][ T4292] device hsr_slave_1 left promiscuous mode
[  572.338371][ T4292] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  572.349804][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_0
[  572.359199][ T4292] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  572.360332][ T3684] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  572.372747][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_1
[  572.388580][T13230] xt_CHECKSUM: unsupported CHECKSUM operation f4
[  572.388828][ T4292] device bridge_slave_1 left promiscuous mode
[  572.402273][ T4292] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.411438][ T4292] device bridge_slave_0 left promiscuous mode
[  572.417650][ T4292] bridge0: port 1(bridge_slave_0) entered disabled state
[  572.448820][ T4292] device veth1_macvtap left promiscuous mode
[  572.455187][ T4292] device veth0_macvtap left promiscuous mode
[  572.461910][ T4292] device veth1_vlan left promiscuous mode
[  572.467720][ T4292] device veth0_vlan left promiscuous mode
[  572.590275][T13042] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  572.620989][ T3684] usb 4-1: Using ep0 maxpacket: 16
[  572.760516][ T3684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  572.777834][ T3684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  572.788006][ T3684] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00
[  572.804845][ T3684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  572.822661][ T3684] usb 4-1: config 0 descriptor??
[  573.022403][T13042] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  573.039279][T13042] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  573.053795][T13042] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  573.068792][T13042] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  573.342145][T13042] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  573.351391][T13042] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  573.359476][T13042] usb 5-1: Product: syz
[  573.364685][T13042] usb 5-1: Manufacturer: syz
[  573.369296][T13042] usb 5-1: SerialNumber: syz
[  573.380440][ T3684] usbhid 4-1:0.0: can't add hid device: -71
[  573.391585][ T3684] usbhid: probe of 4-1:0.0 failed with error -71
[  573.408749][T13042] usb 5-1: config 0 descriptor??
[  573.565203][ T4292] team0 (unregistering): Port device team_slave_1 removed
[  573.715511][ T4292] team0 (unregistering): Port device team_slave_0 removed
[  573.814230][ T3651] Bluetooth: hci0: command tx timeout
[  573.992872][ T3684] usb 4-1: USB disconnect, device number 21
[  574.161436][ T4292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  574.275504][ T4292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  574.284404][T13042] adutux 5-1:0.0: Could not retrieve serial number
[  574.300743][T13042] adutux: probe of 5-1:0.0 failed with error -5
[  574.551332][T13260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  574.576097][T13260] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  575.784020][   T22] usb 5-1: USB disconnect, device number 24
[  575.882500][ T3648] Bluetooth: hci0: command tx timeout
[  576.056457][ T4292] bond0 (unregistering): Released all slaves
[  576.298388][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  576.345874][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.418421][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  576.566618][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.691241][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  576.818554][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.830075][T13028] batman_adv: batadv0: Interface activated: batadv_slave_0
[  576.844312][T13121] team0: Port device team_slave_0 added
[  576.857566][T13121] team0: Port device team_slave_1 added
[  576.865031][T13136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  576.878462][T13136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  576.898486][T13136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  576.914475][T13136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  576.926375][T13255] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3133'.
[  576.938980][T13255] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3133'.
[  576.956125][T13255] device macvlan0 entered promiscuous mode
[  576.968685][T13255] device batadv_slave_0 entered promiscuous mode
[  576.988351][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  577.016900][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  577.047975][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  577.099174][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  577.136147][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  577.167084][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  577.200474][T13028] batman_adv: batadv0: Interface activated: batadv_slave_1
[  577.254145][T13136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  577.268744][T13136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  577.282425][T13136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  577.315262][T13028] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  577.355227][T13028] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  577.380839][T13028] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  577.402034][T13028] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  577.464092][T13293] xt_CT: No such helper "pptp"
[  577.470616][T13121] batman_adv: batadv0: Adding interface: batadv_slave_0
[  577.500362][T13121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  577.550700][T13121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  577.643802][T13121] batman_adv: batadv0: Adding interface: batadv_slave_1
[  577.654498][T13121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  577.739221][T13121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  577.907764][T13121] device hsr_slave_0 entered promiscuous mode
[  577.929531][T13121] device hsr_slave_1 entered promiscuous mode
[  578.008245][T13136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  578.068037][T13136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  578.550788][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  578.602257][ T4304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  578.620632][ T4304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  578.740375][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  578.852346][T13327] loop3: detected capacity change from 0 to 512
[  578.987323][T13327] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.3155: casefold flag without casefold feature
[  579.031776][T13327] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.3155: missing EA_INODE flag
[  579.119422][T13327] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.3155: error while reading EA inode 12 err=-117
[  579.187802][T13327] EXT4-fs (loop3): 1 orphan inode deleted
[  579.202294][T13327] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  579.276154][T13349] ip6gretap0 speed is unknown, defaulting to 1000
[  579.280324][ T4790] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  579.373473][T13349] ip6gretap0 speed is unknown, defaulting to 1000
[  579.402288][T12583] EXT4-fs (loop3): unmounting filesystem.
[  579.403989][T13121] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  579.458878][T13121] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  579.533789][T13121] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  579.576316][T13349] ip6gretap0 speed is unknown, defaulting to 1000
[  579.588697][T13121] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  579.660469][ T4790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  579.668792][T13349] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  579.685383][ T4790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  579.843526][T13121] 8021q: adding VLAN 0 to HW filter on device bond0
[  579.881888][ T4790] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66
[  579.893771][T13349] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  579.909223][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  579.916723][ T4790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  579.946110][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  579.968745][ T4790] usb 2-1: Product: syz
[  580.005172][T13121] 8021q: adding VLAN 0 to HW filter on device team0
[  580.021927][ T4790] usb 2-1: Manufacturer: syz
[  580.031398][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  580.039654][ T4790] usb 2-1: SerialNumber: syz
[  580.051660][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  580.061902][   T26] kauditd_printk_skb: 8 callbacks suppressed
[  580.061914][   T26] audit: type=1326 audit(1725523702.154:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.0.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd997cef9 code=0x7ffc0000
[  580.092983][ T4790] usb 2-1: config 0 descriptor??
[  580.108149][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  580.115287][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  580.141663][ T4790] snd-usb-audio: probe of 2-1:0.0 failed with error -90
[  580.175967][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  580.188727][   T26] audit: type=1326 audit(1725523702.154:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.0.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd997cef9 code=0x7ffc0000
[  580.228297][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  580.263513][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  580.276276][   T26] audit: type=1326 audit(1725523702.184:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.0.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbd997cef9 code=0x7ffc0000
[  580.325619][   T26] audit: type=1326 audit(1725523702.184:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.0.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd997cef9 code=0x7ffc0000
[  580.359066][T13340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  580.390796][T13340] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  580.391071][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  580.405636][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  580.422950][T13340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  580.442531][   T26] audit: type=1326 audit(1725523702.184:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.0.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd997cef9 code=0x7ffc0000
[  580.456082][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  580.475754][T13340] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  580.525987][   T26] audit: type=1326 audit(1725523702.184:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.0.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbd997cef9 code=0x7ffc0000
[  580.558203][T13349] ip6gretap0 speed is unknown, defaulting to 1000
[  580.558299][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  580.584269][ T3684] usb 2-1: USB disconnect, device number 37
[  580.595630][   T26] audit: type=1326 audit(1725523702.184:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.0.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd997cef9 code=0x7ffc0000
[  580.621403][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  580.637661][   T26] audit: type=1326 audit(1725523702.184:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.0.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd997cef9 code=0x7ffc0000
[  580.645962][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  580.678349][   T26] audit: type=1326 audit(1725523702.184:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.0.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdbd997cef9 code=0x7ffc0000
[  580.702089][   T26] audit: type=1326 audit(1725523702.184:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.0.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdbd997cf33 code=0x7ffc0000
[  580.793956][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  580.808736][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  580.823549][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  580.834959][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  580.848676][T13349] ip6gretap0 speed is unknown, defaulting to 1000
[  580.849997][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  580.878462][T13121] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  580.927011][T13121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  580.956791][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  580.965386][T13349] ip6gretap0 speed is unknown, defaulting to 1000
[  580.981110][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  581.013812][T13349] ip6gretap0 speed is unknown, defaulting to 1000
[  581.085010][T13349] ip6gretap0 speed is unknown, defaulting to 1000
[  582.500520][T13396] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  582.651601][T13396] ip6gretap0 speed is unknown, defaulting to 1000
[  583.408644][T13121] 8021q: adding VLAN 0 to HW filter on device batadv0
[  583.471958][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  583.479446][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  583.550732][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  583.596497][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  583.683735][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  583.715897][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  583.769174][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  583.802083][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  583.827027][T13121] device veth0_vlan entered promiscuous mode
[  583.871610][T13121] device veth1_vlan entered promiscuous mode
[  583.984779][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  584.023307][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  584.041025][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  584.070035][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  584.216733][T13121] device veth0_macvtap entered promiscuous mode
[  584.254688][T13121] device veth1_macvtap entered promiscuous mode
[  584.337375][T13121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  584.374522][T13121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  584.414846][T13121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  584.455898][T13121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  584.496388][T13121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  584.535346][T13121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  584.576627][T13121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  584.607512][T13121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  584.634677][T13121] batman_adv: batadv0: Interface activated: batadv_slave_0
[  584.676258][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  584.686004][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  584.711305][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  584.742842][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  584.784799][T13121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  584.824656][T13121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  584.860301][T13121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  584.900332][T13121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  584.940295][T13121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  584.970234][T13121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  584.997333][T13421] loop4: detected capacity change from 0 to 32768
[  585.004441][T13121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  585.022213][T13121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  585.043241][T13419] loop3: detected capacity change from 0 to 32768
[  585.061636][T13121] batman_adv: batadv0: Interface activated: batadv_slave_1
[  585.078575][T13419] XFS: attr2 mount option is deprecated.
[  585.093742][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  585.095932][T13419] XFS: attr2 mount option is deprecated.
[  585.133826][T13419] XFS: noikeep mount option is deprecated.
[  585.156844][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  585.201961][T13424] loop1: detected capacity change from 0 to 32768
[  585.218779][T13121] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  585.233764][T13424] XFS (loop1): Mounting V5 Filesystem
[  585.246838][T13436] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt
[  585.246838][T13436] 
[  585.276929][T13121] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  585.300759][T13121] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  585.300919][T13436] ERROR: (device loop4): remounting filesystem as read-only
[  585.321470][T13436] ERROR: (device loop4): jfs_unlink: 
[  585.321470][T13436] 
[  585.332475][T13121] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  585.376017][T13419] XFS (loop3): Mounting V5 Filesystem
[  585.385727][T13424] XFS (loop1): Ending clean mount
[  585.407876][T13424] XFS (loop1): Quotacheck needed: Please wait.
[  585.552780][T13424] XFS (loop1): Quotacheck: Done.
[  585.576185][T13419] XFS (loop3): Ending clean mount
[  585.627600][T13419] XFS (loop3): Quotacheck needed: Please wait.
[  585.686196][ T4296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  585.737266][T13419] XFS (loop3): Quotacheck: Done.
[  585.745098][ T4296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  585.767127][T13028] XFS (loop1): Unmounting Filesystem
[  585.795192][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  585.907162][ T4288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  585.922576][ T4288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  585.926903][T13459] can: request_module (can-proto-4) failed.
[  586.025079][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  586.047159][T12583] XFS (loop3): Unmounting Filesystem
[  586.168238][   T26] kauditd_printk_skb: 144 callbacks suppressed
[  586.168254][   T26] audit: type=1326 audit(1725523708.254:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.0.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd997cef9 code=0x7ffc0000
[  586.315300][   T26] audit: type=1326 audit(1725523708.254:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.0.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd997cef9 code=0x7ffc0000
[  586.400126][   T26] audit: type=1326 audit(1725523708.254:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.0.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdbd997cef9 code=0x7ffc0000
[  586.487798][   T26] audit: type=1326 audit(1725523708.254:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.0.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdbd997cf33 code=0x7ffc0000
[  586.658155][   T26] audit: type=1326 audit(1725523708.254:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.0.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdbd997b9df code=0x7ffc0000
[  586.729489][T13473] loop1: detected capacity change from 0 to 512
[  586.761007][   T26] audit: type=1326 audit(1725523708.254:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.0.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdbd997cf87 code=0x7ffc0000
[  586.826449][T13473] EXT4-fs: Ignoring removed nomblk_io_submit option
[  586.826832][T13475] loop2: detected capacity change from 0 to 1024
[  586.844486][   T26] audit: type=1326 audit(1725523708.274:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.0.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdbd997b890 code=0x7ffc0000
[  586.933835][T13475] EXT4-fs error (device loop2): __ext4_fill_super:5399: inode #2: comm syz.2.3192: casefold flag without casefold feature
[  586.936880][   T26] audit: type=1326 audit(1725523708.274:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.0.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdbd997bb8a code=0x7ffc0000
[  586.969150][   T26] audit: type=1326 audit(1725523708.274:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.0.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd997cef9 code=0x7ffc0000
[  586.992500][   T26] audit: type=1326 audit(1725523708.274:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.0.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fdbd997cef9 code=0x7ffc0000
[  587.031805][T13475] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  587.036665][T13473] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  587.052017][T13475] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  587.107478][T13473] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038 (0x7fffffff)
[  587.355897][T13028] EXT4-fs (loop1): unmounting filesystem.
[  587.507199][T12596] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt
[  587.507199][T12596] 
[  587.529932][T13121] EXT4-fs (loop2): unmounting filesystem.
[  587.761004][T13491] can: request_module (can-proto-4) failed.
[  589.096962][T13512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3203'.
[  589.344433][T13524] device bridge1 entered promiscuous mode
[  589.367914][T13522] can: request_module (can-proto-4) failed.
[  590.119177][T13541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3215'.
[  590.486883][T13550] can: request_module (can-proto-4) failed.
[  590.509658][T13559] misc userio: Invalid payload size
[  590.670472][ T3684] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  590.753765][T13557] loop1: detected capacity change from 0 to 32768
[  590.802385][T13557] XFS (loop1): Mounting V5 Filesystem
[  590.856742][T13557] XFS (loop1): Ending clean mount
[  590.948000][T13028] XFS (loop1): Unmounting Filesystem
[  590.953812][ T3684] usb 5-1: Using ep0 maxpacket: 8
[  591.080678][ T3684] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  591.093573][ T3684] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  591.144055][ T3684] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  591.170401][ T3684] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  591.191654][ T3684] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  591.225392][ T3684] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  591.236576][ T3684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  591.728062][   T22] usb 5-1: USB disconnect, device number 25
[  591.974148][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  592.029484][T13596] can: request_module (can-proto-4) failed.
[  592.390354][ T3637] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  592.684890][T13620] loop4: detected capacity change from 0 to 512
[  592.698662][T13620] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.3243: casefold flag without casefold feature
[  592.714254][T13620] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.3243: missing EA_INODE flag
[  592.733155][T13620] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.3243: error while reading EA inode 12 err=-117
[  592.751441][T13620] EXT4-fs (loop4): 1 orphan inode deleted
[  592.758362][T13620] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  592.810410][ T3637] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  592.824443][ T3637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  592.838943][ T3637] usb 4-1: config 0 descriptor??
[  592.870634][T13620] loop4: detected capacity change from 512 to 0
[  592.872299][T13626] can: request_module (can-proto-4) failed.
[  592.886387][ T3637] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  592.896531][ T4288] loop: Write error at byte offset 9223372036854812671, length 1024.
[  592.906451][    C1] blk_print_req_error: 18 callbacks suppressed
[  592.906464][    C1] I/O error, dev loop4, sector 72 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  592.922352][    C1] Buffer I/O error on dev loop4, logical block 36, lost sync page write
[  592.934749][T13628] EXT4-fs error (device loop4): ext4_handle_dirty_dirblock:440: inode #2: block 36: comm syz.4.3243: IO error syncing itable block
[  592.955761][ T4288] loop: Write error at byte offset 9223372036854776831, length 1024.
[  592.964695][    C0] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  592.974251][    C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  592.982968][T13628] EXT4-fs (loop4): I/O error while writing superblock
[  592.993075][T13628] EXT4-fs error (device loop4) in add_dirent_to_buf:2218: IO failure
[  593.004062][ T4288] loop: Write error at byte offset 9223372036854776831, length 1024.
[  593.012311][    C0] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  593.021853][    C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  593.030503][T13628] EXT4-fs (loop4): I/O error while writing superblock
[  593.037407][T13628] EXT4-fs error (device loop4): ext4_check_bdev_write_error:218: comm syz.4.3243: Error while async write back metadata
[  593.065183][ T4288] loop: Write error at byte offset 9223372036854776831, length 1024.
[  593.074709][    C0] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  593.084272][    C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  593.096391][T13628] EXT4-fs (loop4): I/O error while writing superblock
[  593.103488][T13628] EXT4-fs error (device loop4): ext4_check_bdev_write_error:218: comm syz.4.3243: Error while async write back metadata
[  593.123356][ T4288] loop: Write error at byte offset 9223372036854776831, length 1024.
[  593.133681][    C0] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  593.143228][    C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  593.152094][T13628] EXT4-fs (loop4): I/O error while writing superblock
[  593.158968][T13628] EXT4-fs error (device loop4): ext4_check_bdev_write_error:218: comm syz.4.3243: Error while async write back metadata
[  593.172291][ T4288] loop: Write error at byte offset 9223372036854776831, length 1024.
[  593.181180][    C0] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  593.190734][    C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  593.199286][T13628] EXT4-fs (loop4): I/O error while writing superblock
[  593.206189][T13628] EXT4-fs error (device loop4): ext4_check_bdev_write_error:218: comm syz.4.3243: Error while async write back metadata
[  593.219177][ T4288] loop: Write error at byte offset 9223372036854776831, length 1024.
[  593.230798][    C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  593.240325][    C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  593.248621][T13628] EXT4-fs (loop4): I/O error while writing superblock
[  593.256289][T13628] EXT4-fs error (device loop4): ext4_check_bdev_write_error:218: comm syz.4.3243: Error while async write back metadata
[  593.269839][ T4288] loop: Write error at byte offset 9223372036854776831, length 1024.
[  593.284808][    C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  593.294330][    C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  593.302626][T13628] EXT4-fs (loop4): I/O error while writing superblock
[  593.309739][T13628] EXT4-fs error (device loop4): ext4_check_bdev_write_error:218: comm syz.4.3243: Error while async write back metadata
[  593.323686][ T4304] loop: Write error at byte offset 9223372036854776831, length 1024.
[  593.332156][    C0] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  593.341739][    C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  593.350512][T13628] EXT4-fs (loop4): I/O error while writing superblock
[  593.379000][T12596] EXT4-fs error (device loop4): ext4_check_bdev_write_error:218: comm syz-executor: Error while async write back metadata
[  593.390376][   T22] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  593.401304][ T4288] loop: Write error at byte offset 9223372036854776831, length 1024.
[  593.409623][    C0] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  593.419150][    C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  593.433426][T12596] EXT4-fs (loop4): I/O error while writing superblock
[  593.443263][T12596] EXT4-fs error (device loop4): ext4_handle_dirty_dirblock:440: inode #2: block 36: comm syz-executor: IO error syncing itable block
[  593.580311][   T22] usb 3-1: device descriptor read/64, error -71
[  593.825327][ T4304] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.850446][   T22] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  593.953017][ T4304] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  594.060650][   T22] usb 3-1: device descriptor read/64, error -71
[  594.063145][ T4304] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  594.190552][   T22] usb usb3-port1: attempt power cycle
[  594.241793][ T4304] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  594.361358][T13640] loop1: detected capacity change from 0 to 128
[  594.407857][T13640] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  594.438782][ T3651] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  594.450955][ T3651] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  594.458933][ T3651] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  594.467959][ T3651] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  594.478527][T13640] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  594.478545][ T3651] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  594.509673][    C1] vkms_vblank_simulate: vblank timer overrun
[  594.526712][ T3651] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  594.555824][ T3637] usb 4-1: USB disconnect, device number 22
[  594.600372][   T22] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  594.657710][T13042] infiniband syz2: ib_query_port failed (-19)
[  594.690471][   T22] usb 3-1: device descriptor read/8, error -71
[  594.991242][   T22] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  595.027817][T13028] EXT4-fs (loop1): unmounting filesystem.
[  595.090592][   T22] usb 3-1: device descriptor read/8, error -71
[  595.211902][   T22] usb usb3-port1: unable to enumerate USB device
[  595.351864][T13642] chnl_net:caif_netlink_parms(): no params data found
[  595.500280][   T22] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  595.533033][T13642] bridge0: port 1(bridge_slave_0) entered blocking state
[  595.546562][T13642] bridge0: port 1(bridge_slave_0) entered disabled state
[  595.568130][T13642] device bridge_slave_0 entered promiscuous mode
[  595.619063][T13642] bridge0: port 2(bridge_slave_1) entered blocking state
[  595.628924][T13642] bridge0: port 2(bridge_slave_1) entered disabled state
[  595.647724][T13642] device bridge_slave_1 entered promiscuous mode
[  595.686395][T13642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  595.713225][T13642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  595.740505][   T22] usb 4-1: Using ep0 maxpacket: 32
[  595.743175][T13642] team0: Port device team_slave_0 added
[  595.796562][T13642] team0: Port device team_slave_1 added
[  595.820577][T13642] batman_adv: batadv0: Adding interface: batadv_slave_0
[  595.827598][T13642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  595.855567][T13642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  595.870447][T13642] batman_adv: batadv0: Adding interface: batadv_slave_1
[  595.877504][T13642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  595.906248][T13642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  595.924809][ T3684] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  596.020449][   T22] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  596.031528][   T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  596.039538][   T22] usb 4-1: Product: syz
[  596.057703][   T22] usb 4-1: Manufacturer: syz
[  596.068501][T13642] device hsr_slave_0 entered promiscuous mode
[  596.070331][   T22] usb 4-1: SerialNumber: syz
[  596.083486][T13642] device hsr_slave_1 entered promiscuous mode
[  596.091412][   T22] usb 4-1: config 0 descriptor??
[  596.096576][T13642] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  596.111134][T13642] Cannot create hsr debugfs directory
[  596.132087][   T22] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  596.142832][ T4304] device hsr_slave_0 left promiscuous mode
[  596.156547][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  596.183494][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0
[  596.196879][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  596.214137][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1
[  596.233613][ T4304] device bridge_slave_1 left promiscuous mode
[  596.239908][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state
[  596.275892][ T4304] device bridge_slave_0 left promiscuous mode
[  596.288031][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state
[  596.336514][T13659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  596.350469][ T3684] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  596.371100][ T3684] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  596.376274][ T4304] device dummy0 left promiscuous mode
[  596.397689][ T3684] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  596.423972][ T3684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  596.452338][ T4304] device veth1_macvtap left promiscuous mode
[  596.454985][T13659] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  596.460938][ T4304] device veth0_macvtap left promiscuous mode
[  596.467303][T13678] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  596.519055][ T4304] device veth1_vlan left promiscuous mode
[  596.538004][ T4304] device veth0_vlan left promiscuous mode
[  596.600985][ T3651] Bluetooth: hci2: command tx timeout
[  596.620461][ T4790] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  596.660565][   T22] gspca_ov534_9: reg_w failed -110
[  596.809792][ T3637] usb 1-1: USB disconnect, device number 34
[  596.991317][ T4790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  597.002652][ T4790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  597.012857][ T4790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  597.023918][ T4790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  597.170358][   T22] gspca_ov534_9: Unknown sensor 0000
[  597.170423][   T22] ov534_9: probe of 4-1:0.0 failed with error -22
[  597.190511][ T4790] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  597.204545][ T4790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.212759][ T4790] usb 3-1: Product: syz
[  597.216934][ T4790] usb 3-1: Manufacturer: syz
[  597.221616][ T4790] usb 3-1: SerialNumber: syz
[  597.236236][ T4790] usb 3-1: config 0 descriptor??
[  597.381854][T13702] loop1: detected capacity change from 0 to 32768
[  597.438739][ T4304] team0 (unregistering): Port device team_slave_1 removed
[  597.490972][ T4790] adutux 3-1:0.0: Could not retrieve serial number
[  597.497801][ T4790] adutux: probe of 3-1:0.0 failed with error -5
[  597.536795][ T4304] team0 (unregistering): Port device team_slave_0 removed
[  597.580766][T13703] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt
[  597.580766][T13703] 
[  597.596687][T13703] ERROR: (device loop1): remounting filesystem as read-only
[  597.604373][T13703] ERROR: (device loop1): jfs_unlink: 
[  597.604373][T13703] 
[  597.637230][ T4304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  597.757390][T13706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  597.772919][T13706] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  597.835571][ T4304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  598.680392][ T3651] Bluetooth: hci2: command tx timeout
[  598.810536][ T4304] bond0 (unregistering): Released all slaves
[  598.982002][T13659] device batadv0 entered promiscuous mode
[  598.993830][T13659] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  599.024974][T13659] device batadv0 left promiscuous mode
[  599.195787][ T4032] usb 4-1: USB disconnect, device number 23
[  599.276420][ T3637] usb 3-1: USB disconnect, device number 19
[  599.326109][T13028] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt
[  599.326109][T13028] 
[  599.860267][ T3637] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  600.026936][T13733] loop1: detected capacity change from 0 to 256
[  600.070385][ T3637] usb 3-1: device descriptor read/64, error -71
[  600.091068][T13733] exfat: Bad value for 'gid'
[  600.316645][T13642] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  600.350976][ T3637] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  600.409255][T13642] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  600.580383][ T3637] usb 3-1: device descriptor read/64, error -71
[  600.715929][ T3637] usb usb3-port1: attempt power cycle
[  600.760380][ T3651] Bluetooth: hci2: command tx timeout
[  601.150417][ T3637] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  601.248798][ T3637] usb 3-1: device descriptor read/8, error -71
[  601.521873][ T3637] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  601.630529][ T3637] usb 3-1: device descriptor read/8, error -71
[  601.761151][ T3637] usb usb3-port1: unable to enumerate USB device
[  602.683391][T13642] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  602.841969][ T3651] Bluetooth: hci2: command tx timeout
[  602.972693][ T3637] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  603.384408][ T3637] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  603.412532][ T3637] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  603.424892][ T3637] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  603.450156][ T3637] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  603.623350][ T3637] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  603.633746][ T3637] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  603.646790][ T3637] usb 3-1: Product: syz
[  603.652076][ T3637] usb 3-1: Manufacturer: syz
[  603.656701][ T3637] usb 3-1: SerialNumber: syz
[  603.674628][ T3637] usb 3-1: config 0 descriptor??
[  603.711779][   T22] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  603.955153][ T3637] adutux 3-1:0.0: Could not retrieve serial number
[  603.955163][   T22] usb 4-1: Using ep0 maxpacket: 8
[  603.974446][ T3637] adutux: probe of 3-1:0.0 failed with error -5
[  604.231556][   T22] usb 4-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=81.67
[  604.241806][T13779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  604.251433][   T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  604.259754][   T22] usb 4-1: Product: syz
[  604.265121][   T22] usb 4-1: Manufacturer: syz
[  604.270325][   T22] usb 4-1: SerialNumber: syz
[  604.291594][T13779] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  604.293253][   T22] usb 4-1: config 0 descriptor??
[  604.347773][   T22] ipw 4-1:0.0: IPWireless converter converter detected
[  604.552524][   T22] usb 4-1: USB disconnect, device number 24
[  604.572973][   T22] ipw 4-1:0.0: device disconnected
[  604.970343][ T3684] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  605.380525][ T3684] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  605.395256][ T3684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  605.434470][ T3684] usb 1-1: config 0 descriptor??
[  605.492479][ T3684] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  605.577265][T13042] usb 3-1: USB disconnect, device number 24
[  605.768752][T13787] loop3: detected capacity change from 0 to 32768
[  605.797593][T13791] loop2: detected capacity change from 0 to 512
[  605.861861][T13791] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.3293: casefold flag without casefold feature
[  605.876942][T13791] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.3293: missing EA_INODE flag
[  605.907383][T13791] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3293: error while reading EA inode 12 err=-117
[  605.923072][T13791] EXT4-fs (loop2): 1 orphan inode deleted
[  605.936589][T13642] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  605.950314][T13791] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  606.077231][   T26] kauditd_printk_skb: 27 callbacks suppressed
[  606.077246][   T26] audit: type=1800 audit(1725523728.164:303): pid=13791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3293" name="bus" dev="loop2" ino=15 res=0 errno=0
[  606.184042][T13121] EXT4-fs (loop2): unmounting filesystem.
[  606.238001][T13794] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt
[  606.238001][T13794] 
[  606.272720][T13794] ERROR: (device loop3): remounting filesystem as read-only
[  606.280045][T13794] ERROR: (device loop3): jfs_unlink: 
[  606.280045][T13794] 
[  606.328573][T13642] 8021q: adding VLAN 0 to HW filter on device bond0
[  606.366620][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  606.378246][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  606.402512][T13642] 8021q: adding VLAN 0 to HW filter on device team0
[  606.426603][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  606.444012][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  606.471714][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state
[  606.478860][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state
[  606.515969][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  606.555116][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  606.708353][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  606.749849][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state
[  606.757038][ T4296] bridge0: port 2(bridge_slave_1) entered forwarding state
[  606.849223][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  607.227725][ T3684] usb 1-1: USB disconnect, device number 35
[  607.321342][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  607.376671][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  607.414951][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  607.436359][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  607.449370][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  607.465617][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  607.525069][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  607.580518][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  607.607746][T13642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  607.627419][T13818] loop2: detected capacity change from 0 to 256
[  607.641232][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  607.694785][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  607.699547][T13818] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  607.743785][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  607.755667][   T26] audit: type=1800 audit(1725523729.854:304): pid=13818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3297" name="file1" dev="loop2" ino=1049052 res=0 errno=0
[  607.803108][T13818] exFAT-fs (loop2): hint_cluster is invalid (17)
[  608.270532][ T4790] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  608.429697][T13844] loop2: detected capacity change from 0 to 256
[  608.475371][T13642] 8021q: adding VLAN 0 to HW filter on device batadv0
[  608.489474][T13844] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  608.507567][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  608.545386][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  608.640466][ T4790] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  608.674983][ T4790] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  608.688672][T12583] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt
[  608.688672][T12583] 
[  608.703999][ T4790] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  608.725325][ T4790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  608.768691][T13848] loop2: detected capacity change from 256 to 0
[  608.770531][T13830] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  608.825124][T13848] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000005)
[  608.845074][T13848] exFAT-fs (loop2): Filesystem has been set read-only
[  609.151768][T13121] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000005)
[  609.174777][ T4032] usb 2-1: USB disconnect, device number 38
[  609.230572][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  609.251306][T13121] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000005)
[  609.282209][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  609.352553][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  609.393914][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  609.436102][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  609.495878][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  609.543100][T13642] device veth0_vlan entered promiscuous mode
[  609.597486][T13642] device veth1_vlan entered promiscuous mode
[  609.636375][T13871] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3305'.
[  609.713071][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  609.735580][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  609.779811][T13642] device veth0_macvtap entered promiscuous mode
[  609.848993][T13642] device veth1_macvtap entered promiscuous mode
[  609.938268][T13642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  609.979462][T13642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  610.020020][T13642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  610.052189][T13642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  610.089681][T13642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  610.124451][T13642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  610.145196][T13642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  610.172515][T13642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  610.206166][T13642] batman_adv: batadv0: Interface activated: batadv_slave_0
[  610.236745][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  610.258152][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  610.287149][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  610.319293][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  610.349780][T13642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  610.372359][T13642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  610.402511][T13642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  610.433975][T13642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  610.463748][T13642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  610.496384][T13642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  610.545908][T13642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  610.580271][T13642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  610.622467][T13642] batman_adv: batadv0: Interface activated: batadv_slave_1
[  610.643037][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  610.663709][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  610.704157][T13642] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  610.731492][T13642] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  610.766382][T13642] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  610.804958][T13642] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  611.494933][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  611.515501][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  611.553189][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  611.719985][T13136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  611.748829][T13136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  611.821164][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  612.157266][T13931] loop4: detected capacity change from 0 to 256
[  612.204592][T13931] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  612.252846][   T26] audit: type=1800 audit(1725523734.344:305): pid=13931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3317" name="file1" dev="loop4" ino=1049071 res=0 errno=0
[  612.285920][T13931] exFAT-fs (loop4): hint_cluster is invalid (17)
[  612.566960][T13912] loop1: detected capacity change from 0 to 32768
[  612.916580][T13948] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt
[  612.916580][T13948] 
[  612.960714][ T3678] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  612.971486][T13948] ERROR: (device loop1): remounting filesystem as read-only
[  612.978945][T13948] ERROR: (device loop1): jfs_unlink: 
[  612.978945][T13948] 
[  613.180621][ T3678] usb 4-1: device descriptor read/64, error -71
[  613.475385][ T3678] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  613.710299][ T3678] usb 4-1: device descriptor read/64, error -71
[  613.840967][ T3678] usb usb4-port1: attempt power cycle
[  614.444927][ T3678] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  614.568276][T13976] loop2: detected capacity change from 0 to 256
[  614.580351][ T3678] usb 4-1: device descriptor read/8, error -71
[  614.737976][T13976] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  614.773784][   T26] audit: type=1800 audit(1725523736.864:306): pid=13976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3329" name="file1" dev="loop2" ino=1049075 res=0 errno=0
[  614.815859][T13976] exFAT-fs (loop2): hint_cluster is invalid (17)
[  614.880392][ T3678] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  615.010487][ T3678] usb 4-1: device descriptor read/8, error -71
[  615.130418][ T3678] usb usb4-port1: unable to enumerate USB device
[  615.511844][T13028] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt
[  615.511844][T13028] 
[  616.238906][T14009] loop1: detected capacity change from 0 to 256
[  617.940371][ T3678] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  618.150308][ T3678] usb 2-1: device descriptor read/64, error -71
[  618.338716][T14011] loop4: detected capacity change from 0 to 32768
[  618.376934][T14011] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3338 (14011)
[  618.420270][ T3678] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  618.537129][T14011] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  618.619506][T14011] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  618.640277][ T3678] usb 2-1: device descriptor read/64, error -71
[  618.710307][T14011] BTRFS info (device loop4): using free space tree
[  618.776277][ T3678] usb usb2-port1: attempt power cycle
[  619.084606][T14011] BTRFS info (device loop4): enabling ssd optimizations
[  619.211267][ T3678] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  619.331195][ T3678] usb 2-1: device descriptor read/8, error -71
[  619.558428][T14065] loop2: detected capacity change from 0 to 2048
[  619.610348][ T3678] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  619.725782][T14065] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  619.740690][ T3678] usb 2-1: device descriptor read/8, error -71
[  619.870435][ T3678] usb usb2-port1: unable to enumerate USB device
[  619.891053][T14065] general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] PREEMPT SMP KASAN
[  619.902785][T14065] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027]
[  619.911214][T14065] CPU: 1 PID: 14065 Comm: syz.2.3351 Not tainted 6.1.108-syzkaller #0
[  619.919371][T14065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  619.929443][T14065] RIP: 0010:crc_itu_t+0xfb/0x2a0
[  619.934401][T14065] Code: e9 75 01 00 00 48 be 00 00 00 00 00 fc ff df b8 02 00 00 00 48 29 e8 48 89 44 24 08 48 8b 14 24 49 89 d7 4c 89 f8 48 c1 e8 03 <0f> b6 04 30 84 c0 0f 85 b1 00 00 00 42 0f b6 44 22 ff 41 0f b7 ce
[  619.954017][T14065] RSP: 0018:ffffc9000373f790 EFLAGS: 00010203
[  619.960096][T14065] RAX: 0000000000000004 RBX: 00000000000000fa RCX: ffff888079105940
[  619.968074][T14065] RDX: 0000000000000026 RSI: dffffc0000000000 RDI: 0000000000000001
[  619.976311][T14065] RBP: 00000000000000fa R08: ffffffff843e7cf6 R09: ffff88804b1fc374
[  619.984290][T14065] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001
[  619.992265][T14065] R13: ffffc9000373f940 R14: 000000000000479e R15: 0000000000000026
[  620.000244][T14065] FS:  00007fac154cf6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  620.009181][T14065] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  620.015773][T14065] CR2: 000055ae83b977d8 CR3: 000000009ca28000 CR4: 00000000003506e0
[  620.023753][T14065] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  620.031727][T14065] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  620.039702][T14065] Call Trace:
[  620.042985][T14065]  <TASK>
[  620.045922][T14065]  ? __die_body+0x5e/0xa0
[  620.050270][T14065]  ? die_addr+0x95/0xc0
[  620.054442][T14065]  ? exc_general_protection+0x3ae/0x590
[  620.060006][T14065]  ? asm_exc_general_protection+0x22/0x30
[  620.065744][T14065]  ? crc_itu_t+0xc6/0x2a0
[  620.070084][T14065]  ? crc_itu_t+0xfb/0x2a0
[  620.074425][T14065]  udf_write_fi+0x6aa/0xba0
[  620.078952][T14065]  udf_rename+0x8b3/0x1420
[  620.083397][T14065]  ? udf_mknod+0x90/0x90
[  620.087659][T14065]  ? read_lock_is_recursive+0x10/0x10
[  620.093050][T14065]  ? rwsem_write_trylock+0x166/0x210
[  620.098352][T14065]  ? generic_permission+0x27c/0x4f0
[  620.103564][T14065]  ? do_raw_spin_unlock+0x137/0x8a0
[  620.108770][T14065]  ? memcpy+0x3c/0x60
[  620.112760][T14065]  vfs_rename+0xd32/0x10f0
[  620.117201][T14065]  ? __ia32_sys_link+0x90/0x90
[  620.121984][T14065]  ? security_path_rename+0x17f/0x210
[  620.127365][T14065]  do_renameat2+0xde0/0x1440
[  620.131980][T14065]  ? fsnotify_move+0x4f0/0x4f0
[  620.136756][T14065]  ? __virt_addr_valid+0x17f/0x530
[  620.141881][T14065]  ? __virt_addr_valid+0x17f/0x530
[  620.147003][T14065]  ? __virt_addr_valid+0x45b/0x530
[  620.152127][T14065]  ? __phys_addr_symbol+0x2b/0x70
[  620.157165][T14065]  ? strncpy_from_user+0x1f9/0x360
[  620.162286][T14065]  ? getname_flags+0x1f9/0x4f0
[  620.167057][T14065]  ? lockdep_hardirqs_on+0x94/0x130
[  620.172263][T14065]  __x64_sys_rename+0x82/0x90
[  620.176951][T14065]  do_syscall_64+0x3b/0xb0
[  620.181389][T14065]  ? clear_bhb_loop+0x45/0xa0
[  620.186077][T14065]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  620.191985][T14065] RIP: 0033:0x7fac1477cef9
[  620.196408][T14065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  620.216020][T14065] RSP: 002b:00007fac154cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  620.224444][T14065] RAX: ffffffffffffffda RBX: 00007fac14935f80 RCX: 00007fac1477cef9
[  620.232424][T14065] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000020000000
[  620.240403][T14065] RBP: 00007fac147ef01e R08: 0000000000000000 R09: 0000000000000000
[  620.248385][T14065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  620.251969][T13642] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  620.256354][T14065] R13: 0000000000000000 R14: 00007fac14935f80 R15: 00007fffc00f7818
[  620.256382][T14065]  </TASK>
[  620.277481][T14065] Modules linked in:
[  620.286726][T14065] ---[ end trace 0000000000000000 ]---
[  620.292512][T14065] RIP: 0010:crc_itu_t+0xfb/0x2a0
[  620.297650][T14065] Code: e9 75 01 00 00 48 be 00 00 00 00 00 fc ff df b8 02 00 00 00 48 29 e8 48 89 44 24 08 48 8b 14 24 49 89 d7 4c 89 f8 48 c1 e8 03 <0f> b6 04 30 84 c0 0f 85 b1 00 00 00 42 0f b6 44 22 ff 41 0f b7 ce
[  620.318512][T14065] RSP: 0018:ffffc9000373f790 EFLAGS: 00010203
[  620.325043][T14065] RAX: 0000000000000004 RBX: 00000000000000fa RCX: ffff888079105940
[  620.333486][T14065] RDX: 0000000000000026 RSI: dffffc0000000000 RDI: 0000000000000001
[  620.341867][T14065] RBP: 00000000000000fa R08: ffffffff843e7cf6 R09: ffff88804b1fc374
[  620.350074][T14065] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001
[  620.358465][T14065] R13: ffffc9000373f940 R14: 000000000000479e R15: 0000000000000026
[  620.366956][T14065] FS:  00007fac154cf6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  620.376860][T14065] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  620.383878][T14065] CR2: 000055ae83b977d8 CR3: 000000009ca28000 CR4: 00000000003506e0
[  620.417114][T14065] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  620.429725][T14065] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  620.439186][T14065] Kernel panic - not syncing: Fatal exception
[  620.445474][T14065] Kernel Offset: disabled
[  620.449787][T14065] Rebooting in 86400 seconds..