last executing test programs:

3.606286164s ago: executing program 0 (id=2073):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x5, 0x2, 0x6, 0xfffa}, 0x3a, [0x6, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xfbff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5a, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x9, 0x4c74, 0x80000000, 0x40000, 0x3, 0x3, 0x0, 0x401, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x200, 0xff, 0x1, 0x1000005, 0x8, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x4a, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0xa6, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x8, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0x81, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7c, 0x7, 0xe6, 0x2950bfaf, 0xffe, 0xa2, 0x1, 0xa9, 0x5, 0x9, 0xac8, 0x2000bd, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0xffffff49, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x8, 0xffff, 0x98c8, 0x2, 0x5, 0x1, 0x2, 0xb18, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x1, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

3.592378505s ago: executing program 0 (id=2074):
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a042, 0x41c23}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000540)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x1, 0x65, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@local}, {@multicast2, 0xb00}, {@local}, {}, {@initdev={0xac, 0x1e, 0x41, 0x0}}, {@local}, {@rand_addr=0x64010101}, {@multicast1}]}]}}}}}}}, 0x0)

3.375629037s ago: executing program 0 (id=2077):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x800000000000000, 0x580)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x9})
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)

3.371520547s ago: executing program 0 (id=2079):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000000c0)={0x2, 0x200, 0x20, 0x0, 0xffffffff, 0xd})

1.797073823s ago: executing program 2 (id=2111):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
chmod(0x0, 0x88)

1.653446617s ago: executing program 1 (id=2116):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x603f)

1.567684655s ago: executing program 1 (id=2119):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
sendto$inet6(r1, &(0x7f0000003380), 0x0, 0x44008011, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40)
sendto$inet6(r1, &(0x7f0000000200)='}', 0x1, 0x20040045, 0x0, 0x0)
setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x2147, 0x7, 0x101, 0xf7c, 0x9, 0x8000, 0x8001}, 0x1c)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0xfffe, 0x6}, 0x4)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f000000e280)={0x2020, 0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
syz_fuse_handle_req(r4, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6, 0x0, 0x8000000, 0x0, 0x0, 0x7f, 0x6000, 0x2000, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r4, &(0x7f0000000380)={0x50, 0x0, r5, {0x7, 0x29, 0x1c000, 0x0, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x0, 0x8008}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x90, 0x0, 0x9, {0x0, 0x0, 0x7, 0x3, 0xfffffff0, 0xa5, {0x0, 0xb43d, 0x3, 0x9, 0x8000000000000001, 0x9, 0x4, 0x800, 0x3f, 0x6000, 0x4, 0x0, 0x0, 0xffffffff, 0xfff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00')

1.455485007s ago: executing program 2 (id=2122):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x260}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.408180801s ago: executing program 2 (id=2123):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff)
mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='stats=global'])
openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.407678191s ago: executing program 2 (id=2124):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_proto_private(r0, 0x8921, &(0x7f0000000300)="d84450a4e94bbdff0eb43a")

1.340195538s ago: executing program 2 (id=2125):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001240)="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", 0xf9c}, {0x0}], 0x3}}], 0x2, 0x480e0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

1.223652239s ago: executing program 3 (id=2126):
unshare(0x66000080)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netstat\x00')
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
close(r0)

1.119940689s ago: executing program 3 (id=2127):
r0 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r0, &(0x7f0000001640)=[{{&(0x7f0000000140)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f00000000c0)="a9050000000074640006000000003552bde5c064c6", 0x15}, {&(0x7f0000000040)="174640b6d80fb2eedc81ba60cc0800", 0xf}], 0x2}}], 0x1, 0x4008804)

1.056129466s ago: executing program 3 (id=2128):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
pipe2(&(0x7f0000001040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r2, &(0x7f00000000c0)=ANY=[], 0xffffff6a)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
tee(r1, r3, 0xfffffffffffffc01, 0x0)
tee(r1, r3, 0x60000000000, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

1.055894856s ago: executing program 4 (id=2129):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)

1.02075076s ago: executing program 4 (id=2130):
unshare(0x26020480)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r0, 0x1)
connect$bt_l2cap(r0, 0x0, 0x0)

1.005603211s ago: executing program 4 (id=2131):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40440d0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2})
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r4, 0x12, 0x0, 0x0)

742.896577ms ago: executing program 1 (id=2132):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000240), 0x80000dd, 0x10003, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x807, 0x83, 0x6, 0xfffa}, 0x2000001d, [0x8000, 0xc95a, 0x12, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x46, 0x3, 0x0, 0x4, 0x8, 0x2, 0x4, 0x3c5b, 0x90, 0x24, 0x9, 0xffffffff, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0xffff0001, 0x2, 0x4c74, 0x80000000, 0x242, 0x0, 0x200000e, 0x1000, 0x71, 0x7, 0x7, 0x1, 0x7, 0x0, 0x3e, 0x8f, 0x6, 0x6, 0xffffffff, 0x5, 0x0, 0x8, 0x0, 0x5, 0x0, 0x8000005, 0x6, 0xb, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012d, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcd, 0x40c, 0x9, 0x2bf, 0x6c9, 0x1, 0xfffffffc, 0x3, 0x0, 0x7, 0xeb, 0x5573, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xda7a, 0x4, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x7, 0x4, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0xfffffffc, 0x6, 0xa, 0x8000, 0x0, 0xfe000000, 0xffff, 0x2, 0x7f, 0x5, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x3, 0x42, 0x2], [0x7, 0x3, 0x0, 0x4, 0xfffffffe, 0x9, 0x8d2, 0x8, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x20004, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x3, 0x20000009, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0xd, 0x4, 0x6d01, 0x8005, 0x9, 0x800000, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x5, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x4, 0x1, 0xffff, 0x3, 0x6, 0x1c, 0x120000, 0x3, 0x3, 0xa2ed, 0x404, 0x25], [0x9, 0xbb31, 0x296, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x53f53814, 0x0, 0xa, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x207fff, 0xffff, 0x2, 0x2, 0x5, 0x1, 0x2, 0x148, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x7, 0xfffff000, 0x10003, 0x3, 0x7e, 0x20100, 0x9602, 0xc639, 0x2, 0x4, 0x6, 0x1, 0x50080, 0x5, 0x8, 0x1000, 0xa21, 0xc, 0x7, 0xce3, 0x6c1b, 0x8000, 0x1, 0x5, 0xb1e, 0x383feae1, 0x200, 0xffff3441, 0x7]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

624.179508ms ago: executing program 1 (id=2133):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000940)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044850}, 0x4008000)

623.958319ms ago: executing program 1 (id=2134):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005880)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000000340)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x2, 0x92)
lseek(r1, 0x1000, 0x3)

527.060278ms ago: executing program 2 (id=2135):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036571a20cd0c8000fe67010203010902120001000000000904"], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x4, 0x800005fffffffff9})
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

326.139818ms ago: executing program 0 (id=2136):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0)

236.158917ms ago: executing program 0 (id=2137):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0)

235.942657ms ago: executing program 1 (id=2138):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0x6, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

235.829007ms ago: executing program 3 (id=2139):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000021"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="2a003300c0000000050211000001080211"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)

129.631877ms ago: executing program 3 (id=2140):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}, {0xac, 0x55, 0x78, 0x40000}, {0x6, 0xe5, 0x6, 0xfe000001}]})
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})

127.698117ms ago: executing program 4 (id=2141):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
read$watch_queue(r1, &(0x7f0000000200)=""/213, 0xd00)
write$binfmt_script(r2, &(0x7f0000010100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x10009)

59.312114ms ago: executing program 4 (id=2142):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01"], 0x3c}}, 0x0)

58.782794ms ago: executing program 3 (id=2143):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000001300)={{0x3, 0x0, 0x1, 0x1}})

0s ago: executing program 4 (id=2144):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000006c0)={[{@noblock_validity}, {@errors_remount}, {@oldalloc}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x5b3, &(0x7f0000000780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x82482, 0x8d)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, r0, 0x6, 0x100000000, 0x6, 0x2d1})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)

kernel console output (not intermixed with test programs):

on journaled quota: type 1: error -117
[  805.621251][ T7644] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2228: inode #15: comm syz.2.1778: corrupted in-inode xattr
[  805.634925][ T7644] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1778: couldn't read orphan inode 15 (err -117)
[  805.647674][ T7644] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,journal_ioprio=0x0000000000000000,jqfmt=vfsv1,oldalloc,noquota,grpjquota=.usrquota,usrjquota=,grpid,delalloc,,,errors=continue. Quota mode: writeback.
[  805.727630][ T7644] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.1778: dx entry: limit 1024 != root limit 124
[  805.739754][ T7644] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1778: Corrupt directory, running e2fsck is recommended
[  805.871310][ T7647] loop1: detected capacity change from 0 to 1024
[  806.292580][ T7647] EXT4-fs (loop1): Ignoring removed bh option
[  806.309119][ T7647] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,block_validity,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000006,bh,init_itable,. Quota mode: none.
[  806.594663][ T7656] loop3: detected capacity change from 0 to 4096
[  806.758950][ T7665] loop2: detected capacity change from 0 to 256
[  808.529066][ T7667] loop0: detected capacity change from 0 to 256
[  809.868697][ T7667] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  810.316033][ T7656] EXT4-fs: failed to create workqueue
[  810.516043][ T7656] EXT4-fs (loop3): mount failed
[  810.756481][ T7679] loop4: detected capacity change from 0 to 256
[  810.825956][ T7679] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1785'.
[  811.870426][ T7683] loop0: detected capacity change from 0 to 512
[  812.051653][ T7683] EXT4-fs (loop0): Ignoring removed nobh option
[  812.143649][ T7691] loop1: detected capacity change from 0 to 512
[  812.177848][ T7691] EXT4-fs (loop1): Ignoring removed oldalloc option
[  813.202234][ T7691] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.1790: dx entry: limit 1024 != root limit 124
[  813.214491][ T7691] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1790: Corrupt directory, running e2fsck is recommended
[  813.230373][ T7691] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  813.239569][ T7691] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.1790: corrupted in-inode xattr
[  813.252827][ T7691] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1790: couldn't read orphan inode 15 (err -117)
[  813.265684][ T7691] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,journal_ioprio=0x0000000000000000,jqfmt=vfsv1,oldalloc,noquota,grpjquota=.usrquota,usrjquota=,grpid,delalloc,,,errors=continue. Quota mode: writeback.
[  813.353361][ T7691] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.1790: dx entry: limit 1024 != root limit 124
[  813.365465][ T7691] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1790: Corrupt directory, running e2fsck is recommended
[  813.431856][ T7683] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1788: bg 0: block 248: padding at end of block bitmap is not set
[  815.228919][ T7683] Quota error (device loop0): write_blk: dquota write failed
[  815.443856][ T7683] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  815.829754][ T7706] loop3: detected capacity change from 0 to 1024
[  815.848884][ T7683] EXT4-fs error (device loop0): ext4_acquire_dquot:6200: comm syz.0.1788: Failed to acquire dquot type 1
[  815.877578][ T7706] EXT4-fs (loop3): Ignoring removed bh option
[  815.887609][ T7683] EXT4-fs (loop0): 1 truncate cleaned up
[  815.923697][ T7709] loop4: detected capacity change from 0 to 4096
[  815.947359][ T7683] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  816.016092][ T7683] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  816.022587][ T7714] loop2: detected capacity change from 0 to 4096
[  816.034913][ T7706] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,block_validity,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000006,bh,init_itable,. Quota mode: none.
[  816.408003][ T7714] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  816.426606][ T7709] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  818.521788][ T7727] syz.4.1795[7727] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  818.521871][ T7727] syz.4.1795[7727] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  819.000596][ T7733] syz.2.1796[7733] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  819.012047][ T7733] syz.2.1796[7733] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  821.324246][ T7740] loop0: detected capacity change from 0 to 256
[  821.357920][ T7745] loop4: detected capacity change from 0 to 256
[  822.067584][ T7754] loop1: detected capacity change from 0 to 256
[  824.884644][ T7754] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  825.231149][ T7760] loop2: detected capacity change from 0 to 512
[  825.276428][ T7760] EXT4-fs (loop2): Ignoring removed nobh option
[  825.285829][ T7765] loop3: detected capacity change from 0 to 256
[  825.639765][ T7760] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1805: bg 0: block 248: padding at end of block bitmap is not set
[  825.654494][ T7760] Quota error (device loop2): write_blk: dquota write failed
[  825.663032][ T7760] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  825.673165][ T7760] EXT4-fs error (device loop2): ext4_acquire_dquot:6200: comm syz.2.1805: Failed to acquire dquot type 1
[  825.686391][ T7760] EXT4-fs (loop2): 1 truncate cleaned up
[  825.692234][ T7760] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  825.709274][ T7760] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  825.755480][ T7771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1808'.
[  825.765995][ T7771] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1808'.
[  825.865122][ T7773] loop1: detected capacity change from 0 to 4096
[  825.867312][  T289] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  825.936847][ T7773] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  826.028166][ T7778] loop0: detected capacity change from 0 to 512
[  826.048037][ T7778] EXT4-fs (loop0): Ignoring removed nobh option
[  826.069205][ T7778] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1811: bg 0: block 248: padding at end of block bitmap is not set
[  826.084719][ T7778] Quota error (device loop0): write_blk: dquota write failed
[  826.094902][ T7778] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  826.105178][ T7778] EXT4-fs error (device loop0): ext4_acquire_dquot:6200: comm syz.0.1811: Failed to acquire dquot type 1
[  826.118442][ T7778] EXT4-fs (loop0): 1 truncate cleaned up
[  826.120112][ T7783] loop3: detected capacity change from 0 to 4096
[  826.124130][ T7778] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  826.147345][ T7778] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  826.177399][  T289] usb 5-1: Using ep0 maxpacket: 16
[  826.185803][ T7787] syz.1.1809[7787] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  826.185876][ T7787] syz.1.1809[7787] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  826.256581][ T7783] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  826.586467][ T7789] loop2: detected capacity change from 0 to 256
[  827.847067][  T289] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  827.898846][  T289] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  827.956400][ T7791] loop1: detected capacity change from 0 to 1024
[  827.988601][ T7791] EXT4-fs (loop1): Ignoring removed bh option
[  828.009161][ T7791] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,block_validity,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000006,bh,init_itable,. Quota mode: none.
[  828.059654][ T7795] loop2: detected capacity change from 0 to 128
[  828.067433][  T289] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  828.076677][  T289] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  828.097082][ T7795] FAT-fs (loop2): Directory bread(block 32) failed
[  828.116765][ T7795] FAT-fs (loop2): Directory bread(block 33) failed
[  828.117454][  T289] usb 5-1: Product: syz
[  828.123486][ T7795] FAT-fs (loop2): Directory bread(block 34) failed
[  828.132191][  T289] usb 5-1: Manufacturer: syz
[  828.135016][ T7795] FAT-fs (loop2): Directory bread(block 35) failed
[  828.144556][  T289] usb 5-1: SerialNumber: syz
[  828.150050][ T7795] FAT-fs (loop2): Directory bread(block 36) failed
[  828.157025][  T289] r8152-cfgselector 5-1: config 0 descriptor??
[  828.204642][ T7795] FAT-fs (loop2): Directory bread(block 37) failed
[  828.211269][ T7795] FAT-fs (loop2): Directory bread(block 38) failed
[  828.218478][ T7798] syz.3.1810[7798] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  828.218554][ T7798] syz.3.1810[7798] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  828.233603][ T7795] FAT-fs (loop2): Directory bread(block 39) failed
[  828.255021][ T7795] FAT-fs (loop2): Directory bread(block 40) failed
[  828.261642][ T7795] FAT-fs (loop2): Directory bread(block 41) failed
[  828.317344][  T289] r8152-cfgselector 5-1: can't set config #0, error -71
[  828.337351][  T289] r8152-cfgselector 5-1: Unknown version 0x0000
[  828.346856][  T289] r8152-cfgselector 5-1: USB disconnect, device number 18
[  828.485601][ T7802] loop4: detected capacity change from 0 to 256
[  828.527186][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1814'.
[  828.552688][ T7795] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1814'.
[  828.708127][ T6280] attempt to access beyond end of device
[  828.708127][ T6280] loop2: rw=1, want=4112, limit=128
[  828.719428][ T6280] Buffer I/O error on dev loop2, logical block 1027, lost async page write
[  828.728513][ T6280] attempt to access beyond end of device
[  828.728513][ T6280] loop2: rw=1, want=4128, limit=128
[  828.739513][ T6280] Buffer I/O error on dev loop2, logical block 1031, lost async page write
[  828.750143][ T6280] attempt to access beyond end of device
[  828.750143][ T6280] loop2: rw=1, want=6624, limit=128
[  828.762918][ T6280] attempt to access beyond end of device
[  828.762918][ T6280] loop2: rw=1, want=8184, limit=128
[  828.824827][ T7806] loop3: detected capacity change from 0 to 512
[  828.969308][ T7811] loop0: detected capacity change from 0 to 256
[  829.586354][ T7806] EXT4-fs (loop3): Ignoring removed nobh option
[  830.034828][ T7814] loop4: detected capacity change from 0 to 1024
[  830.046035][ T7806] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1818: bg 0: block 248: padding at end of block bitmap is not set
[  830.084532][ T7818] loop0: detected capacity change from 0 to 256
[  830.097410][ T7806] Quota error (device loop3): write_blk: dquota write failed
[  830.105738][ T7806] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  830.116808][ T7806] EXT4-fs error (device loop3): ext4_acquire_dquot:6200: comm syz.3.1818: Failed to acquire dquot type 1
[  830.128829][ T7806] EXT4-fs (loop3): 1 truncate cleaned up
[  830.134494][ T7806] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  830.159184][ T7814] EXT4-fs (loop4): Ignoring removed bh option
[  830.165709][ T7818] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  830.179994][ T7806] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  830.222914][ T7814] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,block_validity,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000006,bh,init_itable,. Quota mode: none.
[  830.474587][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1821'.
[  830.484466][ T7826] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1821'.
[  830.624432][ T7832] loop4: detected capacity change from 0 to 256
[  830.668489][ T7834] loop2: detected capacity change from 0 to 512
[  830.727367][ T7834] EXT4-fs (loop2): Ignoring removed nobh option
[  830.739636][ T7834] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1824: bg 0: block 248: padding at end of block bitmap is not set
[  830.754607][ T7834] Quota error (device loop2): write_blk: dquota write failed
[  830.762368][ T7834] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  830.773045][ T7834] EXT4-fs error (device loop2): ext4_acquire_dquot:6200: comm syz.2.1824: Failed to acquire dquot type 1
[  830.821723][ T7834] EXT4-fs (loop2): 1 truncate cleaned up
[  830.828625][ T7834] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  830.847426][ T7834] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  830.900681][ T7839] loop0: detected capacity change from 0 to 1024
[  830.949683][ T7839] EXT4-fs (loop0): Ignoring removed bh option
[  830.970830][ T7839] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,block_validity,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000006,bh,init_itable,. Quota mode: none.
[  831.018811][ T7845] loop3: detected capacity change from 0 to 256
[  831.340311][ T7853] loop2: detected capacity change from 0 to 256
[  831.655695][ T7855] loop4: detected capacity change from 0 to 4096
[  831.725357][ T7855] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  832.180791][ T7861] syz.4.1829[7861] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  832.180872][ T7861] syz.4.1829[7861] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  833.079465][ T7865] loop1: detected capacity change from 0 to 1024
[  833.207938][ T7865] EXT4-fs (loop1): Ignoring removed bh option
[  833.569795][ T7865] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,block_validity,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000006,bh,init_itable,. Quota mode: none.
[  833.608694][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1834'.
[  833.651123][ T7875] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1834'.
[  833.684465][ T7877] loop4: detected capacity change from 0 to 256
[  833.868078][ T7877] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1833'.
[  834.084758][ T7883] loop2: detected capacity change from 0 to 512
[  834.156214][ T7883] EXT4-fs (loop2): Ignoring removed oldalloc option
[  834.183593][ T7883] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.1836: dx entry: limit 1024 != root limit 124
[  834.196378][ T7883] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1836: Corrupt directory, running e2fsck is recommended
[  834.209970][ T7883] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  834.213527][ T7884] loop3: detected capacity change from 0 to 256
[  834.218582][ T7883] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2228: inode #15: comm syz.2.1836: corrupted in-inode xattr
[  834.236995][ T7883] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1836: couldn't read orphan inode 15 (err -117)
[  834.249098][ T7883] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,journal_ioprio=0x0000000000000000,jqfmt=vfsv1,oldalloc,noquota,grpjquota=.usrquota,usrjquota=,grpid,delalloc,,,errors=continue. Quota mode: writeback.
[  834.275302][ T7883] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.1836: dx entry: limit 1024 != root limit 124
[  834.287342][ T7883] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1836: Corrupt directory, running e2fsck is recommended
[  834.323237][ T7884] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  834.380341][ T7888] loop2: detected capacity change from 0 to 1024
[  834.425917][ T7892] loop0: detected capacity change from 0 to 512
[  834.437192][ T7888] EXT4-fs (loop2): Ignoring removed bh option
[  834.448481][ T7888] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,block_validity,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000006,bh,init_itable,. Quota mode: none.
[  834.480377][ T7892] EXT4-fs (loop0): Ignoring removed nobh option
[  834.490273][ T7897] loop4: detected capacity change from 0 to 1024
[  834.504419][ T7897] EXT4-fs (loop4): Ignoring removed bh option
[  834.531569][ T7897] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,block_validity,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000006,bh,init_itable,. Quota mode: none.
[  834.537842][ T7892] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1839: bg 0: block 248: padding at end of block bitmap is not set
[  834.572009][ T7892] Quota error (device loop0): write_blk: dquota write failed
[  834.580450][ T7892] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  834.591010][ T7892] EXT4-fs error (device loop0): ext4_acquire_dquot:6200: comm syz.0.1839: Failed to acquire dquot type 1
[  834.604197][ T7892] EXT4-fs (loop0): 1 truncate cleaned up
[  834.611970][ T7892] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  834.633342][ T7892] ext4 filesystem being mounted at /377/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  834.882152][ T7907] loop2: detected capacity change from 0 to 256
[  835.157285][ T7907] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  835.653843][ T7910] loop1: detected capacity change from 0 to 4096
[  835.896457][ T7910] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  836.101938][ T7916] loop2: detected capacity change from 0 to 512
[  836.246699][ T7917] syz.1.1843[7917] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  836.246774][ T7917] syz.1.1843[7917] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  836.448340][ T7916] EXT4-fs (loop2): Ignoring removed nobh option
[  836.475210][ T7919] loop0: detected capacity change from 0 to 4096
[  836.508502][ T7916] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1844: bg 0: block 248: padding at end of block bitmap is not set
[  836.523144][ T7916] Quota error (device loop2): write_blk: dquota write failed
[  836.531315][ T7916] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  836.541504][ T7916] EXT4-fs error (device loop2): ext4_acquire_dquot:6200: comm syz.2.1844: Failed to acquire dquot type 1
[  836.563549][ T7916] EXT4-fs (loop2): 1 truncate cleaned up
[  836.572669][ T7919] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  836.591799][ T7916] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  836.684950][ T7919] syz.0.1845[7919] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  836.685026][ T7919] syz.0.1845[7919] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  836.745449][ T7916] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  836.919506][ T7932] loop3: detected capacity change from 0 to 512
[  836.929120][ T7933] loop1: detected capacity change from 0 to 128
[  839.373339][ T7932] EXT4-fs (loop3): Ignoring removed oldalloc option
[  839.385111][ T7932] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1849: dx entry: limit 1024 != root limit 124
[  839.397318][ T7932] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1849: Corrupt directory, running e2fsck is recommended
[  839.413531][ T7932] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  839.422749][ T7932] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.1849: corrupted in-inode xattr
[  839.434956][ T7932] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1849: couldn't read orphan inode 15 (err -117)
[  839.447277][ T7932] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,journal_ioprio=0x0000000000000000,jqfmt=vfsv1,oldalloc,noquota,grpjquota=.usrquota,usrjquota=,grpid,delalloc,,,errors=continue. Quota mode: writeback.
[  839.472353][ T7932] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1849: dx entry: limit 1024 != root limit 124
[  839.484423][ T7932] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1849: Corrupt directory, running e2fsck is recommended
[  839.504889][ T7934] loop4: detected capacity change from 0 to 1024
[  839.523938][ T7933] FAT-fs (loop1): Directory bread(block 32) failed
[  839.547085][ T7933] FAT-fs (loop1): Directory bread(block 33) failed
[  839.587379][ T7933] FAT-fs (loop1): Directory bread(block 34) failed
[  839.691378][ T7942] loop0: detected capacity change from 0 to 512
[  839.866985][ T7942] EXT4-fs (loop0): Ignoring removed oldalloc option
[  839.889096][ T7934] EXT4-fs (loop4): Ignoring removed bh option
[  839.943460][ T7933] FAT-fs (loop1): Directory bread(block 35) failed
[  839.965902][ T7934] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4.
[  840.085232][ T7942] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.1850: dx entry: limit 1024 != root limit 124
[  840.097391][ T7942] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1850: Corrupt directory, running e2fsck is recommended
[  840.113603][ T7942] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  840.122063][ T7942] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #15: comm syz.0.1850: corrupted in-inode xattr
[  840.134813][ T7942] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1850: couldn't read orphan inode 15 (err -117)
[  840.147183][ T7942] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,journal_ioprio=0x0000000000000000,jqfmt=vfsv1,oldalloc,noquota,grpjquota=.usrquota,usrjquota=,grpid,delalloc,,,errors=continue. Quota mode: writeback.
[  840.188000][ T7942] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.1850: dx entry: limit 1024 != root limit 124
[  840.200080][ T7942] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1850: Corrupt directory, running e2fsck is recommended
[  840.310791][ T7933] FAT-fs (loop1): Directory bread(block 36) failed
[  840.499749][ T7933] FAT-fs (loop1): Directory bread(block 37) failed
[  840.514050][ T7933] FAT-fs (loop1): Directory bread(block 38) failed
[  840.528044][ T7933] FAT-fs (loop1): Directory bread(block 39) failed
[  840.541199][ T7933] FAT-fs (loop1): Directory bread(block 40) failed
[  840.555443][ T7933] FAT-fs (loop1): Directory bread(block 41) failed
[  840.790833][ T7951] loop2: detected capacity change from 0 to 128
[  840.841578][ T7951] FAT-fs (loop2): Directory bread(block 32) failed
[  840.852976][ T7951] FAT-fs (loop2): Directory bread(block 33) failed
[  840.859866][ T7951] FAT-fs (loop2): Directory bread(block 34) failed
[  840.866476][ T7951] FAT-fs (loop2): Directory bread(block 35) failed
[  841.929065][ T7963] loop4: detected capacity change from 0 to 256
[  845.105739][ T7951] FAT-fs (loop2): Directory bread(block 36) failed
[  845.126901][ T7963] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  845.330775][ T7968] loop1: detected capacity change from 0 to 128
[  845.346702][ T7951] FAT-fs (loop2): Directory bread(block 37) failed
[  845.354791][ T7967] loop3: detected capacity change from 0 to 512
[  845.375870][ T7951] FAT-fs (loop2): Directory bread(block 38) failed
[  845.404039][ T7951] FAT-fs (loop2): Directory bread(block 39) failed
[  845.414382][ T7970] loop0: detected capacity change from 0 to 4096
[  845.420925][ T7951] FAT-fs (loop2): Directory bread(block 40) failed
[  845.427877][ T7951] FAT-fs (loop2): Directory bread(block 41) failed
[  845.451984][ T7967] EXT4-fs (loop3): Ignoring removed nobh option
[  845.460531][ T7968] FAT-fs (loop1): Directory bread(block 32) failed
[  845.467108][ T7968] FAT-fs (loop1): Directory bread(block 33) failed
[  845.484772][ T7968] FAT-fs (loop1): Directory bread(block 34) failed
[  845.491564][ T7968] FAT-fs (loop1): Directory bread(block 35) failed
[  845.491615][ T7968] FAT-fs (loop1): Directory bread(block 36) failed
[  845.491640][ T7968] FAT-fs (loop1): Directory bread(block 37) failed
[  845.491684][ T7968] FAT-fs (loop1): Directory bread(block 38) failed
[  845.491707][ T7968] FAT-fs (loop1): Directory bread(block 39) failed
[  845.491742][ T7968] FAT-fs (loop1): Directory bread(block 40) failed
[  845.491765][ T7968] FAT-fs (loop1): Directory bread(block 41) failed
[  845.535628][ T7970] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  845.549362][ T7967] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1857: bg 0: block 248: padding at end of block bitmap is not set
[  845.590294][ T7967] Quota error (device loop3): write_blk: dquota write failed
[  845.598453][ T7967] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  845.608718][ T7967] EXT4-fs error (device loop3): ext4_acquire_dquot:6200: comm syz.3.1857: Failed to acquire dquot type 1
[  845.620801][ T7967] EXT4-fs (loop3): 1 truncate cleaned up
[  845.626471][ T7967] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  845.704699][ T7978] syz.0.1858[7978] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  845.704779][ T7978] syz.0.1858[7978] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  845.727965][ T7967] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  845.824168][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1856'.
[  846.072531][ T7984] loop2: detected capacity change from 0 to 256
[  846.202275][ T7984] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1860'.
[  846.900093][ T7981] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1856'.
[  849.070394][ T7991] loop4: detected capacity change from 0 to 512
[  849.160119][ T7991] EXT4-fs (loop4): Ignoring removed nobh option
[  849.189523][ T7991] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1863: bg 0: block 248: padding at end of block bitmap is not set
[  849.344560][ T7998] loop0: detected capacity change from 0 to 256
[  849.600571][ T7991] Quota error (device loop4): write_blk: dquota write failed
[  849.608101][ T7991] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  849.617152][ T8002] loop1: detected capacity change from 0 to 1024
[  849.618458][ T7991] EXT4-fs error (device loop4): ext4_acquire_dquot:6200: comm syz.4.1863: Failed to acquire dquot type 1
[  849.636980][ T7991] EXT4-fs (loop4): 1 truncate cleaned up
[  849.643035][ T7991] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  849.660685][ T8002] EXT4-fs (loop1): Ignoring removed bh option
[  849.667050][ T7991] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  849.763832][ T8007] loop3: detected capacity change from 0 to 512
[  849.788199][ T8002] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,block_validity,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000006,bh,init_itable,. Quota mode: none.
[  849.851685][ T8007] EXT4-fs (loop3): Ignoring removed oldalloc option
[  851.095743][ T8007] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1864: dx entry: limit 1024 != root limit 124
[  851.107879][ T8007] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1864: Corrupt directory, running e2fsck is recommended
[  851.124440][ T8007] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  851.133390][ T8007] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.1864: corrupted in-inode xattr
[  851.146183][ T8007] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1864: couldn't read orphan inode 15 (err -117)
[  851.158776][ T8007] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,journal_ioprio=0x0000000000000000,jqfmt=vfsv1,oldalloc,noquota,grpjquota=.usrquota,usrjquota=,grpid,delalloc,,,errors=continue. Quota mode: writeback.
[  851.197412][ T8007] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1864: dx entry: limit 1024 != root limit 124
[  851.209483][ T8007] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1864: Corrupt directory, running e2fsck is recommended
[  851.283953][ T8016] loop0: detected capacity change from 0 to 128
[  851.471338][ T8016] FAT-fs (loop0): Directory bread(block 32) failed
[  851.497880][ T8016] FAT-fs (loop0): Directory bread(block 33) failed
[  851.543716][ T8016] FAT-fs (loop0): Directory bread(block 34) failed
[  851.564732][ T8016] FAT-fs (loop0): Directory bread(block 35) failed
[  851.611947][ T8016] FAT-fs (loop0): Directory bread(block 36) failed
[  851.643109][ T8016] FAT-fs (loop0): Directory bread(block 37) failed
[  851.663391][ T8016] FAT-fs (loop0): Directory bread(block 38) failed
[  851.670016][ T8016] FAT-fs (loop0): Directory bread(block 39) failed
[  851.676560][ T8016] FAT-fs (loop0): Directory bread(block 40) failed
[  851.683104][ T8016] FAT-fs (loop0): Directory bread(block 41) failed
[  851.792361][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1867'.
[  851.811668][ T8016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1867'.
[  851.927334][ T1362] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  851.974271][ T8024] loop3: detected capacity change from 0 to 256
[  852.022019][ T8025] loop4: detected capacity change from 0 to 256
[  852.085703][ T8025] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1868'.
[  852.217336][ T1362] usb 3-1: Using ep0 maxpacket: 16
[  852.315070][  T381] attempt to access beyond end of device
[  852.315070][  T381] loop0: rw=1, want=4112, limit=128
[  852.325958][  T381] Buffer I/O error on dev loop0, logical block 1027, lost async page write
[  852.334990][  T381] attempt to access beyond end of device
[  852.334990][  T381] loop0: rw=1, want=4128, limit=128
[  852.346384][  T381] Buffer I/O error on dev loop0, logical block 1031, lost async page write
[  852.356581][  T381] attempt to access beyond end of device
[  852.356581][  T381] loop0: rw=1, want=6880, limit=128
[  852.368722][  T381] attempt to access beyond end of device
[  852.368722][  T381] loop0: rw=1, want=8184, limit=128
[  852.567352][ T1362] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  852.576480][ T1362] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  852.584554][ T1362] usb 3-1: Product: syz
[  852.588844][ T1362] usb 3-1: Manufacturer: syz
[  852.593912][ T1362] usb 3-1: SerialNumber: syz
[  852.629471][ T1362] r8152-cfgselector 3-1: config 0 descriptor??
[  852.652567][ T8029] loop0: detected capacity change from 0 to 256
[  853.043880][ T1362] r8152-cfgselector 3-1: can't set config #0, error -71
[  853.078198][ T8029] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  853.257841][ T1362] r8152-cfgselector 3-1: Unknown version 0x0000
[  853.456198][ T8033] loop3: detected capacity change from 0 to 4096
[  853.469730][ T8034] loop2: detected capacity change from 0 to 4096
[  853.485718][ T8034] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  853.503568][ T8034] EXT4-fs (loop2): Test dummy encryption mode enabled
[  853.715163][ T8034] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  853.748338][ T8033] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  854.005640][ T8042] syz.3.1872[8042] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  854.005734][ T8042] syz.3.1872[8042] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  854.096263][ T1362] r8152-cfgselector 3-1: USB disconnect, device number 22
[  854.739530][ T8049] loop0: detected capacity change from 0 to 256
[  855.197116][ T8051] loop4: detected capacity change from 0 to 4096
[  855.233100][ T8054] loop1: detected capacity change from 0 to 4096
[  855.259595][ T8051] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  856.501494][ T8061] loop3: detected capacity change from 0 to 256
[  856.601528][ T8061] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1876'.
[  856.638426][ T8054] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  856.737841][ T8054] syz.1.1874[8054] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  856.737921][ T8054] syz.1.1874[8054] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  856.801488][ T8067] loop0: detected capacity change from 0 to 256
[  856.877365][ T8071] syz.4.1878[8071] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  856.877438][ T8071] syz.4.1878[8071] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  856.882752][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1880'.
[  856.918261][ T8070] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1880'.
[  856.958218][ T8073] loop1: detected capacity change from 0 to 128
[  857.020663][ T8073] FAT-fs (loop1): Directory bread(block 32) failed
[  857.041761][ T8073] FAT-fs (loop1): Directory bread(block 33) failed
[  857.070113][ T8073] FAT-fs (loop1): Directory bread(block 34) failed
[  857.091133][ T8073] FAT-fs (loop1): Directory bread(block 35) failed
[  857.092330][ T8076] loop2: detected capacity change from 0 to 1024
[  857.105022][ T8073] FAT-fs (loop1): Directory bread(block 36) failed
[  857.117491][ T8073] FAT-fs (loop1): Directory bread(block 37) failed
[  857.131709][ T8073] FAT-fs (loop1): Directory bread(block 38) failed
[  857.145509][ T8073] FAT-fs (loop1): Directory bread(block 39) failed
[  857.158764][ T8073] FAT-fs (loop1): Directory bread(block 40) failed
[  857.172434][ T8073] FAT-fs (loop1): Directory bread(block 41) failed
[  857.172539][ T8076] EXT4-fs (loop2): Ignoring removed bh option
[  857.216725][ T8076] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,block_validity,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000006,bh,init_itable,. Quota mode: none.
[  857.344322][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1881'.
[  857.360503][ T8073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1881'.
[  857.380415][ T8081] loop3: detected capacity change from 0 to 256
[  857.546086][ T1400] attempt to access beyond end of device
[  857.546086][ T1400] loop1: rw=1, want=4112, limit=128
[  857.592173][ T1400] Buffer I/O error on dev loop1, logical block 1027, lost async page write
[  857.601770][ T1400] attempt to access beyond end of device
[  857.601770][ T1400] loop1: rw=1, want=4128, limit=128
[  857.612967][ T1400] Buffer I/O error on dev loop1, logical block 1031, lost async page write
[  857.624228][ T1400] attempt to access beyond end of device
[  857.624228][ T1400] loop1: rw=1, want=8184, limit=128
[  857.657951][ T8085] loop2: detected capacity change from 0 to 128
[  857.691796][ T8085] FAT-fs (loop2): Directory bread(block 32) failed
[  857.702477][ T8085] FAT-fs (loop2): Directory bread(block 33) failed
[  857.777515][ T8087] loop0: detected capacity change from 0 to 256
[  857.832262][ T8087] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  857.907880][ T8085] FAT-fs (loop2): Directory bread(block 34) failed
[  857.948153][ T8085] FAT-fs (loop2): Directory bread(block 35) failed
[  858.062700][ T8085] FAT-fs (loop2): Directory bread(block 36) failed
[  858.148718][ T8085] FAT-fs (loop2): Directory bread(block 37) failed
[  858.294695][ T8085] FAT-fs (loop2): Directory bread(block 38) failed
[  858.527452][ T8085] FAT-fs (loop2): Directory bread(block 39) failed
[  858.534048][ T8085] FAT-fs (loop2): Directory bread(block 40) failed
[  858.542229][ T8089] loop1: detected capacity change from 0 to 4096
[  858.584250][ T8089] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  858.595432][ T8085] FAT-fs (loop2): Directory bread(block 41) failed
[  858.602665][ T8091] loop3: detected capacity change from 0 to 4096
[  858.743595][ T8091] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  858.840870][ T8096] syz.1.1886[8096] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  858.840950][ T8096] syz.1.1886[8096] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  858.998985][ T8098] syz.3.1887[8098] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  859.010559][ T8098] syz.3.1887[8098] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  859.066049][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1884'.
[  859.597471][ T8085] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1884'.
[  860.002853][ T8108] loop4: detected capacity change from 0 to 4096
[  861.201761][ T8109] loop3: detected capacity change from 0 to 256
[  861.214356][ T8112] loop1: detected capacity change from 0 to 256
[  862.257915][ T8109] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1890'.
[  862.286934][ T8112] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  862.438051][ T8108] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  862.454854][  T381] attempt to access beyond end of device
[  862.454854][  T381] loop2: rw=1, want=4112, limit=128
[  862.467121][ T8116] loop3: detected capacity change from 0 to 128
[  862.539597][  T381] Buffer I/O error on dev loop2, logical block 1027, lost async page write
[  862.548609][  T381] attempt to access beyond end of device
[  862.548609][  T381] loop2: rw=1, want=4128, limit=128
[  862.567948][ T8108] syz.4.1891[8108] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  862.568020][ T8108] syz.4.1891[8108] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  862.576493][  T381] Buffer I/O error on dev loop2, logical block 1031, lost async page write
[  862.663757][ T8116] FAT-fs (loop3): Directory bread(block 32) failed
[  862.673514][  T381] attempt to access beyond end of device
[  862.673514][  T381] loop2: rw=1, want=7192, limit=128
[  862.675551][ T8116] FAT-fs (loop3): Directory bread(block 33) failed
[  862.686171][  T381] attempt to access beyond end of device
[  862.686171][  T381] loop2: rw=1, want=8184, limit=128
[  862.694043][ T8116] FAT-fs (loop3): Directory bread(block 34) failed
[  862.753467][ T8116] FAT-fs (loop3): Directory bread(block 35) failed
[  862.760202][ T8116] FAT-fs (loop3): Directory bread(block 36) failed
[  862.766864][ T8116] FAT-fs (loop3): Directory bread(block 37) failed
[  862.774064][ T8116] FAT-fs (loop3): Directory bread(block 38) failed
[  862.846422][ T8128] loop1: detected capacity change from 0 to 256
[  862.861119][ T8116] FAT-fs (loop3): Directory bread(block 39) failed
[  865.619300][ T8116] FAT-fs (loop3): Directory bread(block 40) failed
[  865.652078][ T8116] FAT-fs (loop3): Directory bread(block 41) failed
[  866.344426][ T8138] loop4: detected capacity change from 0 to 256
[  866.353407][ T8139] loop1: detected capacity change from 0 to 1024
[  866.444324][ T8139] EXT4-fs (loop1): Ignoring removed bh option
[  866.658400][ T8139] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,block_validity,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000006,bh,init_itable,. Quota mode: none.
[  866.902033][ T8146] loop3: detected capacity change from 0 to 256
[  866.994225][ T8146] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1899'.
[  867.291857][ T8149] loop2: detected capacity change from 0 to 4096
[  867.301828][ T8152] loop0: detected capacity change from 0 to 512
[  867.362996][ T8152] EXT4-fs (loop0): Ignoring removed nobh option
[  867.378373][ T8149] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  867.459424][ T8152] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1901: bg 0: block 248: padding at end of block bitmap is not set
[  867.474178][ T8152] Quota error (device loop0): write_blk: dquota write failed
[  867.481911][ T8152] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  867.525986][ T8152] EXT4-fs error (device loop0): ext4_acquire_dquot:6200: comm syz.0.1901: Failed to acquire dquot type 1
[  867.538127][ T8152] EXT4-fs (loop0): 1 truncate cleaned up
[  867.543901][ T8152] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  867.560860][ T8152] ext4 filesystem being mounted at /392/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  867.582821][ T8162] loop4: detected capacity change from 0 to 512
[  867.679772][ T8163] syz.2.1900[8163] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  867.679852][ T8163] syz.2.1900[8163] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  868.776432][ T8165] loop1: detected capacity change from 0 to 256
[  868.871980][ T8162] EXT4-fs (loop4): Ignoring removed nobh option
[  868.895302][ T8165] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  869.493193][ T8167] loop3: detected capacity change from 0 to 128
[  869.545723][ T8171] loop2: detected capacity change from 0 to 1024
[  869.560659][ T8162] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1903: bg 0: block 248: padding at end of block bitmap is not set
[  869.585656][ T8162] Quota error (device loop4): write_blk: dquota write failed
[  869.606204][ T8167] FAT-fs (loop3): Directory bread(block 32) failed
[  869.620097][ T8162] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  869.637328][ T8167] FAT-fs (loop3): Directory bread(block 33) failed
[  869.653867][ T8171] EXT4-fs (loop2): Ignoring removed bh option
[  869.677208][ T8167] FAT-fs (loop3): Directory bread(block 34) failed
[  869.684145][ T8162] EXT4-fs error (device loop4): ext4_acquire_dquot:6200: comm syz.4.1903: Failed to acquire dquot type 1
[  869.710882][ T8171] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,block_validity,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000006,bh,init_itable,. Quota mode: none.
[  869.735633][ T8167] FAT-fs (loop3): Directory bread(block 35) failed
[  869.753071][ T8167] FAT-fs (loop3): Directory bread(block 36) failed
[  869.757956][ T8162] EXT4-fs (loop4): 1 truncate cleaned up
[  869.759797][ T8167] FAT-fs (loop3): Directory bread(block 37) failed
[  869.773139][ T8167] FAT-fs (loop3): Directory bread(block 38) failed
[  869.779742][ T8167] FAT-fs (loop3): Directory bread(block 39) failed
[  869.786298][ T8167] FAT-fs (loop3): Directory bread(block 40) failed
[  869.790608][ T8162] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  869.794343][ T8167] FAT-fs (loop3): Directory bread(block 41) failed
[  869.809398][ T8162] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  869.990859][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1904'.
[  870.336768][ T8167] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1904'.
[  870.579562][ T1400] attempt to access beyond end of device
[  870.579562][ T1400] loop3: rw=1, want=4112, limit=128
[  870.590998][ T1400] Buffer I/O error on dev loop3, logical block 1027, lost async page write
[  870.600059][ T1400] attempt to access beyond end of device
[  870.600059][ T1400] loop3: rw=1, want=4128, limit=128
[  870.611136][ T1400] Buffer I/O error on dev loop3, logical block 1031, lost async page write
[  870.626386][ T1400] attempt to access beyond end of device
[  870.626386][ T1400] loop3: rw=1, want=6184, limit=128
[  870.733369][ T1400] attempt to access beyond end of device
[  870.733369][ T1400] loop3: rw=1, want=8184, limit=128
[  870.854236][ T8191] loop3: detected capacity change from 0 to 1024
[  870.969410][ T8191] EXT4-fs (loop3): Ignoring removed bh option
[  871.029091][ T8191] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,block_validity,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000006,bh,init_itable,. Quota mode: none.
[  871.065939][ T8196] loop0: detected capacity change from 0 to 128
[  871.127205][ T8196] FAT-fs (loop0): Directory bread(block 32) failed
[  871.139989][ T8196] FAT-fs (loop0): Directory bread(block 33) failed
[  871.146626][ T8196] FAT-fs (loop0): Directory bread(block 34) failed
[  871.169526][ T8196] FAT-fs (loop0): Directory bread(block 35) failed
[  871.178913][ T8196] FAT-fs (loop0): Directory bread(block 36) failed
[  871.185518][ T8196] FAT-fs (loop0): Directory bread(block 37) failed
[  871.192423][ T8196] FAT-fs (loop0): Directory bread(block 38) failed
[  871.199161][ T8196] FAT-fs (loop0): Directory bread(block 39) failed
[  871.205817][ T8196] FAT-fs (loop0): Directory bread(block 40) failed
[  871.213076][ T8196] FAT-fs (loop0): Directory bread(block 41) failed
[  871.273793][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1910'.
[  871.283018][ T8196] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1910'.
[  872.354344][ T8206] loop0: detected capacity change from 0 to 256
[  873.798890][ T8212] loop3: detected capacity change from 0 to 256
[  873.883792][ T8212] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1913'.
[  873.898575][ T8208] loop4: detected capacity change from 0 to 4096
[  873.963036][ T8208] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  874.002509][ T8214] loop0: detected capacity change from 0 to 4096
[  874.077887][ T8214] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  874.105422][ T8218] loop2: detected capacity change from 0 to 4096
[  874.198115][ T8208] syz.4.1914[8208] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  874.198197][ T8208] syz.4.1914[8208] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  874.222525][ T8222] loop3: detected capacity change from 0 to 128
[  874.288626][ T8218] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  874.313740][ T8225] syz.0.1915[8225] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  874.313818][ T8225] syz.0.1915[8225] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  874.340165][ T8222] FAT-fs (loop3): Directory bread(block 32) failed
[  874.358456][ T8222] FAT-fs (loop3): Directory bread(block 33) failed
[  874.365054][ T8222] FAT-fs (loop3): Directory bread(block 34) failed
[  874.372450][ T8222] FAT-fs (loop3): Directory bread(block 35) failed
[  874.506786][ T8226] syz.2.1916[8226] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  874.506871][ T8226] syz.2.1916[8226] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  874.527963][ T8222] FAT-fs (loop3): Directory bread(block 36) failed
[  874.623828][ T8222] FAT-fs (loop3): Directory bread(block 37) failed
[  874.641994][ T8222] FAT-fs (loop3): Directory bread(block 38) failed
[  874.650158][ T8228] loop4: detected capacity change from 0 to 4096
[  874.681499][ T8222] FAT-fs (loop3): Directory bread(block 39) failed
[  874.705058][ T8222] FAT-fs (loop3): Directory bread(block 40) failed
[  874.716935][ T8228] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  874.740572][ T8222] FAT-fs (loop3): Directory bread(block 41) failed
[  874.869096][ T8228] syz.4.1918[8228] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  874.869174][ T8228] syz.4.1918[8228] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  875.021116][ T8235] loop0: detected capacity change from 0 to 128
[  875.042094][ T8222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1917'.
[  875.052378][ T8222] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1917'.
[  875.134811][ T8231] loop4: detected capacity change from 0 to 512
[  875.161977][ T8237] loop2: detected capacity change from 0 to 256
[  875.256457][ T8237] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1920'.
[  875.302506][ T8231] EXT4-fs (loop4): Ignoring removed nobh option
[  875.337066][ T8235] FAT-fs (loop0): Directory bread(block 32) failed
[  875.421055][ T8235] FAT-fs (loop0): Directory bread(block 33) failed
[  875.447400][ T8235] FAT-fs (loop0): Directory bread(block 34) failed
[  875.456363][ T8235] FAT-fs (loop0): Directory bread(block 35) failed
[  875.463208][ T8235] FAT-fs (loop0): Directory bread(block 36) failed
[  875.469996][ T8235] FAT-fs (loop0): Directory bread(block 37) failed
[  875.476574][ T8235] FAT-fs (loop0): Directory bread(block 38) failed
[  875.493477][ T8235] FAT-fs (loop0): Directory bread(block 39) failed
[  875.503672][ T8235] FAT-fs (loop0): Directory bread(block 40) failed
[  875.507587][ T8231] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1921: bg 0: block 248: padding at end of block bitmap is not set
[  875.520726][ T8235] FAT-fs (loop0): Directory bread(block 41) failed
[  875.537521][ T8231] Quota error (device loop4): write_blk: dquota write failed
[  875.545063][ T8231] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  875.588498][ T8231] EXT4-fs error (device loop4): ext4_acquire_dquot:6200: comm syz.4.1921: Failed to acquire dquot type 1
[  875.638052][ T8231] EXT4-fs (loop4): 1 truncate cleaned up
[  875.643767][ T8231] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  875.681358][ T8231] ext4 filesystem being mounted at /383/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  875.704736][ T8243] loop1: detected capacity change from 0 to 128
[  875.732341][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1919'.
[  875.751476][ T8235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1919'.
[  875.772521][ T1400] attempt to access beyond end of device
[  875.772521][ T1400] loop3: rw=1, want=4112, limit=128
[  875.791798][ T1400] Buffer I/O error on dev loop3, logical block 1027, lost async page write
[  875.811360][ T1400] attempt to access beyond end of device
[  875.811360][ T1400] loop3: rw=1, want=4128, limit=128
[  875.813730][ T8243] FAT-fs (loop1): Directory bread(block 32) failed
[  875.841465][ T8243] FAT-fs (loop1): Directory bread(block 33) failed
[  875.847506][ T1400] Buffer I/O error on dev loop3, logical block 1031, lost async page write
[  875.849081][ T8243] FAT-fs (loop1): Directory bread(block 34) failed
[  875.865380][ T1400] attempt to access beyond end of device
[  875.865380][ T1400] loop3: rw=1, want=7808, limit=128
[  875.888506][ T1400] attempt to access beyond end of device
[  875.888506][ T1400] loop3: rw=1, want=8184, limit=128
[  875.927369][ T8243] FAT-fs (loop1): Directory bread(block 35) failed
[  875.939149][ T8243] FAT-fs (loop1): Directory bread(block 36) failed
[  875.967377][ T8243] FAT-fs (loop1): Directory bread(block 37) failed
[  875.973967][ T8243] FAT-fs (loop1): Directory bread(block 38) failed
[  876.017735][ T8243] FAT-fs (loop1): Directory bread(block 39) failed
[  876.041742][ T8243] FAT-fs (loop1): Directory bread(block 40) failed
[  876.048720][ T8243] FAT-fs (loop1): Directory bread(block 41) failed
[  878.030555][ T8253] loop3: detected capacity change from 0 to 256
[  878.208016][ T1400] attempt to access beyond end of device
[  878.208016][ T1400] loop0: rw=1, want=4112, limit=128
[  878.244946][ T1400] Buffer I/O error on dev loop0, logical block 1027, lost async page write
[  878.265137][ T1400] attempt to access beyond end of device
[  878.265137][ T1400] loop0: rw=1, want=4128, limit=128
[  878.266546][ T8257] loop4: detected capacity change from 0 to 4096
[  878.276547][ T1400] Buffer I/O error on dev loop0, logical block 1031, lost async page write
[  878.300709][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1922'.
[  878.302279][ T1400] attempt to access beyond end of device
[  878.302279][ T1400] loop0: rw=1, want=8184, limit=128
[  878.325454][ T8259] loop2: detected capacity change from 0 to 256
[  878.332726][ T8243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1922'.
[  878.490221][ T8257] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  878.505612][ T8261] loop3: detected capacity change from 0 to 4096
[  878.687274][ T8261] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  878.763898][ T8267] syz.4.1925[8267] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  878.763978][ T8267] syz.4.1925[8267] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  879.780459][ T8261] syz.3.1928[8261] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  879.791932][ T8261] syz.3.1928[8261] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  880.865838][  T597] attempt to access beyond end of device
[  880.865838][  T597] loop1: rw=1, want=4112, limit=128
[  881.015872][ T8281] loop4: detected capacity change from 0 to 4096
[  881.050415][ T8281] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  881.066457][ T8280] loop3: detected capacity change from 0 to 4096
[  881.083053][ T8285] loop0: detected capacity change from 0 to 512
[  881.090899][ T8285] EXT4-fs (loop0): Ignoring removed nobh option
[  881.135022][  T597] Buffer I/O error on dev loop1, logical block 1027, lost async page write
[  881.153531][  T597] attempt to access beyond end of device
[  881.153531][  T597] loop1: rw=1, want=4128, limit=128
[  881.165300][  T597] Buffer I/O error on dev loop1, logical block 1031, lost async page write
[  881.175337][  T597] attempt to access beyond end of device
[  881.175337][  T597] loop1: rw=1, want=6184, limit=128
[  881.188609][  T597] attempt to access beyond end of device
[  881.188609][  T597] loop1: rw=1, want=8184, limit=128
[  881.206368][ T8280] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  881.222374][ T8285] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1933: bg 0: block 248: padding at end of block bitmap is not set
[  881.237221][ T8287] syz.4.1930[8287] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  881.237323][ T8287] syz.4.1930[8287] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  881.264211][ T8285] Quota error (device loop0): write_blk: dquota write failed
[  881.289986][ T8285] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  881.301104][ T8285] EXT4-fs error (device loop0): ext4_acquire_dquot:6200: comm syz.0.1933: Failed to acquire dquot type 1
[  881.363571][ T8292] syz.3.1931[8292] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  881.363666][ T8292] syz.3.1931[8292] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  881.435678][ T8295] loop2: detected capacity change from 0 to 256
[  881.481753][ T8285] EXT4-fs (loop0): 1 truncate cleaned up
[  881.494695][ T8285] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  881.529388][ T8295] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1934'.
[  881.713793][ T8285] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  881.761609][ T8299] loop1: detected capacity change from 0 to 512
[  881.799494][ T8299] EXT4-fs (loop1): Ignoring removed oldalloc option
[  881.818515][ T8299] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.1932: dx entry: limit 1024 != root limit 124
[  881.830701][ T8299] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1932: Corrupt directory, running e2fsck is recommended
[  881.831528][ T8302] loop3: detected capacity change from 0 to 128
[  881.850548][ T8299] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  881.858958][ T8299] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.1932: corrupted in-inode xattr
[  881.871948][ T8299] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1932: couldn't read orphan inode 15 (err -117)
[  881.884010][ T8299] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,journal_ioprio=0x0000000000000000,jqfmt=vfsv1,oldalloc,noquota,grpjquota=.usrquota,usrjquota=,grpid,delalloc,,,errors=continue. Quota mode: writeback.
[  881.913169][ T8299] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.1932: dx entry: limit 1024 != root limit 124
[  881.925369][ T8299] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1932: Corrupt directory, running e2fsck is recommended
[  881.973200][ T8302] FAT-fs (loop3): Directory bread(block 32) failed
[  882.011811][ T8302] FAT-fs (loop3): Directory bread(block 33) failed
[  882.040087][ T8302] FAT-fs (loop3): Directory bread(block 34) failed
[  882.104001][ T8308] loop4: detected capacity change from 0 to 256
[  882.117717][ T8302] FAT-fs (loop3): Directory bread(block 35) failed
[  882.128770][ T8302] FAT-fs (loop3): Directory bread(block 36) failed
[  882.159086][ T8302] FAT-fs (loop3): Directory bread(block 37) failed
[  882.186388][ T8302] FAT-fs (loop3): Directory bread(block 38) failed
[  882.211030][ T8302] FAT-fs (loop3): Directory bread(block 39) failed
[  882.229724][ T8302] FAT-fs (loop3): Directory bread(block 40) failed
[  882.236352][ T8302] FAT-fs (loop3): Directory bread(block 41) failed
[  883.187719][ T8302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1936'.
[  883.228380][ T8302] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1936'.
[  883.435414][ T8318] loop2: detected capacity change from 0 to 256
[  883.662933][ T8319] loop0: detected capacity change from 0 to 128
[  883.753082][ T8319] FAT-fs (loop0): Directory bread(block 32) failed
[  883.767323][ T8319] FAT-fs (loop0): Directory bread(block 33) failed
[  883.773915][ T8319] FAT-fs (loop0): Directory bread(block 34) failed
[  883.787298][ T8319] FAT-fs (loop0): Directory bread(block 35) failed
[  883.793878][ T8319] FAT-fs (loop0): Directory bread(block 36) failed
[  883.817448][ T8319] FAT-fs (loop0): Directory bread(block 37) failed
[  883.824191][ T8319] FAT-fs (loop0): Directory bread(block 38) failed
[  883.830984][ T8319] FAT-fs (loop0): Directory bread(block 39) failed
[  883.837696][ T8319] FAT-fs (loop0): Directory bread(block 40) failed
[  883.844272][ T8319] FAT-fs (loop0): Directory bread(block 41) failed
[  883.949279][ T8323] loop3: detected capacity change from 0 to 4096
[  884.014634][ T8323] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  884.034699][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1938'.
[  884.548948][ T8319] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1938'.
[  884.609833][ T8330] syz.3.1940[8330] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  884.609914][ T8330] syz.3.1940[8330] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  884.655833][ T8326] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  884.871767][ T8335] loop4: detected capacity change from 0 to 128
[  884.941786][ T8335] FAT-fs (loop4): Directory bread(block 32) failed
[  884.976772][ T8335] FAT-fs (loop4): Directory bread(block 33) failed
[  885.005044][ T8335] FAT-fs (loop4): Directory bread(block 34) failed
[  885.013181][ T8337] loop2: detected capacity change from 0 to 256
[  885.034095][ T8335] FAT-fs (loop4): Directory bread(block 35) failed
[  885.062809][ T8335] FAT-fs (loop4): Directory bread(block 36) failed
[  885.123901][ T8335] FAT-fs (loop4): Directory bread(block 37) failed
[  885.154579][ T8335] FAT-fs (loop4): Directory bread(block 38) failed
[  885.161495][ T8335] FAT-fs (loop4): Directory bread(block 39) failed
[  885.168224][ T8335] FAT-fs (loop4): Directory bread(block 40) failed
[  885.174770][ T8335] FAT-fs (loop4): Directory bread(block 41) failed
[  885.251754][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1943'.
[  885.287268][ T8335] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1943'.
[  885.297191][ T1400] attempt to access beyond end of device
[  885.297191][ T1400] loop0: rw=1, want=4112, limit=128
[  885.313883][ T1400] Buffer I/O error on dev loop0, logical block 1027, lost async page write
[  885.341052][ T1400] attempt to access beyond end of device
[  885.341052][ T1400] loop0: rw=1, want=4128, limit=128
[  885.376501][ T8341] loop3: detected capacity change from 0 to 256
[  885.397664][ T1400] Buffer I/O error on dev loop0, logical block 1031, lost async page write
[  885.479167][ T1400] attempt to access beyond end of device
[  885.479167][ T1400] loop0: rw=1, want=8184, limit=128
[  885.507983][ T8341] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1944'.
[  885.770346][ T1400] attempt to access beyond end of device
[  885.770346][ T1400] loop4: rw=1, want=4112, limit=128
[  885.787351][ T1400] Buffer I/O error on dev loop4, logical block 1027, lost async page write
[  885.804426][ T1400] attempt to access beyond end of device
[  885.804426][ T1400] loop4: rw=1, want=4128, limit=128
[  885.814972][ T8344] loop0: detected capacity change from 0 to 4096
[  885.819956][ T1400] Buffer I/O error on dev loop4, logical block 1031, lost async page write
[  885.832800][ T1400] attempt to access beyond end of device
[  885.832800][ T1400] loop4: rw=1, want=6184, limit=128
[  885.888519][ T8346] loop1: detected capacity change from 0 to 4096
[  885.924613][ T8344] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  885.962519][ T8346] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  886.070202][ T8355] loop2: detected capacity change from 0 to 256
[  886.106723][ T8354] syz.0.1945[8354] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  886.106801][ T8354] syz.0.1945[8354] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  886.588623][ T8359] syz.1.1947[8359] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  886.600212][ T8359] syz.1.1947[8359] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  887.085255][ T8353] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1948'.
[  887.620360][ T8366] loop2: detected capacity change from 0 to 4096
[  887.662820][ T8366] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  887.893215][ T8370] loop0: detected capacity change from 0 to 512
[  887.918199][ T8370] EXT4-fs (loop0): Ignoring removed nobh option
[  887.929555][ T8370] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1950: bg 0: block 248: padding at end of block bitmap is not set
[  887.944235][ T8370] Quota error (device loop0): write_blk: dquota write failed
[  887.962156][ T8370] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  887.986947][ T8370] EXT4-fs error (device loop0): ext4_acquire_dquot:6200: comm syz.0.1950: Failed to acquire dquot type 1
[  888.001874][ T8374] syz.2.1951[8374] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  888.001947][ T8374] syz.2.1951[8374] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  888.013509][ T8370] EXT4-fs (loop0): 1 truncate cleaned up
[  888.060154][ T8370] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  888.097380][ T8370] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  898.380716][ T8381] loop2: detected capacity change from 0 to 4096
[  898.458723][ T8387] loop4: detected capacity change from 0 to 1024
[  898.486871][ T8381] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  899.435881][ T8387] EXT4-fs (loop4): Ignoring removed bh option
[  899.591657][ T8387] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,block_validity,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000006,bh,init_itable,. Quota mode: none.
[  900.088307][ T8406] loop1: detected capacity change from 0 to 256
[  900.095806][  T480] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  900.138752][ T8406] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  900.367371][  T373] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  900.544332][  T480] usb 1-1: Using ep0 maxpacket: 16
[  900.689827][ T8409] loop2: detected capacity change from 0 to 256
[  900.753935][ T8409] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d)
[  900.817505][  T373] usb 4-1: Using ep0 maxpacket: 16
[  900.846562][ T8411] loop4: detected capacity change from 0 to 128
[  900.864362][ T8411] FAT-fs (loop4): Directory bread(block 32) failed
[  900.871066][ T8411] FAT-fs (loop4): Directory bread(block 33) failed
[  900.877971][ T8411] FAT-fs (loop4): Directory bread(block 34) failed
[  900.897519][ T8411] FAT-fs (loop4): Directory bread(block 35) failed
[  900.905374][ T8411] FAT-fs (loop4): Directory bread(block 36) failed
[  900.912033][ T8411] FAT-fs (loop4): Directory bread(block 37) failed
[  900.918664][ T8411] FAT-fs (loop4): Directory bread(block 38) failed
[  900.925210][ T8411] FAT-fs (loop4): Directory bread(block 39) failed
[  900.931867][ T8411] FAT-fs (loop4): Directory bread(block 40) failed
[  900.938515][ T8411] FAT-fs (loop4): Directory bread(block 41) failed
[  900.962741][ T8413] loop1: detected capacity change from 0 to 4096
[  900.969338][  T480] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  900.978527][  T480] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  900.986537][  T480] usb 1-1: Product: syz
[  900.990988][  T480] usb 1-1: Manufacturer: syz
[  900.995601][  T480] usb 1-1: SerialNumber: syz
[  901.001164][  T480] r8152-cfgselector 1-1: config 0 descriptor??
[  901.004044][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1960'.
[  901.009855][ T8413] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  901.019755][ T8411] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1960'.
[  901.041489][ T8413] EXT4-fs (loop1): Test dummy encryption mode enabled
[  901.051029][ T8413] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  901.117407][  T373] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  901.126858][ T6280] handle_bad_sector: 1 callbacks suppressed
[  901.126872][ T6280] attempt to access beyond end of device
[  901.126872][ T6280] loop4: rw=1, want=4112, limit=128
[  901.143607][ T6280] Buffer I/O error on dev loop4, logical block 1027, lost async page write
[  901.152317][  T373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  901.152602][ T6280] attempt to access beyond end of device
[  901.152602][ T6280] loop4: rw=1, want=4128, limit=128
[  901.171389][ T6280] Buffer I/O error on dev loop4, logical block 1031, lost async page write
[  901.180041][  T373] usb 4-1: Product: syz
[  901.183195][ T6280] attempt to access beyond end of device
[  901.183195][ T6280] loop4: rw=1, want=8184, limit=128
[  901.184218][  T373] usb 4-1: Manufacturer: syz
[  901.217275][  T373] usb 4-1: SerialNumber: syz
[  901.227558][  T373] r8152-cfgselector 4-1: config 0 descriptor??
[  901.267368][  T480] r8152-cfgselector 1-1: Unknown version 0x0000
[  901.287330][  T480] r8152-cfgselector 1-1: Unknown version 0x0000
[  901.296859][  T480] r8152-cfgselector 1-1: USB disconnect, device number 17
[  901.312620][ T8418] loop4: detected capacity change from 0 to 4096
[  901.458241][ T8418] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  901.641736][ T8423] syz.4.1962[8423] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  901.641816][ T8423] syz.4.1962[8423] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  903.031979][  T373] r8152-cfgselector 4-1: Unknown version 0x0000
[  903.158151][ T8427] loop0: detected capacity change from 0 to 4096
[  903.167319][  T373] r8152-cfgselector 4-1: Unknown version 0x0000
[  903.197065][  T373] r8152-cfgselector 4-1: USB disconnect, device number 21
[  903.281851][ T8427] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  903.386957][ T8435] loop4: detected capacity change from 0 to 512
[  903.409831][ T8435] EXT4-fs (loop4): Ignoring removed oldalloc option
[  903.427605][ T8440] loop1: detected capacity change from 0 to 128
[  903.427768][ T8435] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.1966: dx entry: limit 1024 != root limit 124
[  903.445983][ T8435] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1966: Corrupt directory, running e2fsck is recommended
[  903.450342][ T8439] loop2: detected capacity change from 0 to 1024
[  903.466053][ T8435] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  903.466128][ T8441] syz.0.1964[8441] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  903.474332][ T8441] syz.0.1964[8441] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  903.475599][ T8435] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.1966: corrupted in-inode xattr
[  903.513716][ T8435] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1966: couldn't read orphan inode 15 (err -117)
[  903.527017][ T8435] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,journal_ioprio=0x0000000000000000,jqfmt=vfsv1,oldalloc,noquota,grpjquota=.usrquota,usrjquota=,grpid,delalloc,,,errors=continue. Quota mode: writeback.
[  903.530488][ T8440] FAT-fs (loop1): Directory bread(block 32) failed
[  903.557318][ T8440] FAT-fs (loop1): Directory bread(block 33) failed
[  903.562722][ T8439] EXT4-fs (loop2): Ignoring removed bh option
[  903.564103][ T8440] FAT-fs (loop1): Directory bread(block 34) failed
[  903.570635][ T8435] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.1966: dx entry: limit 1024 != root limit 124
[  903.576970][ T8440] FAT-fs (loop1): Directory bread(block 35) failed
[  903.589297][ T8435] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1966: Corrupt directory, running e2fsck is recommended
[  903.603676][ T8440] FAT-fs (loop1): Directory bread(block 36) failed
[  903.617277][  T373] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  903.618051][ T8440] FAT-fs (loop1): Directory bread(block 37) failed
[  903.631458][ T8440] FAT-fs (loop1): Directory bread(block 38) failed
[  903.635365][ T8439] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,block_validity,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000006,bh,init_itable,. Quota mode: none.
[  903.638050][ T8440] FAT-fs (loop1): Directory bread(block 39) failed
[  903.673532][ T8440] FAT-fs (loop1): Directory bread(block 40) failed
[  903.680265][ T8440] FAT-fs (loop1): Directory bread(block 41) failed
[  903.758537][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'.
[  903.767525][ T8440] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1967'.
[  903.861186][ T8446] loop2: detected capacity change from 0 to 4096
[  903.877386][  T373] usb 4-1: Using ep0 maxpacket: 16
[  903.927171][   T10] attempt to access beyond end of device
[  903.927171][   T10] loop1: rw=1, want=4112, limit=128
[  903.937987][   T10] Buffer I/O error on dev loop1, logical block 1027, lost async page write
[  903.946778][   T10] attempt to access beyond end of device
[  903.946778][   T10] loop1: rw=1, want=4128, limit=128
[  903.957601][   T10] Buffer I/O error on dev loop1, logical block 1031, lost async page write
[  903.980085][   T10] attempt to access beyond end of device
[  903.980085][   T10] loop1: rw=1, want=8184, limit=128
[  903.987090][ T8449] loop0: detected capacity change from 0 to 1024
[  903.997339][  T373] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  903.998586][ T8446] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  904.016076][  T373] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  904.179451][ T8449] EXT4-fs (loop0): Ignoring removed bh option
[  904.210419][ T8454] loop1: detected capacity change from 0 to 512
[  904.249636][ T8454] EXT4-fs (loop1): Ignoring removed oldalloc option
[  904.268536][ T8449] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,block_validity,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000006,bh,init_itable,. Quota mode: none.
[  904.305921][ T8454] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.1971: dx entry: limit 1024 != root limit 124
[  904.318062][ T8454] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1971: Corrupt directory, running e2fsck is recommended
[  904.334558][ T8454] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  904.343388][ T8454] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.1971: corrupted in-inode xattr
[  904.357145][ T8454] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1971: couldn't read orphan inode 15 (err -117)
[  904.381429][  T373] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  904.382573][ T8454] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,journal_ioprio=0x0000000000000000,jqfmt=vfsv1,oldalloc,noquota,grpjquota=.usrquota,usrjquota=,grpid,delalloc,,,errors=continue. Quota mode: writeback.
[  904.495134][ T8454] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.1971: dx entry: limit 1024 != root limit 124
[  904.507334][ T8454] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1971: Corrupt directory, running e2fsck is recommended
[  904.633841][  T373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  904.638127][ T8462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1972'.
[  904.651904][ T8462] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1972'.
[  905.337303][  T373] usb 4-1: Product: syz
[  905.341610][  T373] usb 4-1: Manufacturer: syz
[  905.346228][  T373] usb 4-1: SerialNumber: syz
[  905.492376][  T373] r8152-cfgselector 4-1: config 0 descriptor??
[  905.598371][ T8468] loop1: detected capacity change from 0 to 128
[  905.658805][ T8469] loop4: detected capacity change from 0 to 256
[  905.669202][ T8468] FAT-fs (loop1): Directory bread(block 32) failed
[  905.675875][ T8468] FAT-fs (loop1): Directory bread(block 33) failed
[  905.682483][ T8468] FAT-fs (loop1): Directory bread(block 34) failed
[  905.689048][ T8468] FAT-fs (loop1): Directory bread(block 35) failed
[  905.695582][ T8468] FAT-fs (loop1): Directory bread(block 36) failed
[  905.702144][ T8468] FAT-fs (loop1): Directory bread(block 37) failed
[  905.708740][ T8468] FAT-fs (loop1): Directory bread(block 38) failed
[  905.715257][ T8468] FAT-fs (loop1): Directory bread(block 39) failed
[  905.722129][ T8468] FAT-fs (loop1): Directory bread(block 40) failed
[  905.735160][ T8468] FAT-fs (loop1): Directory bread(block 41) failed
[  905.781793][ T8473] loop2: detected capacity change from 0 to 256
[  905.844788][ T8473] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  905.910021][ T8469] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d)
[  906.538485][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1975'.
[  906.547654][ T8468] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1975'.
[  906.569249][ T8475] loop4: detected capacity change from 0 to 1024
[  906.592695][ T8475] EXT4-fs (loop4): Ignoring removed bh option
[  906.626839][ T8475] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,block_validity,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000006,bh,init_itable,. Quota mode: none.
[  906.722990][   T10] attempt to access beyond end of device
[  906.722990][   T10] loop1: rw=1, want=4112, limit=128
[  906.734394][   T10] Buffer I/O error on dev loop1, logical block 1027, lost async page write
[  906.748341][   T10] attempt to access beyond end of device
[  906.748341][   T10] loop1: rw=1, want=4128, limit=128
[  906.814301][ T8480] loop3: detected capacity change from 0 to 128
[  906.815760][  T373] r8152-cfgselector 4-1: Unknown version 0x0000
[  906.837605][   T10] Buffer I/O error on dev loop1, logical block 1031, lost async page write
[  906.850754][  T373] r8152-cfgselector 4-1: USB disconnect, device number 22
[  906.863125][   T10] attempt to access beyond end of device
[  906.863125][   T10] loop1: rw=1, want=8184, limit=128
[  906.893637][ T8480] FAT-fs (loop3): Directory bread(block 32) failed
[  906.916106][ T8480] FAT-fs (loop3): Directory bread(block 33) failed
[  906.929721][ T8480] FAT-fs (loop3): Directory bread(block 34) failed
[  906.939886][ T8483] loop2: detected capacity change from 0 to 4096
[  906.946726][ T8480] FAT-fs (loop3): Directory bread(block 35) failed
[  906.951573][ T8483] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  906.960643][ T8483] EXT4-fs (loop2): Test dummy encryption mode enabled
[  906.964600][ T8480] FAT-fs (loop3): Directory bread(block 36) failed
[  906.974262][ T8480] FAT-fs (loop3): Directory bread(block 37) failed
[  906.981104][ T8480] FAT-fs (loop3): Directory bread(block 38) failed
[  906.993997][ T8480] FAT-fs (loop3): Directory bread(block 39) failed
[  907.001072][ T8480] FAT-fs (loop3): Directory bread(block 40) failed
[  907.007838][ T8480] FAT-fs (loop3): Directory bread(block 41) failed
[  907.064567][ T8483] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  907.074153][ T8480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1978'.
[  907.116055][ T8480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1978'.
[  907.138714][ T8491] loop0: detected capacity change from 0 to 256
[  907.557282][  T373] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  907.640504][   T10] attempt to access beyond end of device
[  907.640504][   T10] loop3: rw=1, want=4112, limit=128
[  907.659372][   T10] Buffer I/O error on dev loop3, logical block 1027, lost async page write
[  907.675402][   T10] attempt to access beyond end of device
[  907.675402][   T10] loop3: rw=1, want=4128, limit=128
[  907.686301][   T10] Buffer I/O error on dev loop3, logical block 1031, lost async page write
[  907.696486][   T10] attempt to access beyond end of device
[  907.696486][   T10] loop3: rw=1, want=6176, limit=128
[  907.709147][   T10] attempt to access beyond end of device
[  907.709147][   T10] loop3: rw=1, want=8184, limit=128
[  907.807287][  T373] usb 2-1: Using ep0 maxpacket: 16
[  907.863703][ T8498] loop3: detected capacity change from 0 to 4096
[  907.884319][ T8500] loop0: detected capacity change from 0 to 4096
[  907.922496][ T8498] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  907.952669][ T8500] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  908.160557][ T8500] syz.0.1982[8500] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  908.160612][ T8500] syz.0.1982[8500] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  908.172329][ T8504] syz.3.1981[8504] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  908.183776][ T8504] syz.3.1981[8504] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  908.187347][  T373] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  908.217445][  T373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  908.226268][  T373] usb 2-1: Product: syz
[  908.230543][  T373] usb 2-1: Manufacturer: syz
[  908.235414][  T373] usb 2-1: SerialNumber: syz
[  908.241064][  T373] r8152-cfgselector 2-1: config 0 descriptor??
[  908.581977][ T8508] loop2: detected capacity change from 0 to 256
[  908.648906][ T8508] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1983'.
[  908.953603][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1985'.
[  908.962603][ T8512] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1985'.
[  909.054137][ T8514] loop3: detected capacity change from 0 to 256
[  909.124961][ T8514] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1984'.
[  909.411298][ T8517] loop2: detected capacity change from 0 to 1024
[  909.421495][ T8517] EXT4-fs (loop2): Ignoring removed bh option
[  909.441081][ T8517] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,block_validity,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000006,bh,init_itable,. Quota mode: none.
[  909.500638][ T8522] loop0: detected capacity change from 0 to 128
[  909.547927][ T8522] FAT-fs (loop0): Directory bread(block 32) failed
[  909.558241][ T8522] FAT-fs (loop0): Directory bread(block 33) failed
[  909.564895][ T8522] FAT-fs (loop0): Directory bread(block 34) failed
[  909.571682][ T8522] FAT-fs (loop0): Directory bread(block 35) failed
[  909.587069][ T8522] FAT-fs (loop0): Directory bread(block 36) failed
[  909.593925][ T8522] FAT-fs (loop0): Directory bread(block 37) failed
[  909.600679][ T8522] FAT-fs (loop0): Directory bread(block 38) failed
[  909.607458][ T8522] FAT-fs (loop0): Directory bread(block 39) failed
[  909.614084][ T8522] FAT-fs (loop0): Directory bread(block 40) failed
[  909.620792][ T8522] FAT-fs (loop0): Directory bread(block 41) failed
[  909.669563][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1987'.
[  909.678529][ T8522] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1987'.
[  909.756229][   T10] attempt to access beyond end of device
[  909.756229][   T10] loop0: rw=1, want=4112, limit=128
[  909.767618][   T10] Buffer I/O error on dev loop0, logical block 1027, lost async page write
[  909.776622][   T10] attempt to access beyond end of device
[  909.776622][   T10] loop0: rw=1, want=4128, limit=128
[  909.787720][   T10] Buffer I/O error on dev loop0, logical block 1031, lost async page write
[  909.797847][   T10] attempt to access beyond end of device
[  909.797847][   T10] loop0: rw=1, want=6200, limit=128
[  909.835934][ T8529] loop2: detected capacity change from 0 to 256
[  909.910611][ T8531] loop3: detected capacity change from 0 to 4096
[  909.945324][ T8531] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  910.107685][ T8536] loop0: detected capacity change from 0 to 256
[  910.114458][ T1362] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  910.122300][  T373] r8152-cfgselector 2-1: Unknown version 0x0000
[  910.146619][ T8536] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  910.206755][ T8538] syz.3.1991[8538] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  910.206836][ T8538] syz.3.1991[8538] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  910.689952][  T373] r8152-cfgselector 2-1: Unknown version 0x0000
[  910.710337][  T373] r8152-cfgselector 2-1: USB disconnect, device number 23
[  911.004385][ T1362] usb 5-1: Using ep0 maxpacket: 16
[  911.021686][ T8541] loop1: detected capacity change from 0 to 128
[  911.073750][ T8541] FAT-fs (loop1): Directory bread(block 32) failed
[  911.120182][ T8541] FAT-fs (loop1): Directory bread(block 33) failed
[  911.126786][ T8541] FAT-fs (loop1): Directory bread(block 34) failed
[  911.133469][ T8541] FAT-fs (loop1): Directory bread(block 35) failed
[  911.140588][ T8541] FAT-fs (loop1): Directory bread(block 36) failed
[  911.147772][ T8541] FAT-fs (loop1): Directory bread(block 37) failed
[  911.154326][ T8541] FAT-fs (loop1): Directory bread(block 38) failed
[  911.161272][ T1362] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  911.171488][ T8541] FAT-fs (loop1): Directory bread(block 39) failed
[  911.178049][ T1362] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  911.187141][ T8541] FAT-fs (loop1): Directory bread(block 40) failed
[  911.203731][ T8543] loop3: detected capacity change from 0 to 4096
[  911.210431][ T8541] FAT-fs (loop1): Directory bread(block 41) failed
[  911.282383][ T8543] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  911.297538][ T8543] EXT4-fs (loop3): Test dummy encryption mode enabled
[  911.345855][ T8543] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  911.428150][ T8546] loop2: detected capacity change from 0 to 4096
[  911.469051][ T8548] loop0: detected capacity change from 0 to 4096
[  911.487312][ T1362] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  911.496432][ T1362] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  911.517260][ T1362] usb 5-1: Product: syz
[  911.528509][ T8546] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  911.540334][ T8548] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  911.551549][ T1362] usb 5-1: Manufacturer: syz
[  911.556174][ T1362] usb 5-1: SerialNumber: syz
[  911.675050][ T8553] syz.2.1994[8553] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  911.675129][ T8553] syz.2.1994[8553] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  911.680216][ T1362] r8152-cfgselector 5-1: config 0 descriptor??
[  911.762512][ T8554] syz.0.1995[8554] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  911.762567][ T8554] syz.0.1995[8554] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  911.774438][   T10] handle_bad_sector: 1 callbacks suppressed
[  911.774456][   T10] attempt to access beyond end of device
[  911.774456][   T10] loop1: rw=1, want=4112, limit=128
[  911.802808][   T10] Buffer I/O error on dev loop1, logical block 1027, lost async page write
[  911.819728][   T10] attempt to access beyond end of device
[  911.819728][   T10] loop1: rw=1, want=4128, limit=128
[  911.834268][   T10] Buffer I/O error on dev loop1, logical block 1031, lost async page write
[  911.844167][   T10] attempt to access beyond end of device
[  911.844167][   T10] loop1: rw=1, want=6480, limit=128
[  911.856746][   T10] attempt to access beyond end of device
[  911.856746][   T10] loop1: rw=1, want=8184, limit=128
[  911.887204][ T8557] loop2: detected capacity change from 0 to 256
[  911.966742][ T8559] loop1: detected capacity change from 0 to 128
[  912.014162][ T8559] FAT-fs (loop1): Directory bread(block 32) failed
[  912.020875][ T8559] FAT-fs (loop1): Directory bread(block 33) failed
[  912.027887][ T8559] FAT-fs (loop1): Directory bread(block 34) failed
[  912.034573][ T8559] FAT-fs (loop1): Directory bread(block 35) failed
[  912.041803][ T8559] FAT-fs (loop1): Directory bread(block 36) failed
[  912.049947][ T8559] FAT-fs (loop1): Directory bread(block 37) failed
[  912.056788][ T8559] FAT-fs (loop1): Directory bread(block 38) failed
[  912.063435][ T8559] FAT-fs (loop1): Directory bread(block 39) failed
[  912.070092][ T8559] FAT-fs (loop1): Directory bread(block 40) failed
[  912.076631][ T8559] FAT-fs (loop1): Directory bread(block 41) failed
[  912.109533][ T8562] loop3: detected capacity change from 0 to 512
[  912.128493][ T8562] EXT4-fs (loop3): Ignoring removed oldalloc option
[  912.140384][ T8559] __nla_validate_parse: 2 callbacks suppressed
[  912.140400][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1997'.
[  912.142104][ T8562] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1998: dx entry: limit 1024 != root limit 124
[  912.153244][ T8559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1997'.
[  912.155689][ T8562] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1998: Corrupt directory, running e2fsck is recommended
[  912.190081][ T8562] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  912.198980][ T8562] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.1998: corrupted in-inode xattr
[  912.211236][ T8562] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1998: couldn't read orphan inode 15 (err -117)
[  912.223394][ T8562] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,journal_ioprio=0x0000000000000000,jqfmt=vfsv1,oldalloc,noquota,grpjquota=.usrquota,usrjquota=,grpid,delalloc,,,errors=continue. Quota mode: writeback.
[  912.252389][ T8562] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1998: dx entry: limit 1024 != root limit 124
[  912.264601][ T8562] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1998: Corrupt directory, running e2fsck is recommended
[  912.358967][ T1400] attempt to access beyond end of device
[  912.358967][ T1400] loop1: rw=1, want=4112, limit=128
[  912.369830][ T1400] Buffer I/O error on dev loop1, logical block 1027, lost async page write
[  912.378812][ T1400] attempt to access beyond end of device
[  912.378812][ T1400] loop1: rw=1, want=4128, limit=128
[  912.389701][ T1400] Buffer I/O error on dev loop1, logical block 1031, lost async page write
[  912.401091][ T8567] loop0: detected capacity change from 0 to 512
[  912.408356][ T1400] attempt to access beyond end of device
[  912.408356][ T1400] loop1: rw=1, want=7984, limit=128
[  912.420203][ T1400] attempt to access beyond end of device
[  912.420203][ T1400] loop1: rw=1, want=8184, limit=128
[  912.488801][ T8567] EXT4-fs (loop0): Ignoring removed oldalloc option
[  912.498148][ T8567] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.1999: dx entry: limit 1024 != root limit 124
[  912.510220][ T8567] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1999: Corrupt directory, running e2fsck is recommended
[  912.523860][ T8567] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  912.532153][ T8567] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #15: comm syz.0.1999: corrupted in-inode xattr
[  912.545095][ T8567] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1999: couldn't read orphan inode 15 (err -117)
[  912.557446][ T8567] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,journal_ioprio=0x0000000000000000,jqfmt=vfsv1,oldalloc,noquota,grpjquota=.usrquota,usrjquota=,grpid,delalloc,,,errors=continue. Quota mode: writeback.
[  912.581806][ T8567] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.1999: dx entry: limit 1024 != root limit 124
[  912.593931][ T8567] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1999: Corrupt directory, running e2fsck is recommended
[  912.610978][ T8571] loop1: detected capacity change from 0 to 256
[  912.660599][ T8571] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2000'.
[  912.715820][ T8574] loop2: detected capacity change from 0 to 128
[  912.754249][ T8574] FAT-fs (loop2): Directory bread(block 32) failed
[  912.761996][ T8574] FAT-fs (loop2): Directory bread(block 33) failed
[  912.768720][ T8574] FAT-fs (loop2): Directory bread(block 34) failed
[  912.775330][ T8574] FAT-fs (loop2): Directory bread(block 35) failed
[  912.781980][ T8574] FAT-fs (loop2): Directory bread(block 36) failed
[  912.788660][ T8574] FAT-fs (loop2): Directory bread(block 37) failed
[  912.795241][ T8574] FAT-fs (loop2): Directory bread(block 38) failed
[  912.801891][ T8574] FAT-fs (loop2): Directory bread(block 39) failed
[  912.808633][ T8574] FAT-fs (loop2): Directory bread(block 40) failed
[  912.815176][ T8574] FAT-fs (loop2): Directory bread(block 41) failed
[  912.847760][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2001'.
[  912.856818][ T8574] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2001'.
[  912.941910][ T1400] attempt to access beyond end of device
[  912.941910][ T1400] loop2: rw=1, want=4112, limit=128
[  912.953014][ T1400] Buffer I/O error on dev loop2, logical block 1027, lost async page write
[  912.961850][ T1400] attempt to access beyond end of device
[  912.961850][ T1400] loop2: rw=1, want=4128, limit=128
[  912.972838][ T1400] Buffer I/O error on dev loop2, logical block 1031, lost async page write
[  913.029835][ T8579] loop4: detected capacity change from 0 to 128
[  913.039557][ T1362] r8152-cfgselector 5-1: Unknown version 0x0000
[  913.047680][ T1362] r8152-cfgselector 5-1: USB disconnect, device number 19
[  913.093891][ T8579] FAT-fs (loop4): Directory bread(block 32) failed
[  913.106948][ T8579] FAT-fs (loop4): Directory bread(block 33) failed
[  913.114088][ T8579] FAT-fs (loop4): Directory bread(block 34) failed
[  913.120867][ T8579] FAT-fs (loop4): Directory bread(block 35) failed
[  913.127667][ T8579] FAT-fs (loop4): Directory bread(block 36) failed
[  913.134279][ T8579] FAT-fs (loop4): Directory bread(block 37) failed
[  913.141171][ T8579] FAT-fs (loop4): Directory bread(block 38) failed
[  913.147896][ T8579] FAT-fs (loop4): Directory bread(block 39) failed
[  913.154504][ T8579] FAT-fs (loop4): Directory bread(block 40) failed
[  913.161244][ T8579] FAT-fs (loop4): Directory bread(block 41) failed
[  913.253886][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2004'.
[  913.262879][ T8579] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2004'.
[  913.288319][ T8583] loop2: detected capacity change from 0 to 256
[  913.342567][ T8583] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d)
[  913.487307][ T8587] loop0: detected capacity change from 0 to 256
[  913.563549][ T8587] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2005'.
[  913.844252][ T8594] loop3: detected capacity change from 0 to 4096
[  913.925518][ T8596] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  913.955898][ T8596] loop1: detected capacity change from 0 to 256
[  913.982434][ T8594] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  914.149060][ T8596] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d)
[  914.232829][ T8598] loop2: detected capacity change from 0 to 4096
[  914.253366][ T1400] Buffer I/O error on dev loop4, logical block 1027, lost async page write
[  914.262127][ T1400] Buffer I/O error on dev loop4, logical block 1031, lost async page write
[  914.333401][ T8600] syz.3.2007[8600] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  914.333710][ T8600] syz.3.2007[8600] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  914.487153][ T8602] loop0: detected capacity change from 0 to 4096
[  914.594939][ T8602] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  914.608537][ T8602] EXT4-fs (loop0): Test dummy encryption mode enabled
[  914.620428][ T8598] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  914.674473][ T8602] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  914.805100][ T8607] loop4: detected capacity change from 0 to 4096
[  914.836849][ T8611] syz.2.2008[8611] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  914.836928][ T8611] syz.2.2008[8611] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  914.872444][ T8607] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  915.074817][ T8615] syz.4.2010[8615] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  915.074896][ T8615] syz.4.2010[8615] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  915.114574][ T8609] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  915.137615][ T8609] loop1: detected capacity change from 0 to 256
[  915.150109][ T8618] loop3: detected capacity change from 0 to 256
[  915.158233][ T8620] loop2: detected capacity change from 0 to 128
[  915.178717][ T8620] FAT-fs (loop2): Directory bread(block 32) failed
[  915.185524][ T8620] FAT-fs (loop2): Directory bread(block 33) failed
[  915.192371][ T8620] FAT-fs (loop2): Directory bread(block 34) failed
[  915.212321][ T8609] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d)
[  915.227352][ T8620] FAT-fs (loop2): Directory bread(block 35) failed
[  915.238577][ T8620] FAT-fs (loop2): Directory bread(block 36) failed
[  915.245168][ T8620] FAT-fs (loop2): Directory bread(block 37) failed
[  915.255978][ T8620] FAT-fs (loop2): Directory bread(block 38) failed
[  915.265758][ T8620] FAT-fs (loop2): Directory bread(block 39) failed
[  915.276590][ T8620] FAT-fs (loop2): Directory bread(block 40) failed
[  915.286280][ T8620] FAT-fs (loop2): Directory bread(block 41) failed
[  915.343799][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2013'.
[  915.354022][ T8620] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2013'.
[  915.479589][  T597] Buffer I/O error on dev loop2, logical block 1027, lost async page write
[  915.488594][  T597] Buffer I/O error on dev loop2, logical block 1031, lost async page write
[  915.627618][ T8623] loop2: detected capacity change from 0 to 4096
[  915.670068][ T8623] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  915.690908][ T8627] loop4: detected capacity change from 0 to 512
[  915.739683][ T8627] EXT4-fs (loop4): Ignoring removed oldalloc option
[  915.773690][ T8627] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.2015: dx entry: limit 1024 != root limit 124
[  915.785852][ T8627] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2015: Corrupt directory, running e2fsck is recommended
[  915.800058][ T8627] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  915.809322][ T8627] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.2015: corrupted in-inode xattr
[  915.822234][ T8627] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.2015: couldn't read orphan inode 15 (err -117)
[  915.823533][ T8634] loop1: detected capacity change from 0 to 256
[  915.834710][ T8627] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,journal_ioprio=0x0000000000000000,jqfmt=vfsv1,oldalloc,noquota,grpjquota=.usrquota,usrjquota=,grpid,delalloc,,,errors=continue. Quota mode: writeback.
[  915.914432][ T8627] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.2015: dx entry: limit 1024 != root limit 124
[  915.981206][ T8627] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2015: Corrupt directory, running e2fsck is recommended
[  916.392039][ T8640] loop3: detected capacity change from 0 to 256
[  916.404898][ T8640] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d)
[  916.606047][ T8642] loop4: detected capacity change from 0 to 512
[  916.768850][ T8642] EXT4-fs (loop4): Ignoring removed nobh option
[  916.843893][ T8642] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2019: bg 0: block 248: padding at end of block bitmap is not set
[  916.891809][ T8648] loop1: detected capacity change from 0 to 4096
[  916.917325][ T8642] Quota error (device loop4): write_blk: dquota write failed
[  916.932017][ T8648] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  916.948347][ T8642] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  916.982139][ T8652] loop2: detected capacity change from 0 to 4096
[  916.991228][ T8642] EXT4-fs error (device loop4): ext4_acquire_dquot:6200: comm syz.4.2019: Failed to acquire dquot type 1
[  917.003952][ T8642] EXT4-fs (loop4): 1 truncate cleaned up
[  917.009850][ T8642] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  917.026651][ T8642] ext4 filesystem being mounted at /401/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  917.168331][ T8656] syz.1.2022[8656] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  917.168707][ T8656] syz.1.2022[8656] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  917.294910][ T8652] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  918.003735][ T8660] loop3: detected capacity change from 0 to 256
[  918.172006][ T8660] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  918.341527][ T8662] loop0: detected capacity change from 0 to 4096
[  918.449272][ T8652] syz.2.2023[8652] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  918.449352][ T8652] syz.2.2023[8652] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  918.773738][ T8667] loop1: detected capacity change from 0 to 256
[  918.806269][ T8662] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  918.929019][ T8675] loop3: detected capacity change from 0 to 256
[  919.631828][ T8682] loop1: detected capacity change from 0 to 512
[  919.674992][ T8682] EXT4-fs (loop1): Ignoring removed oldalloc option
[  919.772956][ T8682] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.2029: dx entry: limit 1024 != root limit 124
[  919.785306][ T8682] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.2029: Corrupt directory, running e2fsck is recommended
[  919.801307][ T8682] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  919.811064][ T8682] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.2029: corrupted in-inode xattr
[  919.824222][ T8682] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.2029: couldn't read orphan inode 15 (err -117)
[  919.836879][ T8682] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,journal_ioprio=0x0000000000000000,jqfmt=vfsv1,oldalloc,noquota,grpjquota=.usrquota,usrjquota=,grpid,delalloc,,,errors=continue. Quota mode: writeback.
[  919.916517][ T8682] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.2029: dx entry: limit 1024 != root limit 124
[  919.928768][ T8682] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.2029: Corrupt directory, running e2fsck is recommended
[  920.039431][ T8688] __nla_validate_parse: 3 callbacks suppressed
[  920.039449][ T8688] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2032'.
[  920.095927][ T8691] loop4: detected capacity change from 0 to 512
[  920.178509][ T8696] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  920.190533][ T8696] loop2: detected capacity change from 0 to 256
[  921.622641][ T8701] loop0: detected capacity change from 0 to 4096
[  921.637329][ T8691] EXT4-fs (loop4): Ignoring removed nobh option
[  921.646518][ T8696] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d)
[  921.693461][ T8701] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  921.717673][ T8691] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2030: bg 0: block 248: padding at end of block bitmap is not set
[  921.733378][ T8691] Quota error (device loop4): write_blk: dquota write failed
[  921.741109][ T8691] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  921.751864][ T8691] EXT4-fs error (device loop4): ext4_acquire_dquot:6200: comm syz.4.2030: Failed to acquire dquot type 1
[  921.764385][ T8691] EXT4-fs (loop4): 1 truncate cleaned up
[  921.770393][ T8691] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  921.788887][ T8691] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  921.871172][ T8707] loop3: detected capacity change from 0 to 128
[  921.949558][ T8707] FAT-fs (loop3): Directory bread(block 32) failed
[  922.023838][ T8707] FAT-fs (loop3): Directory bread(block 33) failed
[  922.115944][ T8707] FAT-fs (loop3): Directory bread(block 34) failed
[  922.267691][ T8707] FAT-fs (loop3): Directory bread(block 35) failed
[  922.344918][ T8707] FAT-fs (loop3): Directory bread(block 36) failed
[  922.898981][ T8707] FAT-fs (loop3): Directory bread(block 37) failed
[  922.918638][ T8713] loop1: detected capacity change from 0 to 256
[  922.925411][ T8707] FAT-fs (loop3): Directory bread(block 38) failed
[  922.932963][ T8707] FAT-fs (loop3): Directory bread(block 39) failed
[  922.940415][ T8707] FAT-fs (loop3): Directory bread(block 40) failed
[  922.947022][ T8707] FAT-fs (loop3): Directory bread(block 41) failed
[  923.071074][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2036'.
[  923.078298][ T8719] loop2: detected capacity change from 0 to 4096
[  923.095869][ T8707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2036'.
[  923.109042][ T8719] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  923.117038][ T8719] EXT4-fs (loop2): Test dummy encryption mode enabled
[  923.200431][ T8721] loop0: detected capacity change from 0 to 256
[  923.276811][ T8721] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  923.406743][ T8719] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  923.940698][ T8726] loop1: detected capacity change from 0 to 4096
[  924.071422][ T8726] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  925.229149][ T8733] loop4: detected capacity change from 0 to 4096
[  925.240472][ T8733] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  925.305999][ T8737] bpf_get_probe_write_proto: 2 callbacks suppressed
[  925.306029][ T8737] syz.1.2041[8737] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  925.313098][ T8737] syz.1.2041[8737] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  925.550558][ T8743] loop0: detected capacity change from 0 to 512
[  925.669247][ T8744] loop3: detected capacity change from 0 to 256
[  925.711747][ T8744] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2042'.
[  925.721488][ T8746] syz.4.2043[8746] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  925.721569][ T8746] syz.4.2043[8746] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  925.790001][ T8743] EXT4-fs (loop0): Ignoring removed nobh option
[  925.850348][ T8743] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2044: bg 0: block 248: padding at end of block bitmap is not set
[  925.865079][ T8743] Quota error (device loop0): write_blk: dquota write failed
[  925.873759][ T8743] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  925.884072][ T8743] EXT4-fs error (device loop0): ext4_acquire_dquot:6200: comm syz.0.2044: Failed to acquire dquot type 1
[  925.897015][ T8743] EXT4-fs (loop0): 1 truncate cleaned up
[  925.903127][ T8743] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  925.920083][ T8743] ext4 filesystem being mounted at /419/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  926.135573][ T8752] loop1: detected capacity change from 0 to 512
[  926.146371][ T8754] loop4: detected capacity change from 0 to 1024
[  926.171939][ T8752] EXT4-fs (loop1): Ignoring removed nobh option
[  926.232225][ T8754] EXT4-fs (loop4): Ignoring removed bh option
[  926.268846][ T8752] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2046: bg 0: block 248: padding at end of block bitmap is not set
[  926.283554][ T8752] Quota error (device loop1): write_blk: dquota write failed
[  926.291083][ T8752] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  926.301158][ T8752] EXT4-fs error (device loop1): ext4_acquire_dquot:6200: comm syz.1.2046: Failed to acquire dquot type 1
[  926.314279][ T8754] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,block_validity,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000006,bh,init_itable,. Quota mode: none.
[  926.321405][ T8759] loop2: detected capacity change from 0 to 4096
[  926.339831][ T8752] EXT4-fs (loop1): 1 truncate cleaned up
[  926.351182][ T8752] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  926.588081][ T8752] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  926.604680][ T8759] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  927.346047][ T8767] loop3: detected capacity change from 0 to 1024
[  927.923458][ T8767] EXT4-fs (loop3): Ignoring removed bh option
[  928.068271][ T8767] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,block_validity,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000006,bh,init_itable,. Quota mode: none.
[  928.368545][ T8778] loop0: detected capacity change from 0 to 256
[  928.476830][ T8778] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  929.387303][   T30] audit: type=1400 audit(1760557382.921:293): avc:  denied  { create } for  pid=8787 comm="syz.2.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  929.449593][   T30] audit: type=1400 audit(1760557382.961:294): avc:  denied  { name_bind } for  pid=8789 comm="syz.2.2056" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  929.473438][   T30] audit: type=1400 audit(1760557382.961:295): avc:  denied  { node_bind } for  pid=8789 comm="syz.2.2056" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  929.488057][ T8798] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  929.514127][ T8800] tipc: Started in network mode
[  929.522720][   T30] audit: type=1400 audit(1760557383.061:296): avc:  denied  { write } for  pid=8795 comm="syz.4.2059" name="ip6_flowlabel" dev="proc" ino=4026532691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  929.546224][   T30] audit: type=1400 audit(1760557383.141:297): avc:  denied  { name_bind } for  pid=8801 comm="syz.4.2062" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  929.555480][ T8800] tipc: Node identity f65ab48faf7f, cluster identity 4711
[  929.582542][ T8800] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  929.591465][   T30] audit: type=1400 audit(1760557383.211:298): avc:  denied  { ioctl } for  pid=8799 comm="syz.1.2060" path="socket:[37834]" dev="sockfs" ino=37834 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  929.596617][ T8807] device syzkaller0 entered promiscuous mode
[  929.709434][ T8807] tipc: Resetting bearer <eth:syzkaller0>
[  929.764748][ T8828] bridge0: port 2(bridge_slave_1) entered disabled state
[  929.772031][ T8828] bridge0: port 1(bridge_slave_0) entered disabled state
[  930.138908][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2084'.
[  930.237263][   T39] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  930.319212][ T8799] tipc: Resetting bearer <eth:syzkaller0>
[  930.326658][ T8799] tipc: Disabling bearer <eth:syzkaller0>
[  930.577710][ T8888] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  930.607370][   T39] usb 1-1: config index 0 descriptor too short (expected 45, got 36)
[  930.609034][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.623020][   T39] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  930.623149][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.634145][   T39] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  930.641509][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.655295][   T39] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  930.662030][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.670879][   T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  930.678309][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.687527][   T39] usb 1-1: config 0 descriptor??
[  930.693614][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.705998][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.713478][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.720947][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.727391][ T8843] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  930.728425][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.742762][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.750209][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.757872][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.765516][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.768455][   T39] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  930.773402][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.787932][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.795468][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.803000][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.810449][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.818136][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.825552][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.832996][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.840456][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.853252][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.860724][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.868155][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.875569][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.883449][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.891014][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.898584][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.905985][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.918521][    T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  930.927560][    T6] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID vffffff.ff Device [syz0] on syz0
[  930.940103][   T30] kauditd_printk_skb: 27 callbacks suppressed
[  930.940120][   T30] audit: type=1400 audit(1760557384.561:326): avc:  denied  { write } for  pid=8895 comm="syz.3.2095" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  930.982796][   T30] audit: type=1400 audit(1760557384.591:327): avc:  denied  { open } for  pid=8895 comm="syz.3.2095" path="/dev/input/event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  931.020039][   T30] audit: type=1400 audit(1760557384.591:328): avc:  denied  { ioctl } for  pid=8895 comm="syz.3.2095" path="/dev/input/event0" dev="devtmpfs" ino=256 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  931.036398][ T8897] fido_id[8897]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  931.128615][ T8910] process 'syz.4.2100' launched '/dev/fd/4' with NULL argv: empty string added
[  931.138708][ T8903] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  931.146763][ T8903] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  931.165343][   T30] audit: type=1400 audit(1760557384.781:329): avc:  denied  { execute } for  pid=8907 comm="syz.4.2100" dev="tmpfs" ino=2870 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  931.207285][   T30] audit: type=1400 audit(1760557384.781:330): avc:  denied  { nosuid_transition } for  pid=8907 comm="syz.4.2100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1
[  931.286505][ T8915] APIC base relocation is unsupported by KVM
[  931.289888][   T30] audit: type=1400 audit(1760557384.781:331): avc:  denied  { transition } for  pid=8907 comm="syz.4.2100" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=2870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1
[  931.339358][   T30] audit: type=1400 audit(1760557384.781:332): avc:  denied  { entrypoint } for  pid=8907 comm="syz.4.2100" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=2870 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  931.393588][   T30] audit: type=1400 audit(1760557384.781:333): avc:  denied  { share } for  pid=8907 comm="syz.4.2100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1
[  931.467488][   T30] audit: type=1400 audit(1760557384.781:334): avc:  denied  { noatsecure } for  pid=8907 comm="syz.4.2100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1
[  931.502099][   T30] audit: type=1400 audit(1760557384.821:335): avc:  denied  { write } for  pid=8912 comm="syz.2.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  931.599929][ T8941] binder: 8940:8941 ioctl 4018620d 0 returned -22
[  931.710698][ T8948] SELinux: failed to load policy
[  932.052519][ T8961] loop4: detected capacity change from 0 to 40427
[  932.101223][ T8961] F2FS-fs (loop4): Unrecognized mount option "age_extent_cache" or missing value
[  932.836734][ T8993] loop1: detected capacity change from 0 to 40427
[  932.883362][ T8993] F2FS-fs (loop1): fault_injection options not supported
[  932.890887][ T8993] F2FS-fs (loop1): fault_type options not supported
[  932.908870][ T8993] F2FS-fs (loop1): invalid crc value
[  932.924009][ T8993] F2FS-fs (loop1): Found nat_bits in checkpoint
[  932.964051][ T8993] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  932.982758][   T39] usb 1-1: USB disconnect, device number 18
[  933.023811][ T8993] handle_bad_sector: 9 callbacks suppressed
[  933.023837][ T8993] attempt to access beyond end of device
[  933.023837][ T8993] loop1: rw=2049, want=45192, limit=40427
[  933.078649][  T282] attempt to access beyond end of device
[  933.078649][  T282] loop1: rw=2049, want=45200, limit=40427
[  933.112664][ T9004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2139'.
[  933.113868][  T844] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  933.143353][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2139'.
[  933.201394][ T9007] loop2: detected capacity change from 0 to 7
[  933.208583][ T9007]  loop2:
[  933.249181][ T9011] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2142'.
[  933.296652][ T9017] ==================================================================
[  933.304783][ T9017] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x870/0x3240
[  933.313070][ T9017] Read of size 8 at addr ffff888117a3b6c0 by task syz.1.2138/9017
[  933.320901][ T9017] 
[  933.323258][ T9017] CPU: 1 PID: 9017 Comm: syz.1.2138 Not tainted syzkaller #0
[  933.330652][ T9017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  933.340746][ T9017] Call Trace:
[  933.344044][ T9017]  <TASK>
[  933.346991][ T9017]  __dump_stack+0x21/0x30
[  933.351403][ T9017]  dump_stack_lvl+0xee/0x150
[  933.356024][ T9017]  ? show_regs_print_info+0x20/0x20
[  933.361253][ T9017]  ? load_image+0x3a0/0x3a0
[  933.365778][ T9017]  print_address_description+0x7f/0x2c0
[  933.371347][ T9017]  ? tc_setup_flow_action+0x870/0x3240
[  933.376820][ T9017]  kasan_report+0xf1/0x140
[  933.381343][ T9017]  ? tc_setup_flow_action+0x870/0x3240
[  933.386805][ T9017]  __asan_report_load8_noabort+0x14/0x20
[  933.392445][ T9017]  tc_setup_flow_action+0x870/0x3240
[  933.397741][ T9017]  mall_replace_hw_filter+0x293/0x820
[  933.403195][ T9017]  ? pcpu_block_update_hint_alloc+0x8c1/0xc50
[  933.409346][ T9017]  ? mall_set_parms+0x520/0x520
[  933.414203][ T9017]  ? tcf_exts_destroy+0xb0/0xb0
[  933.419088][ T9017]  ? mall_set_parms+0x1e8/0x520
[  933.423950][ T9017]  mall_change+0x526/0x740
[  933.428369][ T9017]  ? __kasan_check_write+0x14/0x20
[  933.433486][ T9017]  ? mall_get+0xa0/0xa0
[  933.437653][ T9017]  ? tcf_chain_tp_insert_unique+0xac1/0xc10
[  933.443571][ T9017]  tc_new_tfilter+0x12a2/0x1870
[  933.448438][ T9017]  ? tcf_gate_entry_destructor+0x20/0x20
[  933.454098][ T9017]  ? security_capable+0x87/0xb0
[  933.459067][ T9017]  ? ns_capable+0x8c/0xf0
[  933.463457][ T9017]  ? netlink_net_capable+0x125/0x160
[  933.468785][ T9017]  ? tcf_gate_entry_destructor+0x20/0x20
[  933.474643][ T9017]  rtnetlink_rcv_msg+0x81b/0xb90
[  933.479666][ T9017]  ? rtnetlink_bind+0x80/0x80
[  933.484349][ T9017]  ? memcpy+0x56/0x70
[  933.488335][ T9017]  ? avc_has_perm_noaudit+0x2f4/0x460
[  933.493757][ T9017]  ? arch_stack_walk+0xee/0x140
[  933.498662][ T9017]  ? avc_denied+0x1b0/0x1b0
[  933.503167][ T9017]  ? stack_trace_save+0x98/0xe0
[  933.508070][ T9017]  ? avc_has_perm+0x158/0x240
[  933.512808][ T9017]  ? avc_has_perm_noaudit+0x460/0x460
[  933.518218][ T9017]  ? x64_sys_call+0x4b/0x9a0
[  933.522828][ T9017]  ? selinux_nlmsg_lookup+0x416/0x4c0
[  933.528243][ T9017]  netlink_rcv_skb+0x1e0/0x430
[  933.533015][ T9017]  ? rtnetlink_bind+0x80/0x80
[  933.537700][ T9017]  ? netlink_ack+0xb60/0xb60
[  933.542454][ T9017]  ? __netlink_lookup+0x387/0x3b0
[  933.547495][ T9017]  rtnetlink_rcv+0x1c/0x20
[  933.551921][ T9017]  netlink_unicast+0x876/0xa40
[  933.556704][ T9017]  netlink_sendmsg+0x86a/0xb70
[  933.561493][ T9017]  ? netlink_getsockopt+0x530/0x530
[  933.566702][ T9017]  ? security_socket_sendmsg+0x82/0xa0
[  933.572170][ T9017]  ? netlink_getsockopt+0x530/0x530
[  933.577374][ T9017]  ____sys_sendmsg+0x5a2/0x8c0
[  933.582261][ T9017]  ? __sys_sendmsg_sock+0x40/0x40
[  933.587291][ T9017]  ? import_iovec+0x7c/0xb0
[  933.591866][ T9017]  ___sys_sendmsg+0x1f0/0x260
[  933.596553][ T9017]  ? __sys_sendmsg+0x250/0x250
[  933.601323][ T9017]  ? sock_show_fdinfo+0xa0/0xa0
[  933.606266][ T9017]  ? __fdget+0x1a1/0x230
[  933.610566][ T9017]  __x64_sys_sendmsg+0x1e2/0x2a0
[  933.615610][ T9017]  ? ___sys_sendmsg+0x260/0x260
[  933.620590][ T9017]  ? __kasan_check_write+0x14/0x20
[  933.625719][ T9017]  ? switch_fpu_return+0x15d/0x2c0
[  933.630838][ T9017]  x64_sys_call+0x4b/0x9a0
[  933.635263][ T9017]  do_syscall_64+0x4c/0xa0
[  933.639708][ T9017]  ? clear_bhb_loop+0x50/0xa0
[  933.644453][ T9017]  ? clear_bhb_loop+0x50/0xa0
[  933.649129][ T9017]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  933.655077][ T9017] RIP: 0033:0x7f231e2c0ec9
[  933.659510][ T9017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  933.679152][ T9017] RSP: 002b:00007f231cd29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  933.687581][ T9017] RAX: ffffffffffffffda RBX: 00007f231e517fa0 RCX: 00007f231e2c0ec9
[  933.695574][ T9017] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004
[  933.703547][ T9017] RBP: 00007f231e343f91 R08: 0000000000000000 R09: 0000000000000000
[  933.711517][ T9017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  933.719486][ T9017] R13: 00007f231e518038 R14: 00007f231e517fa0 R15: 00007ffead9316b8
[  933.727467][ T9017]  </TASK>
[  933.730588][ T9017] 
[  933.732921][ T9017] Allocated by task 9017:
[  933.737250][ T9017]  __kasan_kmalloc+0xda/0x110
[  933.741944][ T9017]  __kmalloc+0x13d/0x2c0
[  933.746227][ T9017]  tcf_idr_create+0x5f/0x790
[  933.750825][ T9017]  tcf_idr_create_from_flags+0x61/0x70
[  933.756312][ T9017]  tcf_gact_init+0x346/0x580
[  933.761021][ T9017]  tcf_action_init_1+0x3f7/0x6a0
[  933.765989][ T9017]  tcf_action_init+0x1e9/0x710
[  933.770767][ T9017]  tcf_exts_validate+0x217/0x520
[  933.775717][ T9017]  mall_set_parms+0x48/0x520
[  933.780314][ T9017]  mall_change+0x45a/0x740
[  933.784739][ T9017]  tc_new_tfilter+0x12a2/0x1870
[  933.789587][ T9017]  rtnetlink_rcv_msg+0x81b/0xb90
[  933.794528][ T9017]  netlink_rcv_skb+0x1e0/0x430
[  933.799293][ T9017]  rtnetlink_rcv+0x1c/0x20
[  933.803711][ T9017]  netlink_unicast+0x876/0xa40
[  933.808481][ T9017]  netlink_sendmsg+0x86a/0xb70
[  933.813338][ T9017]  ____sys_sendmsg+0x5a2/0x8c0
[  933.818104][ T9017]  ___sys_sendmsg+0x1f0/0x260
[  933.822803][ T9017]  __x64_sys_sendmsg+0x1e2/0x2a0
[  933.827747][ T9017]  x64_sys_call+0x4b/0x9a0
[  933.832256][ T9017]  do_syscall_64+0x4c/0xa0
[  933.836680][ T9017]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  933.842582][ T9017] 
[  933.844902][ T9017] The buggy address belongs to the object at ffff888117a3b600
[  933.844902][ T9017]  which belongs to the cache kmalloc-192 of size 192
[  933.858951][ T9017] The buggy address is located 0 bytes to the right of
[  933.858951][ T9017]  192-byte region [ffff888117a3b600, ffff888117a3b6c0)
[  933.872576][ T9017] The buggy address belongs to the page:
[  933.878203][ T9017] page:ffffea00045e8ec0 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888117a3b000 pfn:0x117a3b
[  933.889760][ T9017] flags: 0x4000000000000200(slab|zone=1)
[  933.895414][ T9017] raw: 4000000000000200 ffffea000476c840 0000000c0000000c ffff888100042c00
[  933.904007][ T9017] raw: ffff888117a3b000 000000008010000f 00000001ffffffff 0000000000000000
[  933.912591][ T9017] page dumped because: kasan: bad access detected
[  933.919006][ T9017] page_owner tracks the page as allocated
[  933.924718][ T9017] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5309, ts 535025354672, free_ts 533646672952
[  933.940870][ T9017]  post_alloc_hook+0x192/0x1b0
[  933.945722][ T9017]  prep_new_page+0x1c/0x110
[  933.950234][ T9017]  get_page_from_freelist+0x2cc5/0x2d50
[  933.955787][ T9017]  __alloc_pages+0x18f/0x440
[  933.960377][ T9017]  new_slab+0xa1/0x4d0
[  933.964446][ T9017]  ___slab_alloc+0x381/0x810
[  933.969038][ T9017]  __slab_alloc+0x49/0x90
[  933.973370][ T9017]  kmem_cache_alloc_trace+0x146/0x270
[  933.978744][ T9017]  alloc_pipe_info+0xe7/0x4b0
[  933.983474][ T9017]  splice_direct_to_actor+0x970/0xb30
[  933.988884][ T9017]  do_splice_direct+0x1b3/0x2c0
[  933.993742][ T9017]  do_sendfile+0x5c6/0xeb0
[  933.998161][ T9017]  __x64_sys_sendfile64+0x18f/0x1f0
[  934.003360][ T9017]  x64_sys_call+0x88d/0x9a0
[  934.007863][ T9017]  do_syscall_64+0x4c/0xa0
[  934.012284][ T9017]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  934.018180][ T9017] page last free stack trace:
[  934.022848][ T9017]  free_unref_page_prepare+0x542/0x550
[  934.028307][ T9017]  free_unref_page+0xa2/0x550
[  934.032989][ T9017]  __free_pages+0x6c/0x100
[  934.037410][ T9017]  free_pages+0x82/0x90
[  934.041566][ T9017]  tlb_finish_mmu+0x248/0x300
[  934.046248][ T9017]  exit_mmap+0x40f/0x860
[  934.050487][ T9017]  __mmput+0x93/0x320
[  934.054555][ T9017]  mmput+0x50/0x150
[  934.058361][ T9017]  do_exit+0x9d2/0x27a0
[  934.062518][ T9017]  do_group_exit+0x141/0x310
[  934.067105][ T9017]  __x64_sys_exit_group+0x3f/0x40
[  934.072127][ T9017]  x64_sys_call+0x832/0x9a0
[  934.076629][ T9017]  do_syscall_64+0x4c/0xa0
[  934.081044][ T9017]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  934.086940][ T9017] 
[  934.089261][ T9017] Memory state around the buggy address:
[  934.094913][ T9017]  ffff888117a3b580: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc
[  934.102978][ T9017]  ffff888117a3b600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  934.111048][ T9017] >ffff888117a3b680: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  934.119104][ T9017]                                            ^
[  934.125251][ T9017]  ffff888117a3b700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  934.133306][ T9017]  ffff888117a3b780: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc
[  934.141358][ T9017] ==================================================================
[  934.149411][ T9017] Disabling lock debugging due to kernel taint
[  934.166184][ T9015] loop4: detected capacity change from 0 to 1024
[  934.217890][ T9015] EXT4-fs (loop4): Ignoring removed oldalloc option
[  934.278823][ T9015] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,errors=remount-ro,oldalloc,barrier,auto_da_alloc,nodioread_nolock,. Quota mode: none.
[  934.295606][ T9015] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  934.325587][ T9015] EXT4-fs error (device loop4): ext4_map_blocks:740: inode #15: comm syz.4.2144: lblock 0 mapped to illegal pblock 0 (length 6)
[  934.339678][ T9015] EXT4-fs (loop4): Remounting filesystem read-only
[  934.349024][  T844] usb 3-1: Using ep0 maxpacket: 32
[  934.647361][  T844] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[  934.656555][  T844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  934.664576][  T844] usb 3-1: Product: syz
[  934.668779][  T844] usb 3-1: Manufacturer: syz
[  934.673363][  T844] usb 3-1: SerialNumber: syz
[  934.679001][  T844] usb 3-1: config 0 descriptor??
[  935.089832][  T844] usb 3-1: USB disconnect, device number 23