last executing test programs:

1m17.319856681s ago: executing program 2 (id=416):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\a'], 0x48}, 0x300}, 0x8040)

1m17.102351028s ago: executing program 2 (id=417):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x80}}, 0x0, 0x8, 0x0, 0x0, 0x8a}, 0x9c)
sendto$inet6(r0, &(0x7f0000000100)="48fa7d7bd3cf5e1988a5d66b91e746d70cbf787ac7262445a2790332824b96948927732e4f704e547e04626941ea2f", 0x2f, 0x80, &(0x7f00000002c0)={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x42}, 0x7}, 0x1c)

1m16.115341551s ago: executing program 2 (id=421):
syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004480)='./file0\x00', 0x10040, &(0x7f00000000c0)={[{@journal_async_commit}, {@noacl}, {@coherency_full}, {@heartbeat_none}, {@journal_async_commit}, {@user_xattr}]}, 0x1, 0x444c, &(0x7f000000cd40)="$eJzs109vHGcdB/DfjO147dhhAzkYwcESSESAjO0TggMg/kSREI4MQQgjWes/SQxrr7HXyIccQMqRQxCcOHOk554q5Q20Ut9A+wLaHtJD2lO32tlZZ8e7G7vt7jpxP5+DZ+d5npnn5/3OzD6T5uoPdg7ndw7nK3vztc17h8vzf6tVj3a3Ix2Ri56f8xlGTrK/OCs//9Vvf78csf9oea3RaDQiIsrR21LH52dPH252btvSU8c0z9vndAPyx4i40VVX01hE/OH1iCQikvyfSvPtVH5Us+9Pf/32P6M0mGr+vv7WzP+Pb//gtXtvfuPZeyuP+w5MIv5b/fr37+++/62xH7/73cHMDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfr1urK3TuLS/EkKWf7+4+W1zr7J8v5h1Lv4xuNoZcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzkbq2u3L2zuBRPkih9OBmx/2h5rbN/vJx/KPc+vvGTERTJ0Nz+zcovfrm4lOXeaCRd/T/Mmz742Vhcj4hnTx9uRmH7zmzn+OTUdXL6espHDaz+dn3tecuRpAuF/TRdWIhIjlv7c8l0Wq0d1r93r3a0tzWwMl5ZxfzTrK2QTqvpBfm3tifDz5X/IH2t62rK9ueGO+tl8Tz/mbVGY6zvuP/9I2nnX4oX5D92Afl/XpMDrePVVLz/x7O24v3UCrSZ/7/Gz77/x0eU/7Xmn1JWa6nzCdBcwzTb+61XKCrmP5G19cu/1/P/41P5T/TO/86/h/Yf9Hn+7w9twkulmP+VrK34fbYWAFn+6dn3/5WX5fd/frizXhbF/Fu/iKcizL7O8z7/J0eUf7ld57Wk6wrI2ksRs8OY+JIp5l/q6n/+/peea/1fuqD3v9Kp97/2e8jNpPX+R2/F/Kf6jjvv/T814ud/a/13DhPDrOLVVcx/Omv7Iuv/6RHln61Keqz/P2mv/4+HMevlU8z/atZWfAo8zv5m67+kO/ePTuV/9SVY/2X13xzurJdFMf+ZvuOa+b99jt//mZHnHzH9mY/oXud8WRXzz1fMb3SPy+7/0tn5z444/+8M8+QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADE1abm3LkaQLhf00XViIGMv352I62ahsrW9Ua5t/OYwYz9vn46vJ/Wpto1Jd39mrbW2vV6rV2mbERN5/I0rJYbVWX9+t7F85OddU8mC7clDf2K7UI2Iyb/9mzLbPtbFT363sR0TppO8rae1g/0Flb31r5+BHi4uLizF1UsP1ZPu4vr1Xb83e6o2YPjm2nHQUl3VfPallJvlz7ehgr1LN2mc6jqnWNivVjmNm877/xPWkfnC0t1mpb69Xa/fb8/U2NZigzvDTfJveXv3d6q+XugfM5f3lkZQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCn7MqhDYNgEAXga1PZDTpEddMFQDECjhkYA8kQMACOBWARPJoQ+A0O/33JJfdeHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC3jP9fGxGvIz0jIkvP47xk72Io53dX59++mj7rUjSXDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYpXfVBIIoDMAzkyKXah8j1bKbKm0gIaTJimBl6QtYWlj6uhZ2ViLKLMi6i1po9X3NXs4czoH5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4ye+4mYyqOoQYXnbPIcxXH9PT+luRXxb9/U8P2JH7+ftvvn+qOt97PKt/5l/rr3SsbjfLWeh5tmInJ9085VOXFxvI29B+7dwixFQevnNu32NKZdnX+XrdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPbswIEAAAAAgCB/6xUGKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIClAAAA//8jspyf")
openat(0xffffffffffffff9c, 0x0, 0x40, 0xd)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x7, 0x40000cca8, 0x80000004})

1m14.577557222s ago: executing program 2 (id=428):
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000280)={[{@nogrpid}, {@bh}, {@bsdgroups}]}, 0x0, 0x52c, &(0x7f0000000640)="$eJzs3d9rY1kdAPBvMv2Rdjrbru7DKuqO6+oowyRtZrcs+6DriyDLssK6TyKzpc2U0qQpTbpua8EO+Oar4IBP+if4IPggzJPvvumbLyMojDo4TAWRyE1uOm2adMq0aWaazwcuOefc2/s9J3DP6T1J7glgaF2NiN2IGIuIjyNiOi3PpFu829qS4x4/3Fnce7izmIlG48N/jqRH7iy2j2+7nJ4zF/FBkh/vEre2tb26UC6XNtJ8oV5ZL9S2tm+sVBaWS8ultWJxfm5+9u2bbxXPrK2vVX7z4Dsr7330+9998f4fd7/x46TO32rtGkvadmaBDmi9L6MxdaAseefe60ewAbiUtmds0BXhmWQj4jMR8Xqa3pcbXJ0AgP5qNKajMX0w31vmBMcAAM+/5J5/KjLZfHr/PxXZbD7fnMPLvRKT2XK1Vr9+u7q5thTNOayZGM3eXimXZtO5wpkYzST5uWb6Sb7Ykb8ZES9HxM/HJ5r5/GK1vDSof3oAYMhd7hj/H423xv8T8AkBALzIjOQAMHyOjv+jA6kHAHB+3P8DwPA5MP53+60uAHAB5Tp++w8AXHwH7v9Huh7wavzkh+dXHQDgHPj8HwCGyvfefz/ZGnvp86+XPtnaXK1+cmOpVFvNVzYX84vVjfX8crW63HxmT+Vp5ytXq+tzb8bmp4V6qVYv1La2b1Wqm2v1W83net8q+WEBAAzey6/d+3MmInbfmWhu0V7LwRcC4MJzmcPwujToCgAD0/37PsAwMB8PZJ6yv+dXhO72/puJU9QH6L9rn+sx/9/tf4M7+6n/Nc6vikCfmP+H4XW6+X+zB/AiM/8Pw6vRyFjPHwCGzAnu4H1FEC64Z/78HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIbYVHPLZPPpWuBTkc3m8xFXImJmYjRze6Vcmo2IlyLiT+Oj40l+btCVBgBOKfv3TLr+17XpN6Y6945l/jPefI2IH/3yw198ulCvb8wl5f/aL6/fTcuLXQOM978NAMABI50F7XG6PY631/d9/HBnsb2dZwUffLu1uGgSdy/d2lVvVT4XoxEx+e/MocZkzmhh4t07EfFqZ/uz+/tn0pVPO+Mnsa/0LX40Wzh1KH72UPxsc1/rNXkvPnsGdYFhcy/pf97tdv1l42rzNb3+Moc701z87Gjn+gza/d9eo7P/a13vH1zJNfuabv3f1ZPGePMP3+25786lxudHIvaO9L/tFaFzzdSR+CMRb3Q74U+/+Wizo+gvX/jS673iN34VcS2Oi99KFeqV9UJta/vGSmVhubRcWisW5+fmZ9+++Vax0JyjLrRnqo/6xzvXX+rd/ojJHvFzx7U/Ir7a66Qdfv3fj3/w5WPif/0r3eJn45Vj4idj4tdOGH9h8rc9l+9O4i/1aP/Iofhjh/4uKbt+wvj3/7q9dMJDAYBzUNvaXl0ol0sbEqdN5Pp15svPSQMleiT+9tGha2rg9TmTxMC6JOCcPLnoB10TAAAAAAAAAAAAAACgl9r300f+9fHHcINuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfX/wMAAP//OkHLZw==")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
move_mount(r0, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x220)

1m13.656312242s ago: executing program 2 (id=433):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000f00)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)="347a696b918264f5000dbcce11976ecdd820faee329291adc38390f3eb9d6b8ff66a879339d960dfd44ec5", 0x2b}, {&(0x7f0000002900)="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", 0x716}], 0x2, 0x0, 0x0, 0x24008842}], 0x1, 0x2044011)

1m13.103099001s ago: executing program 2 (id=437):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000000020000000000a03000000000000000000050000070900010073797a310000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(0x3)

1m12.662604895s ago: executing program 32 (id=437):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000000020000000000a03000000000000000000050000070900010073797a310000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(0x3)

3.389583462s ago: executing program 1 (id=864):
r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$uac3(r0, &(0x7f00000005c0)={0x14, &(0x7f0000000440)={0x0, 0x23, 0x16, {0x16, 0x0, "a6bc6ea5cee9f930919bd0c663371364e6d5efb8"}}, 0x0}, 0x0)
syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0xe, 0x3, {0x3, 0xa, "c3"}}, 0x0}, 0x0)

3.212345867s ago: executing program 3 (id=865):
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
read$FUSE(r0, &(0x7f0000003780)={0x2020}, 0x2020)
write$binfmt_script(r1, &(0x7f0000020480)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xfe24)
write$UHID_INPUT(r1, &(0x7f0000002740)={0x8, {"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", 0x1000}}, 0x1006)

2.932679336s ago: executing program 3 (id=869):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000001f40)=[{{&(0x7f0000001ac0)={0xa, 0x4c20, 0x9, @private0={0xfc, 0x0, '\x00', 0x5}, 0x8001}, 0x1c, &(0x7f0000002100)=[{&(0x7f0000001b00)=')', 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x3, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x5}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000140)='s', 0x1}], 0x1}}], 0x2, 0x4008050)
shutdown(r0, 0x1)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000380)="1a00000009800000", 0x8)

2.757739151s ago: executing program 3 (id=872):
syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000008c0)='./bus\x00', 0x808808, &(0x7f0000000340)=ANY=[], 0x1, 0x2e2, &(0x7f0000000900)="$eJzs3T9v004cx/HPOUmb/lF//rVFSCygQiVYKgoMiCUIZWVnQkCTShVREW2RgIWCGBEPgJ2nwINgAfEEYGLiAXQzuvPZdVLHaaCJ2/J+SQnO+e78NfbF9zUKFoB/1p3m94/Xf9qXkSqqSLolBZLqUlXSGZ2tP9vc2djptFtFHVVcC/syiluaA3XWNtt5TW0718IL7aeqZrNlGI0oim7/cH9EZYeCErnRnyOQJv04dOvrY45rVHal82XHMG7ZA2z2tKfnmisxHADAMeCv/4G/TMy6IqMgkJb9Zf9UXf/3yg7gaN3oHCgqns9nrv9udhcZe3z/c6v28z2Xwtn1QZIlHiaYWs/nCcVnVtcE0wzKKl0swdT6RlUra6/VCvRGDS9TbdG9t+JTNzEg2qWc3LRA/95qujsd742bUfZKQlrf6LQn7UJO/AvDbfHvmc/mq7lvQn1QK53/VSNjD5M7UmHPkQpqNv6r/Xucca1sLfm0v9FoBF1V/ncbOee34A3Yy3p+RpLtM7lBsJtGUBSn2/a8um8rxHu3OqDVQl6rMP3Up9ViV6uKPxNW1p50Cm+ljEayi+a9uWeW9Euf1MzM/wMb37IyI7Poq964mv7MiPdnIr9m+nfT093+cLnQW3NyqP2CN9zdsnd6pJua237x8nGl02lv2YWHOQtPZ7eML6m9lXLrjH6hooI62t0viaxXUXTYnqNRBn/lSDu03x9piR0+eZXtKEtLgnEfplO3YEdKzqrmFxWdkCdnIYqkPqtG9TWF42TbJAfdF0yVHBDGzc67TJz/uZm8n9W5FMm+hQXz9IH/aJTpcTXN4LqngvPufXqoDG6mfwaX2eK1Pjmjy7kuXpYuZQqNCrcY+jhPCdPUNz3g/j8AAAAAAAAAAAAAAAAAAMBJc4Q/J0h+yXhgVcm7CAAAAAAAAAAAAAAAAAAAAADAifdHz//N+z/i3fN/w3E9/7f4yUAADuV3AAAA//+rand4")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000000)='./file1\x00', 0x8000)
truncate(&(0x7f00000000c0)='./file1\x00', 0x6e3)

2.479117111s ago: executing program 3 (id=875):
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x2000000, &(0x7f0000000800)=ANY=[], 0xfe, 0x150e, &(0x7f0000004000)="$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")
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x7040, 0x0)
write$input_event(r0, &(0x7f00000002c0)={{}, 0x14, 0x4a, 0x4}, 0x18)

2.461458471s ago: executing program 4 (id=876):
r0 = syz_io_uring_setup(0x239, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040), &(0x7f0000000600), &(0x7f0000000000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x47ba, 0x100, 0x5, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x1, {0x7, 0xa44}, 0x80}, 0x1)

1.938930648s ago: executing program 3 (id=878):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x28, 0x1, 0x0)
getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@delchain={0x34, 0x2e, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {0x5, 0x3}, {0xfff2, 0x10}, {0xc, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0)

1.712068455s ago: executing program 3 (id=880):
r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, &(0x7f00000001c0)=ANY=[], 0x0}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000300)={0x14, &(0x7f00000001c0)={0x20, 0x5, 0x23, {0x23, 0xc, "6ba1d9ee8ad8abaebfc5dcb18df0b23cd3651d1dc4519efd1431948d8a2bec1f81"}}, 0x0}, 0x0)

1.175118392s ago: executing program 4 (id=882):
timer_create(0x9, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

1.105189784s ago: executing program 0 (id=883):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @local, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000180)=[{0x18, 0x29, 0x3, 'W'}], 0x18}}], 0x1, 0x24008000)

978.587169ms ago: executing program 1 (id=884):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x174, 0x0, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_EXPECT_NAT={0xfc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

978.320209ms ago: executing program 4 (id=885):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

893.699721ms ago: executing program 0 (id=886):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0)
recvmmsg$unix(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/207, 0xcf}, {&(0x7f0000004840)=""/215, 0xd7}, {&(0x7f0000000980)=""/265, 0x109}, {&(0x7f0000004b00)=""/176, 0xb0}, {&(0x7f0000004c00)=""/4096, 0x1000}, {0x0}], 0x6}}], 0x1, 0x0, 0x0)
write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)

799.711085ms ago: executing program 1 (id=887):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000001940))

791.182395ms ago: executing program 4 (id=888):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0)

713.490287ms ago: executing program 0 (id=889):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000005880)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0)

659.881479ms ago: executing program 1 (id=890):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x1c)
syz_emit_ethernet(0x42, &(0x7f0000000540)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0xc, 0x11, 0x0, @local, @ipv4={'\x00', '\xff\xff', @loopback}, {[], {0x4e1d, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x100, @void}}}}}}}}, 0x0)

556.395702ms ago: executing program 1 (id=891):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

514.828754ms ago: executing program 0 (id=892):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc4001}]})
r0 = fsopen(&(0x7f0000004900)='tmpfs\x00', 0x1)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000004940)='inode32', &(0x7f0000004980)="9c", 0x1)
readv(r0, 0x0, 0x0)

379.964658ms ago: executing program 4 (id=893):
r0 = fsopen(&(0x7f0000000980)='ocfs2_dlmfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x8e)
mknodat$loop(r1, &(0x7f0000000000)='./file0\x00', 0x80, 0x1)

363.902508ms ago: executing program 1 (id=894):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
modify_ldt$write2(0x11, 0x0, 0x0)

301.04293ms ago: executing program 0 (id=895):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
open(&(0x7f0000000180)='./file0\x00', 0x410083, 0x2)
open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28)
rmdir(&(0x7f0000000000)='./file0\x00')

60.066838ms ago: executing program 0 (id=896):
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000000)={0x200002, 0x200003, 0x801, 0x4, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}]})

0s ago: executing program 4 (id=897):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30002054)

kernel console output (not intermixed with test programs):

_slave_1) entered blocking state
[   86.744786][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.917853][   T51] Bluetooth: hci1: command tx timeout
[   86.917864][ T5788] Bluetooth: hci0: command tx timeout
[   86.998737][   T51] Bluetooth: hci2: command tx timeout
[   87.001417][ T5788] Bluetooth: hci3: command tx timeout
[   87.136937][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.283131][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.321714][ T5776] veth0_vlan: entered promiscuous mode
[   87.378812][ T5776] veth1_vlan: entered promiscuous mode
[   87.481836][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.569089][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.581023][ T5774] veth0_vlan: entered promiscuous mode
[   87.611236][ T5776] veth0_macvtap: entered promiscuous mode
[   87.663365][ T5774] veth1_vlan: entered promiscuous mode
[   87.681150][ T5776] veth1_macvtap: entered promiscuous mode
[   87.760916][ T5777] veth0_vlan: entered promiscuous mode
[   87.781879][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.800324][ T5775] veth0_vlan: entered promiscuous mode
[   87.822976][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.853870][ T5774] veth0_macvtap: entered promiscuous mode
[   87.866126][ T5777] veth1_vlan: entered promiscuous mode
[   87.882156][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.893520][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.903663][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.914132][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.943149][ T5774] veth1_macvtap: entered promiscuous mode
[   87.964495][ T5775] veth1_vlan: entered promiscuous mode
[   88.030705][ T5777] veth0_macvtap: entered promiscuous mode
[   88.074322][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.090274][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.113011][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.152080][ T5777] veth1_macvtap: entered promiscuous mode
[   88.188947][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.213918][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.233209][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.263441][ T5775] veth0_macvtap: entered promiscuous mode
[   88.272441][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.283415][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.295730][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.305481][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.338378][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.349298][ T5775] veth1_macvtap: entered promiscuous mode
[   88.357007][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.380345][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.393989][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.405868][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.417109][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.430557][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.467907][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.479854][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.491112][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.503125][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.517003][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.560884][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.585759][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.593377][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.610263][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.621771][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.632504][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.685192][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.700962][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.712933][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.724494][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.736451][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.749807][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.777567][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.860991][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.886916][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.899823][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.912984][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.924570][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.936485][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.949309][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.959439][ T1073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.969713][ T1073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.997819][ T5788] Bluetooth: hci1: command tx timeout
[   89.008774][ T5788] Bluetooth: hci0: command tx timeout
[   89.026230][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.037385][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.047114][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.066031][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.078310][ T5788] Bluetooth: hci2: command tx timeout
[   89.078929][   T51] Bluetooth: hci3: command tx timeout
[   89.117446][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.126663][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.137937][ T5846] syz.3.5[5846]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   89.203252][ T1073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.213068][ T1073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.271669][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.318289][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.337117][ T5846] loop3: detected capacity change from 0 to 8192
[   89.379976][ T5846] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   89.396337][ T5846] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[   89.408513][ T5846] REISERFS (device loop3): using ordered data mode
[   89.416248][ T5846] reiserfs: using flush barriers
[   89.448363][ T5846] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   89.468441][ T5846] REISERFS (device loop3): checking transaction log (loop3)
[   89.588375][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.606560][ T5849] capability: warning: `syz.0.1' uses deprecated v2 capabilities in a way that may be insecure
[   89.631984][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.788549][ T1073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.812735][ T5846] REISERFS (device loop3): Using tea hash to sort names
[   89.830915][ T5846] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[   89.837790][ T1073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.341130][ T5857] loop0: detected capacity change from 0 to 8192
[   90.405206][ T5857] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   90.438943][ T5857] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   90.451228][ T5857] REISERFS (device loop0): using ordered data mode
[   90.458950][ T5857] reiserfs: using flush barriers
[   90.468049][ T5857] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   90.509821][ T5857] REISERFS (device loop0): checking transaction log (loop0)
[   90.581821][ T5864] loop1: detected capacity change from 0 to 4096
[   90.749391][ T5866] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   90.933619][ T5870] Illegal XDP return value 4294967274 on prog  (id 2) dev N/A, expect packet loss!
[   90.985136][ T5857] REISERFS (device loop0): Using tea hash to sort names
[   91.007052][ T5857] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[   91.077824][   T51] Bluetooth: hci0: command tx timeout
[   91.078070][ T5788] Bluetooth: hci1: command tx timeout
[   91.157838][ T5788] Bluetooth: hci2: command tx timeout
[   91.158087][   T51] Bluetooth: hci3: command tx timeout
[   91.692771][ T5881] loop2: detected capacity change from 0 to 1024
[   91.763453][ T5885] =======================================================
[   91.763453][ T5885] WARNING: The mand mount option has been deprecated and
[   91.763453][ T5885]          and is ignored by this kernel. Remove the mand
[   91.763453][ T5885]          option from the mount to silence this warning.
[   91.763453][ T5885] =======================================================
[   92.375719][   T27] cfg80211: failed to load regulatory.db
[   92.734142][ T5908] loop2: detected capacity change from 0 to 64
[   94.047730][ T5934] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   94.349260][ T5945] loop9: detected capacity change from 0 to 7
[   94.402220][   T12] loop: Write error at byte offset 4, length 3584.
[   94.421358][ T5945] Dev loop9: unable to read RDB block 7
[   94.438899][ T5945]  loop9: unable to read partition table
[   94.460829][    C1] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[   94.470097][ T5945] loop9: partition table beyond EOD, truncated
[   94.471852][    C1] Buffer I/O error on dev loop9, logical block 0, lost async page write
[   94.494324][ T5945] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5)
[   94.778200][   T27] IPVS: starting estimator thread 0...
[   94.907417][ T5961] IPVS: using max 19 ests per chain, 45600 per kthread
[   95.253857][ T5976] loop3: detected capacity change from 0 to 512
[   95.292597][ T1191] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   95.401122][ T5976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.475333][ T5976] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.498443][ T1191] usb 1-1: Using ep0 maxpacket: 32
[   95.510260][ T1191] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[   95.520546][ T1191] usb 1-1: config 0 has no interface number 0
[   95.540608][ T5987] loop2: detected capacity change from 0 to 128
[   95.547844][ T1191] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   95.575940][ T1191] usb 1-1: config 0 interface 85 has no altsetting 0
[   95.595314][ T1191] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[   95.631683][ T1191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.649834][ T1191] usb 1-1: Product: syz
[   95.654730][ T1191] usb 1-1: Manufacturer: syz
[   95.687433][ T1191] usb 1-1: SerialNumber: syz
[   95.738353][ T5976] syz.3.57 (5976) used greatest stack depth: 20848 bytes left
[   95.749472][ T1191] usb 1-1: config 0 descriptor??
[   95.810453][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.198657][ T6000] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   96.415628][ T1191] appletouch 1-1:0.85: Geyser mode initialized.
[   96.467523][ T1191] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input5
[   96.817980][ T5821] usb 1-1: USB disconnect, device number 2
[   96.893386][ T6012] loop2: detected capacity change from 0 to 128
[   96.957693][ T6012] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   96.958995][ T5996] loop3: detected capacity change from 0 to 32768
[   97.015132][ T5821] appletouch 1-1:0.85: input: appletouch disconnected
[   97.028228][ T6016] loop1: detected capacity change from 0 to 128
[   97.054641][ T6012] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   97.202139][ T5996] ERROR: (device loop3): dbAllocNext: Corrupt dmap page
[   97.202139][ T5996] 
[   97.249304][ T5996] ialloc: diAlloc returned -5!
[   97.395785][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   98.066203][ T6036] loop1: detected capacity change from 0 to 1024
[   98.209405][ T6038] loop3: detected capacity change from 0 to 256
[   98.248181][ T6036] hfsplus: bad catalog entry type
[   98.351442][ T6038] FAT-fs (loop3): Directory bread(block 64) failed
[   98.370214][ T6038] FAT-fs (loop3): Directory bread(block 65) failed
[   98.406242][ T6038] FAT-fs (loop3): Directory bread(block 66) failed
[   98.436759][ T6038] FAT-fs (loop3): Directory bread(block 67) failed
[   98.438690][   T12] hfsplus: b-tree write err: -5, ino 25
[   98.453517][ T6038] FAT-fs (loop3): Directory bread(block 68) failed
[   98.477297][ T6038] FAT-fs (loop3): Directory bread(block 69) failed
[   98.484487][ T6038] FAT-fs (loop3): Directory bread(block 70) failed
[   98.497714][   T12] hfsplus: b-tree write err: -5, ino 4
[   98.503890][   T12] hfsplus: b-tree write err: -5, ino 2
[   98.511390][ T6038] FAT-fs (loop3): Directory bread(block 71) failed
[   98.567662][ T6038] FAT-fs (loop3): Directory bread(block 72) failed
[   98.574360][ T6038] FAT-fs (loop3): Directory bread(block 73) failed
[   99.218014][ T6057] loop2: detected capacity change from 0 to 256
[   99.248768][ T6057] exfat: Unknown parameter 'zero_size_dir'
[   99.446584][ T6060] loop1: detected capacity change from 0 to 512
[   99.523427][ T6060] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   99.563062][ T6060] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   99.616467][ T6060] EXT4-fs (loop1): 1 orphan inode deleted
[   99.690373][ T6060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.828551][ T6070] loop0: detected capacity change from 0 to 64
[   99.886390][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.118968][ T6075] netlink: 'syz.1.99': attribute type 4 has an invalid length.
[  100.147658][ T6075] netlink: 20 bytes leftover after parsing attributes in process `syz.1.99'.
[  100.202066][ T6078] loop3: detected capacity change from 0 to 1024
[  100.363125][ T5764] kernel write not supported for file /register (pid: 5764 comm: kworker/1:3)
[  100.415430][   T12] hfsplus: b-tree write err: -5, ino 25
[  100.441796][   T12] hfsplus: b-tree write err: -5, ino 4
[  100.505635][   T12] hfsplus: b-tree write err: -5, ino 2
[  100.645203][ T6089] overlayfs: workdir and upperdir must be separate subtrees
[  100.922345][ T6096] input: syz0 as /devices/virtual/input/input6
[  101.045645][ T6099] loop3: detected capacity change from 0 to 1024
[  101.420984][ T6109] process 'syz.2.115' launched './file1' with NULL argv: empty string added
[  101.588967][ T6114] loop2: detected capacity change from 0 to 64
[  102.706577][ T6118] loop3: detected capacity change from 0 to 32768
[  102.713889][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'.
[  102.725217][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'.
[  102.794705][ T6118] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  102.881561][ T6118] JBD2: Ignoring recovery information on journal
[  103.057609][ T6118] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  103.125855][ T6147] batman_adv: batadv0: Adding interface: macsec1
[  103.167257][ T6147] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.217228][ T6147] batman_adv: batadv0: Interface activated: macsec1
[  103.389915][ T6118] syz.3.119 (6118) used greatest stack depth: 19280 bytes left
[  103.569231][ T5776] ocfs2: Unmounting device (7,3) on (node local)
[  104.064445][ T6169] vlan2: entered allmulticast mode
[  104.076651][ T6169] veth0_to_bond: entered allmulticast mode
[  104.087553][   T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  104.277321][   T27] usb 2-1: Using ep0 maxpacket: 8
[  104.284431][   T27] usb 2-1: config index 0 descriptor too short (expected 26, got 18)
[  104.310412][   T27] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  104.332296][   T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.353962][   T27] usb 2-1: Product: syz
[  104.377016][   T27] usb 2-1: Manufacturer: syz
[  104.397443][   T27] usb 2-1: SerialNumber: syz
[  104.430954][   T27] usb 2-1: config 0 descriptor??
[  104.458029][   T27] gspca_main: sq930x-2.14.0 probing 2770:930c
[  104.828986][ T6192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.152'.
[  105.033091][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.155'.
[  105.271934][   T27] gspca_sq930x: ucbus_write failed -71
[  105.282565][   T27] sq930x: probe of 2-1:0.0 failed with error -71
[  105.303873][   T27] usb 2-1: USB disconnect, device number 2
[  105.695114][ T6198] loop3: detected capacity change from 0 to 32768
[  105.746993][ T6198] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  105.854272][ T6198] XFS (loop3): Ending clean mount
[  105.962103][ T6202] loop0: detected capacity change from 0 to 40427
[  106.026566][ T6202] F2FS-fs (loop0): invalid crc value
[  106.092188][ T6202] F2FS-fs (loop0): Found nat_bits in checkpoint
[  106.263988][ T5776] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  106.288504][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'.
[  106.307875][ T6202] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  106.326955][ T6226] netlink: 'syz.1.164': attribute type 20 has an invalid length.
[  106.337006][ T6226] netlink: 'syz.1.164': attribute type 21 has an invalid length.
[  106.665575][ T5774] syz-executor: attempt to access beyond end of device
[  106.665575][ T5774] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  106.689092][ T5774] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  106.905423][ T6235] ªªªªªª: renamed from vlan0 (while UP)
[  108.412901][ T6268] erspan0: entered promiscuous mode
[  108.664917][ T6275] capability: warning: `syz.2.187' uses 32-bit capabilities (legacy support in use)
[  108.709455][ T6256] loop3: detected capacity change from 0 to 32768
[  108.730633][ T6256] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.178 (6256)
[  108.814519][ T6256] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  108.825813][ T6256] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  108.840070][ T6256] BTRFS info (device loop3): using free space tree
[  109.097333][ T6256] BTRFS info (device loop3): enabling ssd optimizations
[  109.105676][ T6256] BTRFS info (device loop3): auto enabling async discard
[  109.793872][ T5776] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  109.866729][ T6314] loop0: detected capacity change from 0 to 2048
[  109.918850][ T6314] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  110.596247][ T6326] netlink: 'syz.3.202': attribute type 40 has an invalid length.
[  110.631105][ T6324] netlink: 'syz.0.200': attribute type 11 has an invalid length.
[  110.673341][ T6324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.200'.
[  110.849831][ T6330] vivid-007: disconnect
[  110.869631][ T6329] vivid-007: reconnect
[  110.986957][ T6332] netlink: 16 bytes leftover after parsing attributes in process `syz.0.205'.
[  111.163248][ T6338] loop0: detected capacity change from 0 to 512
[  111.223290][ T6338] EXT4-fs (loop0): 1 truncate cleaned up
[  111.302498][ T6338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.537535][    T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  111.542487][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.693968][ T6353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'.
[  111.727341][    T9] usb 2-1: Using ep0 maxpacket: 8
[  111.732422][ T6353] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  111.754781][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  111.776213][    T9] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  111.803171][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.826157][    T9] usb 2-1: config 0 descriptor??
[  112.063536][ T6348] loop3: detected capacity change from 0 to 32768
[  112.093473][ T6348] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.211 (6348)
[  112.169287][ T6348] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  112.185836][ T6348] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  112.239435][ T6348] BTRFS info (device loop3): setting nodatasum
[  112.245906][ T6348] BTRFS info (device loop3): force zlib compression, level 3
[  112.287578][    T9] usb 2-1: Found UVC 0.00 device <unnamed> (2833:0201)
[  112.294714][    T9] usb 2-1: No valid video chain found.
[  112.306321][ T6348] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  112.334621][    T9] usb 2-1: USB disconnect, device number 3
[  112.348586][ T6348] BTRFS info (device loop3): use lzo compression, level 0
[  112.355990][ T6348] BTRFS info (device loop3): turning on flush-on-commit
[  112.399048][ T6348] BTRFS info (device loop3): enabling auto defrag
[  112.407035][ T6348] BTRFS info (device loop3): max_inline at 4096
[  112.458710][ T6348] BTRFS info (device loop3): using free space tree
[  112.590991][ T6348] BTRFS info (device loop3): enabling ssd optimizations
[  112.702943][   T28] audit: type=1800 audit(1779415258.545:2): pid=6348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.211" name="file1" dev="loop3" ino=260 res=0 errno=0
[  113.067045][ T5776] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  113.204015][ T6389] loop0: detected capacity change from 0 to 4096
[  113.262293][ T6389] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  113.312921][ T6394] loop1: detected capacity change from 0 to 128
[  113.334209][ T6389] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  113.342751][ T6394] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  113.373405][ T6389] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  113.412228][ T6389] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  113.447376][ T6389] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  113.449170][ T6394] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  113.485261][ T6389] ntfs: volume version 3.1.
[  113.505323][ T6389] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  113.552777][ T6389] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  113.602506][ T6389] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  113.673662][ T6389] ntfs: (device loop0): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt.
[  113.868634][   T49] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  113.992724][ T6403] loop3: detected capacity change from 0 to 256
[  114.035775][ T6403] exfat: Deprecated parameter 'utf8'
[  114.082930][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'.
[  114.093540][ T6403] exfat: Deprecated parameter 'utf8'
[  114.194549][ T6409] Attempt to restore checkpoint with obsolete wellknown handles
[  114.242606][ T6403] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  114.617361][ T5822] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  114.829908][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  114.850828][ T6421] loop2: detected capacity change from 0 to 4096
[  114.857098][ T6406] loop0: detected capacity change from 0 to 32768
[  114.860755][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  114.905277][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  114.918144][ T6421] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  114.936535][ T6423] loop3: detected capacity change from 0 to 164
[  114.965492][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  115.010072][ T6423] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[  115.033398][ T5822] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  115.065697][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.094687][ T5822] usb 2-1: Product: syz
[  115.107796][ T5822] usb 2-1: Manufacturer: syz
[  115.118201][ T5822] usb 2-1: SerialNumber: syz
[  115.157589][ T5822] usb 2-1: config 0 descriptor??
[  115.488904][ T5822] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  115.767291][ T5821] usb 2-1: USB disconnect, device number 4
[  116.050486][ T6442] loop0: detected capacity change from 0 to 8
[  116.188881][ T6442] SQUASHFS error: Failed to read block 0x64f: -5
[  116.196507][ T6442] SQUASHFS error: Unable to read metadata cache entry [64d]
[  116.220700][ T6442] SQUASHFS error: Unable to read directory block [64d:3]
[  116.252354][ T6446] loop3: detected capacity change from 0 to 512
[  116.322001][ T6446] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  116.441816][ T6446] EXT4-fs error (device loop3): ext4_quota_enable:7140: comm syz.3.250: Bad quota inum: 2, type: 1
[  116.504742][ T6446] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix.
[  116.629603][ T6457] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  116.721627][ T6457] EXT4-fs error (device loop3): ext4_quota_enable:7140: comm syz.3.250: Bad quota inum: 2, type: 1
[  116.755814][ T6461] loop2: detected capacity change from 0 to 64
[  116.780044][ T6457] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix.
[  116.906939][ T5776] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  117.365755][ T6474] loop1: detected capacity change from 0 to 512
[  117.464601][ T6474] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.259: invalid indirect mapped block 256 (level 2)
[  117.527519][ T6479] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  117.565421][ T6474] EXT4-fs (loop1): 2 truncates cleaned up
[  117.579258][ T6474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.702092][ T6486] input: syz0 as /devices/virtual/input/input7
[  117.710311][ T6474] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.259: bg 0: block 5: invalid block bitmap
[  117.770488][ T6474] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 60 with max blocks 1 with error 28
[  117.805717][ T6487] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  117.841560][ T6487] EXT4-fs (loop1): This should not happen!! Data will be lost
[  117.841560][ T6487] 
[  117.870428][ T6474] EXT4-fs (loop1): This should not happen!! Data will be lost
[  117.870428][ T6474] 
[  117.881261][ T6489] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  117.885190][ T6487] EXT4-fs (loop1): Total free blocks count 0
[  117.924925][ T6474] EXT4-fs (loop1): Total free blocks count 0
[  117.932853][ T6474] EXT4-fs (loop1): Free/Dirty block details
[  117.947648][ T6487] EXT4-fs (loop1): Free/Dirty block details
[  117.960584][ T6491] program syz.2.265 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  117.971786][ T6474] EXT4-fs (loop1): free_blocks=0
[  118.409670][ T6495] loop0: detected capacity change from 0 to 8192
[  118.453668][ T6495] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  118.505621][ T6495] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  118.518097][ T6495] REISERFS (device loop0): using ordered data mode
[  118.525646][ T6495] reiserfs: using flush barriers
[  118.565852][ T6495] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  118.597922][ T6495] REISERFS (device loop0): checking transaction log (loop0)
[  118.819958][ T6512] loop2: detected capacity change from 0 to 2048
[  118.900738][ T6516] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  118.905578][ T6495] REISERFS (device loop0): Using tea hash to sort names
[  118.967686][ T6495] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  119.027376][ T6495] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  119.251066][ T6516] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  119.286709][ T6516] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  119.337408][ T6516] Remounting filesystem read-only
[  119.343445][ T1073] NILFS (loop2): discard dirty page: offset=4096, ino=6
[  119.379032][ T1073] NILFS (loop2): discard dirty block: blocknr=39, size=1024
[  119.421233][ T1073] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  119.467551][ T1073] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  119.499048][ T1073] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  119.511039][ T1073] NILFS (loop2): discard dirty page: offset=0, ino=3
[  119.527553][ T1073] NILFS (loop2): discard dirty block: blocknr=42, size=1024
[  119.555758][ T1073] NILFS (loop2): discard dirty block: blocknr=43, size=1024
[  119.607235][ T1073] NILFS (loop2): discard dirty block: blocknr=44, size=1024
[  119.614687][ T1073] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  119.658858][ T1073] NILFS (loop2): discard dirty page: offset=65536, ino=3
[  119.689222][ T1073] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  119.701943][ T6530] loop3: detected capacity change from 0 to 8
[  119.727209][ T1073] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  119.763043][ T1073] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  119.793689][ T1073] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  119.838043][ T1073] NILFS (loop2): discard dirty page: offset=196608, ino=3
[  119.862269][ T1073] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  119.918018][ T1073] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  119.949324][ T1073] NILFS (loop2): discard dirty block: blocknr=49, size=1024
[  119.979646][ T1073] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.007066][ T1073] NILFS (loop2): discard dirty page: offset=0, ino=18
[  120.032108][ T1073] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  120.067019][ T1073] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.099869][ T1073] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.158231][ T1073] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.186388][ T1073] NILFS (loop2): discard dirty page: offset=0, ino=2
[  120.208615][ T1073] NILFS (loop2): discard dirty block: blocknr=18, size=1024
[  120.247882][ T1073] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.287434][ T1073] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.305867][ T1073] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.337458][ T1073] NILFS (loop2): discard dirty page: offset=0, ino=5
[  120.355689][ T1073] NILFS (loop2): discard dirty block: blocknr=41, size=1024
[  120.375873][ T1073] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.403881][ T1073] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.417732][ T1073] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.435396][ T1073] NILFS (loop2): discard dirty page: offset=0, ino=4
[  120.451753][ T1073] NILFS (loop2): discard dirty block: blocknr=40, size=1024
[  120.460189][ T1073] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.487866][ T1073] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.502758][ T1073] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.512811][ T5777] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  120.533743][ T5777] NILFS (loop2): discard dirty page: offset=0, ino=6
[  120.542984][ T5777] NILFS (loop2): discard dirty block: blocknr=35, size=1024
[  120.555269][ T5777] NILFS (loop2): discard dirty block: blocknr=36, size=1024
[  120.569438][ T5777] NILFS (loop2): discard dirty block: blocknr=37, size=1024
[  120.580362][ T5777] NILFS (loop2): discard dirty block: blocknr=38, size=1024
[  120.766360][ T6553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.290'.
[  120.793993][ T6553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.290'.
[  120.817637][ T6553] Zero length message leads to an empty skb
[  120.884701][ T6555] loop3: detected capacity change from 0 to 128
[  120.919288][ T6555] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  121.012488][ T6555] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  121.133420][ T6555] fscrypt (loop3, inode 12): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS
[  121.304901][ T5776] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  121.886734][ T6586] warning: `syz.0.304' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  122.533694][ T6610] loop1: detected capacity change from 0 to 128
[  122.636375][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  122.636391][   T28] audit: type=1800 audit(1779415268.475:3): pid=6610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.317" name="bus" dev="loop1" ino=1048601 res=0 errno=0
[  122.712852][ T6614] loop3: detected capacity change from 0 to 128
[  122.758672][ T6614] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  122.796266][ T6614] hpfs: filesystem error: improperly stopped
[  122.803502][ T6614] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  122.840647][ T6614] hpfs: You really don't want any checks? You are crazy...
[  122.894848][ T6614] hpfs: hpfs_map_sector(): read error
[  122.919400][ T6614] hpfs: code page support is disabled
[  122.939761][ T6614] hpfs: hpfs_map_4sectors(): unaligned read
[  122.959939][ T6614] hpfs: hpfs_map_4sectors(): unaligned read
[  122.965920][ T6614] hpfs: filesystem error: unable to find root dir
[  122.997302][   T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  123.041291][ T6614] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim
[  123.207381][   T27] usb 3-1: Using ep0 maxpacket: 16
[  123.229345][   T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  123.249267][   T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  123.267377][   T27] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  123.281093][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.296106][   T27] usb 3-1: Product: syz
[  123.300811][   T27] usb 3-1: Manufacturer: syz
[  123.305460][   T27] usb 3-1: SerialNumber: syz
[  123.597600][    T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  123.749095][   T27] usb 3-1: cannot find UAC_HEADER
[  123.782704][ T6640] loop3: detected capacity change from 0 to 256
[  123.789858][    T9] usb 1-1: Using ep0 maxpacket: 8
[  123.799775][   T27] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[  123.806082][    T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  123.827885][ T6640] FAT-fs (loop3): Directory bread(block 1285) failed
[  123.839410][ T6640] FAT-fs (loop3): Directory bread(block 1286) failed
[  123.847037][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.853024][ T5993] udevd[5993]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  123.860748][ T6640] FAT-fs (loop3): Directory bread(block 1287) failed
[  123.908303][    T9] pvrusb2: Hardware description: Terratec Grabster AV400
[  123.915769][    T9] pvrusb2: **********
[  123.917070][ T6640] FAT-fs (loop3): Directory bread(block 1288) failed
[  123.933923][    T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  123.955254][    T9] pvrusb2: Important functionality might not be entirely working.
[  123.966639][    T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  123.980110][    T9] pvrusb2: **********
[  124.101027][ T6640] FAT-fs (loop3): Directory bread(block 1285) failed
[  124.109080][ T6640] FAT-fs (loop3): Directory bread(block 1286) failed
[  124.116022][ T6640] FAT-fs (loop3): Directory bread(block 1287) failed
[  124.123889][ T6640] FAT-fs (loop3): Directory bread(block 1288) failed
[  124.142222][ T2323] pvrusb2: Invalid write control endpoint
[  124.143717][ T6640] FAT-fs (loop3): Directory bread(block 1285) failed
[  124.174604][ T6640] FAT-fs (loop3): Directory bread(block 1286) failed
[  124.196101][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.333'.
[  124.325563][ T2323] pvrusb2: Invalid write control endpoint
[  124.358938][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  124.386135][ T6645] loop1: detected capacity change from 0 to 1024
[  124.390171][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  124.413785][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  124.418956][ T6645] EXT4-fs: Ignoring removed orlov option
[  124.440589][ T2323] pvrusb2: Device being rendered inoperable
[  124.453878][ T6630] pvrusb2: Attempted to execute control transfer when device not ok
[  124.464503][ T2323] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  124.477071][ T5821] usb 1-1: USB disconnect, device number 3
[  124.489333][ T2323] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  124.508509][ T2323] pvrusb2: Attached sub-driver cx25840
[  124.519813][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  124.531086][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  124.545281][ T6645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.731229][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.935272][   T28] audit: type=1326 audit(1779415270.775:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.3.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbed59ce59 code=0x7ffc0000
[  124.975615][   T28] audit: type=1326 audit(1779415270.775:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.3.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbed59ce59 code=0x7ffc0000
[  125.005225][   T28] audit: type=1326 audit(1779415270.785:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.3.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbed59ce59 code=0x7ffc0000
[  125.037217][   T28] audit: type=1326 audit(1779415270.785:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.3.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbed59ce59 code=0x7ffc0000
[  125.118474][   T28] audit: type=1326 audit(1779415270.785:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.3.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7ffbed59ce59 code=0x7ffc0000
[  125.179952][   T28] audit: type=1326 audit(1779415270.785:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.3.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbed59ce59 code=0x7ffc0000
[  125.206679][ T6665] Bluetooth: MGMT ver 1.22
[  125.237478][   T28] audit: type=1326 audit(1779415270.785:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.3.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbed59ce59 code=0x7ffc0000
[  125.278883][   T28] audit: type=1326 audit(1779415270.795:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.3.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbed59ce59 code=0x7ffc0000
[  125.363956][   T28] audit: type=1326 audit(1779415270.795:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.3.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbed59ce59 code=0x7ffc0000
[  125.589255][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.348'.
[  125.609894][ T6678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.348'.
[  125.782465][    T9] usb 3-1: USB disconnect, device number 2
[  125.909769][ T6686] loop3: detected capacity change from 0 to 256
[  126.073248][ T6684] loop1: detected capacity change from 0 to 4096
[  126.125683][ T6684] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  126.206518][ T6684] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  126.233257][ T6688] loop2: detected capacity change from 0 to 8192
[  126.349199][ T6688] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  126.363426][ T6688] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  126.373372][ T6688] REISERFS (device loop2): using ordered data mode
[  126.380946][ T6688] reiserfs: using flush barriers
[  126.391583][ T6688] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  126.428106][ T6688] REISERFS (device loop2): checking transaction log (loop2)
[  126.502866][ T6688] REISERFS (device loop2): Using r5 hash to sort names
[  126.547657][ T6698] netlink: 24 bytes leftover after parsing attributes in process `syz.3.357'.
[  126.560751][ T6688] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  126.665288][ T6700] loop0: detected capacity change from 0 to 128
[  126.752257][ T6700] EXT4-fs: Ignoring removed i_version option
[  126.846168][ T6700] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0003]
[  126.927428][ T6700] System zones: 1-3, 19-19, 35-36
[  126.935206][ T6700] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  126.966107][ T6700] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  127.076943][ T6700] EXT4-fs (loop0): shut down requested (1)
[  127.235137][ T5774] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  127.458339][ T6713] vlan2: entered allmulticast mode
[  127.471652][ T6713] syz_tun: entered allmulticast mode
[  127.748215][ T6724] loop3: detected capacity change from 0 to 128
[  127.884839][ T6724] syz.3.369: attempt to access beyond end of device
[  127.884839][ T6724] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128
[  128.573404][ T6740] loop3: detected capacity change from 0 to 1024
[  129.281874][ T6731] loop1: detected capacity change from 0 to 40427
[  129.338394][ T6731] F2FS-fs (loop1): invalid crc value
[  129.377241][ T6731] F2FS-fs (loop1): Found nat_bits in checkpoint
[  129.570996][ T6731] F2FS-fs (loop1): Start checkpoint disabled!
[  129.645846][ T6731] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  129.689423][ T6742] loop0: detected capacity change from 0 to 32768
[  129.745846][ T6742] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  129.876930][   T49] kworker/u4:3: attempt to access beyond end of device
[  129.876930][   T49] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  129.904186][   T49] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  129.912315][   T49] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  129.917911][ T6742] XFS (loop0): Ending clean mount
[  130.209526][ T6773] loop3: detected capacity change from 0 to 1024
[  130.370449][ T5774] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  130.448488][ T6773] hfsplus: bad catalog entry type
[  130.579916][   T12] hfsplus: b-tree write err: -5, ino 25
[  130.585960][   T12] hfsplus: b-tree write err: -5, ino 4
[  130.639167][   T12] hfsplus: b-tree write err: -5, ino 2
[  130.792902][ T5822] IPVS: starting estimator thread 0...
[  130.897515][ T6789] IPVS: using max 18 ests per chain, 43200 per kthread
[  131.411240][ T6802] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  131.520944][ T6784] loop2: detected capacity change from 0 to 32768
[  131.697514][ T6784] JBD2: Ignoring recovery information on journal
[  131.712503][   T28] kauditd_printk_skb: 10 callbacks suppressed
[  131.712521][   T28] audit: type=1326 audit(1779415277.555:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6809 comm="syz.3.403" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbed59ce59 code=0x0
[  131.744134][    C1] vkms_vblank_simulate: vblank timer overrun
[  131.803048][ T6784] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  132.276499][ T5777] ocfs2: Unmounting device (7,2) on (node local)
[  132.618403][ T6831] loop0: detected capacity change from 0 to 16
[  133.135856][ T6840] loop3: detected capacity change from 0 to 1024
[  133.267376][ T5822] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  133.325629][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  133.339886][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  133.388833][ T6840] EXT4-fs: Ignoring removed i_version option
[  133.395163][ T6840] EXT4-fs: inline encryption not supported
[  133.418920][ T6840] EXT4-fs (loop3): Test dummy encryption mode enabled
[  133.443652][ T6840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.476585][ T6847] sctp: Trying to GSO but underlying device doesn't support it.
[  133.489433][ T5822] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  133.517267][ T5822] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  133.530107][ T5822] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  133.539521][ T5822] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  133.551227][ T5822] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  133.558751][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.570084][ T5822] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  133.582584][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  133.590874][ T5822] usb 1-1: Product: syz
[  133.595491][ T5822] usb 1-1: Manufacturer: syz
[  133.626675][ T6851] Bluetooth: MGMT ver 1.22
[  133.633734][ T5822] cdc_wdm 1-1:1.0: skipping garbage
[  133.646842][ T5822] cdc_wdm 1-1:1.0: skipping garbage
[  133.678031][ T5822] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  133.699211][ T5822] cdc_wdm 1-1:1.0: Unknown control protocol
[  134.112391][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -EPIPE
[  134.156042][ T5822] usb 1-1: USB disconnect, device number 4
[  134.438482][ T6855] syz.3.420 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  135.119242][ T6864] loop3: detected capacity change from 0 to 8192
[  135.157792][ T6864] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  135.157847][ T6864] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  135.157989][ T6864] REISERFS (device loop3): using ordered data mode
[  135.158000][ T6864] reiserfs: using flush barriers
[  135.159864][ T6864] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  135.160426][ T6864] REISERFS (device loop3): checking transaction log (loop3)
[  135.191795][ T6864] REISERFS (device loop3): Using r5 hash to sort names
[  135.193307][ T6864] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  135.212151][ T6858] loop2: detected capacity change from 0 to 32768
[  135.357712][ T6858] JBD2: Ignoring recovery information on journal
[  135.546919][ T6858] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  135.698640][ T6874] netlink: 'syz.3.427': attribute type 10 has an invalid length.
[  135.719833][ T6874] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.759758][ T6874] batman_adv: batadv0: Removing interface: batadv_slave_0
[  135.820133][ T6874] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  135.944604][ T5777] ocfs2: Unmounting device (7,2) on (node local)
[  136.345480][ T6880] loop2: detected capacity change from 0 to 512
[  136.367465][ T6880] EXT4-fs: Ignoring removed bh option
[  136.404390][ T6880] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  136.450915][ T6880] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  136.504372][ T6880] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  136.520743][ T6883] loop3: detected capacity change from 0 to 64
[  136.543263][ T6880] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  136.559043][ T6880] System zones: 0-2, 18-18, 34-35
[  136.593978][ T6880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.609026][    T9] kernel write not supported for file /snd/seq (pid: 9 comm: kworker/0:1)
[  136.679567][   T28] audit: type=1800 audit(1779415282.515:24): pid=6883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.430" name="file1" dev="loop3" ino=21 res=0 errno=0
[  136.875607][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.997806][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  137.223274][    T9] usb 1-1: Using ep0 maxpacket: 32
[  137.236002][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  137.260234][    T9] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  137.277730][    T9] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  137.283269][ T6895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.436'.
[  137.306764][    T9] usb 1-1: Product: syz
[  137.314202][    T9] usb 1-1: Manufacturer: syz
[  137.327383][    T9] usb 1-1: SerialNumber: syz
[  137.335595][    T9] usb 1-1: config 0 descriptor??
[  137.356834][ T6888] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  137.370753][    T9] hub 1-1:0.0: bad descriptor, ignoring hub
[  137.402325][    T9] hub: probe of 1-1:0.0 failed with error -5
[  137.538613][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.711711][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.842073][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.003107][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.782065][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  138.793242][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  138.813361][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  138.825716][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  138.838120][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  138.851290][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  139.925279][ T6901] chnl_net:caif_netlink_parms(): no params data found
[  139.999096][   T27] usb 1-1: USB disconnect, device number 5
[  140.252884][ T6927] loop3: detected capacity change from 0 to 4096
[  140.354671][ T6929] loop1: detected capacity change from 0 to 16
[  140.432060][ T6927] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  140.460159][ T6929] erofs: (device loop1): mounted with root inode @ nid 36.
[  140.591650][ T6927] ntfs3: loop3: Failed to load $Extend (-22).
[  140.614559][ T6927] ntfs3: loop3: Failed to initialize $Extend.
[  140.886847][ T6939] loop1: detected capacity change from 0 to 512
[  140.919459][ T5788] Bluetooth: hci3: command tx timeout
[  141.247412][ T6901] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.265942][ T6901] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.345994][ T6901] bridge_slave_0: entered allmulticast mode
[  141.381190][ T6901] bridge_slave_0: entered promiscuous mode
[  141.452211][ T6901] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.493740][ T6901] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.516745][ T6901] bridge_slave_1: entered allmulticast mode
[  141.551186][ T6901] bridge_slave_1: entered promiscuous mode
[  141.596838][   T12] hsr_slave_0: left promiscuous mode
[  141.604316][   T12] hsr_slave_1: left promiscuous mode
[  141.611914][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.625280][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.640495][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.648850][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.658318][   T12] batman_adv: batadv0: Interface deactivated: macsec1
[  141.666004][   T12] batman_adv: batadv0: Removing interface: macsec1
[  141.685091][   T12] bridge_slave_1: left allmulticast mode
[  141.692764][   T12] bridge_slave_1: left promiscuous mode
[  141.708372][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.727013][   T12] bridge_slave_0: left allmulticast mode
[  141.743269][   T12] bridge_slave_0: left promiscuous mode
[  141.750899][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.854428][   T12] veth1_macvtap: left promiscuous mode
[  141.861554][   T12] veth0_macvtap: left promiscuous mode
[  141.870756][   T12] veth1_vlan: left promiscuous mode
[  141.876597][   T12] veth0_vlan: left promiscuous mode
[  142.409694][  T786] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  142.607382][  T786] usb 1-1: Using ep0 maxpacket: 16
[  142.615074][  T786] usb 1-1: unable to get BOS descriptor or descriptor too short
[  142.629989][  T786] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d4.05
[  142.639497][  T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.649608][  T786] usb 1-1: Product: syz
[  142.653928][  T786] usb 1-1: Manufacturer: syz
[  142.658893][  T786] usb 1-1: SerialNumber: syz
[  142.850193][   T12] team0 (unregistering): Port device team_slave_1 removed
[  142.905612][  T786] gspca_main: vc032x-2.14.0 probing 0ac8:c301
[  142.929593][   T12] team0 (unregistering): Port device team_slave_0 removed
[  142.991646][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  143.000477][ T5788] Bluetooth: hci3: command tx timeout
[  143.058888][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.503208][  T786] gspca_vc032x: reg_r err -71
[  143.519813][  T786] gspca_vc032x: I2c Bus Busy Wait 00
[  143.525384][  T786] gspca_vc032x: I2c Bus Busy Wait 00
[  143.535551][  T786] gspca_vc032x: I2c Bus Busy Wait 00
[  143.543631][  T786] gspca_vc032x: I2c Bus Busy Wait 00
[  143.550363][  T786] gspca_vc032x: I2c Bus Busy Wait 00
[  143.555818][  T786] gspca_vc032x: I2c Bus Busy Wait 00
[  143.563462][  T786] gspca_vc032x: I2c Bus Busy Wait 00
[  143.569302][  T786] gspca_vc032x: I2c Bus Busy Wait 00
[  143.575070][  T786] gspca_vc032x: I2c Bus Busy Wait 00
[  143.581856][  T786] gspca_vc032x: I2c Bus Busy Wait 00
[  143.588852][  T786] gspca_vc032x: I2c Bus Busy Wait 00
[  143.601393][  T786] gspca_vc032x: I2c Bus Busy Wait 00
[  143.606943][  T786] gspca_vc032x: I2c Bus Busy Wait 00
[  143.614192][  T786] gspca_vc032x: I2c Bus Busy Wait 00
[  143.625885][  T786] gspca_vc032x: I2c Bus Busy Wait 00
[  143.626353][   T12] bond0 (unregistering): Released all slaves
[  143.632302][  T786] gspca_vc032x: I2c Bus Busy Wait 00
[  143.651674][  T786] gspca_vc032x: I2c Bus Busy Wait 00
[  143.659959][  T786] gspca_vc032x: I2c Bus Busy Wait 00
[  143.665778][  T786] gspca_vc032x: I2c Bus Busy Wait 00
[  143.671458][  T786] gspca_vc032x: Unknown sensor...
[  143.676591][  T786] vc032x: probe of 1-1:12.0 failed with error -22
[  143.725636][  T786] usb 1-1: USB disconnect, device number 6
[  143.955015][ T6901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  143.971893][ T6901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.111339][ T6901] team0: Port device team_slave_0 added
[  144.141295][ T6901] team0: Port device team_slave_1 added
[  144.293738][ T6901] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.313502][ T6982] loop0: detected capacity change from 0 to 256
[  144.332510][ T6901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.423333][ T6901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.487563][ T6901] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.495042][ T6901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.566777][ T6901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.936529][ T6901] hsr_slave_0: entered promiscuous mode
[  144.987708][ T6901] hsr_slave_1: entered promiscuous mode
[  145.010527][ T6901] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  145.047297][ T6901] Cannot create hsr debugfs directory
[  145.077613][ T5788] Bluetooth: hci3: command tx timeout
[  145.163186][ T6999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.463'.
[  145.778931][ T6901] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  145.822700][ T6901] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  145.871611][ T6901] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  145.897882][ T6901] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  146.193460][ T6901] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.288107][ T6901] 8021q: adding VLAN 0 to HW filter on device team0
[  146.349192][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.356806][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.433657][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.440951][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.083844][ T7010] loop1: detected capacity change from 0 to 40427
[  147.107020][ T7010] F2FS-fs (loop1): invalid crc value
[  147.122520][ T7010] F2FS-fs (loop1): Found nat_bits in checkpoint
[  147.157757][ T5788] Bluetooth: hci3: command tx timeout
[  147.315385][ T6901] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.352816][ T7010] F2FS-fs (loop1): Start checkpoint disabled!
[  147.427294][ T7010] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  147.967349][   T11] kworker/u4:0: attempt to access beyond end of device
[  147.967349][   T11] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  147.996967][   T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  148.007410][   T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  148.320277][ T6901] veth0_vlan: entered promiscuous mode
[  148.377015][ T6901] veth1_vlan: entered promiscuous mode
[  148.470531][ T6901] veth0_macvtap: entered promiscuous mode
[  148.541781][ T6901] veth1_macvtap: entered promiscuous mode
[  148.624583][ T6901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.668418][ T6901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.701489][ T6901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.723038][ T7045] loop3: detected capacity change from 0 to 32768
[  148.737340][ T6901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.758614][ T7045] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.472 (7045)
[  148.779280][ T6901] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.804947][ T6901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.828535][ T7045] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  148.853543][ T7045] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  148.872860][ T6901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.899205][ T7045] BTRFS info (device loop3): using free space tree
[  148.929968][ T6901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.952609][ T6901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.977307][ T6901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.991595][ T6901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.003832][ T6901] batman_adv: batadv0: Interface activated: batadv_slave_1
[  149.025452][ T6901] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.041387][ T6901] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.053050][ T6901] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.087357][ T7045] BTRFS info (device loop3): enabling ssd optimizations
[  149.094742][ T7045] BTRFS info (device loop3): auto enabling async discard
[  149.127370][ T6901] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.272704][ T7082] netlink: 24 bytes leftover after parsing attributes in process `syz.0.475'.
[  149.650064][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.659928][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.709058][ T7091] netlink: 'syz.1.477': attribute type 12 has an invalid length.
[  149.757611][ T7091] netlink: 'syz.1.477': attribute type 29 has an invalid length.
[  149.777575][ T7091] netlink: 148 bytes leftover after parsing attributes in process `syz.1.477'.
[  149.796279][ T7091] netlink: 59 bytes leftover after parsing attributes in process `syz.1.477'.
[  149.900538][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.947635][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.715653][ T7106] loop1: detected capacity change from 0 to 1024
[  150.729698][ T5776] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  152.918499][ T7136] loop4: detected capacity change from 0 to 32768
[  152.957339][ T7136] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.490 (7136)
[  153.036820][ T7136] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  153.093901][ T7136] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  153.112826][ T7136] BTRFS info (device loop4): setting nodatasum
[  153.146422][ T7136] BTRFS info (device loop4): force zlib compression, level 3
[  153.198220][ T7136] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  153.242524][ T7136] BTRFS info (device loop4): use lzo compression, level 0
[  153.287655][ T7136] BTRFS info (device loop4): turning on flush-on-commit
[  153.294790][ T7136] BTRFS info (device loop4): enabling auto defrag
[  153.357301][ T7136] BTRFS info (device loop4): max_inline at 4096
[  153.363945][ T7136] BTRFS info (device loop4): using free space tree
[  153.617457][ T7136] BTRFS info (device loop4): enabling ssd optimizations
[  153.947568][ T5764] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  154.098293][ T6901] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  154.132253][ T7203] loop1: detected capacity change from 0 to 2048
[  154.158349][ T5764] usb 1-1: Using ep0 maxpacket: 32
[  154.180240][ T5764] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  154.200885][ T7203] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  154.205356][ T5764] usb 1-1: config 0 has no interface number 0
[  154.227754][ T7203] UDF-fs: Scanning with blocksize 512 failed
[  154.256076][ T5764] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  154.277039][ T5764] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.304151][ T5764] usb 1-1: Product: syz
[  154.324971][ T5764] usb 1-1: Manufacturer: syz
[  154.345028][ T5764] usb 1-1: SerialNumber: syz
[  154.349162][ T7203] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  154.390614][ T5764] usb 1-1: config 0 descriptor??
[  154.429505][ T5764] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  154.701993][ T5764] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  154.788267][ T5764] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  155.277693][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  155.278019][    T8] usb 1-1: USB disconnect, device number 7
[  155.349550][    T8] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  155.392314][    T8] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  155.413329][    T8] quatech2 1-1:0.51: device disconnected
[  155.667020][ T7196] loop3: detected capacity change from 0 to 32768
[  155.916068][ T7196] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  156.005070][ T7234] team0: entered allmulticast mode
[  156.066951][ T7234] team_slave_0: entered allmulticast mode
[  156.102094][ T7234] team_slave_1: entered allmulticast mode
[  156.112280][ T7196] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  156.224595][ T7196] XFS (loop3): Tail block (0x29) overwrite detected. Updated to 0x30
[  156.311492][ T7196] XFS (loop3): Ending clean mount
[  156.653745][ T7250] netlink: 16 bytes leftover after parsing attributes in process `syz.1.516'.
[  156.764643][ T5776] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  157.065337][   T28] audit: type=1326 audit(1779415302.905:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7255 comm="syz.4.519" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653ad9ce59 code=0x7ffc0000
[  157.171811][   T28] audit: type=1326 audit(1779415302.955:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7255 comm="syz.4.519" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653ad9ce59 code=0x7ffc0000
[  157.253783][   T28] audit: type=1326 audit(1779415302.955:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7255 comm="syz.4.519" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653ad9ce59 code=0x7ffc0000
[  157.342731][   T28] audit: type=1326 audit(1779415302.955:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7255 comm="syz.4.519" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653ad9ce59 code=0x7ffc0000
[  157.456961][   T28] audit: type=1326 audit(1779415302.955:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7255 comm="syz.4.519" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f653ad9ce59 code=0x7ffc0000
[  157.495972][   T28] audit: type=1326 audit(1779415302.955:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7255 comm="syz.4.519" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653ad9ce59 code=0x7ffc0000
[  157.534946][   T28] audit: type=1326 audit(1779415302.955:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7255 comm="syz.4.519" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653ad9ce59 code=0x7ffc0000
[  157.565902][   T28] audit: type=1326 audit(1779415302.965:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7255 comm="syz.4.519" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653ad9ce59 code=0x7ffc0000
[  157.602838][   T28] audit: type=1326 audit(1779415302.965:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7255 comm="syz.4.519" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653ad9ce59 code=0x7ffc0000
[  157.632013][   T28] audit: type=1326 audit(1779415302.965:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7255 comm="syz.4.519" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f653ad9ce59 code=0x7ffc0000
[  157.866930][ T7241] loop0: detected capacity change from 0 to 32768
[  158.018155][ T7241] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  158.083040][ T7241] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  158.281065][ T7241] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  158.427423][ T7241] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  158.631127][ T7282] loop1: detected capacity change from 0 to 128
[  158.709373][ T7282] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  158.757555][ T7282] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  160.703445][ T7319] loop3: detected capacity change from 0 to 2048
[  160.909995][ T7319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.172237][ T7329] Context (ID=0x10) not attached to queue pair (handle=0x2:0xf2)
[  161.251253][ T7331] netlink: 'syz.1.544': attribute type 1 has an invalid length.
[  161.283418][   T12] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  161.294151][ T7331] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.544'.
[  161.311674][   T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  161.353917][ T7333] loop0: detected capacity change from 0 to 512
[  161.386787][ T7333] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  161.407204][   T12] EXT4-fs (loop3): This should not happen!! Data will be lost
[  161.407204][   T12] 
[  161.442266][ T7333] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  161.468647][   T12] EXT4-fs (loop3): Total free blocks count 0
[  161.474713][   T12] EXT4-fs (loop3): Free/Dirty block details
[  161.502181][   T12] EXT4-fs (loop3): free_blocks=2415919504
[  161.502541][ T7333] EXT4-fs (loop0): 1 truncate cleaned up
[  161.512224][   T12] EXT4-fs (loop3): dirty_blocks=48
[  161.527213][   T12] EXT4-fs (loop3): Block reservation details
[  161.557347][   T12] EXT4-fs (loop3): i_reserved_data_blocks=3
[  161.571381][ T7333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.623917][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.734014][ T7333] Invalid ELF header magic: != ELF
[  161.806505][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.683649][ T7356] loop3: detected capacity change from 0 to 256
[  162.872001][ T7356] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d)
[  163.005314][ T7339] loop4: detected capacity change from 0 to 32768
[  163.075339][ T7339] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  163.160463][ T7339] XFS (loop4): Ending clean mount
[  163.198977][ T5821] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  163.429818][ T5821] usb 1-1: unable to get BOS descriptor or descriptor too short
[  163.438931][ T5821] usb 1-1: not running at top speed; connect to a high speed hub
[  163.448725][ T5821] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  163.480331][ T5821] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  163.490559][ T6901] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  163.518259][ T5821] usb 1-1: string descriptor 0 read error: -22
[  163.535161][ T5821] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  163.546397][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.607420][ T5821] usb 1-1: 0:2 : does not exist
[  164.435414][ T5821] usb 1-1: 5:0: bogus dB values (-9764/-9623), disabling dB reporting
[  164.467798][ T5821] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  164.524184][ T5821] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5)
[  164.552730][ T5821] usb 1-1: 5:0: failed to get current value for ch 1 (-22)
[  164.621329][ T5821] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5)
[  164.670961][ T5821] usb 1-1: USB disconnect, device number 8
[  165.422592][ T7408] loop1: detected capacity change from 0 to 512
[  165.469698][ T7408] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  165.541851][ T7408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.542112][ T7397] loop4: detected capacity change from 0 to 32768
[  165.584298][ T7408] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  165.606487][ T7397] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  165.756459][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.857381][ T7426] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.867852][ T7426] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.894936][ T7426] bridge0: entered allmulticast mode
[  165.974720][ T7426] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.990640][ T7397] XFS (loop4): Ending clean mount
[  166.236197][ T6901] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  166.297941][ T7435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.577'.
[  166.307114][ T7435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.577'.
[  166.316937][ T7435] macvlan0: entered allmulticast mode
[  166.332575][ T7435] veth1_vlan: entered allmulticast mode
[  166.559771][ T7440] loop1: detected capacity change from 0 to 128
[  166.596239][ T7440] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  166.619971][ T7440] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  166.825631][ T7440] fscrypt (loop1, inode 12): Unsupported encryption flags (0x10)
[  166.936772][ T7452] loop3: detected capacity change from 0 to 256
[  166.979219][ T5775] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  167.335430][ T7462] loop0: detected capacity change from 0 to 64
[  167.369336][ T7462] MINIX-fs: mounting file system with errors, running fsck is recommended
[  167.437457][    T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  167.474608][ T7460] loop1: detected capacity change from 0 to 8192
[  167.504358][ T7460] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  167.532053][ T7460] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  167.543064][ T7460] REISERFS (device loop1): using ordered data mode
[  167.550784][ T7460] reiserfs: using flush barriers
[  167.560598][ T7460] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  167.579009][ T7460] REISERFS (device loop1): checking transaction log (loop1)
[  167.648626][    T8] usb 5-1: Using ep0 maxpacket: 32
[  167.688639][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  167.740261][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  167.766585][    T8] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  167.799074][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.819941][ T7460] REISERFS (device loop1): Using tea hash to sort names
[  167.838424][    T8] usb 5-1: config 0 descriptor??
[  167.848108][ T7460] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  167.848986][    T8] hub 5-1:0.0: USB hub found
[  167.902199][ T7460] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  168.092166][    T8] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  168.421483][ T7479] loop0: detected capacity change from 0 to 2048
[  168.529811][ T7483] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  168.546986][    T8] hid-generic 0003:046D:C31C.0001: item fetching failed at offset 0/1
[  168.562940][    T8] hid-generic: probe of 0003:046D:C31C.0001 failed with error -22
[  168.747637][ T7483] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  168.785634][ T7483] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4)
[  168.815921][ T7483] Remounting filesystem read-only
[  168.832346][   T49] NILFS (loop0): discard dirty page: offset=4096, ino=6
[  168.851657][   T49] NILFS (loop0): discard dirty block: blocknr=39, size=1024
[  168.863131][   T49] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  168.875495][   T49] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  168.893063][   T49] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  168.905268][   T49] NILFS (loop0): discard dirty page: offset=0, ino=3
[  168.914903][   T49] NILFS (loop0): discard dirty block: blocknr=42, size=1024
[  168.934770][   T49] NILFS (loop0): discard dirty block: blocknr=43, size=1024
[  168.947699][    T8] usb 5-1: USB disconnect, device number 2
[  168.952761][   T49] NILFS (loop0): discard dirty block: blocknr=44, size=1024
[  168.967259][   T49] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  168.986622][   T49] NILFS (loop0): discard dirty page: offset=65536, ino=3
[  169.009169][   T49] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  169.026185][   T49] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  169.037774][   T49] NILFS (loop0): discard dirty block: blocknr=0, size=1024
[  169.055878][   T49] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  169.075164][   T49] NILFS (loop0): discard dirty page: offset=196608, ino=3
[  169.088792][   T49] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  169.101403][   T49] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  169.116633][   T49] NILFS (loop0): discard dirty block: blocknr=49, size=1024
[  169.129743][   T49] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  169.139640][   T49] NILFS (loop0): discard dirty page: offset=0, ino=18
[  169.146550][   T49] NILFS (loop0): discard dirty block: blocknr=0, size=1024
[  169.154911][   T49] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  169.165203][   T49] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  169.177041][   T49] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  169.191401][   T49] NILFS (loop0): discard dirty page: offset=0, ino=2
[  169.203913][   T49] NILFS (loop0): discard dirty block: blocknr=18, size=1024
[  169.212038][   T49] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  169.221624][   T49] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  169.231366][   T49] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  169.255301][ T5774] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[  169.278024][ T5774] NILFS (loop0): discard dirty page: offset=0, ino=6
[  169.284813][ T5774] NILFS (loop0): discard dirty block: blocknr=35, size=1024
[  169.307334][ T5774] NILFS (loop0): discard dirty block: blocknr=36, size=1024
[  169.314826][ T5774] NILFS (loop0): discard dirty block: blocknr=37, size=1024
[  169.347363][ T5774] NILFS (loop0): discard dirty block: blocknr=38, size=1024
[  169.388060][ T5774] NILFS (loop0): discard dirty page: offset=0, ino=5
[  169.394989][ T5774] NILFS (loop0): discard dirty block: blocknr=41, size=1024
[  169.422519][ T5774] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  169.467723][ T5774] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  169.477523][ T5774] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  169.486732][ T5774] NILFS (loop0): discard dirty page: offset=0, ino=4
[  169.527028][ T5774] NILFS (loop0): discard dirty block: blocknr=40, size=1024
[  169.547627][ T5774] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  169.556734][ T5774] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  169.615820][ T5774] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  169.912706][ T7504] loop3: detected capacity change from 0 to 4096
[  170.073123][ T7519] loop4: detected capacity change from 0 to 64
[  170.077607][ T7518] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  170.247338][ T5820] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  170.516482][ T5820] usb 2-1: Using ep0 maxpacket: 16
[  170.543074][ T5820] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  170.583211][ T5820] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  170.613299][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.684534][ T5820] usb 2-1: config 0 descriptor??
[  170.723685][ T5820] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8
[  170.819810][ T7536] loop4: detected capacity change from 0 to 1024
[  170.883361][ T7536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  171.008433][ T7536] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.027745][ T5124] bcm5974 2-1:0.0: could not read from device
[  171.055101][ T7513] bcm5974 2-1:0.0: could not read from device
[  171.072299][ T5820] usb 2-1: USB disconnect, device number 5
[  171.107111][ T5124] bcm5974 2-1:0.0: could not read from device
[  171.217299][ T7543] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  171.307003][ T6901] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  172.129436][ T7555] loop3: detected capacity change from 0 to 32768
[  172.186098][ T7555] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  172.275384][ T7555] XFS (loop3): Ending clean mount
[  172.280951][ T5820] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  172.340841][ T7592] loop4: detected capacity change from 0 to 128
[  172.384602][ T7555] XFS (loop3): User initiated shutdown received.
[  172.395570][ T7555] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497).  Shutting down filesystem.
[  172.427556][ T7555] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  172.488953][ T5820] usb 2-1: Using ep0 maxpacket: 8
[  172.505444][ T5820] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  172.533462][ T7592] syz.4.619: attempt to access beyond end of device
[  172.533462][ T7592] loop4: rw=2049, sector=154, nr_sectors = 96 limit=128
[  172.536389][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.579086][ T7592] syz.4.619: attempt to access beyond end of device
[  172.579086][ T7592] loop4: rw=2049, sector=138, nr_sectors = 16 limit=128
[  172.610467][ T5820] pvrusb2: Hardware description: Terratec Grabster AV400
[  172.623066][ T5776] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  172.634196][ T5820] pvrusb2: **********
[  172.648116][ T5820] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  172.688155][ T5820] pvrusb2: Important functionality might not be entirely working.
[  172.736703][ T5820] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  172.770715][ T5820] pvrusb2: **********
[  172.837434][ T2323] pvrusb2: Invalid write control endpoint
[  173.066568][ T2323] pvrusb2: Invalid write control endpoint
[  173.114077][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  173.168537][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  173.192797][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  173.229030][ T2323] pvrusb2: Device being rendered inoperable
[  173.254332][ T7575] pvrusb2: Attempted to execute control transfer when device not ok
[  173.280367][ T2323] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  173.290781][ T5873] usb 2-1: USB disconnect, device number 6
[  173.310706][ T2323] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  173.316252][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  173.316266][   T28] audit: type=1326 audit(1779415319.155:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.0.625" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b879ce59 code=0x7ffc0000
[  173.377439][ T2323] pvrusb2: Attached sub-driver cx25840
[  173.382986][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  173.431365][   T28] audit: type=1326 audit(1779415319.155:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.0.625" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b879ce59 code=0x7ffc0000
[  173.456490][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  173.519631][   T28] audit: type=1326 audit(1779415319.175:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.0.625" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b879ce59 code=0x7ffc0000
[  173.633112][   T28] audit: type=1326 audit(1779415319.175:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.0.625" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b879ce59 code=0x7ffc0000
[  173.723231][   T28] audit: type=1326 audit(1779415319.195:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.0.625" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f63b879ce59 code=0x7ffc0000
[  173.760394][   T28] audit: type=1326 audit(1779415319.195:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.0.625" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b879ce59 code=0x7ffc0000
[  173.815591][   T28] audit: type=1326 audit(1779415319.195:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.0.625" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b879ce59 code=0x7ffc0000
[  173.846174][   T28] audit: type=1326 audit(1779415319.245:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.0.625" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b879ce59 code=0x7ffc0000
[  173.913363][   T28] audit: type=1326 audit(1779415319.245:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.0.625" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b879ce59 code=0x7ffc0000
[  173.938016][ T5822] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  173.992793][   T28] audit: type=1326 audit(1779415319.245:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.0.625" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f63b879ce59 code=0x7ffc0000
[  174.127320][ T5822] usb 1-1: Using ep0 maxpacket: 8
[  174.135569][ T5822] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  174.153082][ T5822] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  174.187340][ T5822] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  174.227266][ T5822] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  174.275168][ T5822] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  174.307290][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.476101][ T7635] loop3: detected capacity change from 0 to 4096
[  174.515947][ T7635] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  174.582287][ T7635] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  174.628012][ T5822] usb 1-1: GET_CAPABILITIES returned 0
[  174.645235][ T5822] usbtmc 1-1:16.0: can't read capabilities
[  174.692923][ T7610] loop4: detected capacity change from 0 to 40427
[  174.743084][ T7610] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[  174.786048][ T7610] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  174.819949][ T7610] F2FS-fs (loop4): Image doesn't support compression
[  174.827066][ T7610] F2FS-fs (loop4): Image doesn't support compression
[  174.863941][ T7610] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x216
[  174.921944][ T5822] usb 1-1: USB disconnect, device number 9
[  174.927637][ T7610] F2FS-fs (loop4): invalid crc value
[  175.307581][ T7610] F2FS-fs (loop4): Start checkpoint disabled!
[  175.357268][ T7610] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  175.364519][ T7610] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  175.664643][ T7610] syz.4.624: attempt to access beyond end of device
[  175.664643][ T7610] loop4: rw=10241, sector=53248, nr_sectors = 8 limit=40427
[  175.868398][ T7610] syz.4.624: attempt to access beyond end of device
[  175.868398][ T7610] loop4: rw=2049, sector=53256, nr_sectors = 120 limit=40427
[  176.007045][ T7610] syz.4.624: attempt to access beyond end of device
[  176.007045][ T7610] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  176.314311][   T11] kworker/u4:0: attempt to access beyond end of device
[  176.314311][   T11] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  176.347147][    C1] sched: RT throttling activated
[  176.383990][   T11] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  176.412234][ T7668] loop3: detected capacity change from 0 to 256
[  176.642222][ T7655] loop1: detected capacity change from 0 to 131072
[  176.652582][ T7655] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  176.660900][ T7655] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  176.684100][ T7655] F2FS-fs (loop1): invalid crc value
[  176.743273][ T7655] F2FS-fs (loop1): Found nat_bits in checkpoint
[  176.817953][ T7655] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  176.825092][ T7655] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  177.364455][ T7687] loop3: detected capacity change from 0 to 256
[  177.539049][ T7687] FAT-fs (loop3): Directory bread(block 64) failed
[  177.545680][ T7687] FAT-fs (loop3): Directory bread(block 65) failed
[  177.617503][ T7687] FAT-fs (loop3): Directory bread(block 66) failed
[  177.624122][ T7687] FAT-fs (loop3): Directory bread(block 67) failed
[  177.678025][ T7687] FAT-fs (loop3): Directory bread(block 68) failed
[  177.684649][ T7687] FAT-fs (loop3): Directory bread(block 69) failed
[  177.731073][ T7687] FAT-fs (loop3): Directory bread(block 70) failed
[  177.756845][ T7687] FAT-fs (loop3): Directory bread(block 71) failed
[  177.777632][ T7687] FAT-fs (loop3): Directory bread(block 72) failed
[  177.787433][ T7687] FAT-fs (loop3): Directory bread(block 73) failed
[  178.254472][ T7706] loop0: detected capacity change from 0 to 256
[  178.292304][ T7706] exfat: Deprecated parameter 'namecase'
[  178.408169][ T7706] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  179.847432][ T7086] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  180.007790][ T7746] netlink: 'syz.0.663': attribute type 30 has an invalid length.
[  180.040653][ T7746] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  180.051758][ T7746] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  180.061092][ T7746] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  180.067340][ T7086] usb 4-1: Using ep0 maxpacket: 32
[  180.069881][ T7746] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  180.113945][ T7086] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  180.145450][ T7086] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.158043][ T7746] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  180.167489][ T7746] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  180.172892][ T7086] usb 4-1: config 0 descriptor??
[  180.176472][ T7746] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  180.190607][ T7746] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  180.425810][ T7086] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  180.452883][ T7086] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  180.488604][ T7086] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  180.496613][ T7086] usb 4-1: media controller created
[  180.575318][ T7086] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  180.663707][ T7758] loop1: detected capacity change from 0 to 2048
[  180.744884][ T7764] loop4: detected capacity change from 0 to 16
[  180.833590][ T7764] erofs: (device loop4): mounted with root inode @ nid 36.
[  180.841469][ T7086] DVB: Unable to find symbol dib7000p_attach()
[  180.850454][ T7086] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  180.862778][ T7758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.875945][ T7758] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  180.969827][ T5764] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  181.043625][ T7777] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.667: bg 0: block 345: padding at end of block bitmap is not set
[  181.069798][ T7777] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 234 with error 28
[  181.081960][ T7086] rc_core: IR keymap rc-dib0700-rc5 not found
[  181.107580][ T7086] Registered IR keymap rc-empty
[  181.115020][ T7086] dvb-usb: could not initialize remote control.
[  181.117225][ T7777] EXT4-fs (loop1): This should not happen!! Data will be lost
[  181.117225][ T7777] 
[  181.123697][ T7086] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  181.169562][ T7777] EXT4-fs (loop1): Total free blocks count 0
[  181.177844][ T7086] usb 4-1: USB disconnect, device number 2
[  181.187507][ T5764] usb 1-1: Using ep0 maxpacket: 8
[  181.204723][ T5764] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  181.234817][ T5764] usb 1-1: config 179 has no interface number 0
[  181.258535][ T5764] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  181.270754][ T7777] EXT4-fs (loop1): Free/Dirty block details
[  181.305990][ T7777] EXT4-fs (loop1): free_blocks=0
[  181.309005][ T7086] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  181.311440][ T5764] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  181.342518][ T7777] EXT4-fs (loop1): dirty_blocks=240
[  181.367603][ T7777] EXT4-fs (loop1): Block reservation details
[  181.387815][ T7777] EXT4-fs (loop1): i_reserved_data_blocks=15
[  181.401197][ T5764] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  181.433764][ T5764] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  181.457523][ T5764] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  181.510471][ T5764] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  181.547078][ T5764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.576247][ T7761] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  181.650422][ T1093] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 250 with max blocks 1 with error 28
[  181.926453][ T5764] IPVS: starting estimator thread 0...
[  181.935723][ T7793] IPVS: lc: SCTP 172.20.20.187:0 - no destination available
[  182.047779][ T7795] IPVS: using max 15 ests per chain, 36000 per kthread
[  182.133109][ T5764] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input10
[  182.588316][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  182.596710][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  182.607633][ T5820] usb 1-1: USB disconnect, device number 10
[  182.637008][ T5820] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  184.221013][ T7820] loop4: detected capacity change from 0 to 32768
[  184.258526][ T7820] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.685 (7820)
[  184.361850][ T7820] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  184.367597][ T5788] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  184.383006][ T5788] Bluetooth: hci2: Injecting HCI hardware error event
[  184.393459][   T51] Bluetooth: hci2: hardware error 0x00
[  184.397471][ T7820] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  184.408964][ T7820] BTRFS info (device loop4): setting nodatasum
[  184.415341][ T7820] BTRFS info (device loop4): force zlib compression, level 3
[  184.423092][ T7820] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  184.433239][ T7820] BTRFS info (device loop4): use lzo compression, level 0
[  184.442254][ T7820] BTRFS info (device loop4): turning on flush-on-commit
[  184.450450][ T7820] BTRFS info (device loop4): max_inline at 4096
[  184.457080][ T7820] BTRFS info (device loop4): using free space tree
[  184.673976][ T7820] BTRFS info (device loop4): enabling ssd optimizations
[  185.122855][ T6901] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  185.337557][ T5993] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop4 scanned by udevd (5993)
[  185.465742][ T7849] loop3: detected capacity change from 0 to 32768
[  185.627697][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  185.627715][   T28] audit: type=1800 audit(1779415331.445:57): pid=7849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.695" name="file2" dev="loop3" ino=5 res=0 errno=0
[  186.009906][ T7899] ERROR: (device loop3): dbAlloc: the hint is outside the map
[  186.009906][ T7899] 
[  186.127474][ T7899] ERROR: (device loop3): remounting filesystem as read-only
[  186.164449][ T7899] ialloc: diAlloc returned -5!
[  186.517439][   T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  186.559428][ T7914] loop0: detected capacity change from 0 to 4096
[  186.644033][ T7917] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  188.714320][ T7933] loop3: detected capacity change from 0 to 32768
[  189.017926][ T7954] loop1: detected capacity change from 0 to 1024
[  189.331377][ T7954] hfsplus: request for non-existent node 62977 in B*Tree
[  189.388611][ T7954] hfsplus: request for non-existent node 62977 in B*Tree
[  189.498861][   T49] hfsplus: b-tree write err: -5, ino 3
[  189.522143][ T7966] loop0: detected capacity change from 0 to 512
[  189.624274][ T7966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.715494][ T7966] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  190.024773][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.267311][ T5873] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  190.325034][ T7975] loop3: detected capacity change from 0 to 32768
[  190.469775][ T5873] usb 5-1: Using ep0 maxpacket: 16
[  190.485964][ T5873] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8
[  190.513197][ T5873] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  190.525063][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.563960][ T5873] usb 5-1: Product: syz
[  190.574336][ T5873] usb 5-1: Manufacturer: syz
[  190.587946][ T5873] usb 5-1: SerialNumber: syz
[  190.613046][ T5873] usb 5-1: config 0 descriptor??
[  190.640268][ T5873] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  190.668858][ T5873] usb 5-1: Detected FT232R
[  190.907781][ T5873] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  191.139106][ T5873] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  191.303813][ T7984] loop1: detected capacity change from 0 to 32768
[  191.326044][ T7984] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  191.445695][ T5820] usb 5-1: USB disconnect, device number 3
[  191.488191][ T5820] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  191.511317][ T5820] ftdi_sio 5-1:0.0: device disconnected
[  191.603714][ T5993] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  191.844365][ T7989] loop3: detected capacity change from 0 to 32768
[  191.887823][ T7989] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  192.063945][ T7989] XFS (loop3): Ending clean mount
[  192.127519][ T7989] XFS (loop3): Quotacheck needed: Please wait.
[  192.350133][ T7989] XFS (loop3): Quotacheck: Done.
[  192.499198][ T8009] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  192.756315][ T5776] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  193.668893][ T5820] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  193.756234][ T8029] kvm: kvm [8028]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0xce
[  193.837394][ T5873] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  193.891433][ T5820] usb 1-1: config 0 has an invalid interface number: 37 but max is 1
[  193.906345][ T5820] usb 1-1: config 0 has an invalid interface number: 255 but max is 1
[  193.915823][ T5820] usb 1-1: config 0 has no interface number 0
[  193.930921][ T5820] usb 1-1: config 0 has no interface number 1
[  193.937374][ T5820] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  193.949440][ T5820] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  193.963523][ T5820] usb 1-1: config 0 interface 255 has no altsetting 0
[  193.974572][ T5820] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3
[  193.984068][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.992567][ T5820] usb 1-1: Product: syz
[  193.996982][ T5820] usb 1-1: Manufacturer: syz
[  194.001916][ T5820] usb 1-1: SerialNumber: syz
[  194.009940][ T5820] usb 1-1: config 0 descriptor??
[  194.034087][ T5873] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  194.052188][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.063522][ T5873] usb 2-1: config 0 descriptor??
[  194.207302][ T5764] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  194.251257][ T5820] usb 1-1: USB disconnect, device number 11
[  194.290574][ T5873] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00
[  194.299969][ T5873] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  194.397585][ T5764] usb 4-1: Using ep0 maxpacket: 8
[  194.407728][ T5764] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  194.419454][ T5764] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  194.434353][ T5764] usb 4-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00
[  194.444202][ T5764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.457467][ T5764] usb 4-1: config 0 descriptor??
[  194.523490][ T5873] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2
[  194.531410][ T5873] [drm] Initialized udl on minor 2
[  194.695692][ T5873] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[  194.713144][ T5873] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  194.762259][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  194.769006][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  194.880534][ T5764] hid (null): global environment stack underflow
[  194.901215][ T5764] logitech-djreceiver 0003:046D:C714.0002: ignoring exceeding usage max
[  194.911694][ T5764] logitech-djreceiver 0003:046D:C714.0002: unknown main item tag 0x0
[  194.920598][ T5764] logitech-djreceiver 0003:046D:C714.0002: global environment stack underflow
[  194.930358][ T5764] logitech-djreceiver 0003:046D:C714.0002: item 0 0 1 11 parsing failed
[  194.940265][ T5764] logitech-djreceiver 0003:046D:C714.0002: logi_dj_probe: parse failed
[  194.949553][ T5764] logitech-djreceiver: probe of 0003:046D:C714.0002 failed with error -22
[  195.009212][ T5764] usb 2-1: USB disconnect, device number 7
[  195.013776][ T5821] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  195.045265][ T5821] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  195.156009][ T5821] usb 4-1: USB disconnect, device number 3
[  195.529496][ T8042] loop0: detected capacity change from 0 to 4096
[  195.704489][ T8044] loop1: detected capacity change from 0 to 512
[  195.769831][ T8044] EXT4-fs (loop1): Test dummy encryption mode enabled
[  195.785851][ T8044] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  195.796964][ T8046] loop4: detected capacity change from 0 to 256
[  195.863793][ T8044] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.759: bad orphan inode 131083
[  195.881381][ T8046] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d)
[  195.917447][ T8044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.322753][ T8062] loop3: detected capacity change from 0 to 512
[  196.350300][ T8044] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  196.385017][ T8062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.484833][ T8056] overlayfs: upper fs needs to support d_type.
[  196.619036][ T8056] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  196.674784][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.712458][ T8056] overlayfs: failed index dir cleanup (-512)
[  196.750193][ T8056] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[  197.076463][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.173503][ T8083] team0: entered promiscuous mode
[  197.216242][ T8083] team_slave_0: entered promiscuous mode
[  197.262382][ T8083] team_slave_1: entered promiscuous mode
[  197.311234][ T8083] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  198.695244][ T8124] loop3: detected capacity change from 0 to 1024
[  198.749093][ T8124] hfsplus: bad catalog entry type
[  198.813283][ T1093] hfsplus: b-tree write err: -5, ino 25
[  198.836815][ T1093] hfsplus: b-tree write err: -5, ino 4
[  198.853143][ T1093] hfsplus: b-tree write err: -5, ino 2
[  198.890542][ T1093] hfsplus: b-tree write err: -5, ino 26
[  199.274989][ T8138] __sock_release: fasync list not empty!
[  199.717099][ T5822] kernel write not supported for file /vcsa (pid: 5822 comm: kworker/1:5)
[  199.859966][ T8133] loop3: detected capacity change from 0 to 32768
[  200.887929][ T8156] loop4: detected capacity change from 0 to 40427
[  200.901431][ T8156] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  200.921639][ T8156] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  200.974811][ T8156] F2FS-fs (loop4): invalid crc value
[  201.287527][ T8156] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  201.307287][ T8156] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  201.466680][ T8156] syz.4.804: attempt to access beyond end of device
[  201.466680][ T8156] loop4: rw=10241, sector=53248, nr_sectors = 8 limit=40427
[  201.585424][ T6901] syz-executor: attempt to access beyond end of device
[  201.585424][ T6901] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  201.632898][ T6901] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  202.070432][ T8194] loop1: detected capacity change from 0 to 4096
[  202.175287][ T8197] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  202.242074][ T8201] loop3: detected capacity change from 0 to 64
[  202.320530][ T8194] NILFS (loop1): nilfs_ioctl_move_inode_block: invalid virtual block address (data): ino=0, cno=0, offset=0, blocknr=0, vblocknr=0
[  202.412155][ T8194] NILFS (loop1): error -2 preparing GC: cannot read source blocks
[  202.552096][ T8208] loop4: detected capacity change from 0 to 128
[  202.552396][ T5821] hid-generic 0005:16C0:0040.0003: unknown main item tag 0x0
[  202.617244][ T5821] hid-generic 0005:16C0:0040.0003: unknown main item tag 0x0
[  202.624746][ T5821] hid-generic 0005:16C0:0040.0003: unknown main item tag 0x0
[  202.710661][ T5821] hid-generic 0005:16C0:0040.0003: unknown main item tag 0x0
[  202.723127][ T5821] hid-generic 0005:16C0:0040.0003: unknown main item tag 0x0
[  202.753245][ T5821] hid-generic 0005:16C0:0040.0003: unknown main item tag 0x0
[  202.781642][ T5821] hid-generic 0005:16C0:0040.0003: unknown main item tag 0x0
[  202.826290][ T5821] hid-generic 0005:16C0:0040.0003: unknown main item tag 0x0
[  202.862945][ T5821] hid-generic 0005:16C0:0040.0003: unknown main item tag 0x0
[  202.917393][ T5821] hid-generic 0005:16C0:0040.0003: unknown main item tag 0x0
[  202.924891][ T5821] hid-generic 0005:16C0:0040.0003: unknown main item tag 0x0
[  202.936123][ T8214] loop4: detected capacity change from 0 to 1024
[  202.965043][ T8214] EXT4-fs: Ignoring removed bh option
[  202.977294][ T5821] hid-generic 0005:16C0:0040.0003: unknown main item tag 0x0
[  202.985197][ T5821] hid-generic 0005:16C0:0040.0003: unknown main item tag 0x0
[  203.036041][ T5821] hid-generic 0005:16C0:0040.0003: unknown main item tag 0x0
[  203.054007][ T5821] hid-generic 0005:16C0:0040.0003: unknown main item tag 0x0
[  203.083908][ T8214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.091511][ T5821] hid-generic 0005:16C0:0040.0003: unknown main item tag 0x0
[  203.157066][ T5821] hid-generic 0005:16C0:0040.0003: unknown main item tag 0x0
[  203.164795][ T5821] hid-generic 0005:16C0:0040.0003: unknown main item tag 0x0
[  203.257684][ T5821] hid-generic 0005:16C0:0040.0003: unknown main item tag 0x0
[  203.299350][ T5821] hid-generic 0005:16C0:0040.0003: unknown main item tag 0x0
[  203.327985][ T5821] hid-generic 0005:16C0:0040.0003: unknown main item tag 0x0
[  203.340013][ T5821] hid-generic 0005:16C0:0040.0003: unknown main item tag 0x0
[  203.365554][ T5821] hid-generic 0005:16C0:0040.0003: unknown main item tag 0x0
[  203.376436][ T6901] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.394518][ T5821] hid-generic 0005:16C0:0040.0003: unknown main item tag 0x0
[  203.396923][ T8226] loop3: detected capacity change from 0 to 512
[  203.419113][ T5821] hid-generic 0005:16C0:0040.0003: unknown main item tag 0x0
[  203.444224][ T5821] hid-generic 0005:16C0:0040.0003: unknown main item tag 0x0
[  203.457866][ T5821] hid-generic 0005:16C0:0040.0003: unknown main item tag 0x0
[  203.506152][ T5821] hid-generic 0005:16C0:0040.0003: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa
[  203.543843][ T8226] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.832: iget: bad i_size value: 38620345925642
[  203.562391][ T8226] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.832: couldn't read orphan inode 15 (err -117)
[  203.687652][ T8226] EXT4-fs (loop3): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.841390][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-00a1-0000-000000000000.
[  204.323746][ T8216] loop1: detected capacity change from 0 to 40427
[  204.357411][ T8216] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  204.365410][ T8216] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  204.415181][ T8216] F2FS-fs (loop1): invalid crc value
[  204.469886][ T8216] F2FS-fs (loop1): Found nat_bits in checkpoint
[  204.648580][ T8216] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  204.666360][ T8216] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  204.695904][ T8264] loop0: detected capacity change from 0 to 512
[  204.867038][ T8264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.910286][ T8264] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.042764][ T1073] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  205.090654][ T1073] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  205.127342][ T5821] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  205.152000][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.320835][ T5821] usb 5-1: Using ep0 maxpacket: 8
[  205.338803][ T5821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 1024
[  205.360576][ T5821] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  205.420706][ T5821] usb 5-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00
[  205.447294][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.468157][ T5821] usb 5-1: config 0 descriptor??
[  205.477670][ T8270] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  205.925191][ T5821] hid (null): report_id 0 is invalid
[  205.950061][ T5821] saitek 0003:06A3:0CCD.0004: unknown main item tag 0x0
[  205.959199][ T5821] saitek 0003:06A3:0CCD.0004: unknown main item tag 0x0
[  205.966864][ T5821] saitek 0003:06A3:0CCD.0004: unknown main item tag 0x6
[  205.975151][ T5821] saitek 0003:06A3:0CCD.0004: unknown main item tag 0x0
[  205.983277][ T5821] saitek 0003:06A3:0CCD.0004: unknown main item tag 0x0
[  205.990785][ T5821] saitek 0003:06A3:0CCD.0004: unknown main item tag 0x0
[  206.007603][ T5821] saitek 0003:06A3:0CCD.0004: report_id 0 is invalid
[  206.019084][ T5821] saitek 0003:06A3:0CCD.0004: item 0 1 1 8 parsing failed
[  206.032891][ T5821] saitek 0003:06A3:0CCD.0004: parse failed
[  206.045889][ T5821] saitek: probe of 0003:06A3:0CCD.0004 failed with error -22
[  206.155189][ T5821] usb 5-1: USB disconnect, device number 4
[  206.497983][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.860'.
[  207.077426][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  207.457703][ T5764] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  207.657572][ T5764] usb 2-1: Using ep0 maxpacket: 16
[  207.669797][ T5764] usb 2-1: unable to get BOS descriptor or descriptor too short
[  207.697804][ T5764] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  207.745205][ T5764] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  207.768894][ T5764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.776973][ T5764] usb 2-1: Product: syz
[  207.807414][ T5764] usb 2-1: Manufacturer: syz
[  207.812126][ T5764] usb 2-1: SerialNumber: syz
[  207.825022][ T8327] loop3: detected capacity change from 0 to 64
[  208.086910][ T5764] usb 2-1: Audio class v2/v3 interfaces need an interface association
[  208.132955][ T5764] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[  208.156605][ T8335] loop3: detected capacity change from 0 to 256
[  208.186586][ T8337] loop0: detected capacity change from 0 to 512
[  208.240609][ T8335] exFAT-fs (loop3): error, The cluster chain has a loop
[  208.262395][ T8335] exFAT-fs (loop3): Filesystem has been set read-only
[  208.280523][ T8337] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.877: bad orphan inode 11862016
[  208.296935][ T8337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  208.307207][ T8335] exFAT-fs (loop3): failed to count the number of clusters in root
[  208.314568][ T8337] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  208.387362][ T8335] exFAT-fs (loop3): failed to recognize exfat type
[  208.447241][ T5993] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  208.516480][ T5764] usb 2-1: 2:1 : can't get Cluster Descriptor
[  208.565623][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  208.874211][ T5764] usb 2-1: USB disconnect, device number 8
[  209.170895][ T5820] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  209.393236][ T5820] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  209.437234][ T5820] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  209.446362][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.500775][ T5820] gspca_main: stv0680-2.14.0 probing 041e:4007
[  209.606086][ T8357] overlayfs: conflicting lowerdir path
[  209.842124][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.889'.
[  210.051152][   T28] audit: type=1326 audit(1779415355.895:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8371 comm="syz.0.892" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b879ce59 code=0x7ffc0000
[  210.170412][   T28] audit: type=1326 audit(1779415355.895:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8371 comm="syz.0.892" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b879ce59 code=0x7ffc0000
[  210.297876][   T28] audit: type=1326 audit(1779415355.905:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8371 comm="syz.0.892" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b879ce59 code=0x7ffc0000
[  210.355101][   T28] audit: type=1326 audit(1779415355.905:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8371 comm="syz.0.892" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b879ce59 code=0x7ffc0000
[  210.364237][   T33] wlan1: Trigger new scan to find an IBSS to join
[  210.440679][   T28] audit: type=1326 audit(1779415355.925:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8371 comm="syz.0.892" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f63b879ce59 code=0x7ffc0000
[  210.480731][   T11] ------------[ cut here ]------------
[  210.486993][   T11] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x20
[  210.499053][   T11] WARNING: CPU: 1 PID: 11 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880
[  210.509342][   T11] Modules linked in:
[  210.513551][   T11] CPU: 1 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0
[  210.521191][   T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  210.531525][   T11] Workqueue: events_unbound cfg80211_wiphy_work
[  210.537864][   T11] RIP: 0010:__rate_control_send_low+0x635/0x880
[  210.544344][   T11] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 80 16 df 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 0b 49 54 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff
[  210.564467][   T11] RSP: 0018:ffffc90000107380 EFLAGS: 00010246
[  210.570795][   T11] RAX: c0c3ccf75972b900 RBX: 000000000000000c RCX: ffff88801a643c00
[  210.578942][   T11] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  210.586982][   T11] RBP: 0000000000000084 R08: ffffc90000106f87 R09: 1ffff92000020df0
[  210.595323][   T11] R10: dffffc0000000000 R11: fffff52000020df1 R12: 0000000000000020
[  210.603662][   T11] R13: dffffc0000000000 R14: ffff88801f70b358 R15: ffff888023c12ca8
[  210.611878][   T11] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  210.620916][   T11] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  210.627708][   T11] CR2: 00007f63b95456b8 CR3: 0000000061975000 CR4: 00000000003506e0
[  210.635921][   T11] Call Trace:
[  210.639296][   T11]  <TASK>
[  210.642314][   T11]  rate_control_send_low+0x194/0x790
[  210.647798][   T11]  rate_control_get_rate+0x20b/0x5d0
[  210.653156][   T11]  ieee80211_tx_h_rate_ctrl+0xb63/0x1790
[  210.659014][   T11]  ? ieee80211_tx_h_select_key+0x19e0/0x19e0
[  210.665049][   T11]  ? __lock_acquire+0x1273/0x7d40
[  210.670391][   T11]  ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0
[  210.676645][   T11]  invoke_tx_handlers_late+0xb6/0x1810
[  210.682220][   T11]  ? invoke_tx_handlers_early+0xa11/0x1cf0
[  210.688419][   T11]  ieee80211_tx+0x2d8/0x460
[  210.692986][   T11]  ? ieee80211_skb_resize+0x630/0x630
[  210.698472][   T11]  ? ieee80211_set_qos_hdr+0x1ca/0x510
[  210.703997][   T11]  ? __bpf_trace_tasklet+0x160/0x160
[  210.709548][   T11]  ? ieee80211_xmit+0x310/0x3f0
[  210.714553][   T11]  ? __ieee80211_tx_skb_tid_band+0x490/0x610
[  210.720997][   T11]  __ieee80211_tx_skb_tid_band+0x4d5/0x610
[  210.726969][   T11]  ? ieee80211_scan_state_send_probe+0x4b4/0x930
[  210.733510][   T11]  ieee80211_scan_state_send_probe+0x560/0x930
[  210.740057][   T11]  ieee80211_scan_work+0x4e9/0x1c40
[  210.745448][   T11]  cfg80211_wiphy_work+0x225/0x260
[  210.750676][   T11]  ? process_scheduled_works+0x96f/0x15d0
[  210.756456][   T11]  process_scheduled_works+0xa5d/0x15d0
[  210.762420][   T11]  ? worker_attach_to_pool+0x380/0x380
[  210.768260][   T11]  ? assign_work+0x3d2/0x5d0
[  210.773188][   T11]  worker_thread+0xa55/0xfc0
[  210.777931][   T11]  kthread+0x2fa/0x390
[  210.782131][   T11]  ? pr_cont_work+0x560/0x560
[  210.786859][   T11]  ? kthread_blkcg+0xd0/0xd0
[  210.791640][   T11]  ret_from_fork+0x48/0x80
[  210.796302][   T11]  ? kthread_blkcg+0xd0/0xd0
[  210.801091][   T11]  ret_from_fork_asm+0x11/0x20
[  210.805958][   T11]  </TASK>
[  210.809078][   T11] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  210.816592][   T11] CPU: 1 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0
[  210.824196][   T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  210.835369][   T11] Workqueue: events_unbound cfg80211_wiphy_work
[  210.841851][   T11] Call Trace:
[  210.845165][   T11]  <TASK>
[  210.848222][   T11]  dump_stack_lvl+0x18c/0x250
[  210.853058][   T11]  ? show_regs_print_info+0x20/0x20
[  210.858396][   T11]  ? load_image+0x420/0x420
[  210.863052][   T11]  panic+0x2dc/0x730
[  210.867083][   T11]  ? bpf_jit_dump+0xd0/0xd0
[  210.871664][   T11]  ? ret_from_fork_asm+0x11/0x20
[  210.876650][   T11]  __warn+0x2e0/0x470
[  210.880674][   T11]  ? __rate_control_send_low+0x635/0x880
[  210.886361][   T11]  ? __rate_control_send_low+0x635/0x880
[  210.892099][   T11]  report_bug+0x2be/0x4f0
[  210.896448][   T11]  ? __rate_control_send_low+0x635/0x880
[  210.902092][   T11]  ? __rate_control_send_low+0x635/0x880
[  210.907734][   T11]  ? __rate_control_send_low+0x637/0x880
[  210.913465][   T11]  handle_bug+0xcf/0x120
[  210.917723][   T11]  exc_invalid_op+0x1a/0x50
[  210.922253][   T11]  asm_exc_invalid_op+0x1a/0x20
[  210.927468][   T11] RIP: 0010:__rate_control_send_low+0x635/0x880
[  210.933922][   T11] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 80 16 df 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 0b 49 54 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff
[  210.953734][   T11] RSP: 0018:ffffc90000107380 EFLAGS: 00010246
[  210.959905][   T11] RAX: c0c3ccf75972b900 RBX: 000000000000000c RCX: ffff88801a643c00
[  210.967976][   T11] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  210.975956][   T11] RBP: 0000000000000084 R08: ffffc90000106f87 R09: 1ffff92000020df0
[  210.984478][   T11] R10: dffffc0000000000 R11: fffff52000020df1 R12: 0000000000000020
[  210.992799][   T11] R13: dffffc0000000000 R14: ffff88801f70b358 R15: ffff888023c12ca8
[  211.001429][   T11]  rate_control_send_low+0x194/0x790
[  211.006743][   T11]  rate_control_get_rate+0x20b/0x5d0
[  211.012057][   T11]  ieee80211_tx_h_rate_ctrl+0xb63/0x1790
[  211.017802][   T11]  ? ieee80211_tx_h_select_key+0x19e0/0x19e0
[  211.023794][   T11]  ? __lock_acquire+0x1273/0x7d40
[  211.028837][   T11]  ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0
[  211.034933][   T11]  invoke_tx_handlers_late+0xb6/0x1810
[  211.040417][   T11]  ? invoke_tx_handlers_early+0xa11/0x1cf0
[  211.046334][   T11]  ieee80211_tx+0x2d8/0x460
[  211.050947][   T11]  ? ieee80211_skb_resize+0x630/0x630
[  211.056343][   T11]  ? ieee80211_set_qos_hdr+0x1ca/0x510
[  211.061912][   T11]  ? __bpf_trace_tasklet+0x160/0x160
[  211.067397][   T11]  ? ieee80211_xmit+0x310/0x3f0
[  211.072259][   T11]  ? __ieee80211_tx_skb_tid_band+0x490/0x610
[  211.078692][   T11]  __ieee80211_tx_skb_tid_band+0x4d5/0x610
[  211.084523][   T11]  ? ieee80211_scan_state_send_probe+0x4b4/0x930
[  211.091035][   T11]  ieee80211_scan_state_send_probe+0x560/0x930
[  211.097324][   T11]  ieee80211_scan_work+0x4e9/0x1c40
[  211.102563][   T11]  cfg80211_wiphy_work+0x225/0x260
[  211.107785][   T11]  ? process_scheduled_works+0x96f/0x15d0
[  211.113607][   T11]  process_scheduled_works+0xa5d/0x15d0
[  211.119200][   T11]  ? worker_attach_to_pool+0x380/0x380
[  211.124674][   T11]  ? assign_work+0x3d2/0x5d0
[  211.129283][   T11]  worker_thread+0xa55/0xfc0
[  211.133916][   T11]  kthread+0x2fa/0x390
[  211.138087][   T11]  ? pr_cont_work+0x560/0x560
[  211.142781][   T11]  ? kthread_blkcg+0xd0/0xd0
[  211.147642][   T11]  ret_from_fork+0x48/0x80
[  211.152095][   T11]  ? kthread_blkcg+0xd0/0xd0
[  211.156793][   T11]  ret_from_fork_asm+0x11/0x20
[  211.161674][   T11]  </TASK>
[  211.165060][   T11] Kernel Offset: disabled
[  211.169571][   T11] Rebooting in 86400 seconds..