last executing test programs:

6.985033173s ago: executing program 2 (id=1251):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x2000)
statx(r2, &(0x7f00000002c0)='./file0\x00', 0x1000, 0x2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
read$FUSE(r2, &(0x7f0000001600)={0x2020, 0x0, 0x0, <r5=>0x0}, 0x2020)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x110000, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000160000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',gid=\x00\x00\x00\x00\x00', @ANYRESDEC=r4, @ANYBLOB=',max_read=0x0000000000000006,blksize=0x0000000000000400,allow_other,default_permissions,max_read=0x0000000000000005,max_read=0x0000000000000008,euid>', @ANYRESDEC, @ANYBLOB=',euid<', @ANYRESDEC=r5, @ANYBLOB=',hash,fscontext=unconfined_u,\x00'])
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000001c0)="0fdd557c26f72f0f232c650fc7aa000036d2ef0f01ca0f20660f07baf80c66b875a5ab8966efbafc0cb069eef4", 0x2d}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001a00000000000000400000"], 0x1c}}, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x14, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)

6.765200611s ago: executing program 3 (id=1254):
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00')

5.944338618s ago: executing program 1 (id=1256):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x2a0, 0x108, 0x0, 0x148, 0x108, 0x148, 0x208, 0x240, 0x240, 0x208, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'caif0\x00'}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x84f}}, @common=@socket0={{0x20}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'team0\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1]}, {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300)

5.851897375s ago: executing program 3 (id=1258):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000300)={0x0, 0x4000000}, 0x0, 0x0)
r0 = socket(0x1, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fffffff}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="4900330080000000ffffffffffff08021100000050505050505000000000000000000000000000000100040600000000000025030000002a01003c040000"], 0x68}}, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1f"], 0x118)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000030a01010000000000000000020000050c0002400000000000000001"], 0x5c}}, 0x0)
r6 = getpgrp(0x0)
r7 = syz_pidfd_open(r6, 0x0)
pidfd_send_signal(r7, 0x2c, &(0x7f0000000140)={0x10000, 0x16, 0xd2000000}, 0x4)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
kcmp(r6, r6, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x0, 0x221, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)

5.737301555s ago: executing program 1 (id=1260):
r0 = socket$igmp(0x2, 0x3, 0x2)
sched_setscheduler(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCDARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @multicast2}})

5.708681137s ago: executing program 2 (id=1262):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000240)=ANY=[@ANYBLOB='iocharset=iaciceland,umask=00000000000000000000005,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,iocharset=iso8859-5,errors=continue,errors=continue,errors=remount-ro,iocharset=maccroatian,errors=continue,\x00'], 0x1, 0x1524, &(0x7f0000002280)="$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")
mount(&(0x7f0000000180)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='befs\x00', 0x0, &(0x7f0000000240))

4.923085021s ago: executing program 1 (id=1265):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000bc0)='./bus\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@delalloc}, {@noblock_validity}, {@debug}, {@test_dummy_encryption}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r4, 0x58, &(0x7f00000015c0)}, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000000000000000001"], 0x0, 0x4e}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r5, 0x1, 0x1}, 0x48)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000140), &(0x7f0000000200)=r6}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0, &(0x7f0000000400)=""/4096, 0x1000}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000061000500000000e8a5"], &(0x7f0000000140)='GPL\x00', 0x10000, 0x95, &(0x7f0000000340)=""/149, 0x0, 0x1a, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7}, 0x90)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'macvlan1\x00'})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

4.862343896s ago: executing program 3 (id=1266):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='sched_switch\x00'}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='skb_copy_datagram_iovec\x00', r2}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r3, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/234, 0xea}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r6, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x41}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000008}, 0x4004800)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
sendmmsg$inet(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000940)="4afdce905a7d81bee1c8360f0a13a02bdfabc806561910076924ab3e3b7a225db0d815142096cd419139837291346ff2a70840d7bbc436a8bd20d6756e32cd5d2a84a770129debe951eff6fbd49b711a9fece8d78be89fd62da002c43da20d07714ef433bb5e5add75d09ac23cb62e5b3e34f8ed386b61d306f24e8ae2b094b463cb669c9def97b43573dc1f80fb817a7e7d5788629d3108cd542074b42d4799dbd57876a5ed12378ee000e38218dc4f0bce811dfb81f30c891f0e0d197560126cd51b902f3f8b110506", 0x1}], 0x1}}], 0xe, 0xc0084d1)
r7 = syz_mount_image$fuse(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x814811, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB=',default_permissions,allow_other,max_read=0x0000000000000002,max_read=0x0000000000000009,blksize=0x0000000000001200,blksize=0x0000000000000800,default_permissions,default_permissions,measure,hash,subj_type=nl80211\x00,subj_role=,dont_measure,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',huid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, &(0x7f0000000340)="eb9104cd41861dac19762782ac727c7ecc94abc8f9d508d6bc82edbd61d6cdeb9e67c40108")
faccessat2(r7, &(0x7f0000000380)='./file0\x00', 0x44, 0x1000)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xb, {[@global, @main=@item_4={0x3, 0x0, 0x0, "c9934390"}, @global=@item_4={0x3, 0x1, 0x1, "2ddcc2ab"}]}}, 0x0}, 0x0)

4.725087757s ago: executing program 2 (id=1268):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
setrlimit(0x8, &(0x7f0000000380))
mlockall(0x7)

4.573107959s ago: executing program 4 (id=1270):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x53, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x57}]}, @TIPC_NLA_MON={0x0, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD, @TIPC_NLA_MON_ACTIVATION_THRESHOLD, @TIPC_NLA_MON_ACTIVATION_THRESHOLD, @TIPC_NLA_MON_REF]}, @TIPC_NLA_NET={0x0, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID, @TIPC_NLA_NET_ID, @TIPC_NLA_NET_ID]}, @TIPC_NLA_BEARER={0x0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x0, 0x4, {{0x0, 0x1, @in={0x2, 0x0, @local}}, {0x0, 0x2, @in6={0xa, 0x0, 0x0, @private0}}}}, @TIPC_NLA_BEARER_NAME={0x0, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN, @TIPC_NLA_BEARER_NAME={0x0, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x0, 0x4, {{0x0, 0x1, @in={0x2, 0x0, @dev}}, {0x0, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x0, 0x1, @udp='udp:syz0\x00'}]}]}, 0x24}}, 0x0)

4.343909618s ago: executing program 2 (id=1271):
syz_emit_vhci(&(0x7f0000002340)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)

3.413695303s ago: executing program 2 (id=1273):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
unshare(0x62040200)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r0}, 0x10)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x68)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x10000, 0x5}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x1, 0x5555, &(0x7f000000b3c0)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000600)={0x123e3})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
statx(r3, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000280))

3.197782891s ago: executing program 1 (id=1275):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@TCA_CHAIN={0x8, 0xb, 0x667}]}, 0x2c}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3.122345357s ago: executing program 4 (id=1277):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000300)={0x0, 0x4000000}, 0x0, 0x0)
r0 = socket(0x1, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fffffff}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="4900330080000000ffffffffffff08021100000050505050505000000000000000000000000000000100040600000000000025030000002a01003c040000"], 0x68}}, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1f"], 0x118)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000030a01010000000000000000020000050c0002400000000000000001"], 0x5c}}, 0x0)
r6 = getpgrp(0x0)
r7 = syz_pidfd_open(r6, 0x0)
pidfd_send_signal(r7, 0x2c, &(0x7f0000000140)={0x10000, 0x16, 0xd2000000}, 0x4)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
kcmp(r6, r6, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x0, 0x221, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)

2.952083871s ago: executing program 1 (id=1279):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180), 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000000)=ANY=[])

2.461681691s ago: executing program 0 (id=1280):
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {0x7}}, 0x14}}, 0x0)
socket$kcm(0x29, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48)

2.185652613s ago: executing program 0 (id=1281):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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")
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r2=>0x0)
ftruncate(r0, 0x4000000)
io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x9, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000000}])

2.021872026s ago: executing program 4 (id=1282):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xf)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x4, 0xffd, &(0x7f00000004c0)=""/4093}, 0x90)

1.759165837s ago: executing program 4 (id=1283):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_current(r3, &(0x7f0000000040)=@profile={'permprofile ', ':proc/thrr/current\x00\x03\x89vO\x9f\xc9oR8\xaaNU{\x1eC\x06\b\x00\x00\x14\xb5.\xbd\x97\xfa\xe4\xfcT@\xc7\x12\xc6\xcb\x19\xee:]\xc2\x80'}, 0x46)
socket$nl_netfilter(0x10, 0x3, 0xc)
memfd_secret(0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdir(0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2})

736.32522ms ago: executing program 0 (id=1284):
syz_emit_vhci(&(0x7f0000002340)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)

735.463751ms ago: executing program 4 (id=1285):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x2a0, 0x108, 0x0, 0x148, 0x108, 0x148, 0x208, 0x240, 0x240, 0x208, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'caif0\x00'}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x84f}}, @common=@socket0={{0x20}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'team0\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1]}, {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300)

573.283044ms ago: executing program 1 (id=1286):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000bc0)='./bus\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@delalloc}, {@noblock_validity}, {@debug}, {@test_dummy_encryption}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r4, 0x58, &(0x7f00000015c0)}, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000000000000000001"], 0x0, 0x4e}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r5, 0x1, 0x1}, 0x48)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000140), &(0x7f0000000200)=r6}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0, &(0x7f0000000400)=""/4096, 0x1000}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000061000500000000e8a5"], &(0x7f0000000140)='GPL\x00', 0x10000, 0x95, &(0x7f0000000340)=""/149, 0x0, 0x1a, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7}, 0x90)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'macvlan1\x00'})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

501.984ms ago: executing program 3 (id=1287):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)

481.658361ms ago: executing program 4 (id=1288):
open(&(0x7f0000000040)='./file0\x00', 0x40c5, 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4)
open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
r1 = open(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x10)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_usb_connect$cdc_ncm(0x4, 0x8d, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x2, 0x1, 0x0, 0x20, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "1d9e"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0x7f, 0x0, 0x22}, {0x6, 0x24, 0x1a, 0xffff}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x7af2, 0x6c, 0x0, 0x7, 0xba}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x6}, @obex={0x5, 0x24, 0x15, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x6a, 0x9, 0x18}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x40, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x1, 0x3, 0x1}}}}}}}]}}, &(0x7f0000000e40)={0x0, 0x0, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="051aff00000300000000f0ff000000"], 0x6, [{0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x86, &(0x7f0000000580)=@string={0x86, 0x3, "5e55ef2b02809f7efe8b9beb0a9599ee7a573acf876c0cc07bc1c06d4f4f7ee06602f9864569c8ffa5b1ab9d8bddad1d9df5b8597d238236ccc4c88a84797830fec16ffee2b70e0e205925c7bf58fe7d98423ecee3cbe2ed315e3501ae87a6dc9f4c0798115a2659f301222daa38899aead28f29ed314b04f62de21dc13c6ab766a3699d"}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000001e00)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x0)
socketpair(0x28, 0x2, 0x0, &(0x7f0000000000))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
open(0x0, 0x64842, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
close(0xffffffffffffffff)
r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$UHID_CREATE(r7, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120)
readv(r7, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2)
write$UHID_DESTROY(r7, &(0x7f0000000080), 0x4)

408.947647ms ago: executing program 0 (id=1289):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x84, 0x5, [{{@in6=@private1, 0x0, 0x32}, 0x2, @in6=@local, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x2b}, 0x2}]}]}, 0x13c}}, 0x0)

270.225818ms ago: executing program 3 (id=1290):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000089"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x21, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14)

170.152886ms ago: executing program 0 (id=1291):
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {0x7}}, 0x14}}, 0x0)
socket$kcm(0x29, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48)

73.066165ms ago: executing program 3 (id=1292):
bpf$MAP_CREATE(0x0, &(0x7f00000075c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x37}}, &(0x7f0000000480)='GPL\x00'}, 0x80)
openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="070000000850fd9d7f00000000c8b476a9"], 0x0}, 0x80)
capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffdfffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000a3000000000600000018800000000000c24c921ae6f86d2be86e04ef5fb3bdf095bfd1795b0f87d9286bd7b2ec2fc621f75639c5abb13c62e02d694a5732863432300e1ecc58055be56413278c151a649fc08e11518473e2717ef464e0c34aef45a230", @ANYBLOB], 0x0}, 0x90)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000000)=0x40000000000, 0x14)
ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080))
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$packet(0x11, 0x0, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10)
syz_emit_ethernet(0x45, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000fc010000000000000000000000000000ff02000000000000000000000000000100000e2200109078a27f00"/69], 0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x10000a0)
r3 = dup(r2)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x0, 0x7fffffff, 0xfffffeff, 0x200e, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x20, 0xff, 0xffffff5a, 0x200, 0x4a9, 0xffffffffffffffff, 0x6ab2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="9b43a409aa81aaaaaaaaaa0008004500001c000400000001ffffff0000907800"/42], 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r5 = fanotify_init(0x200, 0x0)
fanotify_mark(r5, 0x201, 0x4800003e, r4, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r5, 0x1e, 0x40001022, r3, 0x0)

48.331396ms ago: executing program 2 (id=1293):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')
linkat(r0, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0)
open(&(0x7f00000002c0)='./bus\x00', 0x14927e, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)

0s ago: executing program 0 (id=1294):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp6\x00')
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000004c0))
ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
pread64(r0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

kernel console output (not intermixed with test programs):

 usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  228.265847][ T3642] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.277569][ T3612] batman_adv: batadv0: Removing interface: batadv_slave_0
[  228.295181][ T3612] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  228.304079][ T3612] batman_adv: batadv0: Removing interface: batadv_slave_1
[  228.327526][ T3642] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  228.342311][ T3642] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00
[  228.346258][ T3612] device bridge_slave_1 left promiscuous mode
[  228.352036][ T3642] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.368429][ T3642] usb 5-1: config 0 descriptor??
[  228.369730][ T3612] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.383957][ T3612] device bridge_slave_0 left promiscuous mode
[  228.390689][ T3612] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.421388][ T3612] device veth1_macvtap left promiscuous mode
[  228.427513][ T3612] device veth0_macvtap left promiscuous mode
[  228.433621][ T3612] device veth1_vlan left promiscuous mode
[  228.440174][ T3612] device veth0_vlan left promiscuous mode
[  228.630548][ T3828] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  228.847572][ T3642] kye 0003:0458:0087.0010: unknown main item tag 0x0
[  228.864173][ T3642] kye 0003:0458:0087.0010: hidraw0: USB HID v0.00 Device [HID 0458:0087] on usb-dummy_hcd.4-1/input0
[  228.888525][ T3612] team0 (unregistering): Port device team_slave_1 removed
[  228.940237][ T3612] team0 (unregistering): Port device team_slave_0 removed
[  228.981027][ T3612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  229.015946][ T3828] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  229.030085][ T3612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  229.030220][ T3828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  229.054281][ T3828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  229.068134][ T3642] usb 5-1: USB disconnect, device number 13
[  229.069414][ T3828] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  229.230105][ T3828] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  229.240528][ T3828] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  229.249036][ T3828] usb 3-1: Manufacturer: syz
[  229.262876][ T3828] usb 3-1: config 0 descriptor??
[  229.352378][ T3567] Bluetooth: hci2: command tx timeout
[  229.491005][ T3612] bond0 (unregistering): Released all slaves
[  229.636010][ T6319] team0: Port device team_slave_0 added
[  229.705228][ T6272] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  229.747443][ T6319] team0: Port device team_slave_1 added
[  229.748816][ T3828] appleir 0003:05AC:8243.0011: unknown main item tag 0x0
[  229.754067][ T3567] Bluetooth: hci5: command tx timeout
[  229.769262][ T6272] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  229.777164][ T3828] appleir 0003:05AC:8243.0011: No inputs registered, leaving
[  229.800257][ T3828] appleir 0003:05AC:8243.0011: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  229.899338][ T6272] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  229.985749][ T3567] Bluetooth: hci7: command tx timeout
[  229.995988][ T6272] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  230.013596][ T6355] chnl_net:caif_netlink_parms(): no params data found
[  230.114994][ T6401] netlink: 'syz.4.753': attribute type 1 has an invalid length.
[  230.208707][ T6401] loop4: detected capacity change from 0 to 2048
[  230.245944][ T6319] batman_adv: batadv0: Adding interface: batadv_slave_0
[  230.271408][ T6319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.623981][ T3999] usb 3-1: USB disconnect, device number 7
[  230.805230][ T6319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  230.809217][ T6401]  loop4: p1 < > p3
[  230.821487][ T6319] batman_adv: batadv0: Adding interface: batadv_slave_1
[  230.828855][ T6319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.839439][ T6401] loop4: p3 size 134217728 extends beyond EOD, truncated
[  230.898065][ T3970] udevd[3970]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  230.918265][ T4929] udevd[4929]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  230.929197][ T6319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  231.098868][ T6319] device hsr_slave_0 entered promiscuous mode
[  231.113151][ T6319] device hsr_slave_1 entered promiscuous mode
[  231.131464][ T6319] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  231.151689][ T6319] Cannot create hsr debugfs directory
[  231.330124][ T6355] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.362993][ T6355] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.384347][ T6355] device bridge_slave_0 entered promiscuous mode
[  231.425684][ T3567] Bluetooth: hci2: command tx timeout
[  231.448591][ T6355] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.456325][ T6355] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.611882][ T6355] device bridge_slave_1 entered promiscuous mode
[  232.080355][ T3567] Bluetooth: hci7: command tx timeout
[  232.199386][ T3564] Bluetooth: hci5: command tx timeout
[  232.319205][ T6355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  232.356538][ T6422] futex_wake_op: syz.2.757 tries to shift op by 35; fix this program
[  232.358681][ T6355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  232.446041][ T6272] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.540868][ T6355] team0: Port device team_slave_0 added
[  232.561540][ T6428] netlink: 48 bytes leftover after parsing attributes in process `syz.2.759'.
[  232.599782][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  232.616760][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  232.709666][ T6355] team0: Port device team_slave_1 added
[  232.733815][ T6272] 8021q: adding VLAN 0 to HW filter on device team0
[  232.848686][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  232.884049][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  232.913351][ T6136] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.920568][ T6136] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.947837][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  232.956817][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  232.965493][ T6136] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.972796][ T6136] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.994636][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  233.004425][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  233.014692][ T6355] batman_adv: batadv0: Adding interface: batadv_slave_0
[  233.043983][ T6355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  233.083052][ T6355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  233.121137][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  233.139990][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  233.187131][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  233.213770][ T6355] batman_adv: batadv0: Adding interface: batadv_slave_1
[  233.223743][ T6355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  233.288726][ T6355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  233.357297][ T6449] futex_wake_op: syz.2.766 tries to shift op by 35; fix this program
[  233.395667][ T4169] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  233.417142][ T6319] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.479625][ T3828] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  233.496815][ T3828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  233.510168][ T3828] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  233.518652][ T3564] Bluetooth: hci2: command tx timeout
[  233.543436][ T3828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  233.552395][ T3828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  233.570316][ T6272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  233.583464][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  233.603819][ T6455] netlink: 48 bytes leftover after parsing attributes in process `syz.2.768'.
[  233.693480][ T6319] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.774831][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  233.785794][ T4169] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  233.806317][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  233.814150][ T4169] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.861205][ T4169] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.891699][ T4169] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  233.917543][ T6355] device hsr_slave_0 entered promiscuous mode
[  233.949854][ T6355] device hsr_slave_1 entered promiscuous mode
[  233.972026][ T6355] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  234.006223][ T6355] Cannot create hsr debugfs directory
[  234.025885][ T4169] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  234.056582][ T4169] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  234.064738][ T4169] usb 5-1: Manufacturer: syz
[  234.092347][ T4169] usb 5-1: config 0 descriptor??
[  234.154348][ T6319] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.226098][ T3564] Bluetooth: hci5: command tx timeout
[  234.371912][ T6319] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.491904][ T6481] futex_wake_op: syz.2.774 tries to shift op by 35; fix this program
[  234.517895][ T3828] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  234.538313][ T3828] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  234.589046][ T4169] appleir 0003:05AC:8243.0012: unknown main item tag 0x0
[  234.605289][ T6272] 8021q: adding VLAN 0 to HW filter on device batadv0
[  234.616068][ T4169] appleir 0003:05AC:8243.0012: No inputs registered, leaving
[  234.654332][ T4169] appleir 0003:05AC:8243.0012: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  234.781492][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  234.806472][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  234.976975][ T3828] usb 5-1: USB disconnect, device number 14
[  235.021693][ T6272] device veth0_vlan entered promiscuous mode
[  235.138310][ T6492] netlink: 'syz.2.776': attribute type 1 has an invalid length.
[  235.229920][ T6492] loop2: detected capacity change from 0 to 2048
[  235.855768][ T3564] Bluetooth: hci2: command tx timeout
[  235.889272][ T6492]  loop2: p1 < > p3
[  235.895107][ T6492] loop2: p3 size 134217728 extends beyond EOD, truncated
[  235.947734][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  235.956939][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  235.965994][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  235.979502][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  235.993583][ T6272] device veth1_vlan entered promiscuous mode
[  236.109984][ T3969] udevd[3969]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  236.123428][ T4929] udevd[4929]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  236.264952][ T6355] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.329827][ T6504] tmpfs: Bad value for 'mpol'
[  236.335004][ T6319] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  236.373603][ T6319] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  236.413434][ T6319] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  236.519982][ T6355] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.542919][ T6136] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  236.551190][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  236.570503][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  236.596411][ T6319] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  236.625229][ T6272] device veth0_macvtap entered promiscuous mode
[  236.697829][ T6355] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.751374][ T6272] device veth1_macvtap entered promiscuous mode
[  236.782349][ T6355] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.828870][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.841250][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.853842][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.867405][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.878966][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.899840][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.925501][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.955555][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.955724][ T6136] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.975641][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.986827][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.997079][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.023803][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.035723][ T6136] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  237.050600][ T6136] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  237.054521][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.080530][ T6136] usb 3-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00
[  237.083689][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.099806][ T6136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.112308][ T6272] batman_adv: batadv0: Interface activated: batadv_slave_0
[  237.117543][ T6136] usb 3-1: config 0 descriptor??
[  237.147448][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  237.172278][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  237.183831][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  237.196339][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  237.226829][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.238126][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.249209][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.260154][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.270608][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.281330][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.293143][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.303825][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.314021][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.327527][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.337629][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.352062][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.362410][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.373187][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.385225][ T6272] batman_adv: batadv0: Interface activated: batadv_slave_1
[  237.409004][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  237.418524][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  237.439861][ T6272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.453257][ T6272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.462768][ T6272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.472008][ T6272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.719221][ T6136] kye 0003:0458:0087.0013: unknown main item tag 0x0
[  237.747202][ T6136] kye 0003:0458:0087.0013: hidraw0: USB HID v0.00 Device [HID 0458:0087] on usb-dummy_hcd.2-1/input0
[  237.868476][ T6527] netlink: 'syz.4.785': attribute type 1 has an invalid length.
[  237.958073][ T6527] loop4: detected capacity change from 0 to 2048
[  238.047201][ T6527]  loop4: p1 < > p3
[  238.061066][ T6527] loop4: p3 size 134217728 extends beyond EOD, truncated
[  238.325048][ T6527] loop4: detected capacity change from 0 to 2048
[  238.366419][ T6527] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  238.459690][ T4169] usb 3-1: USB disconnect, device number 8
[  238.562145][ T6319] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.606669][ T6319] 8021q: adding VLAN 0 to HW filter on device team0
[  238.661924][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  238.686799][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  238.694572][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  238.703809][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  238.712746][  T153] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.719881][  T153] bridge0: port 1(bridge_slave_0) entered forwarding state
[  238.728544][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  238.822905][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  238.831962][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  238.840825][ T3642] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.848004][ T3642] bridge0: port 2(bridge_slave_1) entered forwarding state
[  238.864652][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  238.873807][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  238.882744][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  238.892542][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  238.901145][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  238.909796][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  238.918593][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  238.927181][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  238.939310][   T52] block nbd1: Possible stuck request ffff88801fd80000: control (read@0,4096B). Runtime 60 seconds
[  238.960876][ T6136] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  239.050329][ T3970] udevd[3970]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  239.062715][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  239.074656][ T4929] udevd[4929]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  239.085810][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  239.106287][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  239.115921][ T6319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  239.127301][ T6355] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  239.208720][ T6355] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  239.325916][ T6355] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  239.345263][ T4444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.349297][ T6355] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  239.366031][ T6136] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  239.387564][ T4444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.406913][ T6136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.444115][ T6136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  239.461461][ T6136] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  239.481458][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.495776][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.509798][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  239.542178][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  239.595928][ T6136] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  239.610469][ T6136] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  239.626272][ T6136] usb 5-1: Manufacturer: syz
[  239.632737][ T6136] usb 5-1: config 0 descriptor??
[  239.702917][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  239.726277][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  239.749847][ T6319] 8021q: adding VLAN 0 to HW filter on device batadv0
[  239.998285][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  240.009225][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  240.723631][ T6136] appleir 0003:05AC:8243.0014: unknown main item tag 0x0
[  240.753792][ T6136] appleir 0003:05AC:8243.0014: No inputs registered, leaving
[  240.768865][ T6355] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.792816][ T6319] device veth0_vlan entered promiscuous mode
[  240.822834][ T6136] appleir 0003:05AC:8243.0014: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  240.928310][ T6136] usb 5-1: USB disconnect, device number 15
[  241.042036][ T6355] 8021q: adding VLAN 0 to HW filter on device team0
[  241.062647][ T3325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  241.081717][ T3325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  241.094709][ T3325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  241.106559][ T3325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  241.116831][ T3325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  241.124809][ T3325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  241.135294][ T6319] device veth1_vlan entered promiscuous mode
[  241.285370][ T6560] loop2: detected capacity change from 0 to 128
[  241.403414][ T3325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  241.438862][ T6560] FAT-fs (loop2): Directory bread(block 2326) failed
[  241.447703][ T6560] FAT-fs (loop2): Directory bread(block 2326) failed
[  241.448078][ T3325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  241.495558][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.502965][ T3325] bridge0: port 1(bridge_slave_0) entered forwarding state
[  241.548527][ T3325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  241.571058][ T3325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  241.617415][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.624744][ T3325] bridge0: port 2(bridge_slave_1) entered forwarding state
[  241.783184][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  241.792899][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  241.810929][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  241.832942][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  241.857837][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  241.883085][ T6355] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  241.920603][ T6355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  242.044470][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  242.051966][ T6136] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  242.065054][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  242.091120][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  242.111685][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  242.131916][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  242.153828][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  242.169445][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  242.180728][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  242.192669][ T6319] device veth0_macvtap entered promiscuous mode
[  242.218854][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  242.244923][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  242.416575][ T6136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.437448][ T6136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.487952][ T6319] device veth1_macvtap entered promiscuous mode
[  242.505871][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  242.525692][ T6136] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  242.543365][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  242.570135][ T6136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.596415][ T6319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.636762][ T6136] usb 5-1: config 0 descriptor??
[  242.641793][ T6319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.641836][ T6319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.723281][ T6319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.754213][ T6319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.786141][ T6319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.807490][ T6319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.830355][ T6319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.842081][ T6319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.871671][ T6319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.915617][ T6319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.954042][ T6319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.997437][ T6319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.011473][ T6319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.021680][ T6319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.032994][ T6319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.044937][ T6319] batman_adv: batadv0: Interface activated: batadv_slave_0
[  243.111040][ T3612] device hsr_slave_0 left promiscuous mode
[  243.135972][ T3612] device hsr_slave_1 left promiscuous mode
[  243.156263][ T6136] hid (null): nested delimiters
[  243.167650][ T6136] hid-led 0003:27B8:01ED.0015: nested delimiters
[  243.194470][ T6136] hid-led 0003:27B8:01ED.0015: item 0 1 2 10 parsing failed
[  243.240973][ T6136] hid-led: probe of 0003:27B8:01ED.0015 failed with error -22
[  243.275231][ T3567] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  243.399924][ T3567] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  243.411880][ T3567] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  243.427954][ T3567] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  243.442628][ T3567] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  243.451640][ T3567] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  244.043531][ T3612] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  244.051682][ T3612] batman_adv: batadv0: Removing interface: batadv_slave_0
[  244.073900][ T3612] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  244.082731][ T3612] batman_adv: batadv0: Removing interface: batadv_slave_1
[  244.094822][ T6579] loop1: detected capacity change from 0 to 512
[  244.102893][ T6579] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  244.118319][ T6579] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  244.121782][ T3612] device bridge_slave_1 left promiscuous mode
[  244.146071][ T3612] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.154771][ T3612] device bridge_slave_0 left promiscuous mode
[  244.161795][ T3612] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.179089][ T6579] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  244.193263][ T3612] device hsr_slave_0 left promiscuous mode
[  244.197899][ T6579] EXT4-fs (loop1): 1 truncate cleaned up
[  244.204959][ T6579] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  244.213679][ T3612] device hsr_slave_1 left promiscuous mode
[  244.226641][ T3612] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  244.234115][ T3612] batman_adv: batadv0: Removing interface: batadv_slave_0
[  244.280620][ T3612] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  244.295734][ T3612] batman_adv: batadv0: Removing interface: batadv_slave_1
[  244.301019][ T6579] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[  244.322270][ T3612] device bridge_slave_1 left promiscuous mode
[  244.329703][ T3612] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.342032][ T3612] device bridge_slave_0 left promiscuous mode
[  244.348792][ T3612] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.380313][ T6272] EXT4-fs (loop1): unmounting filesystem.
[  244.464098][ T3612] device veth1_macvtap left promiscuous mode
[  244.474132][ T3612] device veth0_macvtap left promiscuous mode
[  244.485831][ T3612] device veth1_vlan left promiscuous mode
[  244.497184][ T3612] device veth0_vlan left promiscuous mode
[  244.504721][ T3612] device veth1_macvtap left promiscuous mode
[  244.511750][ T3612] device veth0_macvtap left promiscuous mode
[  244.519842][ T3612] device veth1_vlan left promiscuous mode
[  244.526114][ T3612] device veth0_vlan left promiscuous mode
[  245.091019][ T3612] team0 (unregistering): Port device team_slave_1 removed
[  245.133619][ T3612] team0 (unregistering): Port device team_slave_0 removed
[  245.173159][ T3612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  245.216006][ T3612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  245.587277][ T3566] Bluetooth: hci4: command tx timeout
[  245.608773][ T3612] bond0 (unregistering): Released all slaves
[  245.998684][ T3612] team0 (unregistering): Port device team_slave_1 removed
[  246.038858][ T3612] team0 (unregistering): Port device team_slave_0 removed
[  246.078489][ T3612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  246.119082][ T3612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  246.501385][ T3612] bond0 (unregistering): Released all slaves
[  246.593472][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  246.602318][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  246.613875][ T6319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  246.635958][ T6319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.646544][ T6319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  246.657153][ T6319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.668920][ T6319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  246.679414][ T6319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.689388][ T6319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  246.699884][ T6319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.710090][ T6319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  246.720678][ T6319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.730596][ T6319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  246.743224][ T6319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.756288][ T6319] batman_adv: batadv0: Interface activated: batadv_slave_1
[  246.767248][ T6319] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  246.785666][ T6319] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  246.794423][ T6319] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  246.803170][ T6319] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  246.818266][  T153] usb 5-1: USB disconnect, device number 16
[  246.850251][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  246.877887][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  246.906383][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  246.913954][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  246.988439][ T6355] 8021q: adding VLAN 0 to HW filter on device batadv0
[  247.170891][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  247.187464][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  247.236193][ T3611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.243138][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  247.244461][ T3611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.256429][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  247.263397][ T6593] loop1: detected capacity change from 0 to 2048
[  247.294327][ T6595] loop4: detected capacity change from 0 to 1024
[  247.317335][ T6593] EXT4-fs error (device loop1): __ext4_fill_super:5399: inode #2: comm syz.1.805: casefold flag without casefold feature
[  247.322671][ T6355] device veth0_vlan entered promiscuous mode
[  247.347041][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  247.366847][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  247.376377][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  247.407427][ T6593] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  247.431225][ T4724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.434915][ T6355] device veth1_vlan entered promiscuous mode
[  247.448649][ T4724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.475958][ T6593] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  247.484964][ T6593] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  247.521907][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  247.531045][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  247.539638][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  247.561793][ T6355] device veth0_macvtap entered promiscuous mode
[  247.593566][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  247.609852][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  247.634093][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  247.647390][ T6355] device veth1_macvtap entered promiscuous mode
[  247.665939][ T6572] chnl_net:caif_netlink_parms(): no params data found
[  247.665983][ T6272] EXT4-fs (loop1): unmounting filesystem.
[  247.678902][ T3566] Bluetooth: hci4: command tx timeout
[  247.804349][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  247.840275][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.871115][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  247.882726][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.912720][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  247.943731][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.954364][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  247.964952][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.976629][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  247.997554][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.017578][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.040445][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.053493][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.075496][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.098916][ T6355] batman_adv: batadv0: Interface activated: batadv_slave_0
[  248.181598][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  248.214954][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  248.257370][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.291726][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.330513][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.376269][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.399403][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.422568][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.433986][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.438786][ T6620] loop0: detected capacity change from 0 to 2048
[  248.445054][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.461063][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.475771][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.500932][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.512007][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.525639][ T3642] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  248.532766][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.533360][ T6620] EXT4-fs error (device loop0): __ext4_fill_super:5399: inode #2: comm syz.0.814: casefold flag without casefold feature
[  248.544354][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.586346][ T6355] batman_adv: batadv0: Interface activated: batadv_slave_1
[  248.628851][ T3325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  248.643476][ T3325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  248.653004][ T6620] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  248.656613][ T6625] loop1: detected capacity change from 0 to 64
[  248.667366][ T6355] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  248.677377][ T6355] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  248.686401][ T6355] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  248.696192][ T6355] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  248.709200][ T6620] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[  248.735602][ T6620] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  248.777297][ T6572] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.793507][ T6572] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.811881][ T6572] device bridge_slave_0 entered promiscuous mode
[  248.856734][ T6572] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.863866][ T6572] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.900950][ T6627] loop1: detected capacity change from 0 to 512
[  248.908117][ T6572] device bridge_slave_1 entered promiscuous mode
[  248.911099][ T6627] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  248.917410][ T6319] EXT4-fs (loop0): unmounting filesystem.
[  248.955867][ T3642] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.970847][ T3642] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.995714][ T6627] EXT4-fs (loop1): 1 truncate cleaned up
[  249.001409][ T6627] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  249.016632][ T3642] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  249.044058][ T3642] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.071293][ T3642] usb 5-1: config 0 descriptor??
[  249.133923][ T6627] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[  249.227276][ T6572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  249.239773][ T6272] EXT4-fs (loop1): unmounting filesystem.
[  249.285251][ T6572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  249.405944][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.446190][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.469430][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  249.492294][ T6572] team0: Port device team_slave_0 added
[  249.708550][ T3642] hid (null): nested delimiters
[  249.801942][ T3566] Bluetooth: hci4: command tx timeout
[  249.877444][ T3838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.959397][ T3838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.972941][ T3642] hid-led 0003:27B8:01ED.0016: nested delimiters
[  250.076482][   T27] audit: type=1326 audit(1720077603.776:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.4.810" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd866975bd9 code=0x0
[  250.117323][ T3642] hid-led 0003:27B8:01ED.0016: item 0 1 2 10 parsing failed
[  250.406517][ T3642] hid-led: probe of 0003:27B8:01ED.0016 failed with error -22
[  250.450332][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  250.468600][ T6572] team0: Port device team_slave_1 added
[  250.581764][ T6572] batman_adv: batadv0: Adding interface: batadv_slave_0
[  250.599177][ T6572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.695029][ T6572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  250.722414][ T6650] loop1: detected capacity change from 0 to 1024
[  250.743235][ T6572] batman_adv: batadv0: Adding interface: batadv_slave_1
[  250.770287][ T6572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.874065][ T6572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  250.954873][ T6658] loop0: detected capacity change from 0 to 2048
[  250.996792][ T6658] EXT4-fs error (device loop0): __ext4_fill_super:5399: inode #2: comm syz.0.826: casefold flag without casefold feature
[  251.015226][ T6572] device hsr_slave_0 entered promiscuous mode
[  251.029012][   T52] block nbd0: Possible stuck request ffff88801fd18000: control (read@0,4096B). Runtime 60 seconds
[  251.064157][ T6572] device hsr_slave_1 entered promiscuous mode
[  251.099402][ T6658] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  251.111187][ T6572] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  251.132304][ T6572] Cannot create hsr debugfs directory
[  251.154695][ T6658] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[  251.185265][ T6658] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  251.389337][ T6319] EXT4-fs (loop0): unmounting filesystem.
[  251.458781][ T3642] usb 5-1: USB disconnect, device number 17
[  251.956256][ T3566] Bluetooth: hci4: command tx timeout
[  252.147140][ T6674] netlink: 'syz.4.831': attribute type 1 has an invalid length.
[  252.662568][ T6674] loop4: detected capacity change from 0 to 2048
[  253.339239][ T6572] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.617276][ T6674]  loop4: p1 < > p3
[  253.622539][ T6674] loop4: p3 size 134217728 extends beyond EOD, truncated
[  253.784053][ T6532] udevd[6532]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  253.809942][ T3970] udevd[3970]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  253.982722][ T6572] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.198319][ T6572] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.263497][ T6695] loop4: detected capacity change from 0 to 2048
[  254.307833][ T6695] EXT4-fs error (device loop4): __ext4_fill_super:5399: inode #2: comm syz.4.838: casefold flag without casefold feature
[  254.337940][ T6695] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  254.494258][ T6695] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[  254.505878][ T6695] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  254.532697][ T6572] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.536948][ T6704] loop3: detected capacity change from 0 to 512
[  254.747021][ T6704] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  254.770299][ T6704] EXT4-fs (loop3): 1 truncate cleaned up
[  255.547739][ T6704] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  255.557006][   T52] block nbd2: Possible stuck request ffff88801fdc0000: control (read@0,4096B). Runtime 90 seconds
[  255.558033][ T1252] ieee802154 phy0 wpan0: encryption failed: -22
[  255.579782][ T1252] ieee802154 phy1 wpan1: encryption failed: -22
[  255.736761][ T3549] EXT4-fs (loop4): unmounting filesystem.
[  255.797377][ T6704] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[  255.994712][ T6572] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  256.004993][ T6355] EXT4-fs (loop3): unmounting filesystem.
[  256.058599][ T6572] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  256.105220][ T6572] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  256.140494][ T6572] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  256.656520][ T6572] 8021q: adding VLAN 0 to HW filter on device bond0
[  256.721500][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  256.736021][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  256.767210][ T6572] 8021q: adding VLAN 0 to HW filter on device team0
[  256.935716][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  256.960886][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  257.006340][ T6136] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.013695][ T6136] bridge0: port 1(bridge_slave_0) entered forwarding state
[  257.087607][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  257.245207][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  257.246195][ T6136] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.246316][ T6136] bridge0: port 2(bridge_slave_1) entered forwarding state
[  258.118547][ T3325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  258.152575][ T3325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  258.178876][ T3325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  258.181444][ T6743] loop3: detected capacity change from 0 to 2048
[  258.213014][ T3325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  258.278758][ T6743] EXT4-fs error (device loop3): __ext4_fill_super:5399: inode #2: comm syz.3.854: casefold flag without casefold feature
[  258.283694][ T3325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  258.302526][ T3325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  258.314402][ T3325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  258.336081][ T3325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  258.345401][ T3325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  258.346402][ T6743] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  258.362153][ T3325] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  258.507883][ T6755] loop0: detected capacity change from 0 to 512
[  258.539461][ T6743] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  258.558576][ T6743] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  258.559305][ T6572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  258.579699][ T6755] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  258.604479][ T6572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  258.613092][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  258.623516][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  258.712125][ T6755] EXT4-fs (loop0): 1 truncate cleaned up
[  258.733514][ T6755] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  258.912321][ T6761] netlink: 'syz.1.859': attribute type 1 has an invalid length.
[  258.999902][ T6761] loop1: detected capacity change from 0 to 2048
[  259.058994][ T6761]  loop1: p1 < > p3
[  259.069553][ T6761] loop1: p3 size 134217728 extends beyond EOD, truncated
[  259.423821][ T6532] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  259.436726][ T6761] loop1: detected capacity change from 0 to 2048
[  259.626372][ T6764] EXT4-fs error (device loop0): mb_free_blocks:1815: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[  259.632062][ T6761] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  259.663490][ T6355] EXT4-fs (loop3): unmounting filesystem.
[  259.716572][ T3970] udevd[3970]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  259.733226][ T6532] udevd[6532]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  259.813358][ T6766] loop4: detected capacity change from 0 to 64
[  259.968160][ T6319] EXT4-fs (loop0): unmounting filesystem.
[  260.068914][   T27] audit: type=1400 audit(1720077613.776:41): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3A2020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153 pid=6771 comm="syz.3.864"
[  260.404164][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  260.415345][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  260.437687][ T6572] 8021q: adding VLAN 0 to HW filter on device batadv0
[  260.849559][ T6797] loop3: detected capacity change from 0 to 512
[  260.915967][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  260.925459][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  260.946086][ T6797] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  261.055810][ T6801] netlink: 'syz.1.872': attribute type 1 has an invalid length.
[  261.147959][ T6801] loop1: detected capacity change from 0 to 2048
[  261.818840][ T6572] device veth0_vlan entered promiscuous mode
[  261.845577][ T6801]  loop1: p1 < > p3
[  261.850600][ T6801] loop1: p3 size 134217728 extends beyond EOD, truncated
[  261.903931][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  261.922359][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  261.934382][ T6797] EXT4-fs (loop3): 1 truncate cleaned up
[  261.956683][ T6797] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  262.088031][ T6532] udevd[6532]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  262.127300][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  262.143467][ T3970] udevd[3970]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  262.165553][ T6797] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[  262.180611][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  262.199606][   T27] audit: type=1400 audit(1720077615.906:42): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3A2020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153 pid=6807 comm="syz.0.875"
[  262.273287][ T6572] device veth1_vlan entered promiscuous mode
[  262.420953][ T6355] EXT4-fs (loop3): unmounting filesystem.
[  262.693338][ T6572] device veth0_macvtap entered promiscuous mode
[  262.846498][ T6829] loop3: detected capacity change from 0 to 1024
[  263.065130][ T6835] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  263.103188][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  263.127453][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  263.129848][   T27] audit: type=1400 audit(1720077616.836:43): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3A2020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153 pid=6837 comm="syz.1.888"
[  263.149023][ T6572] device veth1_macvtap entered promiscuous mode
[  263.387481][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  263.406375][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  263.513986][ T6852] loop1: detected capacity change from 0 to 512
[  263.555103][ T6852] ext2: Unknown parameter 'obj_user'
[  263.592876][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.647150][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.677675][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.700740][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.741753][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.752647][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.765156][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.775974][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.787947][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.798771][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.808903][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.819682][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.821172][ T6865] binder_alloc: 6864: pid 6864 spamming oneway? 1 buffers allocated for a total size of 4096
[  263.832680][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.869074][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.889370][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.915531][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.936086][ T3595] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  263.956317][ T6532] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  263.956950][ T6572] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.991346][   T27] audit: type=1326 audit(1720077617.686:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6851 comm="syz.1.892" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5715d75bd9 code=0x0
[  264.022973][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  264.032344][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  264.093919][ T3612] device hsr_slave_0 left promiscuous mode
[  264.107293][ T3612] device hsr_slave_1 left promiscuous mode
[  264.135711][ T3612] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  264.143293][ T3612] batman_adv: batadv0: Removing interface: batadv_slave_0
[  264.169088][ T3612] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  264.197140][ T3612] batman_adv: batadv0: Removing interface: batadv_slave_1
[  264.212043][ T3612] device bridge_slave_1 left promiscuous mode
[  264.218928][ T3612] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.228234][ T3612] device bridge_slave_0 left promiscuous mode
[  264.234459][ T3612] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.284364][ T3612] device veth1_macvtap left promiscuous mode
[  264.293568][ T3612] device veth0_macvtap left promiscuous mode
[  264.300498][ T3612] device veth1_vlan left promiscuous mode
[  264.307730][ T3612] device veth0_vlan left promiscuous mode
[  264.316531][ T3595] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  264.339629][ T3595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  264.363483][ T3595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  264.385143][ T3595] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  264.405594][ T3599] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  264.496018][ T3595] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  264.512045][ T3595] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  264.523872][ T3595] usb 4-1: Manufacturer: syz
[  264.549292][ T3595] usb 4-1: config 0 descriptor??
[  264.806034][ T3599] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35
[  264.816973][ T3599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.827710][ T3599] usb 1-1: config 0 descriptor??
[  264.869489][ T3599] dw2102: su3000_identify_state
[  264.874389][ T3599] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  264.905227][ T3599] dw2102: su3000_power_ctrl: 1, initialized 0
[  264.920111][ T3599] dvb-usb: bulk message failed: -22 (2/0)
[  264.949421][ T3599] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  264.985969][ T3599] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  265.094133][ T6890] loop1: detected capacity change from 0 to 512
[  265.256272][ T6873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.323436][ T6890] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002]
[  265.331945][ T6890] System zones: 0-2, 18-18, 34-35
[  265.378381][ T6890] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  265.388171][ T6890] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038 (0x7fffffff)
[  265.442898][ T6873] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.601415][ T3595] appleir 0003:05AC:8243.0017: unknown main item tag 0x0
[  265.694329][ T3599] usb 1-1: media controller created
[  265.703561][ T3595] appleir 0003:05AC:8243.0017: No inputs registered, leaving
[  265.711244][ T3599] dvb-usb: bulk message failed: -22 (6/0)
[  265.712310][ T6272] EXT4-fs (loop1): unmounting filesystem.
[  265.720463][ T3595] appleir 0003:05AC:8243.0017: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  265.735270][ T3599] dw2102: i2c transfer failed.
[  265.740680][ T3599] dvb-usb: bulk message failed: -22 (6/0)
[  265.748157][ T3599] dw2102: i2c transfer failed.
[  265.752997][ T3599] dvb-usb: bulk message failed: -22 (6/0)
[  265.766573][ T3599] dw2102: i2c transfer failed.
[  265.771151][ T3595] usb 4-1: USB disconnect, device number 9
[  265.785697][ T3599] dvb-usb: bulk message failed: -22 (6/0)
[  265.796387][ T3599] dw2102: i2c transfer failed.
[  265.801341][ T3599] dvb-usb: bulk message failed: -22 (6/0)
[  265.815784][ T3599] dw2102: i2c transfer failed.
[  265.820632][ T3599] dvb-usb: bulk message failed: -22 (6/0)
[  265.868607][ T3599] dw2102: i2c transfer failed.
[  265.873420][ T3599] dvb-usb: MAC address: 02:02:02:02:02:02
[  265.934674][ T3599] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  265.964425][ T3599] dvb-usb: bulk message failed: -22 (3/0)
[  265.978325][ T3599] dw2102: command 0x0e transfer failed.
[  265.996026][ T3599] dvb-usb: bulk message failed: -22 (3/0)
[  266.012088][ T3599] dw2102: command 0x0e transfer failed.
[  266.151569][ T3612] team0 (unregistering): Port device team_slave_1 removed
[  266.274824][ T3612] team0 (unregistering): Port device team_slave_0 removed
[  266.355642][ T3599] dvb-usb: bulk message failed: -22 (3/0)
[  266.361657][ T3599] dw2102: command 0x0e transfer failed.
[  266.368338][ T3599] dvb-usb: bulk message failed: -22 (3/0)
[  266.374273][ T3599] dw2102: command 0x0e transfer failed.
[  266.380250][ T3612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  266.380297][ T3599] dvb-usb: bulk message failed: -22 (1/0)
[  266.408558][ T3599] dw2102: command 0x51 transfer failed.
[  266.414153][ T3599] dvb-usb: bulk message failed: -22 (5/0)
[  266.420650][ T3599] dw2102: i2c probe for address 0x68 failed.
[  266.426961][ T3599] dvb-usb: bulk message failed: -22 (5/0)
[  266.432917][ T3599] dw2102: i2c probe for address 0x69 failed.
[  266.439287][ T3599] dvb-usb: bulk message failed: -22 (5/0)
[  266.445203][ T3599] dw2102: i2c probe for address 0x6a failed.
[  266.451770][ T3599] dw2102: probing for demodulator failed. Is the external power switched on?
[  266.501819][ T3599] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  266.580727][ T3612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  266.631548][ T6907] loop3: detected capacity change from 0 to 512
[  266.648002][ T6907] ext2: Unknown parameter 'obj_user'
[  266.675744][ T3599] rc_core: IR keymap rc-tt-1500 not found
[  266.681692][ T3599] Registered IR keymap rc-empty
[  266.697864][   T27] audit: type=1326 audit(1720077620.406:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.3.911" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49d9d75bd9 code=0x0
[  266.706462][ T3599] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[  266.769545][ T3599] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input19
[  266.789540][ T3599] dvb-usb: schedule remote query interval to 250 msecs.
[  266.804664][ T3599] dw2102: su3000_power_ctrl: 0, initialized 1
[  266.821261][ T3599] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  266.841429][ T3599] usb 1-1: USB disconnect, device number 6
[  266.968990][ T3599] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  267.952216][ T6923] loop3: detected capacity change from 0 to 512
[  267.994835][ T6923] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  268.044130][ T6923] EXT4-fs (loop3): 1 truncate cleaned up
[  268.209929][ T6923] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  268.703574][ T6929] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[  268.955652][ T6355] EXT4-fs (loop3): unmounting filesystem.
[  269.385563][ T3599] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  269.414318][ T3612] bond0 (unregistering): Released all slaves
[  269.577938][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.590796][   T52] block nbd1: Possible stuck request ffff88801fd80000: control (read@0,4096B). Runtime 90 seconds
[  269.615543][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.626059][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.637094][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.647337][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.658146][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.668536][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.680334][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.690537][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.701313][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.711525][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.723748][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.734144][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.745103][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.767323][ T6572] batman_adv: batadv0: Interface activated: batadv_slave_1
[  269.790268][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  269.800313][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  269.815899][ T3599] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35
[  269.829530][ T3599] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.832107][ T6572] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.872222][ T3599] usb 4-1: config 0 descriptor??
[  269.898518][ T6572] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.935565][ T6572] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.941739][ T3599] dw2102: su3000_identify_state
[  269.950324][ T6572] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.961128][ T3599] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  269.961163][ T3599] dw2102: su3000_power_ctrl: 1, initialized 0
[  269.961183][ T3599] dvb-usb: bulk message failed: -22 (2/0)
[  269.963652][ T3599] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  269.975922][ T3599] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  269.975977][ T3599] usb 4-1: media controller created
[  269.976008][ T3599] dvb-usb: bulk message failed: -22 (6/0)
[  269.976052][ T3599] dw2102: i2c transfer failed.
[  269.976108][ T3599] dvb-usb: bulk message failed: -22 (6/0)
[  269.976124][ T3599] dw2102: i2c transfer failed.
[  269.976141][ T3599] dvb-usb: bulk message failed: -22 (6/0)
[  269.976157][ T3599] dw2102: i2c transfer failed.
[  269.976174][ T3599] dvb-usb: bulk message failed: -22 (6/0)
[  269.976190][ T3599] dw2102: i2c transfer failed.
[  269.976206][ T3599] dvb-usb: bulk message failed: -22 (6/0)
[  269.976222][ T3599] dw2102: i2c transfer failed.
[  269.976239][ T3599] dvb-usb: bulk message failed: -22 (6/0)
[  269.976254][ T3599] dw2102: i2c transfer failed.
[  269.976265][ T3599] dvb-usb: MAC address: 02:02:02:02:02:02
[  269.998360][ T3599] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  270.020376][ T3599] dvb-usb: bulk message failed: -22 (3/0)
[  270.020393][ T3599] dw2102: command 0x0e transfer failed.
[  270.020433][ T3599] dvb-usb: bulk message failed: -22 (3/0)
[  270.020447][ T3599] dw2102: command 0x0e transfer failed.
[  270.166932][ T6939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.167588][ T6939] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.172246][ T6950] loop4: detected capacity change from 0 to 512
[  270.210793][ T6950] ext2: Unknown parameter 'obj_user'
[  270.850076][ T3599] dvb-usb: bulk message failed: -22 (3/0)
[  270.850102][ T3599] dw2102: command 0x0e transfer failed.
[  270.850113][ T3599] dvb-usb: bulk message failed: -22 (3/0)
[  270.850129][ T3599] dw2102: command 0x0e transfer failed.
[  270.850139][ T3599] dvb-usb: bulk message failed: -22 (1/0)
[  270.850153][ T3599] dw2102: command 0x51 transfer failed.
[  270.850163][ T3599] dvb-usb: bulk message failed: -22 (5/0)
[  270.850177][ T3599] dw2102: i2c probe for address 0x68 failed.
[  270.850189][ T3599] dvb-usb: bulk message failed: -22 (5/0)
[  270.850202][ T3599] dw2102: i2c probe for address 0x69 failed.
[  270.850213][ T3599] dvb-usb: bulk message failed: -22 (5/0)
[  270.850226][ T3599] dw2102: i2c probe for address 0x6a failed.
[  270.850236][ T3599] dw2102: probing for demodulator failed. Is the external power switched on?
[  270.850247][ T3599] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  270.895563][ T3970] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  271.010423][   T27] audit: type=1326 audit(1720077624.706:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.4.923" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd866975bd9 code=0x0
[  271.026987][ T6268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  271.027054][ T6268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  271.031921][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  271.059040][ T6957] loop0: detected capacity change from 0 to 256
[  271.138296][ T6528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  271.138381][ T6528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  271.142103][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  271.175770][ T3599] rc_core: IR keymap rc-tt-1500 not found
[  271.175786][ T3599] Registered IR keymap rc-empty
[  271.176417][ T3599] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  271.178672][ T3599] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input20
[  271.181097][ T3599] dvb-usb: schedule remote query interval to 250 msecs.
[  271.181117][ T3599] dw2102: su3000_power_ctrl: 0, initialized 1
[  271.181144][ T3599] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  271.185409][ T3599] usb 4-1: USB disconnect, device number 10
[  271.288483][ T3599] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  271.555644][ T6974] loop0: detected capacity change from 0 to 512
[  271.567270][ T6974] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  271.603505][ T6974] EXT4-fs (loop0): 1 truncate cleaned up
[  271.603535][ T6974] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  271.740463][ T6974] EXT4-fs error (device loop0): mb_free_blocks:1815: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[  271.817178][ T6319] EXT4-fs (loop0): unmounting filesystem.
[  272.243627][ T6985] loop1: detected capacity change from 0 to 512
[  272.569584][ T6985] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002]
[  272.569858][ T6985] System zones: 0-2, 18-18, 34-35
[  272.581681][ T6985] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  272.582016][ T6985] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038 (0x7fffffff)
[  273.089238][ T6272] EXT4-fs (loop1): unmounting filesystem.
[  273.994446][ T6999] loop1: detected capacity change from 0 to 512
[  274.086622][ T6999] ext2: Unknown parameter 'mask'
[  274.131986][ T7005] loop0: detected capacity change from 0 to 256
[  274.207216][ T7008] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  274.214954][ T7008] IPv6: NLM_F_CREATE should be set when creating new route
[  274.406999][ T7008] loop1: detected capacity change from 0 to 2048
[  274.494207][ T7008] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  274.651201][ T7019] binder_alloc: 7018: pid 7018 spamming oneway? 1 buffers allocated for a total size of 4096
[  274.861383][ T6272] EXT4-fs (loop1): unmounting filesystem.
[  274.944182][ T7031] loop0: detected capacity change from 0 to 512
[  274.966903][ T7031] ext2: Unknown parameter 'obj_user'
[  275.024501][   T27] audit: type=1326 audit(1720077628.726:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.0.949" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa75c775bd9 code=0x0
[  275.378428][ T7051] loop2: detected capacity change from 0 to 256
[  275.704835][ T7060] loop1: detected capacity change from 0 to 2048
[  275.778222][ T7060] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  275.844871][ T7066] loop2: detected capacity change from 0 to 512
[  275.889038][ T7066] ext2: Unknown parameter 'mask'
[  275.976411][ T7076] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  275.983749][ T7076] IPv6: NLM_F_CREATE should be set when creating new route
[  276.177083][ T7078] loop2: detected capacity change from 0 to 2048
[  276.296044][ T7078] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  276.339856][ T7090] loop4: detected capacity change from 0 to 256
[  276.771884][ T6572] EXT4-fs (loop2): unmounting filesystem.
[  277.009744][ T7107] vivid-000: disconnect
[  277.033169][ T7107] 9pnet_fd: p9_fd_create_unix (7107): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  277.073491][ T7105] loop3: detected capacity change from 0 to 64
[  277.160626][    C1] vkms_vblank_simulate: vblank timer overrun
[  277.518206][ T7094] vivid-000: reconnect
[  277.976197][ T7127] capability: warning: `syz.0.990' uses deprecated v2 capabilities in a way that may be insecure
[  278.002854][ T7124] loop4: detected capacity change from 0 to 256
[  278.151835][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'.
[  278.615756][ T7145] vivid-000: disconnect
[  278.632853][ T7145] 9pnet_fd: p9_fd_create_unix (7145): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  279.112059][ T7137] vivid-000: reconnect
[  279.199155][    C1] vkms_vblank_simulate: vblank timer overrun
[  279.330539][ T7151] loop2: detected capacity change from 0 to 256
[  279.337620][ T7151] exfat: Deprecated parameter 'namecase'
[  279.371122][ T7153] loop0: detected capacity change from 0 to 64
[  279.397246][ T7151] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d)
[  279.645850][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1006'.
[  281.151163][ T7190] vivid-006: disconnect
[  281.172213][ T7190] 9pnet_fd: p9_fd_create_unix (7190): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  281.649983][ T7177] vivid-006: reconnect
[  281.737516][    C1] vkms_vblank_simulate: vblank timer overrun
[  281.838116][   T52] block nbd0: Possible stuck request ffff88801fd18000: control (read@0,4096B). Runtime 90 seconds
[  281.934962][ T7172] loop1: detected capacity change from 0 to 40427
[  281.956059][ T7195] loop3: detected capacity change from 0 to 256
[  281.965148][ T7198] loop0: detected capacity change from 0 to 64
[  281.978180][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1019'.
[  281.987508][ T7172] F2FS-fs (loop1): invalid crc value
[  281.988179][ T7195] exfat: Deprecated parameter 'namecase'
[  282.017811][ T7172] F2FS-fs (loop1): Found nat_bits in checkpoint
[  282.044441][ T7195] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d)
[  282.212377][ T7202] loop2: detected capacity change from 0 to 4096
[  282.247285][ T7172] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  282.299323][ T7202] NILFS (loop2): invalid segment: Checksum error in segment payload
[  282.370106][ T7202] NILFS (loop2): trying rollback from an earlier position
[  282.405394][ T6272] syz-executor: attempt to access beyond end of device
[  282.405394][ T6272] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  282.446730][ T7202] NILFS (loop2): recovery complete
[  282.514134][ T7216] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  282.606898][ T7202] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1020'.
[  282.783505][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'.
[  283.047221][ T7228] vivid-006: disconnect
[  283.064037][ T7228] 9pnet_fd: p9_fd_create_unix (7228): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  283.595697][ T7219] vivid-006: reconnect
[  283.848336][ T7237] loop3: detected capacity change from 0 to 256
[  283.870596][ T7237] exfat: Deprecated parameter 'namecase'
[  283.902319][ T7237] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d)
[  284.152007][   T27] audit: type=1326 audit(1720077637.856:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7245 comm="syz.4.1041" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd866975bd9 code=0x0
[  284.872061][ T7272] vivid-004: disconnect
[  284.890200][ T7272] 9pnet_fd: p9_fd_create_unix (7272): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  285.398101][ T7261] vivid-004: reconnect
[  285.485121][    C1] vkms_vblank_simulate: vblank timer overrun
[  285.555809][ T7275] loop1: detected capacity change from 0 to 256
[  285.587310][ T7192] block nbd2: Possible stuck request ffff88801fdc0000: control (read@0,4096B). Runtime 120 seconds
[  285.646189][ T7275] exfat: Deprecated parameter 'namecase'
[  285.714692][ T7275] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d)
[  285.795104][ T7242] loop0: detected capacity change from 0 to 40427
[  286.016902][ T7242] F2FS-fs (loop0): invalid crc value
[  286.044435][ T7242] F2FS-fs (loop0): Found nat_bits in checkpoint
[  286.057149][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1058'.
[  286.174413][ T3002] udevd[3002]: worker [6531] terminated by signal 33 (Unknown signal 33)
[  286.200748][ T3002] udevd[3002]: worker [6531] failed while handling '/devices/virtual/block/loop0'
[  286.232890][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.260729][ T3002] udevd[3002]: worker [6532] terminated by signal 33 (Unknown signal 33)
[  286.283853][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.296081][   T27] audit: type=1326 audit(1720077640.006:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7297 comm="syz.2.1062" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa67ad75bd9 code=0x0
[  286.318713][ T3002] udevd[3002]: worker [6532] failed while handling '/devices/virtual/block/loop2'
[  286.321226][ T7242] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  286.333897][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.343566][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.363682][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.378794][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.395520][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.412191][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.427615][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.444554][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.460067][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.492883][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.513854][ T7304] device bridge_slave_0 left promiscuous mode
[  286.521425][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.531788][ T6319] syz-executor: attempt to access beyond end of device
[  286.531788][ T6319] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  286.538121][ T7304] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.559420][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.577548][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.593057][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.610634][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.627217][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.651005][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.668461][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.685025][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.700871][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.728615][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.744199][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.760623][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.777155][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.795562][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.812277][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.827746][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.844388][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.871296][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.896920][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.920102][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.941239][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.963384][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  286.985182][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  287.006438][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  287.019676][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  287.032844][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  287.044978][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  287.058389][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  287.074993][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  287.097410][ T3597] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  287.164733][ T3597] hid-generic 0000:0000:0000.0018: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  287.250670][ T7304] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  287.323614][ T7296] loop1: detected capacity change from 0 to 32768
[  287.465144][ T7296] XFS (loop1): Mounting V5 Filesystem
[  287.527012][ T7329] loop3: detected capacity change from 0 to 256
[  287.534881][ T7329] exfat: Deprecated parameter 'namecase'
[  287.573372][ T7296] XFS (loop1): Ending clean mount
[  287.600342][ T7329] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d)
[  287.658486][ T7296] XFS (loop1): Quotacheck needed: Please wait.
[  287.673909][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1071'.
[  287.700518][ T7333] loop2: detected capacity change from 0 to 512
[  287.735228][ T7296] XFS (loop1): Quotacheck: Done.
[  287.759284][ T7333] EXT4-fs error (device loop2): __ext4_fill_super:5399: inode #2: comm syz.2.1072: iget: special inode unallocated
[  287.808718][ T7333] EXT4-fs (loop2): get root inode failed
[  287.814708][ T7333] EXT4-fs (loop2): mount failed
[  287.833873][   T27] audit: type=1800 audit(1720077641.546:50): pid=7296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1060" name="file1" dev="loop1" ino=6150 res=0 errno=0
[  287.905376][ T6272] XFS (loop1): Unmounting Filesystem
[  289.223142][ T7352] device bridge_slave_0 left promiscuous mode
[  289.259437][ T7352] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.277823][ T7358] loop4: detected capacity change from 0 to 8
[  289.288377][ T7352] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  289.363089][ T7358] SQUASHFS error: lzo decompression failed, data probably corrupt
[  289.381750][ T7358] SQUASHFS error: Failed to read block 0x91: -5
[  289.412127][ T7358] SQUASHFS error: Unable to read metadata cache entry [8f]
[  289.440230][ T7358] SQUASHFS error: Unable to read inode 0x11f
[  290.185609][ T3830] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  290.213646][ T7405] loop0: detected capacity change from 0 to 256
[  290.223495][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.240249][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.285683][ T7405] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x16b5df41, utbl_chksum : 0xe619d30d)
[  290.298311][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.320851][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.352059][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.356522][ T7410] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  290.388639][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.403157][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.413349][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.561120][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.569673][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.577402][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.584895][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.605520][ T3830] usb 4-1: Using ep0 maxpacket: 16
[  290.610936][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.624864][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.659814][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.734192][ T7414] loop4: detected capacity change from 0 to 512
[  290.786711][ T3830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  290.839060][ T3830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  290.839378][ T3830] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  290.840197][ T3830] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[  290.840285][ T3830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.844735][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.845129][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.847766][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.848151][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.848392][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.848772][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.849322][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.849624][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.850431][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.850836][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.851395][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.851767][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.852059][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.853987][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.854828][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.855262][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.857763][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.858174][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.858441][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.858802][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.859028][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.859279][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.859545][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.859924][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.860247][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.861821][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.862267][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.862549][ T3599] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  290.924418][ T3830] usb 4-1: config 0 descriptor??
[  290.928466][ T3599] hid-generic 0000:0000:0000.0019: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  291.227429][ T7414] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  291.227527][ T7414] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038 (0x7fffffff)
[  291.266495][ T7412] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #2: comm syz.4.1101: corrupted inode contents
[  291.357307][ T7390] fuse: Bad value for 'fd'
[  291.484351][ T7412] EXT4-fs error (device loop4): ext4_dirty_inode:6072: inode #2: comm syz.4.1101: mark_inode_dirty error
[  291.541142][ T7412] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #2: comm syz.4.1101: corrupted inode contents
[  291.560728][ T7412] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.1101: mark_inode_dirty error
[  291.804774][ T3549] EXT4-fs (loop4): unmounting filesystem.
[  291.811252][ T3830] uclogic 0003:5543:0064.001A: unknown main item tag 0x0
[  291.827355][ T3830] uclogic 0003:5543:0064.001A: No inputs registered, leaving
[  291.846769][ T3830] uclogic 0003:5543:0064.001A: hidraw0: USB HID v0.00 Device [HID 5543:0064] on usb-dummy_hcd.3-1/input0
[  292.051741][ T3599] usb 4-1: USB disconnect, device number 11
[  292.205566][ T3830] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  292.280609][ T7443] loop4: detected capacity change from 0 to 256
[  292.339696][ T3970] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  292.623592][ T3830] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35
[  292.655616][ T3830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.675756][ T3830] usb 1-1: config 0 descriptor??
[  292.719861][ T3830] dw2102: su3000_identify_state
[  292.734980][ T3830] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  292.764418][ T3830] dw2102: su3000_power_ctrl: 1, initialized 0
[  292.793666][ T3830] dvb-usb: bulk message failed: -22 (2/0)
[  292.812986][ T3830] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  292.866168][ T3830] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  292.873721][ T3830] usb 1-1: media controller created
[  292.904526][ T7452] loop4: detected capacity change from 0 to 512
[  292.922114][ T7432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  292.933807][ T3830] dvb-usb: bulk message failed: -22 (6/0)
[  292.945597][ T3830] dw2102: i2c transfer failed.
[  292.950528][ T3830] dvb-usb: bulk message failed: -22 (6/0)
[  292.958728][ T7432] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  292.986766][ T3830] dw2102: i2c transfer failed.
[  292.991619][ T3830] dvb-usb: bulk message failed: -22 (6/0)
[  293.009483][ T7452] EXT4-fs error (device loop4): __ext4_fill_super:5399: inode #2: comm syz.4.1117: iget: special inode unallocated
[  293.026644][ T3830] dw2102: i2c transfer failed.
[  293.031500][ T3830] dvb-usb: bulk message failed: -22 (6/0)
[  293.045545][ T3830] dw2102: i2c transfer failed.
[  293.050382][ T3830] dvb-usb: bulk message failed: -22 (6/0)
[  293.056514][ T3830] dw2102: i2c transfer failed.
[  293.061346][ T3830] dvb-usb: bulk message failed: -22 (6/0)
[  293.067532][ T3830] dw2102: i2c transfer failed.
[  293.072328][ T3830] dvb-usb: MAC address: 02:02:02:02:02:02
[  293.091933][ T3830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  293.104144][ T7452] EXT4-fs (loop4): get root inode failed
[  293.111830][ T3830] dvb-usb: bulk message failed: -22 (3/0)
[  293.117767][ T3830] dw2102: command 0x0e transfer failed.
[  293.123358][ T3830] dvb-usb: bulk message failed: -22 (3/0)
[  293.130900][ T3830] dw2102: command 0x0e transfer failed.
[  293.145519][ T7452] EXT4-fs (loop4): mount failed
[  293.425591][ T3566] Bluetooth: hci3: command 0x0406 tx timeout
[  293.455549][ T3830] dvb-usb: bulk message failed: -22 (3/0)
[  293.461342][ T3830] dw2102: command 0x0e transfer failed.
[  293.496536][ T3830] dvb-usb: bulk message failed: -22 (3/0)
[  293.513496][ T3830] dw2102: command 0x0e transfer failed.
[  293.519354][ T3830] dvb-usb: bulk message failed: -22 (1/0)
[  293.525244][ T3830] dw2102: command 0x51 transfer failed.
[  293.531111][ T3830] dvb-usb: bulk message failed: -22 (5/0)
[  293.537058][ T3830] dw2102: i2c probe for address 0x68 failed.
[  293.702856][ T3830] dvb-usb: bulk message failed: -22 (5/0)
[  293.772543][ T3830] dw2102: i2c probe for address 0x69 failed.
[  293.922150][ T7444] loop2: detected capacity change from 0 to 40427
[  293.935482][ T3830] dvb-usb: bulk message failed: -22 (5/0)
[  293.975463][ T3830] dw2102: i2c probe for address 0x6a failed.
[  293.997008][ T7444] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  294.045388][ T3830] dw2102: probing for demodulator failed. Is the external power switched on?
[  294.086543][ T7444] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  294.128003][ T3830] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  294.249546][ T7444] F2FS-fs (loop2): Found nat_bits in checkpoint
[  294.420176][ T7444] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  294.456927][ T7444] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  294.461465][ T3830] rc_core: IR keymap rc-tt-1500 not found
[  294.475687][ T3830] Registered IR keymap rc-empty
[  294.500927][ T7482] loop4: detected capacity change from 0 to 256
[  294.505799][ T3830] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[  294.541757][ T3830] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input22
[  294.624973][ T3830] dvb-usb: schedule remote query interval to 250 msecs.
[  294.652756][ T3830] dw2102: su3000_power_ctrl: 0, initialized 1
[  294.662868][ T3830] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  294.712885][ T3830] usb 1-1: USB disconnect, device number 7
[  294.881294][ T3830] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  294.977899][ T7494] overlayfs: failed to get index nlink (file1/bus, err=-61)
[  295.266841][ T3597] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  295.438921][ T7506] loop0: detected capacity change from 0 to 512
[  295.625946][ T3597] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35
[  295.687870][ T3597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.900787][ T3597] usb 4-1: config 0 descriptor??
[  295.959627][ T3597] dw2102: su3000_identify_state
[  295.964907][ T3597] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  295.989131][ T7506] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  295.999258][ T7506] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038 (0x7fffffff)
[  296.048452][ T7503] EXT4-fs error (device loop0): ext4_do_update_inode:5210: inode #2: comm syz.0.1135: corrupted inode contents
[  296.060960][ T7503] EXT4-fs error (device loop0): ext4_dirty_inode:6072: inode #2: comm syz.0.1135: mark_inode_dirty error
[  296.073361][ T7503] EXT4-fs error (device loop0): ext4_do_update_inode:5210: inode #2: comm syz.0.1135: corrupted inode contents
[  296.086731][ T7503] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.1135: mark_inode_dirty error
[  296.111651][ T3597] dw2102: su3000_power_ctrl: 1, initialized 0
[  296.144565][ T3597] dvb-usb: bulk message failed: -22 (2/0)
[  296.164303][ T7499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.176939][ T3597] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  296.196077][ T7499] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  296.245868][ T3597] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  296.359143][ T3597] usb 4-1: media controller created
[  296.364756][ T3597] dvb-usb: bulk message failed: -22 (6/0)
[  296.381323][ T3597] dw2102: i2c transfer failed.
[  296.390347][ T6319] EXT4-fs (loop0): unmounting filesystem.
[  296.401230][ T3597] dvb-usb: bulk message failed: -22 (6/0)
[  296.420572][ T3597] dw2102: i2c transfer failed.
[  296.477340][ T3597] dvb-usb: bulk message failed: -22 (6/0)
[  296.483549][ T3597] dw2102: i2c transfer failed.
[  296.500696][ T3597] dvb-usb: bulk message failed: -22 (6/0)
[  296.518902][ T3597] dw2102: i2c transfer failed.
[  296.523761][ T3597] dvb-usb: bulk message failed: -22 (6/0)
[  296.566575][ T3597] dw2102: i2c transfer failed.
[  296.595523][ T3597] dvb-usb: bulk message failed: -22 (6/0)
[  296.618694][ T3597] dw2102: i2c transfer failed.
[  296.623555][ T3597] dvb-usb: MAC address: 02:02:02:02:02:02
[  296.671902][ T3597] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  296.702927][ T3597] dvb-usb: bulk message failed: -22 (3/0)
[  296.708763][ T3597] dw2102: command 0x0e transfer failed.
[  296.725662][ T3597] dvb-usb: bulk message failed: -22 (3/0)
[  296.733469][ T3597] dw2102: command 0x0e transfer failed.
[  297.075673][ T3597] dvb-usb: bulk message failed: -22 (3/0)
[  297.083111][ T3597] dw2102: command 0x0e transfer failed.
[  297.099308][ T3597] dvb-usb: bulk message failed: -22 (3/0)
[  297.119068][ T3597] dw2102: command 0x0e transfer failed.
[  297.155636][ T3597] dvb-usb: bulk message failed: -22 (1/0)
[  297.179167][ T3597] dw2102: command 0x51 transfer failed.
[  297.215633][ T3597] dvb-usb: bulk message failed: -22 (5/0)
[  297.255709][ T3597] dw2102: i2c probe for address 0x68 failed.
[  297.283154][ T3597] dvb-usb: bulk message failed: -22 (5/0)
[  297.292782][ T3597] dw2102: i2c probe for address 0x69 failed.
[  297.309209][ T3597] dvb-usb: bulk message failed: -22 (5/0)
[  297.341844][ T3597] dw2102: i2c probe for address 0x6a failed.
[  297.353748][ T3597] dw2102: probing for demodulator failed. Is the external power switched on?
[  297.395337][ T3597] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  297.698458][ T7550] loop4: detected capacity change from 0 to 2048
[  297.767692][   T27] audit: type=1800 audit(1720077651.466:51): pid=7550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1148" name="bus" dev="loop4" ino=1367 res=0 errno=0
[  298.384894][ T7548] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  298.475611][ T3597] rc_core: IR keymap rc-tt-1500 not found
[  298.481430][ T3597] Registered IR keymap rc-empty
[  298.556926][ T3597] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  298.586642][ T3597] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input23
[  298.636506][ T3597] dvb-usb: schedule remote query interval to 250 msecs.
[  298.654132][ T3597] dw2102: su3000_power_ctrl: 0, initialized 1
[  298.673982][ T3597] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  298.746231][ T3597] usb 4-1: USB disconnect, device number 12
[  298.814593][ T7569] loop2: detected capacity change from 0 to 512
[  298.945082][ T7570] loop4: detected capacity change from 0 to 512
[  298.979213][ T7569] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  299.338444][ T7569] UDF-fs: Scanning with blocksize 512 failed
[  299.457176][ T7570] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  299.466544][ T7570] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038 (0x7fffffff)
[  299.546670][ T7570] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #2: comm syz.4.1152: corrupted inode contents
[  299.560795][ T7570] EXT4-fs error (device loop4): ext4_dirty_inode:6072: inode #2: comm syz.4.1152: mark_inode_dirty error
[  299.576274][ T7570] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #2: comm syz.4.1152: corrupted inode contents
[  299.588546][ T7570] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.1152: mark_inode_dirty error
[  299.625645][ T7569] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  299.633114][ T7569] UDF-fs: Scanning with blocksize 1024 failed
[  299.706426][ T3597] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  299.706436][ T7569] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  299.706454][ T7569] UDF-fs: Scanning with blocksize 2048 failed
[  299.829632][ T7192] block nbd1: Possible stuck request ffff88801fd80000: control (read@0,4096B). Runtime 120 seconds
[  299.869586][ T3549] EXT4-fs (loop4): unmounting filesystem.
[  299.965635][ T7569] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  300.077683][ T7569] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  300.281168][ T7584] loop0: detected capacity change from 0 to 1024
[  300.614288][ T7596] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1164'.
[  300.633655][   T35] hfsplus: b-tree write err: -5, ino 4
[  301.048305][ T7610] capability: warning: `syz.1.1168' uses 32-bit capabilities (legacy support in use)
[  301.437141][ T7619] loop2: detected capacity change from 0 to 2048
[  302.250011][   T27] audit: type=1800 audit(1720077655.956:52): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1170" name="bus" dev="loop2" ino=1367 res=0 errno=0
[  303.084686][ T7639] loop3: detected capacity change from 0 to 1024
[  303.307346][ T7644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1182'.
[  303.328338][ T6986] hfsplus: b-tree write err: -5, ino 4
[  303.720976][ T7652] loop3: detected capacity change from 0 to 2048
[  303.786324][   T27] audit: type=1800 audit(1720077657.486:53): pid=7652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1183" name="bus" dev="loop3" ino=1367 res=0 errno=0
[  305.107717][ T7673] loop2: detected capacity change from 0 to 2048
[  305.245971][   T27] audit: type=1400 audit(1720077658.936:54): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=":proc/thrr/current" pid=7674 comm="syz.0.1193"
[  305.592381][ T7673] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  305.670741][ T7671] loop4: detected capacity change from 0 to 4096
[  305.887846][ T7671] ntfs: (device loop4): parse_options(): The fmask option requires an argument.
[  306.218268][ T3970] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  306.687924][ T6572] EXT4-fs (loop2): unmounting filesystem.
[  307.063790][ T7709] loop0: detected capacity change from 0 to 128
[  307.070443][ T3595] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  307.122602][ T7709] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  307.147004][ T7709] ext4 filesystem being mounted at /93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  307.366602][   T27] audit: type=1400 audit(1720077661.066:55): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=":proc/thrr/current" pid=7713 comm="syz.4.1207"
[  308.185587][ T3595] usb 4-1: config 0 has an invalid interface number: 199 but max is 1
[  308.193847][ T3595] usb 4-1: config 0 has no interface number 1
[  308.235122][ T3595] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  308.291244][ T3595] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  308.325639][ T6319] EXT4-fs (loop0): unmounting filesystem.
[  308.385873][ T3595] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  308.420255][ T3595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  308.457026][ T3595] usb 4-1: SerialNumber: syz
[  308.476421][ T3595] usb 4-1: config 0 descriptor??
[  308.501860][ T7726] loop4: detected capacity change from 0 to 2048
[  308.521019][ T3595] usb 4-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  308.535495][ T3595] usb 4-1: No valid video chain found.
[  308.598363][ T7726] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  308.648539][ T7729] loop0: detected capacity change from 0 to 4096
[  308.773435][ T7729] ntfs: (device loop0): parse_options(): The fmask option requires an argument.
[  308.787875][ T3595] usb 4-1: USB disconnect, device number 13
[  308.905616][ T3970] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  310.148197][ T7744] loop0: detected capacity change from 0 to 2048
[  310.295200][ T3549] EXT4-fs (loop4): unmounting filesystem.
[  310.301288][   T27] audit: type=1800 audit(1720077663.956:56): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1214" name="bus" dev="loop0" ino=1367 res=0 errno=0
[  310.650634][ T7751] loop4: detected capacity change from 0 to 1024
[  310.795802][   T27] audit: type=1400 audit(1720077664.416:57): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=":proc/thrr/current" pid=7750 comm="syz.3.1219"
[  311.498109][ T7751] syz.4.1217: attempt to access beyond end of device
[  311.498109][ T7751] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  311.590483][ T7751] syz.4.1217: attempt to access beyond end of device
[  311.590483][ T7751] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  311.645310][ T7751] Buffer I/O error on dev loop4, logical block 2889, async page read
[  311.691772][   T27] audit: type=1326 audit(1720077665.396:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.4.1217" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd866975bd9 code=0x0
[  311.704893][ T7772] loop2: detected capacity change from 0 to 512
[  311.750243][ T7751] syz.4.1217: attempt to access beyond end of device
[  311.750243][ T7751] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  311.785088][ T7772] EXT4-fs error (device loop2): __ext4_fill_super:5399: inode #2: comm syz.2.1226: iget: special inode unallocated
[  311.804743][   T27] audit: type=1800 audit(1720077665.406:59): pid=7751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1217" name="file1" dev="loop4" ino=20 res=0 errno=0
[  311.861828][ T7771] overlayfs: failed to get index nlink (file1/bus, err=-61)
[  311.874022][ T7776] loop0: detected capacity change from 0 to 256
[  311.890587][ T7772] EXT4-fs (loop2): get root inode failed
[  311.942528][ T7776] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  311.989494][ T7772] EXT4-fs (loop2): mount failed
[  312.123044][ T7778] loop1: detected capacity change from 0 to 2048
[  312.571218][ T7784] loop3: detected capacity change from 0 to 2048
[  313.033557][   T27] audit: type=1800 audit(1720077666.486:60): pid=7784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1229" name="bus" dev="loop3" ino=1367 res=0 errno=0
[  313.257350][ T7776] befs: Unrecognized mount option "umask=00000000000000000000005" or missing value
[  313.352447][ T7778] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  313.391530][ T7776] befs: (nullb0): cannot parse mount options
[  313.670108][ T7192] block nbd0: Possible stuck request ffff88801fd18000: control (read@0,4096B). Runtime 120 seconds
[  314.029441][ T6272] EXT4-fs (loop1): unmounting filesystem.
[  314.142949][   T27] audit: type=1400 audit(1720077667.846:61): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=":proc/thrr/current" pid=7805 comm="syz.3.1236"
[  315.594376][   T27] audit: type=1326 audit(1720077669.296:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7815 comm="syz.3.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d9d75bd9 code=0x7ffc0000
[  315.667356][ T7192] block nbd2: Possible stuck request ffff88801fdc0000: control (read@0,4096B). Runtime 150 seconds
[  315.709414][ T7818] overlayfs: failed to get index nlink (file1/bus, err=-61)
[  315.792423][   T27] audit: type=1326 audit(1720077669.296:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7815 comm="syz.3.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d9d75bd9 code=0x7ffc0000
[  315.865641][ T7822] loop2: detected capacity change from 0 to 256
[  315.909395][   T27] audit: type=1326 audit(1720077669.336:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7815 comm="syz.3.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f49d9d75bd9 code=0x7ffc0000
[  315.981002][ T7822] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  316.010782][   T27] audit: type=1326 audit(1720077669.336:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7815 comm="syz.3.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d9d75bd9 code=0x7ffc0000
[  316.134716][ T7826] loop3: detected capacity change from 0 to 2048
[  316.323173][   T27] audit: type=1326 audit(1720077669.336:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7815 comm="syz.3.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d9d75bd9 code=0x7ffc0000
[  316.492170][   T27] audit: type=1800 audit(1720077669.896:67): pid=7826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1243" name="bus" dev="loop3" ino=1367 res=0 errno=0
[  316.828259][ T7822] befs: Unrecognized mount option "umask=00000000000000000000005" or missing value
[  316.886011][ T7822] befs: (nullb0): cannot parse mount options
[  316.950009][ T1252] ieee802154 phy0 wpan0: encryption failed: -22
[  316.956409][ T1252] ieee802154 phy1 wpan1: encryption failed: -22
[  317.295731][   T27] audit: type=1400 audit(1720077670.936:68): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=":proc/thrr/current" pid=7840 comm="syz.1.1252"
[  318.000987][   T27] audit: type=1326 audit(1720077671.706:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7850 comm="syz.3.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d9d75bd9 code=0x7ffc0000
[  318.097727][ T7855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1257'.
[  318.141013][   T27] audit: type=1326 audit(1720077671.776:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7850 comm="syz.3.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f49d9d75bd9 code=0x7ffc0000
[  318.280405][   T27] audit: type=1326 audit(1720077671.776:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7850 comm="syz.3.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d9d75bd9 code=0x7ffc0000
[  318.899192][ T7872] loop2: detected capacity change from 0 to 256
[  318.937572][ T7872] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  319.140029][ T7872] befs: Unrecognized mount option "umask=00000000000000000000005" or missing value
[  319.170037][ T7872] befs: (nullb0): cannot parse mount options
[  319.276881][ T7879] loop1: detected capacity change from 0 to 1024
[  319.284133][ T7879] EXT4-fs: Ignoring removed nomblk_io_submit option
[  319.323144][ T7879] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  319.357135][ T7879] EXT4-fs (loop1): Test dummy encryption mode enabled
[  319.527333][ T7879] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003]
[  319.769257][ T7879] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  320.231069][ T3998] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  320.756728][ T7902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1270'.
[  320.758978][ T6272] EXT4-fs (loop1): unmounting filesystem.
[  320.855570][ T3998] usb 4-1: Using ep0 maxpacket: 16
[  320.975887][ T3998] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  321.005447][ T3998] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  321.049603][ T3998] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  321.113309][ T3998] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[  321.285502][ T3998] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.317217][ T3998] usb 4-1: config 0 descriptor??
[  321.752089][ T7880] fuse: Bad value for 'fd'
[  321.939371][ T7921] loop0: detected capacity change from 0 to 512
[  321.989168][ T3998] uclogic 0003:5543:0064.001B: unknown main item tag 0x0
[  322.013277][ T3998] uclogic 0003:5543:0064.001B: No inputs registered, leaving
[  322.034950][ T3998] uclogic 0003:5543:0064.001B: hidraw0: USB HID v0.00 Device [HID 5543:0064] on usb-dummy_hcd.3-1/input0
[  322.038081][ T7921] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  322.175775][ T7921] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038 (0x7fffffff)
[  322.226195][ T3642] usb 4-1: USB disconnect, device number 14
[  322.445893][   T27] kauditd_printk_skb: 2 callbacks suppressed
[  322.446104][   T27] audit: type=1400 audit(1720077676.146:74): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=":proc/thrr/current" pid=7926 comm="syz.4.1283"
[  323.278458][ T6319] EXT4-fs (loop0): unmounting filesystem.
[  323.534512][ T7933] loop1: detected capacity change from 0 to 1024
[  323.562176][ T7899] loop2: detected capacity change from 0 to 40427
[  323.601862][ T7933] EXT4-fs: Ignoring removed nomblk_io_submit option
[  323.608974][ T7899] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  323.622759][ T7933] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  323.645839][ T7899] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  323.724350][ T7899] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12)
[  323.743320][ T7933] EXT4-fs (loop1): Test dummy encryption mode enabled
[  323.869337][ T7933] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003]
[  323.937772][ T7933] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  325.706521][ T7956] loop0: detected capacity change from 0 to 512
[  325.946108][   T28] INFO: task syz.2.462:5289 blocked for more than 144 seconds.
[  325.993877][   T28]       Not tainted 6.1.96-syzkaller #0
[  326.146517][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  326.183600][ T7956] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  326.192691][ T7956] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038 (0x7fffffff)
[  326.216160][ T7956] EXT4-fs error (device loop0): ext4_do_update_inode:5210: inode #2: comm syz.0.1294: corrupted inode contents
[  326.228630][ T7956] EXT4-fs error (device loop0): ext4_dirty_inode:6072: inode #2: comm syz.0.1294: mark_inode_dirty error
[  326.240945][ T7956] EXT4-fs error (device loop0): ext4_do_update_inode:5210: inode #2: comm syz.0.1294: corrupted inode contents
[  326.253303][ T7956] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.1294: mark_inode_dirty error
[  326.292427][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.303506][   T28] task:syz.2.462       state:D stack:26424 pid:5289  ppid:3555   flags:0x00004002
[  326.329535][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.338299][   T28] Call Trace:
[  326.341616][   T28]  <TASK>
[  326.344604][   T28]  __schedule+0x142d/0x4550
[  326.360529][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.375109][   T28]  ? __sched_text_start+0x8/0x8
[  326.385985][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.445730][   T28]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  326.451811][   T28]  ? print_irqtrace_events+0x210/0x210
[  326.457446][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.464920][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.476537][   T28]  ? _raw_spin_lock_irq+0xdb/0x110
[  326.481701][   T28]  schedule+0xbf/0x180
[  326.491999][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.500665][   T28]  io_schedule+0x88/0x100
[  326.505074][   T28]  folio_wait_bit_common+0x878/0x1290
[  326.525034][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.536831][   T28]  ? folio_wait_bit+0x20/0x20
[  326.541578][   T28]  ? migration_entry_wait_on_locked+0x1160/0x1160
[  326.558516][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.560411][ T7964] overlayfs: failed to get index nlink (file1/bus, err=-61)
[  326.575221][   T28]  __filemap_get_folio+0x47c/0xe80
[  326.575320][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.589089][   T28]  ? __filemap_get_folio+0x150/0xe80
[  326.598242][   T28]  ? page_cache_prev_miss+0x500/0x500
[  326.608305][   T28]  ? smp_call_function_many+0x30/0x30
[  326.617810][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.625341][   T28]  truncate_inode_pages_range+0x598/0x1340
[  326.631516][   T28]  ? mapping_evict_folio+0x5b0/0x5b0
[  326.637059][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.644626][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.652564][   T28]  ? xas_next_entry+0x3d0/0x3d0
[  326.657810][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.665314][   T28]  ? filemap_write_and_wait_range+0x217/0x290
[  326.671866][   T28]  ? invalidate_bh_lrus+0x30/0x30
[  326.677365][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.684930][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.693557][   T28]  ? __bread_gfp+0x370/0x370
[  326.699126][   T28]  ? invalidate_bh_lrus+0x30/0x30
[  326.704445][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.713152][   T28]  blkdev_flush_mapping+0x154/0x2b0
[  326.733177][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.750392][   T28]  blkdev_put+0x4c0/0x750
[  326.760455][   T28]  ? task_work_run+0x1fc/0x300
[  326.764023][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.770985][   T28]  blkdev_close+0x56/0x80
[  326.782790][   T28]  ? blkdev_open+0x2e0/0x2e0
[  326.786327][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.793256][   T28]  __fput+0x3b7/0x890
[  326.797150][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.804694][   T28]  task_work_run+0x246/0x300
[  326.819626][   T28]  ? task_work_cancel+0x2b0/0x2b0
[  326.822028][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.830468][   T28]  ? exit_task_namespaces+0xdd/0xf0
[  326.847795][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.848070][   T28]  do_exit+0xa73/0x26a0
[  326.867732][   T28]  ? put_task_struct+0x80/0x80
[  326.870205][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.885647][   T28]  ? get_signal+0x137e/0x17d0
[  326.892189][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.896000][   T28]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  326.902667][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.926327][   T28]  ? print_irqtrace_events+0x210/0x210
[  326.931803][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.937499][   T28]  ? _raw_spin_lock_irq+0xdb/0x110
[  326.942021][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.947758][   T28]  do_group_exit+0x202/0x2b0
[  326.959302][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.966669][   T28]  ? _raw_spin_unlock_irq+0x1f/0x40
[  326.971702][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.977708][   T28]  ? lockdep_hardirqs_on+0x94/0x130
[  326.979844][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.992486][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  326.999921][   T28]  get_signal+0x16f7/0x17d0
[  326.999981][   T28]  ? ptrace_notify+0x370/0x370
[  327.004978][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  327.017547][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  327.027466][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  327.031698][   T28]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  327.035007][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  327.052334][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  327.054688][   T28]  ? print_irqtrace_events+0x210/0x210
[  327.060261][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  327.073349][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  327.084818][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  327.084829][   T28]  arch_do_signal_or_restart+0xb0/0x1a10
[  327.098716][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  327.107876][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  327.114702][   T28]  ? __might_sleep+0xb0/0xb0
[  327.115918][ T4251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  327.131152][ T4251] hid-generic 0000:0000:0000.001C: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  327.131686][   T28]  ? rcu_force_quiescent_state+0x230/0x230
[  327.151735][   T28]  ? get_sigframe_size+0x10/0x10
[  327.156868][   T28]  ? blkcg_maybe_throttle_current+0x1ac/0xa30
[  327.174743][   T28]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  327.183073][   T28]  ? blkdev_ioctl+0x3a9/0x760
[  327.245858][   T28]  ? exit_to_user_mode_loop+0x39/0x100
[  327.251438][   T28]  exit_to_user_mode_loop+0x6a/0x100
[  327.264763][   T28]  exit_to_user_mode_prepare+0xb1/0x140
[  327.270432][   T28]  syscall_exit_to_user_mode+0x60/0x270
[  327.284893][   T28]  do_syscall_64+0x47/0xb0
[  327.291663][   T28]  ? clear_bhb_loop+0x45/0xa0
[  327.304748][   T28]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  327.310767][   T28] RIP: 0033:0x7f8ecd175bd9
[  327.316033][   T28] RSP: 002b:00007f8ecdfe6048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  327.324509][   T28] RAX: 0000000000000000 RBX: 00007f8ecd304038 RCX: 00007f8ecd175bd9
[  327.336876][   T28] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003
[  327.345013][   T28] RBP: 00007f8ecd1e4aa1 R08: 0000000000000000 R09: 0000000000000000
[  327.364732][   T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  327.381439][   T28] R13: 000000000000006e R14: 00007f8ecd304038 R15: 00007fff3dc67aa8
[  327.392086][   T28]  </TASK>
[  327.395274][   T28] INFO: task syz.1.511:5534 blocked for more than 145 seconds.
[  327.413742][   T28]       Not tainted 6.1.96-syzkaller #0
[  327.425259][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  327.446117][   T28] task:syz.1.511       state:D stack:27560 pid:5534  ppid:4122   flags:0x00004004
[  327.464221][   T28] Call Trace:
[  327.467780][   T28]  <TASK>
[  327.470752][   T28]  __schedule+0x142d/0x4550
[  327.475465][   T28]  ? __mutex_lock+0x6b4/0xd80
[  327.480389][   T28]  ? __sched_text_start+0x8/0x8
[  327.494374][   T28]  ? __mutex_trylock_common+0x8d/0x2e0
[  327.500048][   T28]  ? do_raw_spin_unlock+0x137/0x8a0
[  327.505689][   T28]  schedule+0xbf/0x180
[  327.510225][   T28]  schedule_preempt_disabled+0xf/0x20
[  327.516193][   T28]  __mutex_lock+0x6b9/0xd80
[  327.520926][   T28]  ? __mutex_lock+0x53c/0xd80
[  327.526200][   T28]  ? blkdev_put+0x100/0x750
[  327.531013][   T28]  ? mutex_lock_nested+0x10/0x10
[  327.539317][   T28]  ? __fsnotify_parent+0x50b/0x730
[  327.544706][   T28]  ? __fsnotify_update_child_dentry_flags+0x2a0/0x2a0
[  327.552101][   T28]  blkdev_put+0x100/0x750
[  327.557837][   T28]  ? task_work_run+0x1fc/0x300
[  327.563030][   T28]  blkdev_close+0x56/0x80
[  327.567986][   T28]  ? blkdev_open+0x2e0/0x2e0
[  327.573003][   T28]  __fput+0x3b7/0x890
[  327.577727][   T28]  task_work_run+0x246/0x300
[  327.582706][   T28]  ? task_work_cancel+0x2b0/0x2b0
[  327.590895][   T28]  ? blkdev_ioctl+0x3a9/0x760
[  327.596101][   T28]  ? exit_to_user_mode_loop+0x39/0x100
[  327.601998][   T28]  exit_to_user_mode_loop+0xde/0x100
[  327.610285][   T28]  exit_to_user_mode_prepare+0xb1/0x140
[  327.617423][   T28]  syscall_exit_to_user_mode+0x60/0x270
[  327.623557][   T28]  do_syscall_64+0x47/0xb0
[  327.628580][   T28]  ? clear_bhb_loop+0x45/0xa0
[  327.633701][   T28]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  327.643698][   T28] RIP: 0033:0x7fb585375bd9
[  327.648569][   T28] RSP: 002b:00007fb5861e4048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  327.657454][   T28] RAX: 0000000000000000 RBX: 00007fb585503f60 RCX: 00007fb585375bd9
[  327.666002][   T28] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003
[  327.674320][   T28] RBP: 00007fb5853e4aa1 R08: 0000000000000000 R09: 0000000000000000
[  327.684711][   T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  327.694678][   T28] R13: 000000000000000b R14: 00007fb585503f60 R15: 00007ffe4b4f5708
[  327.703421][   T28]  </TASK>
[  327.710907][ T6319] EXT4-fs (loop0): unmounting filesystem.
[  327.712398][ T6272] EXT4-fs (loop1): unmounting filesystem.
[  327.726258][   T28] INFO: task syz.1.511:5540 blocked for more than 145 seconds.
[  327.734350][   T28]       Not tainted 6.1.96-syzkaller #0
[  327.775188][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  327.802154][   T28] task:syz.1.511       state:D stack:27560 pid:5540  ppid:4122   flags:0x00004004
[  327.812493][   T28] Call Trace:
[  327.824259][   T28]  <TASK>
[  327.833008][   T28]  __schedule+0x142d/0x4550
[  327.858776][   T28]  ? __mutex_lock+0x6b4/0xd80
[  327.870265][   T28]  ? __sched_text_start+0x8/0x8
[  327.882656][   T28]  ? __mutex_trylock_common+0x8d/0x2e0
[  327.896886][   T28]  ? do_raw_spin_unlock+0x137/0x8a0
[  327.910975][   T28]  schedule+0xbf/0x180
[  327.923379][   T28]  schedule_preempt_disabled+0xf/0x20
[  327.931650][   T28]  __mutex_lock+0x6b9/0xd80
[  327.936496][   T28]  ? __mutex_lock+0x53c/0xd80
[  327.941232][   T28]  ? blkdev_get_by_dev+0x148/0xa10
[  327.948255][   T28]  ? mutex_lock_nested+0x10/0x10
[  327.953250][   T28]  ? _atomic_dec_and_lock+0x96/0x130
[  327.958733][   T28]  ? iput+0x401/0x980
[  327.962761][   T28]  ? ilookup+0x1c8/0x200
[  327.967210][   T28]  ? disk_block_events+0xa1/0x110
[  327.972266][   T28]  ? blkdev_get_by_dev+0xe7/0xa10
[  327.977501][   T28]  blkdev_get_by_dev+0x148/0xa10
[  327.982488][   T28]  blkdev_open+0x12e/0x2e0
[  327.989280][   T28]  ? blkdev_mmap+0x1b0/0x1b0
[  327.993915][   T28]  do_dentry_open+0x7f9/0x10f0
[  327.998918][   T28]  path_openat+0x2644/0x2e60
[  328.003558][   T28]  ? mark_lock+0x9a/0x340
[  328.008170][   T28]  ? do_filp_open+0x480/0x480
[  328.012914][   T28]  do_filp_open+0x230/0x480
[  328.017587][   T28]  ? vfs_tmpfile+0x4a0/0x4a0
[  328.022245][   T28]  ? _raw_spin_unlock+0x24/0x40
[  328.034676][   T28]  ? alloc_fd+0x59c/0x640
[  328.039144][   T28]  do_sys_openat2+0x13b/0x500
[  328.043872][   T28]  ? do_sys_open+0x220/0x220
[  328.049609][   T28]  ? xfd_validate_state+0x6a/0x140
[  328.054900][   T28]  ? restore_fpregs_from_fpstate+0xfc/0x230
[  328.074690][   T28]  __x64_sys_openat+0x243/0x290
[  328.079756][   T28]  ? __ia32_sys_open+0x270/0x270
[  328.084746][   T28]  ? syscall_enter_from_user_mode+0x2e/0x230
[  328.090927][   T28]  ? lockdep_hardirqs_on+0x94/0x130
[  328.098642][   T28]  ? syscall_enter_from_user_mode+0x2e/0x230
[  328.104780][   T28]  do_syscall_64+0x3b/0xb0
[  328.109286][   T28]  ? clear_bhb_loop+0x45/0xa0
[  328.114012][   T28]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  328.123097][   T28] RIP: 0033:0x7fb585374610
[  328.130917][   T28] RSP: 002b:00007fb5861c2b80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  328.144926][   T28] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb585374610
[  328.159257][   T28] RDX: 0000000000000000 RSI: 00007fb5861c2c20 RDI: 00000000ffffff9c
[  328.172774][   T28] RBP: 00007fb5861c2c20 R08: 0000000000000000 R09: 002364626e2f7665
[  328.184368][   T28] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  328.201426][   T28] R13: 000000000000006e R14: 00007fb585504038 R15: 00007ffe4b4f5708
[  328.214257][   T28]  </TASK>
[  328.224170][   T28] 
[  328.224170][   T28] Showing all locks held in the system:
[  328.236124][   T28] 5 locks held by kworker/u4:1/11:
[  328.241318][   T28]  #0: ffff888012616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  328.263676][   T28]  #1: ffffc90000107d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  328.275020][   T28]  #2: ffffffff8e28da10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60
[  328.293801][   T28]  #3: ffffffff8e299d68 (rtnl_mutex){+.+.}-{3:3}, at: ip6_tnl_exit_batch_net+0xc0/0x5e0
[  328.304847][   T28]  #4: ffffffff8d1302b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930
[  328.327390][   T28] 1 lock held by rcu_tasks_kthre/12:
[  328.332730][   T28]  #0: ffffffff8d12ae90 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  328.358390][   T28] 1 lock held by rcu_tasks_trace/13:
[  328.363931][   T28]  #0: ffffffff8d12b690 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  328.375145][   T28] 1 lock held by khungtaskd/28:
[  328.380491][   T28]  #0: ffffffff8d12acc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  328.391209][   T28] 2 locks held by getty/3308:
[  328.396253][   T28]  #0: ffff888028aaf098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  328.406364][   T28]  #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0
[  328.417020][   T28] 1 lock held by udevd/3540:
[  328.421649][   T28]  #0: ffff8881447c04c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10
[  328.432022][   T28] 1 lock held by udevd/3542:
[  328.436971][   T28]  #0: ffff8881447c34c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10
[  328.447657][   T28] 2 locks held by kworker/1:7/3642:
[  328.452911][   T28]  #0: ffff888012472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  328.464267][   T28]  #1: ffffc90004b1fd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  328.476240][   T28] 2 locks held by kworker/u4:14/5069:
[  328.481675][   T28] 1 lock held by syz.2.462/5289:
[  328.486698][   T28]  #0: ffff88801fc254c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x100/0x750
[  328.496202][   T28] 1 lock held by syz.1.511/5534:
[  328.501164][   T28]  #0: ffff8881447c34c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x100/0x750
[  328.510652][   T28] 1 lock held by syz.1.511/5540:
[  328.515677][   T28]  #0: ffff8881447c34c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10
[  328.525796][   T28] 1 lock held by syz.0.558/5734:
[  328.530761][   T28]  #0: ffff8881447c04c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x100/0x750
[  328.541706][   T28] 1 lock held by syz.0.558/5737:
[  328.547601][   T28]  #0: ffff8881447c04c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10
[  328.558133][   T28] 5 locks held by kworker/u4:17/6268:
[  328.565183][   T28]  #0: ffff8880b993aa18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140
[  328.575350][   T28]  #1: ffff8880b9927788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x43d/0x770
[  328.587048][   T28]  #2: ffff88805f2f4d40 (&wdev->mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0xa0/0x1480
[  328.597789][   T28]  #3: ffffffff8d12acc0 (rcu_read_lock){....}-{1:2}, at: ieee80211_sta_active_ibss+0xb1/0x310
[  328.608196][   T28]  #4: ffff8880b9928118 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x1b2/0x8c0
[  328.617445][   T28] 
[  328.619793][   T28] =============================================
[  328.619793][   T28] 
[  328.628561][   T28] NMI backtrace for cpu 1
[  328.632927][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.96-syzkaller #0
[  328.640743][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  328.650834][   T28] Call Trace:
[  328.654130][   T28]  <TASK>
[  328.657067][   T28]  dump_stack_lvl+0x1e3/0x2cb
[  328.661777][   T28]  ? preempt_schedule_thunk+0x16/0x18
[  328.667184][   T28]  ? nf_tcp_handle_invalid+0x642/0x642
[  328.672663][   T28]  ? panic+0x764/0x764
[  328.676750][   T28]  ? vprintk_emit+0x622/0x740
[  328.681448][   T28]  ? printk_sprint+0x490/0x490
[  328.686231][   T28]  ? nmi_cpu_backtrace+0x252/0x560
[  328.691385][   T28]  nmi_cpu_backtrace+0x4e1/0x560
[  328.696368][   T28]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  328.702564][   T28]  ? _printk+0xd1/0x111
[  328.706728][   T28]  ? panic+0x764/0x764
[  328.710802][   T28]  ? __wake_up_klogd+0xcc/0x100
[  328.715669][   T28]  ? panic+0x764/0x764
[  328.719744][   T28]  ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0
[  328.725912][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  328.731993][   T28]  nmi_trigger_cpumask_backtrace+0x1b0/0x3f0
[  328.738008][   T28]  watchdog+0xf88/0xfd0
[  328.742208][   T28]  ? watchdog+0x1f8/0xfd0
[  328.746565][   T28]  kthread+0x28d/0x320
[  328.750633][   T28]  ? hungtask_pm_notify+0x50/0x50
[  328.755661][   T28]  ? kthread_blkcg+0xd0/0xd0
[  328.760267][   T28]  ret_from_fork+0x1f/0x30
[  328.764718][   T28]  </TASK>
[  328.768732][   T28] Sending NMI from CPU 1 to CPUs 0:
[  328.774242][    C0] NMI backtrace for cpu 0 skipped: idling at acpi_idle_do_entry+0x10f/0x340
[  328.785973][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  328.792840][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.96-syzkaller #0
[  328.800647][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  328.810717][   T28] Call Trace:
[  328.813993][   T28]  <TASK>
[  328.816924][   T28]  dump_stack_lvl+0x1e3/0x2cb
[  328.821667][   T28]  ? nf_tcp_handle_invalid+0x642/0x642
[  328.827142][   T28]  ? panic+0x764/0x764
[  328.831221][   T28]  ? vscnprintf+0x59/0x80
[  328.835560][   T28]  panic+0x318/0x764
[  328.839461][   T28]  ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0
[  328.845635][   T28]  ? memcpy_page_flushcache+0xfc/0xfc
[  328.851024][   T28]  ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0
[  328.857185][   T28]  ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0
[  328.863353][   T28]  ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0
[  328.869522][   T28]  watchdog+0xfc7/0xfd0
[  328.873711][   T28]  ? watchdog+0x1f8/0xfd0
[  328.878050][   T28]  kthread+0x28d/0x320
[  328.882122][   T28]  ? hungtask_pm_notify+0x50/0x50
[  328.887153][   T28]  ? kthread_blkcg+0xd0/0xd0
[  328.891746][   T28]  ret_from_fork+0x1f/0x30
[  328.896182][   T28]  </TASK>
[  328.899328][   T28] Kernel Offset: disabled
[  328.903649][   T28] Rebooting in 86400 seconds..