last executing test programs:

52.268603607s ago: executing program 3 (id=224):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x11, 0x2, 0x300)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={{0x14}, [], {0x14}}, 0x28}}, 0x40000)

52.071093876s ago: executing program 3 (id=226):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff00", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0)

49.547805785s ago: executing program 3 (id=234):
socket$igmp(0x2, 0x3, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7ea5, &(0x7f0000000040)={0x0, 0xe278, 0xc000, 0xffffffff, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xffffffffffffff77, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0x9, 0x4)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18"], 0x18, 0x4048800}, 0x10)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

49.281095428s ago: executing program 3 (id=237):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)

49.128715975s ago: executing program 3 (id=239):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94)
eventfd2(0xab6d, 0x801)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})

48.909005395s ago: executing program 3 (id=242):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="64f3a49a2aa20eeb7d00b8000000000f23d80f21f835400000400f23f8f466baf80cb876d28082ef66bafc0cb0b2c4c1f9fa933f490000c4e2b928bc765862e16af20fe6d4f3d973fc0f07670f35", 0x4e}], 0x1, 0x11, 0x0, 0x0)
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000880)={{r0}, "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"})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

48.317556383s ago: executing program 32 (id=242):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="64f3a49a2aa20eeb7d00b8000000000f23d80f21f835400000400f23f8f466baf80cb876d28082ef66bafc0cb0b2c4c1f9fa933f490000c4e2b928bc765862e16af20fe6d4f3d973fc0f07670f35", 0x4e}], 0x1, 0x11, 0x0, 0x0)
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000880)={{r0}, "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"})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

41.487670055s ago: executing program 0 (id=269):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x1000000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x48200, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
read$watch_queue(0xffffffffffffffff, &(0x7f00000001c0)=""/178, 0xb2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000102, 0x11, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0xff9c, 0x8001})

41.083745694s ago: executing program 0 (id=274):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2)
dup3(r1, r0, 0x80000)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r2, 0xffffffffffffffff, 0x0)

40.191745386s ago: executing program 0 (id=284):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041)
bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r2, 0x3, {0x2, 0xf0, 0x3}, 0xff}, 0x18)
connect$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x0, 0x1, 0x1}, 0xfd}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xc096}, 0x20000050)

39.949482948s ago: executing program 0 (id=279):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x18f882, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14)

39.878960881s ago: executing program 0 (id=280):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

39.669213501s ago: executing program 0 (id=281):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xf61cb000)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r1, 0x3)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x800)

39.389336134s ago: executing program 33 (id=281):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xf61cb000)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r1, 0x3)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x800)

31.862649809s ago: executing program 1 (id=315):
pivot_root(0x0, &(0x7f0000000000)='./file0/../file0\x00')
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r2 = fsmount(r0, 0x0, 0x0)
renameat2(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000200)='./file0\x00', 0x2)

31.597101231s ago: executing program 1 (id=317):
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff000000070581024000000705020240"], 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x180)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080c0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
write(r0, &(0x7f0000000840)="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", 0x172)

29.761491668s ago: executing program 1 (id=331):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

29.529236458s ago: executing program 1 (id=333):
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8c, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x1, 0x2aa, &(0x7f0000000c80)="$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")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x13481, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r1, &(0x7f0000000840)={0x2020}, 0x2020)

28.965536955s ago: executing program 1 (id=336):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0})
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000d00)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fbc84589ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe953054720185010000f1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe0", 0x33f}], 0x2}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

27.320341943s ago: executing program 1 (id=342):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000500)={0x0, 0x10, 0x6, "8a0b216d32de"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400002"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000640)={0x40, 0x5, 0x1, '/'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

26.73310734s ago: executing program 34 (id=342):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000500)={0x0, 0x10, 0x6, "8a0b216d32de"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400002"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000640)={0x40, 0x5, 0x1, '/'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

7.101761185s ago: executing program 4 (id=441):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaab19, 0x4f, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x3ffff9, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85ff, 0x101, 0x286, 0x0, 0x2, 0x1, 0x8, 0x5, 0x101, 0x100000002], 0x4, 0x290fc4})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6.598512709s ago: executing program 6 (id=442):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040))
r2 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0x0, 0xa2c65)
r3 = syz_usb_connect(0x3, 0xc7, &(0x7f0000000000)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000940)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffe00000000003, 0x20000000000000b, 0x1, 0x200, 0x4a, 0x28, 0x80000005, 0x2})
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000180))

5.813242047s ago: executing program 4 (id=446):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
listen(r0, 0xb5d6)
listen(r1, 0x3)

5.560851088s ago: executing program 4 (id=448):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000040)={&(0x7f0000000600)=[{0xcf, 0xc000, 0x2000, &(0x7f0000000200)='f'}], 0x1})

5.041466053s ago: executing program 2 (id=452):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setfsgid(0xee00)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7})
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/diskstats\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r1, &(0x7f00000047c0)={0x2020}, 0x2020)

4.745217526s ago: executing program 2 (id=453):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r4)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)

4.742151707s ago: executing program 5 (id=454):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000002c0)={[{@resgid}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x22)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x85000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x8005, 0x0, 0x0, 0x9, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/mem_sleep', 0x2000, 0x0)
fsetxattr$security_evm(r1, 0x0, 0x0, 0x0, 0x0)

4.383735983s ago: executing program 2 (id=455):
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)

4.179628463s ago: executing program 2 (id=456):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f0000000200)='S', 0x1)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100))
r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000140)={0x1, "e91b90d4142f4d3279b365e884dd8a77bf7e554a20d1c97c046c4f1bf23640005f94d51efce90fa574e58a1143da4ccebce72a2702ecd13eb19e2d91876087d6", {0x7f, 0x40}})
ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f00000000c0)=0x80000001)

4.069359418s ago: executing program 5 (id=457):
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps_rollup\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000012700)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020)

3.773083722s ago: executing program 5 (id=458):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000300)="00ad6f637a538b1d9e8ecf1ef3435e2478f8bc8ab9833feb", 0x18}], 0x1}}], 0x1, 0x22008805)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100), 0x4)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000540)={0x0, 0x4, 0x3, [0x2, 0x7, 0x4]}, 0xe)

2.911295653s ago: executing program 6 (id=459):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000240)='D', 0x1, 0x2004c015, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)='<', 0xfdef, 0x822, 0x0, 0x0)

2.735650391s ago: executing program 6 (id=460):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000000)=0xa)
setregid(r3, r3)
setns(r1, 0x24020000)
r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x10000000)

2.681266334s ago: executing program 2 (id=461):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0x0, 0x148, 0x0, 0x148, 0x1b8, 0x240, 0x240, 0x1b8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @private=0xa010101, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {0xff}, 0x88, 0x3, 0x10}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@socket1={{0x28}}, @common=@inet=@set2={{0x28}, {{0x0, 0x4, 0x6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0xffffff00, 0x0, 0xffffff00], 0x4e21, 0x4e23, 0x4e20, 0x4e23, 0x8, 0x4, 0x5f4a, 0x100, 0x6}}}, {{@ip={@empty, @empty, 0xff000000, 0xff000000, 'wlan0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0xc, 0x0, 0x60}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0xc, @mcast1}, 0x1c)

2.431368635s ago: executing program 4 (id=462):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x126)

2.392554688s ago: executing program 2 (id=463):
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010001ffffff40460801100001010203010902270001010080fa0904000003ffffff00070581020002000705020200020007058303"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000e40)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)

2.312553101s ago: executing program 6 (id=464):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0)
write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="4500001c12344000402f"], 0x1c)

2.201027576s ago: executing program 4 (id=465):
syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1210080, &(0x7f0000000080)={[{@creator={'creator', 0x3d, "83f2824d"}}, {@codepage={'codepage', 0x3d, 'iso8859-5'}}]}, 0x1, 0x331, &(0x7f00000002c0)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000003c0)='./bus\x00')
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

769.864924ms ago: executing program 5 (id=466):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5})
preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x7, 0xd)
ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29)

600.070212ms ago: executing program 6 (id=467):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x26000000, 0x1f000000})

536.274485ms ago: executing program 5 (id=468):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0x82)
fchdir(r2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
write(r0, &(0x7f0000000080)='4', 0x1)

449.217149ms ago: executing program 4 (id=469):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f0000000840)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde6\xfd\vQM`\x8f\xec\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0e}\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13?\x87\'S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']})

7.62969ms ago: executing program 35 (id=469):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f0000000840)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde6\xfd\vQM`\x8f\xec\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0e}\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13?\x87\'S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']})

202.16µs ago: executing program 5 (id=471):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000380)={0xa, 0x4e1d, 0x4, @mcast2}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 6 (id=472):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1\x00', 0x1ed)
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff)
mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff)
mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff)

kernel console output (not intermixed with test programs):

nrecognised inode hash code 255
[   93.962797][ T6035] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.65: Corrupt directory, running e2fsck is recommended
[   93.977188][  T789] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   93.980032][ T6035] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[   93.999283][ T6035] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.65: corrupted in-inode xattr: invalid ea_ino
[   94.013539][ T6035] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.65: couldn't read orphan inode 15 (err -117)
[   94.040779][ T6035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.078361][ T6035] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.65: Unrecognised inode hash code 255
[   94.090340][ T6035] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.65: Corrupt directory, running e2fsck is recommended
[   94.108335][ T6035] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.65: Unrecognised inode hash code 255
[   94.122406][ T6035] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.65: Corrupt directory, running e2fsck is recommended
[   94.137545][ T6035] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.65: Unrecognised inode hash code 255
[   94.149292][ T6035] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.65: Corrupt directory, running e2fsck is recommended
[   94.162681][ T6035] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.65: Unrecognised inode hash code 255
[   94.175455][ T6035] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.65: Corrupt directory, running e2fsck is recommended
[   94.196439][ T6035] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.65: Unrecognised inode hash code 255
[   94.208177][ T6035] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.65: Corrupt directory, running e2fsck is recommended
[   94.210403][  T789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.229365][ T6035] EXT4-fs error (device loop2): ext4_empty_dir:3147: inode #2: block 4: comm syz.2.65: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=131071, rec_len=65535, size=1024 fake=0
[   94.237247][  T789] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   94.261341][ T5779] Bluetooth: hci1: command 0x0c1a tx timeout
[   94.261638][  T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.278769][  T789] usb 1-1: config 0 descriptor??
[   94.303065][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.494995][ T6045] loop2: detected capacity change from 0 to 8
[   94.525917][  T789] usbhid 1-1:0.0: can't add hid device: -71
[   94.558257][  T789] usbhid: probe of 1-1:0.0 failed with error -71
[   94.599921][  T789] usb 1-1: USB disconnect, device number 2
[   94.714349][ T6047] iommufd_mock iommufd_mock1: Adding to iommu group 0
[   94.751280][ T5779] Bluetooth: hci2: command 0x0c1a tx timeout
[   94.821285][ T5779] Bluetooth: hci0: command 0x0c1a tx timeout
[   94.902085][ T5994] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110
[   94.924648][  T971] usb 4-1: USB disconnect, device number 4
[   94.958477][  T971] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[   94.980353][  T971] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[   95.013196][  T971] ti_usb_3410_5052 4-1:2.0: device disconnected
[   95.141348][ T5779] Bluetooth: hci3: command 0x0c1a tx timeout
[   95.201226][    T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   95.209046][  T789] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   95.397767][    T8] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.409901][    T8] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   95.428193][    T8] usb 3-1: config 0 interface 0 has no altsetting 0
[   95.435548][    T8] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[   95.435739][  T789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.469679][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.485269][  T789] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[   95.497678][    T8] usb 3-1: config 0 descriptor??
[   95.513764][  T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.539329][  T789] usb 1-1: config 0 descriptor??
[   95.970665][    T8] hid-multitouch 0003:0EEF:72C4.0001: unbalanced collection at end of report description
[   95.983486][    T8] hid-multitouch: probe of 0003:0EEF:72C4.0001 failed with error -22
[   96.191457][ T5786] usb 3-1: USB disconnect, device number 3
[   96.221219][ T5841] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   96.341250][ T5779] Bluetooth: hci1: command 0x0c1a tx timeout
[   96.411592][  T789] aiptek 1-1:0.0: Aiptek using 400 ms programming speed
[   96.421061][  T789] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5
[   96.449228][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.470857][ T5841] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   96.485891][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.549434][ T5841] usb 2-1: config 0 descriptor??
[   96.762499][ T6066] bridge0: port 3(syz_tun) entered disabled state
[   96.782953][ T5841] usbhid 2-1:0.0: can't add hid device: -71
[   96.789032][ T5841] usbhid: probe of 2-1:0.0 failed with error -71
[   96.829443][ T5779] Bluetooth: hci2: command 0x0c1a tx timeout
[   96.841865][ T5841] usb 2-1: USB disconnect, device number 2
[   96.901881][ T5779] Bluetooth: hci0: command 0x0c1a tx timeout
[   96.970032][  T789] usb 1-1: USB disconnect, device number 3
[   96.975982][    C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[   96.982776][ T6068] loop2: detected capacity change from 0 to 4096
[   97.098045][ T6068] NILFS (loop2): invalid segment: Checksum error in segment payload
[   97.117264][ T6068] NILFS (loop2): trying rollback from an earlier position
[   97.123521][ T6072] Mass Storage Function, version: 2009/09/11
[   97.137085][ T6072] LUN: removable file: (no medium)
[   97.172925][   T28] audit: type=1800 audit(1789555150.196:2): pid=6072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.79" name="file" dev="configfs" ino=7116 res=0 errno=0
[   97.214493][ T6068] NILFS (loop2): recovery complete
[   97.221554][ T5779] Bluetooth: hci3: command 0x0c1a tx timeout
[   97.245371][ T6073] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   97.286006][ T6075] loop3: detected capacity change from 0 to 1024
[   97.386645][ T6075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.471645][ T5841] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   97.500859][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.673074][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.691173][ T5841] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[   97.710566][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.733538][ T5841] usb 2-1: config 0 descriptor??
[   97.989938][ T6079] loop3: detected capacity change from 0 to 32768
[   98.050448][ T6079] JBD2: Ignoring recovery information on journal
[   98.103489][   T28] audit: type=1800 audit(1789555151.136:3): pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.77" name="bus" dev="loop2" ino=12 res=0 errno=0
[   98.105209][ T6079] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   98.149225][   T28] audit: type=1800 audit(1789555151.176:4): pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.77" name="bus" dev="loop2" ino=12 res=0 errno=0
[   98.384425][ T5774] ocfs2: Unmounting device (7,3) on (node local)
[   98.685558][ T6087] syz.3.82 uses obsolete (PF_INET,SOCK_PACKET)
[   98.805579][ T5841] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[   98.818073][ T5841] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6
[   98.928672][ T5841] usb 2-1: USB disconnect, device number 3
[   98.934643][    C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[   99.065755][ T6085] loop0: detected capacity change from 0 to 32768
[   99.136639][ T6085] JBD2: Ignoring recovery information on journal
[   99.250477][ T6085] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   99.529100][ T6101] loop1: detected capacity change from 0 to 128
[   99.573676][ T6101] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   99.596570][ T6101] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   99.612481][ T6085] syz.0.90 (6085) used greatest stack depth: 17544 bytes left
[   99.722981][ T5776] ocfs2: Unmounting device (7,0) on (node local)
[   99.878168][ T6096] loop3: detected capacity change from 0 to 32768
[   99.919599][ T6101] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)"
[   99.970188][ T6096] JBD2: Ignoring recovery information on journal
[  100.045095][ T6096] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  100.049968][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  100.218764][ T6112] loop1: detected capacity change from 0 to 2048
[  100.378372][ T6112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.486860][ T6112] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  100.555333][ T6112] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  100.586546][ T6112] EXT4-fs (loop1): This should not happen!! Data will be lost
[  100.586546][ T6112] 
[  100.610973][ T6112] EXT4-fs (loop1): Total free blocks count 0
[  100.630498][ T6112] EXT4-fs (loop1): Free/Dirty block details
[  100.650990][ T6112] EXT4-fs (loop1): free_blocks=4096
[  100.666630][ T6112] EXT4-fs (loop1): dirty_blocks=16
[  100.681403][ T6112] EXT4-fs (loop1): Block reservation details
[  100.697688][ T6112] EXT4-fs (loop1): i_reserved_data_blocks=1
[  100.713225][ T6123] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28
[  100.782036][  T971] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  100.809446][ T5774] ocfs2: Unmounting device (7,3) on (node local)
[  100.991307][  T971] usb 3-1: Using ep0 maxpacket: 8
[  100.998431][  T971] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[  101.006978][  T971] usb 3-1: config 0 has an invalid descriptor of length 72, skipping remainder of the config
[  101.054745][  T971] usb 3-1: config 0 has no interface number 0
[  101.081872][  T971] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 231, changing to 11
[  101.112145][  T971] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 25303, setting to 1024
[  101.125019][ T6125] loop0: detected capacity change from 0 to 32768
[  101.153892][  T971] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  101.195959][ T6125] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  101.211627][  T971] usb 3-1: config 0 interface 52 has no altsetting 0
[  101.235762][  T971] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  101.261702][  T971] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  101.269871][  T971] usb 3-1: Manufacturer: syz
[  101.277893][  T971] usb 3-1: config 0 descriptor??
[  101.295253][  T971] hub 3-1:0.52: bad descriptor, ignoring hub
[  101.310076][  T971] hub: probe of 3-1:0.52 failed with error -5
[  101.368930][ T6141] FAULT_INJECTION: forcing a failure.
[  101.368930][ T6141] name failslab, interval 1, probability 0, space 0, times 0
[  101.383487][ T6141] CPU: 1 PID: 6141 Comm: syz.3.97 Not tainted syzkaller #0
[  101.389905][ T6125] XFS (loop0): Ending clean mount
[  101.390709][ T6141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  101.390737][ T6141] Call Trace:
[  101.390745][ T6141]  <TASK>
[  101.390754][ T6141]  dump_stack_lvl+0x18c/0x250
[  101.390788][ T6141]  ? show_regs_print_info+0x20/0x20
[  101.390815][ T6141]  ? load_image+0x420/0x420
[  101.390840][ T6141]  ? __might_sleep+0xe0/0xe0
[  101.390865][ T6141]  ? __lock_acquire+0x7d80/0x7d80
[  101.390893][ T6141]  should_fail_ex+0x394/0x4c0
[  101.390924][ T6141]  should_failslab+0x9/0x20
[  101.390950][ T6141]  slab_pre_alloc_hook+0x59/0x300
[  101.390979][ T6141]  ? prepend_path+0x8a7/0x950
[  101.391000][ T6141]  ? tomoyo_encode+0x2ad/0x570
[  101.391026][ T6141]  ? tomoyo_encode+0x2ad/0x570
[  101.391044][ T6141]  __kmem_cache_alloc_node+0x53/0x250
[  101.391073][ T6141]  ? tomoyo_encode+0x2ad/0x570
[  101.391089][ T6141]  __kmalloc+0xa7/0x240
[  101.391116][ T6141]  tomoyo_encode+0x2ad/0x570
[  101.391138][ T6141]  tomoyo_realpath_from_path+0x57c/0x5c0
[  101.391179][ T6141]  tomoyo_mount_permission+0x3e7/0x9d0
[  101.391207][ T6141]  ? tomoyo_mount_permission+0x2b3/0x9d0
[  101.391235][ T6141]  ? kasan_set_track+0x4e/0x70
[  101.391258][ T6141]  ? tomoyo_get_name+0x570/0x570
[  101.391282][ T6141]  ? user_path_at_empty+0x4c/0x60
[  101.391337][ T6141]  ? kasan_quarantine_put+0xd8/0x220
[  101.391364][ T6141]  ? lockdep_hardirqs_on+0x98/0x150
[  101.391389][ T6141]  security_sb_mount+0x87/0xc0
[  101.391416][ T6141]  path_mount+0xbc/0xfa0
[  101.391436][ T6141]  ? kmem_cache_free+0xf8/0x290
[  101.391473][ T6141]  __se_sys_mount+0x2e7/0x3d0
[  101.391499][ T6141]  ? __x64_sys_mount+0xc0/0xc0
[  101.435237][ T6125] XFS (loop0): Quotacheck needed: Please wait.
[  101.436767][ T6141]  ? lockdep_hardirqs_on+0x98/0x150
[  101.533824][ T6125] XFS (loop0): Quotacheck: Done.
[  101.535127][ T6141]  ? __x64_sys_mount+0x20/0xc0
[  101.570490][ T6141]  do_syscall_64+0x55/0xb0
[  101.574941][ T6141]  ? clear_bhb_loop+0x40/0x90
[  101.579654][ T6141]  ? clear_bhb_loop+0x40/0x90
[  101.584364][ T6141]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  101.590296][ T6141] RIP: 0033:0x7f442a79e159
[  101.594734][ T6141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  101.614370][ T6141] RSP: 002b:00007f442b6e8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  101.622820][ T6141] RAX: ffffffffffffffda RBX: 00007f442aa25fa0 RCX: 00007f442a79e159
[  101.630820][ T6141] RDX: 0000200000000380 RSI: 0000200000000300 RDI: 0000000000000000
[  101.638819][ T6141] RBP: 00007f442a83506b R08: 00002000000003c0 R09: 0000000000000000
[  101.646819][ T6141] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000
[  101.654822][ T6141] R13: 00007f442aa26038 R14: 00007f442aa25fa0 R15: 00007ffe6ead2368
[  101.662840][ T6141]  </TASK>
[  101.696593][  T971] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input7
[  101.711716][ T6141] ERROR: Out of memory at tomoyo_realpath_from_path.
[  101.959564][ T5776] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  102.071720][  T971] usb 3-1: USB disconnect, device number 4
[  102.336936][ T6153] loop1: detected capacity change from 0 to 2048
[  102.382049][ T6153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.628864][ T6162] FAULT_INJECTION: forcing a failure.
[  102.628864][ T6162] name failslab, interval 1, probability 0, space 0, times 0
[  102.637726][ T6153] EXT4-fs error (device loop1): empty_inline_dir:1858: inode #12: comm syz.1.103: error -12 getting inode 12 block
[  102.647220][ T6162] CPU: 1 PID: 6162 Comm: syz.0.112 Not tainted syzkaller #0
[  102.661683][ T6162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  102.671765][ T6162] Call Trace:
[  102.675060][ T6162]  <TASK>
[  102.678012][ T6162]  dump_stack_lvl+0x18c/0x250
[  102.682820][ T6162]  ? show_regs_print_info+0x20/0x20
[  102.688052][ T6162]  ? load_image+0x420/0x420
[  102.692581][ T6162]  ? __might_sleep+0xe0/0xe0
[  102.697206][ T6162]  ? __lock_acquire+0x7d80/0x7d80
[  102.702272][ T6162]  should_fail_ex+0x394/0x4c0
[  102.704443][ T6153] EXT4-fs (loop1): Remounting filesystem read-only
[  102.706976][ T6162]  should_failslab+0x9/0x20
[  102.707007][ T6162]  slab_pre_alloc_hook+0x59/0x300
[  102.707041][ T6162]  kmem_cache_alloc_lru+0x4d/0x2b0
[  102.728228][ T6162]  ? iget_locked+0x205/0x8c0
[  102.732853][ T6162]  iget_locked+0x205/0x8c0
[  102.737308][ T6162]  kernfs_get_inode+0x4f/0x6e0
[  102.742117][ T6162]  ? down_read+0x1ac/0x2e0
[  102.746607][ T6162]  kernfs_get_tree+0x461/0x720
[  102.751406][ T6162]  sysfs_get_tree+0x46/0x110
[  102.756024][ T6162]  vfs_get_tree+0x8c/0x280
[  102.760468][ T6162]  do_new_mount+0x24a/0xa40
[  102.765003][ T6162]  __se_sys_mount+0x2e7/0x3d0
[  102.769712][ T6162]  ? __x64_sys_mount+0xc0/0xc0
[  102.774509][ T6162]  ? lockdep_hardirqs_on+0x98/0x150
[  102.779733][ T6162]  ? __x64_sys_mount+0x20/0xc0
[  102.784528][ T6162]  do_syscall_64+0x55/0xb0
[  102.788973][ T6162]  ? clear_bhb_loop+0x40/0x90
[  102.793672][ T6162]  ? clear_bhb_loop+0x40/0x90
[  102.798375][ T6162]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  102.804296][ T6162] RIP: 0033:0x7f257419e159
[  102.808736][ T6162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  102.828373][ T6162] RSP: 002b:00007f2574f7e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  102.836818][ T6162] RAX: ffffffffffffffda RBX: 00007f2574425fa0 RCX: 00007f257419e159
[  102.844818][ T6162] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000
[  102.852904][ T6162] RBP: 00007f257423506b R08: 0000000000000000 R09: 0000000000000000
[  102.860902][ T6162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  102.869080][ T6162] R13: 00007f2574426038 R14: 00007f2574425fa0 R15: 00007ffca03cbae8
[  102.877097][ T6162]  </TASK>
[  102.894049][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.254557][ T6166] loop2: detected capacity change from 0 to 32768
[  103.312456][ T6166] JBD2: Ignoring recovery information on journal
[  103.411317][ T6166] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  103.858411][ T6193] gretap0: entered promiscuous mode
[  103.893003][ T6193] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check.
[  104.060955][ T5775] ocfs2: Unmounting device (7,2) on (node local)
[  105.343462][ T6215] loop3: detected capacity change from 0 to 128
[  105.420460][ T6215] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  105.434556][ T6215] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  105.535296][ T6213] loop2: detected capacity change from 0 to 8192
[  105.565777][ T6215] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4059: comm syz.3.122: Allocating blocks 19-20 which overlap fs metadata
[  105.605992][ T6213] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  105.704322][ T5774] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  105.930040][ T6224] FAULT_INJECTION: forcing a failure.
[  105.930040][ T6224] name failslab, interval 1, probability 0, space 0, times 0
[  105.962238][ T6224] CPU: 0 PID: 6224 Comm: syz.3.125 Not tainted syzkaller #0
[  105.969589][ T6224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  105.979670][ T6224] Call Trace:
[  105.982986][ T6224]  <TASK>
[  105.985951][ T6224]  dump_stack_lvl+0x18c/0x250
[  105.990688][ T6224]  ? show_regs_print_info+0x20/0x20
[  105.995921][ T6224]  ? load_image+0x420/0x420
[  106.000460][ T6224]  ? __might_sleep+0xe0/0xe0
[  106.005087][ T6224]  ? __lock_acquire+0x7d80/0x7d80
[  106.010147][ T6224]  should_fail_ex+0x394/0x4c0
[  106.015499][ T6224]  should_failslab+0x9/0x20
[  106.020025][ T6224]  slab_pre_alloc_hook+0x59/0x300
[  106.025112][ T6224]  ? d_instantiate+0x6f/0x90
[  106.029829][ T6224]  kmem_cache_alloc+0x5a/0x2c0
[  106.034651][ T6224]  ? alloc_empty_file+0x9e/0x1d0
[  106.039601][ T6224]  alloc_empty_file+0x9e/0x1d0
[  106.044372][ T6224]  alloc_file+0x5b/0x600
[  106.048622][ T6224]  alloc_file_pseudo+0x184/0x210
[  106.053585][ T6224]  ? fput+0x1a0/0x1a0
[  106.057680][ T6224]  ? shmem_get_inode+0xa7a/0xcd0
[  106.062753][ T6224]  __shmem_file_setup+0x23c/0x2c0
[  106.067784][ T6224]  big_key_preparse+0x287/0x4f0
[  106.072668][ T6224]  ? keyctl_pkey_verify+0x270/0x270
[  106.077873][ T6224]  __key_create_or_update+0x3a6/0xa60
[  106.083273][ T6224]  ? key_create_or_update+0x60/0x60
[  106.088496][ T6224]  ? bpf_lsm_key_permission+0x9/0x10
[  106.093790][ T6224]  ? lookup_user_key+0xb66/0x1140
[  106.098843][ T6224]  ? search_process_keyrings_rcu+0x2b0/0x2b0
[  106.104830][ T6224]  key_create_or_update+0x42/0x60
[  106.109871][ T6224]  __se_sys_add_key+0x34f/0x410
[  106.114739][ T6224]  ? __x64_sys_add_key+0xc0/0xc0
[  106.119689][ T6224]  ? lockdep_hardirqs_on+0x98/0x150
[  106.124889][ T6224]  ? __x64_sys_add_key+0x20/0xc0
[  106.129840][ T6224]  do_syscall_64+0x55/0xb0
[  106.134259][ T6224]  ? clear_bhb_loop+0x40/0x90
[  106.138938][ T6224]  ? clear_bhb_loop+0x40/0x90
[  106.143618][ T6224]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  106.149531][ T6224] RIP: 0033:0x7f442a79e159
[  106.153942][ T6224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  106.173635][ T6224] RSP: 002b:00007f442b6e8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  106.182060][ T6224] RAX: ffffffffffffffda RBX: 00007f442aa25fa0 RCX: 00007f442a79e159
[  106.190042][ T6224] RDX: 0000200000000400 RSI: 0000200000000280 RDI: 0000200000000180
[  106.198014][ T6224] RBP: 00007f442a83506b R08: fffffffffffffffe R09: 0000000000000000
[  106.206000][ T6224] R10: 00000000000fffff R11: 0000000000000246 R12: 0000000000000000
[  106.213987][ T6224] R13: 00007f442aa26038 R14: 00007f442aa25fa0 R15: 00007ffe6ead2368
[  106.221986][ T6224]  </TASK>
[  106.676042][ T6225] loop1: detected capacity change from 0 to 32768
[  106.701004][ T6225] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.126 (6225)
[  106.816284][ T6225] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  106.841844][ T6225] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  106.871926][ T6225] BTRFS info (device loop1): setting nodatasum
[  106.887146][ T6225] BTRFS info (device loop1): force zlib compression, level 3
[  106.905182][ T6225] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  106.920964][ T6225] BTRFS info (device loop1): use lzo compression, level 0
[  106.965221][ T6225] BTRFS info (device loop1): turning on flush-on-commit
[  106.991390][ T6225] BTRFS info (device loop1): enabling auto defrag
[  107.007680][ T6225] BTRFS info (device loop1): max_inline at 4096
[  107.025358][ T6225] BTRFS info (device loop1): using free space tree
[  107.212905][ T6225] BTRFS info (device loop1): enabling ssd optimizations
[  107.602239][ T6269] loop0: detected capacity change from 0 to 128
[  107.626880][ T6269] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  107.666015][ T6269] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  107.771257][    T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  107.833083][ T5777] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  107.851353][ T6269] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4059: comm syz.0.134: Allocating blocks 19-20 which overlap fs metadata
[  107.913934][ T5776] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  107.991247][    T8] usb 4-1: Using ep0 maxpacket: 16
[  108.007414][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.032616][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.052034][    T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  108.089460][    T8] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  108.121208][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.150228][    T8] usb 4-1: config 0 descriptor??
[  109.318171][    T8] shield 0003:0955:7214.0002: unknown main item tag 0x0
[  109.325931][    T8] shield 0003:0955:7214.0002: unknown main item tag 0x0
[  109.333101][    T8] shield 0003:0955:7214.0002: unknown main item tag 0x0
[  109.340116][    T8] shield 0003:0955:7214.0002: unknown main item tag 0x0
[  109.347139][    T8] shield 0003:0955:7214.0002: unknown main item tag 0x0
[  109.357500][    T8] input: HID 0955:7214 Haptics as /devices/virtual/input/input8
[  109.390506][    T8] shield 0003:0955:7214.0002: Registered Thunderstrike controller
[  109.404001][    T8] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0
[  109.462093][ T6281] FAULT_INJECTION: forcing a failure.
[  109.462093][ T6281] name failslab, interval 1, probability 0, space 0, times 0
[  109.491392][ T6281] CPU: 1 PID: 6281 Comm: syz.0.137 Not tainted syzkaller #0
[  109.498741][ T6281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  109.508823][ T6281] Call Trace:
[  109.512128][ T6281]  <TASK>
[  109.515076][ T6281]  dump_stack_lvl+0x18c/0x250
[  109.519797][ T6281]  ? show_regs_print_info+0x20/0x20
[  109.525039][ T6281]  ? load_image+0x420/0x420
[  109.529671][ T6281]  ? __might_sleep+0xe0/0xe0
[  109.534289][ T6281]  ? __lock_acquire+0x7d80/0x7d80
[  109.539336][ T6281]  should_fail_ex+0x394/0x4c0
[  109.544053][ T6281]  should_failslab+0x9/0x20
[  109.548668][ T6281]  slab_pre_alloc_hook+0x59/0x300
[  109.553747][ T6281]  kmem_cache_alloc+0x5a/0x2c0
[  109.558547][ T6281]  ? __kernfs_new_node+0xe5/0x7f0
[  109.563618][ T6281]  __kernfs_new_node+0xe5/0x7f0
[  109.568502][ T6281]  ? kernfs_add_one+0x149/0x6b0
[  109.573384][ T6281]  ? __lock_acquire+0x7d80/0x7d80
[  109.578428][ T6281]  ? kernfs_new_node+0x260/0x260
[  109.583375][ T6281]  ? sysfs_do_create_link_sd+0x75/0x110
[  109.588951][ T6281]  ? __lock_acquire+0x7d80/0x7d80
[  109.594004][ T6281]  kernfs_new_node+0x14c/0x260
[  109.598794][ T6281]  kernfs_create_link+0xa7/0x200
[  109.603769][ T6281]  sysfs_do_create_link_sd+0x83/0x110
[  109.609203][ T6281]  iommu_device_link+0xf7/0x1b0
[  109.614090][ T6281]  __iommu_probe_device+0x2ad/0x1040
[  109.619411][ T6281]  ? iommu_probe_device+0x24/0x230
[  109.624563][ T6281]  ? iommu_probe_device+0x230/0x230
[  109.629817][ T6281]  iommu_probe_device+0x2e/0x230
[  109.634794][ T6281]  iommu_bus_notifier+0x7b/0x170
[  109.639776][ T6281]  notifier_call_chain+0x18f/0x380
[  109.644930][ T6281]  blocking_notifier_call_chain+0x6a/0x90
[  109.650702][ T6281]  bus_notify+0x13e/0x180
[  109.655079][ T6281]  device_add+0x5cb/0xc40
[  109.659447][ T6281]  iommufd_test+0x121d/0x2a20
[  109.664164][ T6281]  ? iommufd_selftest_destroy+0xf0/0xf0
[  109.669724][ T6281]  ? __lock_acquire+0x7d80/0x7d80
[  109.674778][ T6281]  ? __lock_acquire+0x7d80/0x7d80
[  109.679896][ T6281]  ? __might_fault+0xaa/0x120
[  109.684612][ T6281]  ? __might_fault+0xaa/0x120
[  109.689308][ T6281]  iommufd_fops_ioctl+0x48b/0x540
[  109.694355][ T6281]  ? iommufd_ctx_put+0x40/0x40
[  109.699260][ T6281]  ? __fget_files+0x28/0x460
[  109.703899][ T6281]  ? bpf_lsm_file_ioctl+0x9/0x10
[  109.708866][ T6281]  ? security_file_ioctl+0x80/0xa0
[  109.714061][ T6281]  ? iommufd_ctx_put+0x40/0x40
[  109.718873][ T6281]  __se_sys_ioctl+0xfd/0x170
[  109.723507][ T6281]  do_syscall_64+0x55/0xb0
[  109.727988][ T6281]  ? clear_bhb_loop+0x40/0x90
[  109.732701][ T6281]  ? clear_bhb_loop+0x40/0x90
[  109.737436][ T6281]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  109.743358][ T6281] RIP: 0033:0x7f257419e159
[  109.747820][ T6281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  109.767533][ T6281] RSP: 002b:00007f2574f7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  109.775964][ T6281] RAX: ffffffffffffffda RBX: 00007f2574425fa0 RCX: 00007f257419e159
[  109.784029][ T6281] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000003
[  109.792044][ T6281] RBP: 00007f257423506b R08: 0000000000000000 R09: 0000000000000000
[  109.800047][ T6281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  109.808033][ T6281] R13: 00007f2574426038 R14: 00007f2574425fa0 R15: 00007ffca03cbae8
[  109.816053][ T6281]  </TASK>
[  109.819134][    C1] vkms_vblank_simulate: vblank timer overrun
[  109.952846][    T8] usb 4-1: USB disconnect, device number 5
[  109.968237][  T789] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  110.031419][  T789] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  110.065180][  T789] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  110.082162][ T6289] gve 0000:00:00.0: Failed to map pci bar!
[  110.106217][  T789] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  110.117654][ T6289] gve: probe of 0000:00:00.0 failed with error -12
[  110.284603][ T6295] loop5: detected capacity change from 0 to 7
[  110.292890][ T6296] loop0: detected capacity change from 0 to 512
[  110.309426][ T6295]  loop5:
[  110.322592][ T6295] loop5: partition table partially beyond EOD, truncated
[  110.329990][ T6296] EXT4-fs (loop0): Test dummy encryption mode enabled
[  110.378612][ T6296] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.143: inode has both inline data and extents flags
[  110.441850][ T6296] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.143: couldn't read orphan inode 15 (err -117)
[  110.475341][ T6296] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.734697][ T6305] loop3: detected capacity change from 0 to 512
[  110.754500][ T6293] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.797229][ T6305] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  110.953558][ T6311] FAULT_INJECTION: forcing a failure.
[  110.953558][ T6311] name failslab, interval 1, probability 0, space 0, times 0
[  110.957875][ T6305] EXT4-fs (loop3): 1 orphan inode deleted
[  110.967252][ T6311] CPU: 1 PID: 6311 Comm: syz.0.146 Not tainted syzkaller #0
[  110.979677][ T6311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  110.989765][ T6311] Call Trace:
[  110.993075][ T6311]  <TASK>
[  110.996034][ T6311]  dump_stack_lvl+0x18c/0x250
[  111.000762][ T6311]  ? show_regs_print_info+0x20/0x20
[  111.006004][ T6311]  ? load_image+0x420/0x420
[  111.010551][ T6311]  ? __might_sleep+0xe0/0xe0
[  111.011263][ T6305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.015157][ T6311]  ? __lock_acquire+0x7d80/0x7d80
[  111.031519][ T2943] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  111.032593][ T6311]  should_fail_ex+0x394/0x4c0
[  111.032629][ T6311]  should_failslab+0x9/0x20
[  111.051829][ T6311]  slab_pre_alloc_hook+0x59/0x300
[  111.056895][ T6311]  ? __kernfs_new_node+0xaa/0x7f0
[  111.061933][ T6311]  ? rcu_is_watching+0x15/0xb0
[  111.066701][ T6311]  kmem_cache_alloc+0x5a/0x2c0
[  111.071562][ T6311]  ? __kernfs_new_node+0xe5/0x7f0
[  111.076592][ T6311]  __kernfs_new_node+0xe5/0x7f0
[  111.081667][ T6311]  ? kernfs_new_node+0x260/0x260
[  111.086637][ T6311]  ? sysfs_do_create_link_sd+0x75/0x110
[  111.092207][ T6311]  kernfs_new_node+0x14c/0x260
[  111.097178][ T6311]  kernfs_create_link+0xa7/0x200
[  111.102154][ T6311]  sysfs_do_create_link_sd+0x83/0x110
[  111.107550][ T6311]  device_add_class_symlinks+0x1cf/0x240
[  111.113225][ T6311]  device_add+0x4f9/0xc40
[  111.117563][ T6311]  netdev_register_kobject+0x188/0x320
[  111.123049][ T6311]  register_netdevice+0x12aa/0x1ba0
[  111.128262][ T6311]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  111.133894][ T6311]  ? netif_stacked_transfer_operstate+0x210/0x210
[  111.140309][ T6311]  ? mutex_unlock+0x10/0x10
[  111.144827][ T6311]  ? vscnprintf+0x80/0x80
[  111.149190][ T6311]  ? net_generic+0x1e/0x240
[  111.153717][ T6311]  ? radix_tree_lookup+0x267/0x280
[  111.158848][ T6311]  ppp_dev_configure+0x850/0xad0
[  111.163810][ T6311]  ppp_ioctl+0xafb/0x1bc0
[  111.168178][ T6311]  ? ppp_poll+0x250/0x250
[  111.172512][ T6311]  ? __fget_files+0x28/0x460
[  111.177122][ T6311]  ? bpf_lsm_file_ioctl+0x9/0x10
[  111.182058][ T6311]  ? security_file_ioctl+0x80/0xa0
[  111.187209][ T6311]  ? ppp_poll+0x250/0x250
[  111.191565][ T6311]  __se_sys_ioctl+0xfd/0x170
[  111.196158][ T6311]  do_syscall_64+0x55/0xb0
[  111.200578][ T6311]  ? clear_bhb_loop+0x40/0x90
[  111.205259][ T6311]  ? clear_bhb_loop+0x40/0x90
[  111.209952][ T6311]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  111.215915][ T6311] RIP: 0033:0x7f257419e159
[  111.220331][ T6311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  111.239985][ T6311] RSP: 002b:00007f2574f7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  111.248415][ T6311] RAX: ffffffffffffffda RBX: 00007f2574425fa0 RCX: 00007f257419e159
[  111.256390][ T6311] RDX: 00002000000000c0 RSI: 00000000c004743e RDI: 0000000000000004
[  111.264794][ T6311] RBP: 00007f257423506b R08: 0000000000000000 R09: 0000000000000000
[  111.272876][ T6311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  111.280854][ T6311] R13: 00007f2574426038 R14: 00007f2574425fa0 R15: 00007ffca03cbae8
[  111.288901][ T6311]  </TASK>
[  111.292037][    C1] vkms_vblank_simulate: vblank timer overrun
[  111.303436][ T2943] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:9: Failed to release dquot type 1
[  111.330874][ T6305] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.717628][ T6305] EXT4-fs error (device loop3): ext4_ind_map_blocks:604: inode #18: comm syz.3.145: Can't allocate blocks for non-extent mapped inodes with bigalloc
[  111.776272][ T6317] loop2: detected capacity change from 0 to 164
[  111.810806][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.829560][ T2922] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  111.866376][ T2922] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 1
[  112.742895][ T6331] fuse: root generation should be zero
[  113.041292][ T5851] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  113.224453][ T5851] usb 1-1: Using ep0 maxpacket: 16
[  113.238746][ T5851] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  113.269819][ T5851] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  113.285157][ T5851] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  113.302890][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.310958][ T5851] usb 1-1: Product: syz
[  113.320611][ T5851] usb 1-1: Manufacturer: syz
[  113.328625][ T5851] usb 1-1: SerialNumber: syz
[  113.328684][ T6348] kvm: user requested TSC rate below hardware speed
[  113.360628][ T6348] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns
[  113.370059][ T6348] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer.
[  113.572079][ T5851] usb 1-1: 0:2 : does not exist
[  113.596683][ T5851] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  113.614366][ T6354] FAULT_INJECTION: forcing a failure.
[  113.614366][ T6354] name failslab, interval 1, probability 0, space 0, times 0
[  113.629227][ T6354] CPU: 0 PID: 6354 Comm: syz.3.160 Not tainted syzkaller #0
[  113.636610][ T6354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  113.646777][ T6354] Call Trace:
[  113.650069][ T6354]  <TASK>
[  113.653102][ T6354]  dump_stack_lvl+0x18c/0x250
[  113.657830][ T6354]  ? show_regs_print_info+0x20/0x20
[  113.663072][ T6354]  ? load_image+0x420/0x420
[  113.667631][ T6354]  ? __might_sleep+0xe0/0xe0
[  113.672260][ T6354]  ? __lock_acquire+0x7d80/0x7d80
[  113.677313][ T6354]  should_fail_ex+0x394/0x4c0
[  113.682012][ T6354]  should_failslab+0x9/0x20
[  113.686525][ T6354]  slab_pre_alloc_hook+0x59/0x300
[  113.691573][ T6354]  ? trace_contention_end+0x39/0xe0
[  113.696793][ T6354]  kmem_cache_alloc_node+0x5e/0x310
[  113.702013][ T6354]  ? __alloc_skb+0x103/0x2c0
[  113.706640][ T6354]  __alloc_skb+0x103/0x2c0
[  113.711068][ T6354]  inet_netconf_notify_devconf+0x173/0x230
[  113.716892][ T6354]  mrtsock_destruct+0x1a1/0x240
[  113.721759][ T6354]  ? ip_mroute_setsockopt+0x1040/0x1040
[  113.728026][ T6354]  ip_ra_control+0x486/0x530
[  113.732642][ T6354]  raw_close+0x19/0x30
[  113.736724][ T6354]  inet_release+0x13d/0x180
[  113.741241][ T6354]  sock_close+0xa7/0x210
[  113.745582][ T6354]  ? sock_mmap+0xa0/0xa0
[  113.749860][ T6354]  __fput+0x221/0x940
[  113.753870][ T6354]  __se_sys_close+0x15c/0x1e0
[  113.758672][ T6354]  do_syscall_64+0x55/0xb0
[  113.763118][ T6354]  ? clear_bhb_loop+0x40/0x90
[  113.767807][ T6354]  ? clear_bhb_loop+0x40/0x90
[  113.772509][ T6354]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  113.778428][ T6354] RIP: 0033:0x7f442a79e159
[  113.782860][ T6354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  113.802659][ T6354] RSP: 002b:00007f442b6e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  113.811079][ T6354] RAX: ffffffffffffffda RBX: 00007f442aa25fa0 RCX: 00007f442a79e159
[  113.819055][ T6354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  113.827029][ T6354] RBP: 00007f442a83506b R08: 0000000000000000 R09: 0000000000000000
[  113.835003][ T6354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  113.842974][ T6354] R13: 00007f442aa26038 R14: 00007f442aa25fa0 R15: 00007ffe6ead2368
[  113.850959][ T6354]  </TASK>
[  113.865342][ T5851] usb 1-1: USB disconnect, device number 4
[  114.219638][ T6361] binder: 6360:6361 unknown command 0
[  114.235255][ T6361] binder: 6360:6361 ioctl c0306201 2000000004c0 returned -22
[  114.361054][ T6366] FAULT_INJECTION: forcing a failure.
[  114.361054][ T6366] name fail_futex, interval 1, probability 0, space 0, times 1
[  114.389479][ T6366] CPU: 0 PID: 6366 Comm: syz.3.165 Not tainted syzkaller #0
[  114.396853][ T6366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  114.407285][ T6366] Call Trace:
[  114.410579][ T6366]  <TASK>
[  114.413533][ T6366]  dump_stack_lvl+0x18c/0x250
[  114.418248][ T6366]  ? security_file_alloc+0x34/0x120
[  114.423484][ T6366]  ? alloc_empty_file+0xb7/0x1d0
[  114.428455][ T6366]  ? show_regs_print_info+0x20/0x20
[  114.433685][ T6366]  ? load_image+0x420/0x420
[  114.438227][ T6366]  ? mark_lock+0x94/0x320
[  114.442593][ T6366]  should_fail_ex+0x394/0x4c0
[  114.447308][ T6366]  get_futex_key+0x136/0x1030
[  114.452016][ T6366]  ? futex_setup_timer+0xc0/0xc0
[  114.456992][ T6366]  futex_wake+0x127/0x4f0
[  114.461359][ T6366]  ? futex_wake_mark+0x150/0x150
[  114.466339][ T6366]  ? fd_install+0x60/0x4e0
[  114.470786][ T6366]  do_futex+0x35d/0x3e0
[  114.474954][ T6366]  ? __ia32_sys_get_robust_list+0x110/0x110
[  114.480849][ T6366]  ? __lock_acquire+0x7d80/0x7d80
[  114.485883][ T6366]  __se_sys_futex+0x3a9/0x440
[  114.490579][ T6366]  ? __x64_sys_futex+0xf0/0xf0
[  114.495346][ T6366]  ? __x64_sys_futex+0x21/0xf0
[  114.500113][ T6366]  do_syscall_64+0x55/0xb0
[  114.504537][ T6366]  ? clear_bhb_loop+0x40/0x90
[  114.509223][ T6366]  ? clear_bhb_loop+0x40/0x90
[  114.513908][ T6366]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  114.519817][ T6366] RIP: 0033:0x7f442a79e159
[  114.524267][ T6366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  114.543878][ T6366] RSP: 002b:00007f442b6e80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  114.552298][ T6366] RAX: ffffffffffffffda RBX: 00007f442aa25fa8 RCX: 00007f442a79e159
[  114.560269][ T6366] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f442aa25fac
[  114.568324][ T6366] RBP: 00007f442aa25fa0 R08: 0000000000745a01 R09: 0000000000000000
[  114.576484][ T6366] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000
[  114.584464][ T6366] R13: 00007f442aa26038 R14: 00007ffe6ead2280 R15: 00007ffe6ead2368
[  114.592453][ T6366]  </TASK>
[  114.954215][ T6364] loop1: detected capacity change from 0 to 32768
[  115.070174][ T6368] loop2: detected capacity change from 0 to 32768
[  115.135515][ T6368] JBD2: Ignoring recovery information on journal
[  115.203481][ T6368] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  115.296974][   T28] audit: type=1800 audit(1789555168.326:5): pid=6368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.166" name="file1" dev="loop2" ino=17058 res=0 errno=0
[  115.761276][ T5775] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature 
[  115.791507][ T5775] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  115.806162][ T5775] OCFS2: File system is now read-only.
[  115.821273][ T5775] (syz-executor,5775,0):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30
[  115.840916][ T5775] (syz-executor,5775,0):_ocfs2_free_clusters:2605 ERROR: status = -30
[  115.861164][ T5775] (syz-executor,5775,0):ocfs2_sync_local_to_main:1001 ERROR: status = -30
[  115.869733][ T5775] (syz-executor,5775,0):ocfs2_sync_local_to_main:1013 ERROR: status = -30
[  115.894419][ T5775] (syz-executor,5775,0):ocfs2_shutdown_local_alloc:449 ERROR: status = -30
[  115.926341][ T5775] ocfs2: Unmounting device (7,2) on (node local)
[  115.969174][ T6387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'.
[  116.186703][ T6389] loop2: detected capacity change from 0 to 16
[  116.210639][ T6389] erofs: (device loop2): mounted with root inode @ nid 36.
[  116.353454][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.172'.
[  116.572722][ T6399] netlink: 'syz.2.175': attribute type 1 has an invalid length.
[  116.607486][ T6399] bond1: entered promiscuous mode
[  116.617985][ T6399] 8021q: adding VLAN 0 to HW filter on device bond1
[  116.683590][ T6399] bond1: (slave bridge1): making interface the new active one
[  116.691785][ T6399] bridge1: entered promiscuous mode
[  116.699534][ T6399] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  117.047174][ T6409] loop2: detected capacity change from 0 to 32768
[  117.078835][ T6409] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.178 (6409)
[  117.105203][ T6409] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  117.118953][ T6409] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  117.129696][ T6409] BTRFS info (device loop2): force clearing of disk cache
[  117.149427][ T6409] BTRFS info (device loop2): enabling auto defrag
[  117.160647][ T6409] BTRFS info (device loop2): max_inline at 528
[  117.169406][ T6409] BTRFS info (device loop2): enabling disk space caching
[  117.180012][ T6409] BTRFS info (device loop2): disk space caching is enabled
[  117.215015][ T6409] BTRFS info (device loop2): enabling ssd optimizations
[  117.224069][ T6409] BTRFS info (device loop2): rebuilding free space tree
[  117.280256][ T6409] BTRFS info (device loop2): disabling free space tree
[  117.297427][ T6409] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  117.312207][ T6409] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  117.563727][ T5775] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  117.768968][ T5767] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 12 /dev/loop2 scanned by udevd (5767)
[  117.978740][ T6433] loop0: detected capacity change from 0 to 32768
[  118.058362][ T6433] JBD2: Ignoring recovery information on journal
[  118.225638][ T6433] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  118.481481][   T28] audit: type=1804 audit(1789555171.506:6): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.182" name="/newroot/50/file1/bus" dev="loop0" ino=17059 res=1 errno=0
[  118.537450][ T6433] (syz.0.182,6433,1):ocfs2_get_clusters:606 ERROR: status = -34
[  118.561228][ T6433] (syz.0.182,6433,1):ocfs2_reflink_remap_extent:4559 ERROR: status = -34
[  118.572967][ T6433] (syz.0.182,6433,1):ocfs2_reflink_remap_blocks:4718 ERROR: status = -34
[  118.589775][ T6433] (syz.0.182,6433,1):ocfs2_remap_file_range:2746 ERROR: status = -34
[  118.669986][ T6456] FAULT_INJECTION: forcing a failure.
[  118.669986][ T6456] name failslab, interval 1, probability 0, space 0, times 0
[  118.683683][ T6456] CPU: 0 PID: 6456 Comm: syz.1.189 Not tainted syzkaller #0
[  118.691100][ T6456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  118.701372][ T6456] Call Trace:
[  118.704776][ T6456]  <TASK>
[  118.707743][ T6456]  dump_stack_lvl+0x18c/0x250
[  118.712506][ T6456]  ? show_regs_print_info+0x20/0x20
[  118.717766][ T6456]  ? load_image+0x420/0x420
[  118.722317][ T6456]  ? __might_sleep+0xe0/0xe0
[  118.726956][ T6456]  ? __lock_acquire+0x7d80/0x7d80
[  118.732013][ T6456]  ? tcp_current_mss+0x6e0/0x6e0
[  118.736970][ T6456]  should_fail_ex+0x394/0x4c0
[  118.741677][ T6456]  should_failslab+0x9/0x20
[  118.746208][ T6456]  slab_pre_alloc_hook+0x59/0x300
[  118.751340][ T6456]  kmem_cache_alloc_node+0x5e/0x310
[  118.756559][ T6456]  ? __alloc_skb+0x103/0x2c0
[  118.761206][ T6456]  __alloc_skb+0x103/0x2c0
[  118.765641][ T6456]  tcp_stream_alloc_skb+0x3d/0x330
[  118.770847][ T6456]  tcp_sendmsg_locked+0xcf0/0x4ab0
[  118.775989][ T6456]  ? mark_lock+0x94/0x320
[  118.780523][ T6456]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  118.786554][ T6456]  ? tcp_set_state+0x6c0/0x6c0
[  118.792320][ T6456]  tcp_sendmsg+0x2f/0x50
[  118.796609][ T6456]  __sys_sendto+0x4a9/0x6b0
[  118.801206][ T6456]  ? __ia32_sys_getpeername+0x90/0x90
[  118.806633][ T6456]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  118.812634][ T6456]  ? lock_chain_count+0x20/0x20
[  118.817578][ T6456]  __x64_sys_sendto+0xde/0xf0
[  118.822272][ T6456]  do_syscall_64+0x55/0xb0
[  118.826691][ T6456]  ? clear_bhb_loop+0x40/0x90
[  118.831373][ T6456]  ? clear_bhb_loop+0x40/0x90
[  118.836141][ T6456]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  118.842138][ T6456] RIP: 0033:0x7fbd2659e159
[  118.846563][ T6456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  118.866189][ T6456] RSP: 002b:00007fbd274d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  118.874646][ T6456] RAX: ffffffffffffffda RBX: 00007fbd26825fa0 RCX: 00007fbd2659e159
[  118.882619][ T6456] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: 0000000000000003
[  118.890610][ T6456] RBP: 00007fbd2663506b R08: 0000000000000000 R09: 0000000000000000
[  118.898671][ T6456] R10: 000000000000004a R11: 0000000000000246 R12: 0000000000000000
[  118.906643][ T6456] R13: 00007fbd26826038 R14: 00007fbd26825fa0 R15: 00007ffed60593e8
[  118.914739][ T6456]  </TASK>
[  119.006715][ T5776] ocfs2: Unmounting device (7,0) on (node local)
[  119.884402][ T6480] loop3: detected capacity change from 0 to 128
[  119.885120][ T6478] loop2: detected capacity change from 0 to 2048
[  119.940782][ T6478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.982916][ T6480] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  120.002872][ T6478] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  120.028923][ T6480] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  120.069911][ T6480] EXT4-fs (loop3): shut down requested (2)
[  120.077036][ T6480] fscrypt (loop3, inode 12): Error -5 getting encryption context
[  120.139484][ T5774] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  120.625048][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.890925][ T6509] FAULT_INJECTION: forcing a failure.
[  120.890925][ T6509] name failslab, interval 1, probability 0, space 0, times 0
[  120.915678][ T6509] CPU: 1 PID: 6509 Comm: syz.3.209 Not tainted syzkaller #0
[  120.923036][ T6509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  120.933129][ T6509] Call Trace:
[  120.936601][ T6509]  <TASK>
[  120.939552][ T6509]  dump_stack_lvl+0x18c/0x250
[  120.944277][ T6509]  ? show_regs_print_info+0x20/0x20
[  120.949599][ T6509]  ? load_image+0x420/0x420
[  120.954144][ T6509]  ? __might_sleep+0xe0/0xe0
[  120.958775][ T6509]  ? __lock_acquire+0x7d80/0x7d80
[  120.963929][ T6509]  should_fail_ex+0x394/0x4c0
[  120.968737][ T6509]  should_failslab+0x9/0x20
[  120.973279][ T6509]  slab_pre_alloc_hook+0x59/0x300
[  120.978362][ T6509]  kmem_cache_alloc+0x5a/0x2c0
[  120.983170][ T6509]  ? __kernfs_new_node+0xe5/0x7f0
[  120.988312][ T6509]  __kernfs_new_node+0xe5/0x7f0
[  120.993282][ T6509]  ? kernfs_new_node+0x260/0x260
[  120.998219][ T6509]  ? kernfs_create_dir_ns+0x112/0x120
[  121.003603][ T6509]  ? sysfs_create_dir_ns+0x130/0x2a0
[  121.008915][ T6509]  ? sysfs_create_dir_ns+0x16b/0x2a0
[  121.014212][ T6509]  ? __lock_acquire+0x7d80/0x7d80
[  121.019270][ T6509]  kernfs_new_node+0x14c/0x260
[  121.024054][ T6509]  __kernfs_create_file+0x4b/0x2e0
[  121.029274][ T6509]  sysfs_add_file_mode_ns+0x237/0x2f0
[  121.034685][ T6509]  sysfs_create_file_ns+0x12c/0x1b0
[  121.039887][ T6509]  ? sysfs_add_bin_file_mode_ns+0x200/0x200
[  121.045781][ T6509]  ? __dev_fwnode+0x50/0x80
[  121.050294][ T6509]  device_add+0x4d8/0xc40
[  121.054652][ T6509]  iommufd_test+0x121d/0x2a20
[  121.059342][ T6509]  ? iommufd_selftest_destroy+0xf0/0xf0
[  121.064898][ T6509]  ? __lock_acquire+0x7d80/0x7d80
[  121.069953][ T6509]  ? __lock_acquire+0x7d80/0x7d80
[  121.075009][ T6509]  ? __might_fault+0xaa/0x120
[  121.079723][ T6509]  ? __might_fault+0xaa/0x120
[  121.084451][ T6509]  iommufd_fops_ioctl+0x48b/0x540
[  121.089614][ T6509]  ? iommufd_ctx_put+0x40/0x40
[  121.094408][ T6509]  ? __fget_files+0x28/0x460
[  121.099015][ T6509]  ? bpf_lsm_file_ioctl+0x9/0x10
[  121.103950][ T6509]  ? security_file_ioctl+0x80/0xa0
[  121.109072][ T6509]  ? iommufd_ctx_put+0x40/0x40
[  121.113854][ T6509]  __se_sys_ioctl+0xfd/0x170
[  121.118804][ T6509]  do_syscall_64+0x55/0xb0
[  121.123325][ T6509]  ? clear_bhb_loop+0x40/0x90
[  121.128109][ T6509]  ? clear_bhb_loop+0x40/0x90
[  121.133489][ T6509]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  121.139386][ T6509] RIP: 0033:0x7f442a79e159
[  121.143799][ T6509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  121.163506][ T6509] RSP: 002b:00007f442b6e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  121.171935][ T6509] RAX: ffffffffffffffda RBX: 00007f442aa25fa0 RCX: 00007f442a79e159
[  121.180085][ T6509] RDX: 0000200000000600 RSI: 0000000000003ba0 RDI: 0000000000000004
[  121.188059][ T6509] RBP: 00007f442a83506b R08: 0000000000000000 R09: 0000000000000000
[  121.196029][ T6509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  121.203994][ T6509] R13: 00007f442aa26038 R14: 00007f442aa25fa0 R15: 00007ffe6ead2368
[  121.211972][ T6509]  </TASK>
[  121.287306][ T6515] ip6erspan0: entered allmulticast mode
[  121.497721][ T6521] loop2: detected capacity change from 0 to 128
[  121.537603][ T6521] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  121.562112][ T6521] hpfs: filesystem error: improperly stopped
[  121.569103][ T6521] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  121.592435][ T6521] hpfs: You really don't want any checks? You are crazy...
[  121.604585][ T6521] hpfs: Code page index out of array
[  121.610001][ T6521] hpfs: code page support is disabled
[  121.617891][ T6521] hpfs: hpfs_map_4sectors(): unaligned read
[  121.624907][ T6521] hpfs: hpfs_map_4sectors(): unaligned read
[  121.636535][ T6521] hpfs: filesystem error: unable to find root dir
[  121.755065][ T6530] netlink: 15051 bytes leftover after parsing attributes in process `syz.0.217'.
[  121.776183][ T6526] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  121.926399][ T6534] loop0: detected capacity change from 0 to 64
[  122.171709][ T6534] syz.0.220: attempt to access beyond end of device
[  122.171709][ T6534] loop0: rw=2049, sector=161, nr_sectors = 1 limit=64
[  122.195818][ T6540] loop3: detected capacity change from 0 to 4096
[  122.201190][ T6534] Buffer I/O error on dev loop0, logical block 161, lost async page write
[  122.221167][ T6534] syz.0.220: attempt to access beyond end of device
[  122.221167][ T6534] loop0: rw=2049, sector=162, nr_sectors = 1 limit=64
[  122.235886][ T6540] EXT4-fs: Ignoring removed orlov option
[  122.252137][ T6540] EXT4-fs (loop3): Test dummy encryption mode enabled
[  122.265395][ T6540] EXT4-fs (loop3): stripe (182) is not aligned with cluster size (16), stripe is disabled
[  122.288593][ T6534] Buffer I/O error on dev loop0, logical block 162, lost async page write
[  122.310707][ T6540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.388340][ T6534] syz.0.220: attempt to access beyond end of device
[  122.388340][ T6534] loop0: rw=2049, sector=163, nr_sectors = 1 limit=64
[  122.448781][ T6545] syz.0.220: attempt to access beyond end of device
[  122.448781][ T6545] loop0: rw=0, sector=175, nr_sectors = 1 limit=64
[  122.482885][ T6534] Buffer I/O error on dev loop0, logical block 163, lost async page write
[  122.516079][ T6545] Buffer I/O error on dev loop0, logical block 175, async page read
[  122.524493][ T6534] syz.0.220: attempt to access beyond end of device
[  122.524493][ T6534] loop0: rw=2049, sector=167, nr_sectors = 1 limit=64
[  122.537690][ T6545] syz.0.220: attempt to access beyond end of device
[  122.537690][ T6545] loop0: rw=0, sector=176, nr_sectors = 1 limit=64
[  122.537747][ T6545] Buffer I/O error on dev loop0, logical block 176, async page read
[  122.537788][ T6545] syz.0.220: attempt to access beyond end of device
[  122.537788][ T6545] loop0: rw=0, sector=177, nr_sectors = 1 limit=64
[  122.537810][ T6545] Buffer I/O error on dev loop0, logical block 177, async page read
[  122.541561][ T6542] syz.0.220: attempt to access beyond end of device
[  122.541561][ T6542] loop0: rw=0, sector=175, nr_sectors = 1 limit=64
[  122.645356][ T6534] Buffer I/O error on dev loop0, logical block 167, lost async page write
[  122.651295][ T6542] Buffer I/O error on dev loop0, logical block 175, async page read
[  122.682484][ T6542] syz.0.220: attempt to access beyond end of device
[  122.682484][ T6542] loop0: rw=0, sector=176, nr_sectors = 1 limit=64
[  122.696912][ T6542] Buffer I/O error on dev loop0, logical block 176, async page read
[  122.713891][ T6534] syz.0.220: attempt to access beyond end of device
[  122.713891][ T6534] loop0: rw=2049, sector=169, nr_sectors = 1 limit=64
[  122.734434][ T6540] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  122.760109][ T6534] Buffer I/O error on dev loop0, logical block 169, lost async page write
[  122.798613][ T6536] loop1: detected capacity change from 0 to 32768
[  122.862214][ T6536] JBD2: Ignoring recovery information on journal
[  122.873861][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.981918][ T6536] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  123.273365][   T28] audit: type=1804 audit(1789555176.306:7): pid=6536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.219" name="/newroot/49/file1/file1" dev="loop1" ino=17059 res=1 errno=0
[  123.420742][ T6548] loop2: detected capacity change from 0 to 32768
[  123.519001][ T6548] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  123.549116][ T5777] ocfs2: Unmounting device (7,1) on (node local)
[  123.600482][ T6548] XFS (loop2): Ending clean mount
[  123.609520][ T6558] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.618423][ T6558] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.021666][ T5775] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  124.522750][ T6558] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.558959][ T6581] loop2: detected capacity change from 0 to 1024
[  124.576646][ T6581] EXT4-fs: Ignoring removed nobh option
[  124.594391][ T6581] EXT4-fs: Ignoring removed oldalloc option
[  124.606076][ T6581] EXT4-fs: Ignoring removed oldalloc option
[  124.612865][ T6558] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.624045][ T6581] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  124.659842][ T6581] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (16), stripe is disabled
[  124.701547][ T6581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.869835][ T6585] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(3)
[  125.012414][ T6579] loop1: detected capacity change from 0 to 32768
[  125.073762][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.086462][ T6579] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  125.289783][ T6558] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.299778][ T6558] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.310258][ T6558] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.319509][ T6558] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.351377][ T5777] ocfs2: Unmounting device (7,1) on (node local)
[  125.495003][ T6556] netlink: 28 bytes leftover after parsing attributes in process `syz.3.226'.
[  125.633243][ T6596] loop6: detected capacity change from 0 to 1
[  125.677468][ T6596] Dev loop6: unable to read RDB block 1
[  125.687221][ T6596]  loop6: unable to read partition table
[  125.694885][ T6596] loop6: partition table beyond EOD, truncated
[  125.711259][ T6596] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  126.079081][ T5774] syz_tun (unregistering): left allmulticast mode
[  126.087801][ T5774] syz_tun (unregistering): left promiscuous mode
[  126.108375][ T5774] bridge0: port 3(syz_tun) entered disabled state
[  126.250357][ T6613] FAULT_INJECTION: forcing a failure.
[  126.250357][ T6613] name failslab, interval 1, probability 0, space 0, times 0
[  126.287056][ T6613] CPU: 0 PID: 6613 Comm: syz.2.241 Not tainted syzkaller #0
[  126.294416][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  126.304485][ T6613] Call Trace:
[  126.307779][ T6613]  <TASK>
[  126.310708][ T6613]  dump_stack_lvl+0x18c/0x250
[  126.315403][ T6613]  ? show_regs_print_info+0x20/0x20
[  126.320618][ T6613]  ? load_image+0x420/0x420
[  126.325155][ T6613]  ? __might_sleep+0xe0/0xe0
[  126.329747][ T6613]  ? __lock_acquire+0x7d80/0x7d80
[  126.334772][ T6613]  ? unwind_get_return_address+0x91/0xc0
[  126.340438][ T6613]  ? stack_trace_save+0x100/0x100
[  126.345465][ T6613]  should_fail_ex+0x394/0x4c0
[  126.350247][ T6613]  should_failslab+0x9/0x20
[  126.354755][ T6613]  slab_pre_alloc_hook+0x59/0x300
[  126.359785][ T6613]  ? stack_trace_save+0xaa/0x100
[  126.364896][ T6613]  ? tomoyo_init_log+0x196/0x1f50
[  126.369925][ T6613]  __kmem_cache_alloc_node+0x53/0x250
[  126.375305][ T6613]  ? tomoyo_init_log+0x196/0x1f50
[  126.380338][ T6613]  kmalloc_trace+0x2a/0xe0
[  126.385030][ T6613]  tomoyo_init_log+0x196/0x1f50
[  126.389884][ T6613]  ? __kmem_cache_free+0xba/0x1f0
[  126.395000][ T6613]  ? tomoyo_realpath_from_path+0x587/0x5c0
[  126.400805][ T6613]  ? tomoyo_path_number_perm+0x248/0x5e0
[  126.406446][ T6613]  ? __se_sys_ioctl+0x48/0x170
[  126.411220][ T6613]  ? do_syscall_64+0x55/0xb0
[  126.415846][ T6613]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  126.421924][ T6613]  ? format_decode+0x19b/0x1400
[  126.426783][ T6613]  ? print_ipv6_addr+0x100/0x100
[  126.431725][ T6613]  ? tomoyo_profile+0x11/0x50
[  126.436418][ T6613]  ? tomoyo_domain_quota_is_ok+0x422/0x570
[  126.442227][ T6613]  tomoyo_supervisor+0x363/0x1100
[  126.447264][ T6613]  ? tomoyo_profile+0x50/0x50
[  126.451952][ T6613]  ? snprintf+0xe9/0x140
[  126.456198][ T6613]  ? vscnprintf+0x80/0x80
[  126.460526][ T6613]  ? tomoyo_check_acl+0x37c/0x3f0
[  126.465591][ T6613]  tomoyo_path_number_perm+0x460/0x5e0
[  126.471102][ T6613]  ? tomoyo_path_number_perm+0x217/0x5e0
[  126.476953][ T6613]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  126.482482][ T6613]  ? __fget_files+0x28/0x460
[  126.487090][ T6613]  security_file_ioctl+0x70/0xa0
[  126.492144][ T6613]  __se_sys_ioctl+0x48/0x170
[  126.496871][ T6613]  do_syscall_64+0x55/0xb0
[  126.501390][ T6613]  ? clear_bhb_loop+0x40/0x90
[  126.506388][ T6613]  ? clear_bhb_loop+0x40/0x90
[  126.511086][ T6613]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  126.517017][ T6613] RIP: 0033:0x7f9972b9e159
[  126.521432][ T6613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  126.541039][ T6613] RSP: 002b:00007f9973a48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  126.549688][ T6613] RAX: ffffffffffffffda RBX: 00007f9972e25fa0 RCX: 00007f9972b9e159
[  126.557663][ T6613] RDX: 0000000000000000 RSI: 0000000080046108 RDI: 0000000000000004
[  126.565632][ T6613] RBP: 00007f9972c3506b R08: 0000000000000000 R09: 0000000000000000
[  126.573950][ T6613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  126.581920][ T6613] R13: 00007f9972e26038 R14: 00007f9972e25fa0 R15: 00007ffc1305cd28
[  126.589904][ T6613]  </TASK>
[  127.162657][ T6628] loop1: detected capacity change from 0 to 512
[  127.189963][ T6628] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  127.271534][ T6628] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.247: invalid indirect mapped block 4294967295 (level 0)
[  127.313081][ T6628] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.247: invalid indirect mapped block 4294967295 (level 1)
[  127.380785][ T6628] EXT4-fs (loop1): 1 orphan inode deleted
[  127.386794][ T6628] EXT4-fs (loop1): 1 truncate cleaned up
[  127.393857][ T6628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.470882][ T6633] loop0: detected capacity change from 0 to 512
[  127.493768][ T6633] EXT4-fs: Ignoring removed bh option
[  127.505880][ T6631] TC_ACT_REPEAT abuse ?
[  127.516485][ T6633] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  127.532942][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.617374][ T6633] EXT4-fs (loop0): 1 truncate cleaned up
[  127.645228][ T6633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.689939][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  127.700782][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  127.714179][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  127.724177][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  127.735800][   T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  127.744396][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  127.868956][ T6633] EXT4-fs error (device loop0): ext4_lookup:1860: inode #12: comm syz.0.249: unexpected EA_INODE flag
[  127.934372][ T6644] loop1: detected capacity change from 0 to 1024
[  127.988722][ T6644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  128.045514][ T6644] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.106275][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.153070][ T6637] chnl_net:caif_netlink_parms(): no params data found
[  128.173637][ T6652] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  128.238043][ T6652] EXT4-fs error (device loop1): ext4_dirty_inode:6166: inode #15: comm syz.1.251: mark_inode_dirty error
[  128.256810][ T6652] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  128.277484][ T6654] netlink: 32 bytes leftover after parsing attributes in process `syz.0.254'.
[  128.298155][ T6654] netlink: 32 bytes leftover after parsing attributes in process `syz.0.254'.
[  128.308319][ T6652] EXT4-fs error (device loop1): __ext4_ext_dirty:208: inode #15: comm syz.1.251: mark_inode_dirty error
[  128.322287][ T6654] Zero length message leads to an empty skb
[  128.324791][ T6652] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  128.341374][ T6652] EXT4-fs (loop1): This should not happen!! Data will be lost
[  128.341374][ T6652] 
[  128.480212][ T6637] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.487750][ T6637] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.496538][ T6637] bridge_slave_0: entered allmulticast mode
[  128.500705][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  128.504515][ T6637] bridge_slave_0: entered promiscuous mode
[  128.525834][ T6637] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.533761][ T6637] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.545688][ T6664] FAULT_INJECTION: forcing a failure.
[  128.545688][ T6664] name failslab, interval 1, probability 0, space 0, times 0
[  128.558540][ T6637] bridge_slave_1: entered allmulticast mode
[  128.566107][ T6637] bridge_slave_1: entered promiscuous mode
[  128.572394][ T6664] CPU: 0 PID: 6664 Comm: syz.0.256 Not tainted syzkaller #0
[  128.579704][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  128.589767][ T6664] Call Trace:
[  128.593048][ T6664]  <TASK>
[  128.595986][ T6664]  dump_stack_lvl+0x18c/0x250
[  128.600705][ T6664]  ? show_regs_print_info+0x20/0x20
[  128.605899][ T6664]  ? load_image+0x420/0x420
[  128.610401][ T6664]  ? __might_sleep+0xe0/0xe0
[  128.614986][ T6664]  ? __lock_acquire+0x7d80/0x7d80
[  128.620009][ T6664]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  128.625985][ T6664]  should_fail_ex+0x394/0x4c0
[  128.630670][ T6664]  should_failslab+0x9/0x20
[  128.635214][ T6664]  slab_pre_alloc_hook+0x59/0x300
[  128.640246][ T6664]  ? lockdep_hardirqs_on+0x98/0x150
[  128.645446][ T6664]  kmem_cache_alloc+0x5a/0x2c0
[  128.650207][ T6664]  ? taskstats_exit+0x14d/0xce0
[  128.655136][ T6664]  taskstats_exit+0x14d/0xce0
[  128.659841][ T6664]  ? sysctl_delayacct+0x220/0x220
[  128.664867][ T6664]  ? rcu_read_lock_any_held+0xb4/0x140
[  128.670330][ T6664]  ? rcu_read_lock_bh_held+0x100/0x100
[  128.675910][ T6664]  do_exit+0x8fc/0x2530
[  128.680100][ T6664]  ? put_task_struct+0xc0/0xc0
[  128.684869][ T6664]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  128.690903][ T6664]  ? get_signal+0x100e/0x1390
[  128.695618][ T6664]  ? lock_chain_count+0x20/0x20
[  128.700491][ T6664]  ? _raw_spin_lock_irq+0xbb/0xf0
[  128.705536][ T6664]  do_group_exit+0x22d/0x2f0
[  128.710572][ T6664]  ? lockdep_hardirqs_on+0x98/0x150
[  128.715827][ T6664]  get_signal+0x12a6/0x1390
[  128.720362][ T6664]  arch_do_signal_or_restart+0xc2/0x7b0
[  128.725916][ T6664]  ? __ia32_sys_get_robust_list+0x110/0x110
[  128.731812][ T6664]  ? get_sigframe_size+0x20/0x20
[  128.736762][ T6664]  ? exit_to_user_mode_loop+0x3b/0x110
[  128.742237][ T6664]  exit_to_user_mode_loop+0x70/0x110
[  128.747640][ T6664]  exit_to_user_mode_prepare+0xee/0x180
[  128.753191][ T6664]  syscall_exit_to_user_mode+0x1a/0x50
[  128.758649][ T6664]  do_syscall_64+0x61/0xb0
[  128.763153][ T6664]  ? clear_bhb_loop+0x40/0x90
[  128.767917][ T6664]  ? clear_bhb_loop+0x40/0x90
[  128.772599][ T6664]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  128.778495][ T6664] RIP: 0033:0x7f257419e159
[  128.782903][ T6664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  128.803041][ T6664] RSP: 002b:00007f2574f7e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  128.811462][ T6664] RAX: fffffffffffffe00 RBX: 00007f2574425fa8 RCX: 00007f257419e159
[  128.819431][ T6664] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2574425fa8
[  128.827447][ T6664] RBP: 00007f2574425fa0 R08: 0000000000000000 R09: 0000000000000000
[  128.835426][ T6664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  128.843406][ T6664] R13: 00007f2574426038 R14: 00007ffca03cba00 R15: 00007ffca03cbae8
[  128.851413][ T6664]  </TASK>
[  128.976266][ T6666] loop1: detected capacity change from 0 to 64
[  129.000068][ T6637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  129.029937][ T6637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  129.099883][ T6637] team0: Port device team_slave_0 added
[  129.119516][ T6637] team0: Port device team_slave_1 added
[  129.152163][ T6670] Core dump to core aborted: cannot preserve file permissions
[  129.175945][ T6637] batman_adv: batadv0: Adding interface: batadv_slave_0
[  129.191715][ T6637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.223958][ T6666] hfs: request for non-existent node 9 in B*Tree
[  129.230888][ T6637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  129.231021][ T6666] hfs: request for non-existent node 9 in B*Tree
[  129.250269][ T6637] batman_adv: batadv0: Adding interface: batadv_slave_1
[  129.257414][ T6637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.290795][ T6637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  129.383693][ T6637] hsr_slave_0: entered promiscuous mode
[  129.390630][ T6637] hsr_slave_1: entered promiscuous mode
[  129.398183][ T6637] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  129.406040][ T6637] Cannot create hsr debugfs directory
[  129.597121][ T6637] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  129.608159][ T6637] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  129.625778][ T6637] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  129.638301][ T6637] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  129.748323][ T6675] loop1: detected capacity change from 0 to 32768
[  129.757862][ T6675] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.260 (6675)
[  129.778395][ T6675] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  129.790816][ T5779] Bluetooth: hci2: command tx timeout
[  129.797706][ T6675] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  129.807383][ T6675] BTRFS info (device loop1): using free space tree
[  129.843100][ T6637] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.856404][ T6675] BTRFS info (device loop1): enabling ssd optimizations
[  129.900392][   T28] audit: type=1800 audit(1789555182.926:8): pid=6675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.260" name="bus" dev="loop1" ino=263 res=0 errno=0
[  129.937135][ T6637] 8021q: adding VLAN 0 to HW filter on device team0
[  129.944658][ T6692] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  130.068458][ T2934] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.075961][ T2934] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.143070][ T2922] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.150289][ T2922] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.398183][ T5777] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  130.698045][ T6637] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.105776][ T6704] loop1: detected capacity change from 0 to 32768
[  131.138565][ T6637] veth0_vlan: entered promiscuous mode
[  131.157926][ T6637] veth1_vlan: entered promiscuous mode
[  131.171336][ T6704] JBD2: Ignoring recovery information on journal
[  131.192593][ T6637] veth0_macvtap: entered promiscuous mode
[  131.223060][ T6637] veth1_macvtap: entered promiscuous mode
[  131.291064][ T6637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.302631][ T6637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.312968][ T6637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.324170][ T6637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.335073][ T6704] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  131.341596][ T6637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.364651][ T6637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.396234][ T6637] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.448899][ T6637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.469555][ T6637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.502330][ T6637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.517665][ T6637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.537028][ T6637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.551067][ T6637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.569009][ T6637] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.588818][ T6637] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.602886][ T6637] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.614840][ T6637] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.625295][ T6637] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.735009][ T2943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.753299][ T2943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.790402][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.799500][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.861419][ T5779] Bluetooth: hci2: command tx timeout
[  131.958883][ T6715] netlink: 'syz.0.272': attribute type 1 has an invalid length.
[  131.989094][ T6715] netlink: 20 bytes leftover after parsing attributes in process `syz.0.272'.
[  132.002542][ T5777] ocfs2: Unmounting device (7,1) on (node local)
[  132.253696][ T6718] gadgetfs: bound to dummy_udc driver
[  132.477672][ T6722] loop0: detected capacity change from 0 to 4096
[  132.693342][    T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  132.817800][    C0] gadgetfs: connected
[  132.859927][    T9] gadgetfs: disconnected
[  132.946470][ T6726] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  133.080156][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  133.107468][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  133.140749][ T6717] gadgetfs: suspended from state 2
[  133.176058][    T9] usb 1-1: device descriptor read/all, error -71
[  133.714090][ T6739] loop0: detected capacity change from 0 to 256
[  133.752908][ T6739] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  133.941610][ T5779] Bluetooth: hci2: command tx timeout
[  134.155383][ T6744] input: syz0 as /devices/virtual/input/input9
[  134.202850][ T6745] FAULT_INJECTION: forcing a failure.
[  134.202850][ T6745] name failslab, interval 1, probability 0, space 0, times 0
[  134.241777][ T6745] CPU: 0 PID: 6745 Comm: syz.1.273 Not tainted syzkaller #0
[  134.249142][ T6745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  134.259225][ T6745] Call Trace:
[  134.262528][ T6745]  <TASK>
[  134.265491][ T6745]  dump_stack_lvl+0x18c/0x250
[  134.270214][ T6745]  ? show_regs_print_info+0x20/0x20
[  134.275448][ T6745]  ? load_image+0x420/0x420
[  134.279994][ T6745]  ? __might_sleep+0xe0/0xe0
[  134.284623][ T6745]  ? __lock_acquire+0x7d80/0x7d80
[  134.289679][ T6745]  should_fail_ex+0x394/0x4c0
[  134.294370][ T6745]  should_failslab+0x9/0x20
[  134.298882][ T6745]  slab_pre_alloc_hook+0x59/0x300
[  134.303919][ T6745]  ? kobject_set_name_vargs+0x61/0x110
[  134.309404][ T6745]  ? kobject_set_name_vargs+0x61/0x110
[  134.314892][ T6745]  __kmem_cache_alloc_node+0x53/0x250
[  134.320383][ T6745]  ? kobject_set_name_vargs+0x61/0x110
[  134.325850][ T6745]  __kmalloc_node_track_caller+0xa4/0x230
[  134.331584][ T6745]  kstrdup+0x3b/0x80
[  134.335507][ T6745]  kobject_set_name_vargs+0x61/0x110
[  134.340794][ T6745]  dev_set_name+0xe3/0x140
[  134.345307][ T6745]  ? get_device+0x30/0x30
[  134.349645][ T6745]  ? __init_waitqueue_head+0xa8/0x140
[  134.355022][ T6745]  ? device_initialize+0x26a/0x460
[  134.360144][ T6745]  netdev_register_kobject+0xb3/0x320
[  134.365529][ T6745]  register_netdevice+0x12aa/0x1ba0
[  134.370746][ T6745]  ? kvmalloc_node+0x70/0x180
[  134.375532][ T6745]  ? netif_stacked_transfer_operstate+0x210/0x210
[  134.381981][ T6745]  ? __asan_memset+0x22/0x40
[  134.386583][ T6745]  ? alloc_netdev_mqs+0xba3/0x1040
[  134.391789][ T6745]  ? __asan_memcpy+0x40/0x70
[  134.396401][ T6745]  ? __ip_tunnel_create+0x386/0x4d0
[  134.401629][ T6745]  __ip_tunnel_create+0x3bc/0x4d0
[  134.406845][ T6745]  ? ip_tunnel_init_net+0x7c0/0x7c0
[  134.412048][ T6745]  ? security_capable+0x89/0xb0
[  134.416911][ T6745]  ip_tunnel_ctl+0xc36/0x1910
[  134.421598][ T6745]  vti_tunnel_ctl+0x1f9/0x390
[  134.426455][ T6745]  ip_tunnel_siocdevprivate+0x138/0x1f0
[  134.432005][ T6745]  ? dev_ioctl+0x83c/0x1140
[  134.436506][ T6745]  ? ip_tunnel_update+0xae0/0xae0
[  134.441572][ T6745]  ? dev_ifsioc+0x957/0xc40
[  134.446073][ T6745]  dev_ioctl+0x84c/0x1140
[  134.450403][ T6745]  sock_ioctl+0x74c/0x7e0
[  134.454741][ T6745]  ? sock_poll+0x3e0/0x3e0
[  134.459171][ T6745]  ? bpf_lsm_file_ioctl+0x9/0x10
[  134.464213][ T6745]  ? security_file_ioctl+0x80/0xa0
[  134.469331][ T6745]  ? sock_poll+0x3e0/0x3e0
[  134.473756][ T6745]  __se_sys_ioctl+0xfd/0x170
[  134.478356][ T6745]  do_syscall_64+0x55/0xb0
[  134.482778][ T6745]  ? clear_bhb_loop+0x40/0x90
[  134.487456][ T6745]  ? clear_bhb_loop+0x40/0x90
[  134.492140][ T6745]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  134.498040][ T6745] RIP: 0033:0x7fbd2659e159
[  134.502459][ T6745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  134.522070][ T6745] RSP: 002b:00007fbd274d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  134.530488][ T6745] RAX: ffffffffffffffda RBX: 00007fbd26825fa0 RCX: 00007fbd2659e159
[  134.538630][ T6745] RDX: 0000200000000440 RSI: 00000000000089f1 RDI: 0000000000000004
[  134.546603][ T6745] RBP: 00007fbd2663506b R08: 0000000000000000 R09: 0000000000000000
[  134.554658][ T6745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  134.562625][ T6745] R13: 00007fbd26826038 R14: 00007fbd26825fa0 R15: 00007ffed60593e8
[  134.570616][ T6745]  </TASK>
[  134.639954][ T6737] loop4: detected capacity change from 0 to 32768
[  134.715009][ T6737] JBD2: Ignoring recovery information on journal
[  134.752467][ T6737] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  134.835508][   T28] audit: type=1804 audit(1789555187.866:9): pid=6737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.268" name="/newroot/2/file1/bus" dev="loop4" ino=17059 res=1 errno=0
[  134.870802][ T6737] (syz.4.268,6737,1):ocfs2_get_clusters:606 ERROR: status = -34
[  134.881893][ T6737] (syz.4.268,6737,1):ocfs2_reflink_remap_extent:4559 ERROR: status = -34
[  134.890368][ T6737] (syz.4.268,6737,1):ocfs2_reflink_remap_blocks:4718 ERROR: status = -34
[  134.899699][ T6737] (syz.4.268,6737,0):ocfs2_remap_file_range:2746 ERROR: status = -34
[  134.962753][ T6637] ocfs2: Unmounting device (7,4) on (node local)
[  135.089811][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.284'.
[  135.291550][  T971] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  135.349457][ T5782] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  135.495114][  T971] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  135.520432][ T6759] loop4: detected capacity change from 0 to 32768
[  135.527047][  T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.535195][  T971] usb 2-1: Product: syz
[  135.539374][  T971] usb 2-1: Manufacturer: syz
[  135.544774][ T5782] usb 3-1: Using ep0 maxpacket: 32
[  135.553035][ T5782] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  135.562861][  T971] usb 2-1: SerialNumber: syz
[  135.568764][ T5782] usb 3-1: config 0 has no interface number 0
[  135.579031][  T971] usb 2-1: config 0 descriptor??
[  135.595662][ T5782] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  135.605272][ T5782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.615048][ T5782] usb 3-1: Product: syz
[  135.620193][ T5782] usb 3-1: Manufacturer: syz
[  135.626449][ T5782] usb 3-1: SerialNumber: syz
[  135.635273][ T5782] usb 3-1: config 0 descriptor??
[  135.644130][ T5782] smsc95xx v2.0.0
[  135.653201][ T6759] JBD2: Ignoring recovery information on journal
[  135.765190][ T6759] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  135.793399][  T971] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  136.021640][ T5779] Bluetooth: hci2: command tx timeout
[  136.185462][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  136.198204][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  136.210538][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  136.222717][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  136.233118][   T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  136.241018][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  136.345608][ T6637] ocfs2: Unmounting device (7,4) on (node local)
[  136.631587][ T6765] chnl_net:caif_netlink_parms(): no params data found
[  136.650211][ T5782] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  136.666451][ T6773] gretap0: entered promiscuous mode
[  136.672259][ T5782] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  136.691358][ T5782] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  136.693350][ T6773] netlink: 28 bytes leftover after parsing attributes in process `syz.4.285'.
[  136.703426][ T5782] smsc95xx: probe of 3-1:0.67 failed with error -71
[  136.725438][ T5782] usb 3-1: USB disconnect, device number 5
[  136.853166][ T6765] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.860409][ T6765] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.868479][ T6765] bridge_slave_0: entered allmulticast mode
[  136.877083][ T6765] bridge_slave_0: entered promiscuous mode
[  136.887296][ T6765] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.894849][ T6765] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.903436][ T6765] bridge_slave_1: entered allmulticast mode
[  136.910503][ T6765] bridge_slave_1: entered promiscuous mode
[  136.944877][ T6765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  136.958632][ T6765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  136.997565][ T6765] team0: Port device team_slave_0 added
[  137.006154][ T6765] team0: Port device team_slave_1 added
[  137.034992][ T6765] batman_adv: batadv0: Adding interface: batadv_slave_0
[  137.042162][ T6765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.070032][ T6765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  137.083835][ T6765] batman_adv: batadv0: Adding interface: batadv_slave_1
[  137.090799][ T6765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.116823][ T6765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  137.167403][ T6765] hsr_slave_0: entered promiscuous mode
[  137.175152][ T6765] hsr_slave_1: entered promiscuous mode
[  137.182390][ T6765] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  137.189979][ T6765] Cannot create hsr debugfs directory
[  137.268604][  T971] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71
[  137.302313][  T971] usb 2-1: USB disconnect, device number 4
[  137.592950][ T6765] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  137.613964][ T6765] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  137.636597][ T6765] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  137.658253][ T6765] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  137.883053][ T6780] loop2: detected capacity change from 0 to 32768
[  137.897300][ T6765] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.913923][ T6780] JBD2: Ignoring recovery information on journal
[  137.949776][ T6765] 8021q: adding VLAN 0 to HW filter on device team0
[  137.982247][ T6780] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  138.002544][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.009692][ T3550] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.064091][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.071287][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state
[  138.219857][   T28] audit: type=1804 audit(1789555191.246:10): pid=6780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.286" name="/newroot/67/file1/bus" dev="loop2" ino=17059 res=1 errno=0
[  138.263295][   T51] Bluetooth: hci0: command tx timeout
[  138.284093][ T6780] (syz.2.286,6780,0):ocfs2_get_clusters:606 ERROR: status = -34
[  138.302460][ T6780] (syz.2.286,6780,1):ocfs2_reflink_remap_extent:4559 ERROR: status = -34
[  138.337981][ T6780] (syz.2.286,6780,1):ocfs2_reflink_remap_blocks:4718 ERROR: status = -34
[  138.369349][ T6798] loop1: detected capacity change from 0 to 512
[  138.380103][ T6780] (syz.2.286,6780,1):ocfs2_remap_file_range:2746 ERROR: status = -34
[  138.424607][ T6798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.476894][ T6798] ext4 filesystem being mounted at /68/file7 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.613301][ T6798] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.292: dx entry: limit 0 != root limit 252
[  138.639490][ T5767] udevd[5767]: incorrect ext4 checksum on /dev/loop1
[  138.649499][ T6765] 8021q: adding VLAN 0 to HW filter on device batadv0
[  138.651128][ T6798] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.292: Corrupt directory, running e2fsck is recommended
[  138.688525][ T5775] ocfs2: Unmounting device (7,2) on (node local)
[  138.800771][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.853041][ T5767] udevd[5767]: incorrect ext4 checksum on /dev/loop1
[  139.252720][ T6821] loop1: detected capacity change from 0 to 512
[  139.363705][ T6765] veth0_vlan: entered promiscuous mode
[  139.399425][ T6821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.423407][ T6821] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.446139][ T6765] veth1_vlan: entered promiscuous mode
[  139.577807][ T6821] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.296: Invalid block bitmap block 5001287 in block_group 0
[  139.607740][ T6765] veth0_macvtap: entered promiscuous mode
[  139.624423][ T6765] veth1_macvtap: entered promiscuous mode
[  139.642264][ T6821] Quota error (device loop1): write_blk: dquota write failed
[  139.658573][ T6821] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5
[  139.681877][ T6821] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  139.702395][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.722906][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.738025][ T6821] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.296: Failed to acquire dquot type 1
[  139.749390][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.764232][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.780701][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.817259][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.823946][ T6827] loop4: detected capacity change from 0 to 128
[  139.833512][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.833533][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.835238][ T6765] batman_adv: batadv0: Interface activated: batadv_slave_0
[  139.865983][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.893887][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.904768][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.908209][ T6827] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  139.954857][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.000848][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.011826][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.025907][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.036528][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.039492][ T6827] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  140.047551][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.070128][ T6765] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.093120][ T6765] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.106044][ T6765] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.136837][ T6765] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.151139][ T6765] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.279247][ T6637] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  140.352235][   T51] Bluetooth: hci0: command tx timeout
[  140.390179][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.410652][ T2934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.452404][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.471697][ T2934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.123609][ T6849] loop4: detected capacity change from 0 to 256
[  141.314329][ T6850] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[  141.350884][ T6843] loop1: detected capacity change from 0 to 40427
[  141.379804][ T6843] F2FS-fs (loop1): invalid crc value
[  141.405507][ T6843] F2FS-fs (loop1): Found nat_bits in checkpoint
[  141.545878][ T6843] F2FS-fs (loop1): Start checkpoint disabled!
[  141.618346][ T6843] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  141.737426][ T6843] bio_check_eod: 3 callbacks suppressed
[  141.737444][ T6843] syz.1.302: attempt to access beyond end of device
[  141.737444][ T6843] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  141.774692][ T6843] syz.1.302: attempt to access beyond end of device
[  141.774692][ T6843] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  141.873916][ T2934] kworker/u4:8: attempt to access beyond end of device
[  141.873916][ T2934] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  141.914419][ T2934] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  141.933034][ T2934] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  142.421293][   T51] Bluetooth: hci0: command tx timeout
[  142.478249][ T6868] loop1: detected capacity change from 0 to 8192
[  142.899103][ T6864] loop5: detected capacity change from 0 to 32768
[  142.974957][ T6864] JBD2: Ignoring recovery information on journal
[  143.118623][ T6864] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  143.288045][   T28] audit: type=1800 audit(1789555196.316:11): pid=6873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.313" name="use" dev="configfs" ino=12792 res=0 errno=0
[  143.741772][ T6765] ocfs2: Unmounting device (7,5) on (node local)
[  143.882742][  T971] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  144.087249][  T971] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  144.114174][ T6900] CIFS: Attempting to mount //127.0.0.1/share
[  144.126666][  T971] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  144.150481][  T971] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[  144.176982][  T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.202288][  T971] usb 2-1: Product: syz
[  144.207682][  T971] usb 2-1: Manufacturer: syz
[  144.211665][ T6901] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes)
[  144.214433][  T971] usb 2-1: SerialNumber: syz
[  144.252975][ T6888] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  144.266510][ T6888] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  144.306383][  T971] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  144.320930][  T971] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  144.355652][  T971] usbserial_generic 2-1:1.0: generic converter detected
[  144.368566][ T6900] CIFS: VFS: cifs_mount failed w/return code = -112
[  144.391758][  T971] usb 2-1: generic converter now attached to ttyUSB0
[  144.506107][   T51] Bluetooth: hci0: command tx timeout
[  144.635712][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  144.645561][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  144.655090][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  144.667973][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  144.677605][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  144.687655][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  144.697157][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  144.748230][  T789] usb 2-1: USB disconnect, device number 5
[  144.803231][  T789] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  144.819991][    T9] smpboot: CPU 1 is now offline
[  144.892271][  T789] usbserial_generic 2-1:1.0: device disconnected
[  144.976276][ T6913] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  145.020319][   T28] audit: type=1326 audit(1789555198.046:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.5.327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff524b9e159 code=0x0
[  145.716311][ T6934] loop1: detected capacity change from 0 to 128
[  145.758095][ T6934] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  145.854511][ T6936] FAULT_INJECTION: forcing a failure.
[  145.854511][ T6936] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  145.899562][ T6936] CPU: 0 PID: 6936 Comm: syz.4.334 Not tainted syzkaller #0
[  145.906922][ T6936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  145.917010][ T6936] Call Trace:
[  145.920318][ T6936]  <TASK>
[  145.923275][ T6936]  dump_stack_lvl+0x18c/0x250
[  145.928039][ T6936]  ? show_regs_print_info+0x20/0x20
[  145.933283][ T6936]  ? load_image+0x420/0x420
[  145.938090][ T6936]  ? __lock_acquire+0x7d80/0x7d80
[  145.944398][ T6936]  should_fail_ex+0x394/0x4c0
[  145.949587][ T6936]  prepare_alloc_pages+0x1e1/0x5b0
[  145.954923][ T6936]  __alloc_pages+0x134/0x460
[  145.959657][ T6936]  ? zone_statistics+0x170/0x170
[  145.964722][ T6936]  ? _raw_spin_lock_irqsave+0x100/0x100
[  145.970351][ T6936]  ? copy_page_from_iter+0xe8/0x100
[  145.975602][ T6936]  pipe_write+0x52a/0x1b20
[  145.980112][ T6936]  ? pipe_read+0x1330/0x1330
[  145.984997][ T6936]  ? end_current_label_crit_section+0x149/0x170
[  145.991281][ T6936]  ? common_file_perm+0x198/0x1f0
[  145.996340][ T6936]  vfs_write+0x474/0x9a0
[  146.000602][ T6936]  ? file_end_write+0x250/0x250
[  146.005482][ T6936]  ? __fget_files+0x3fc/0x460
[  146.010195][ T6936]  ? __fdget_pos+0x1d8/0x330
[  146.014796][ T6936]  ? ksys_write+0x74/0x260
[  146.019227][ T6936]  ksys_write+0x151/0x260
[  146.023571][ T6936]  ? __ia32_sys_read+0x90/0x90
[  146.028344][ T6936]  ? lockdep_hardirqs_on+0x98/0x150
[  146.033552][ T6936]  do_syscall_64+0x55/0xb0
[  146.038002][ T6936]  ? clear_bhb_loop+0x40/0x90
[  146.042775][ T6936]  ? clear_bhb_loop+0x40/0x90
[  146.047637][ T6936]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  146.053544][ T6936] RIP: 0033:0x7fb901d9e159
[  146.057967][ T6936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  146.077614][ T6936] RSP: 002b:00007fb902c00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  146.086030][ T6936] RAX: ffffffffffffffda RBX: 00007fb902025fa0 RCX: 00007fb901d9e159
[  146.094001][ T6936] RDX: 00000000ffffff9a RSI: 0000200000000000 RDI: 0000000000000004
[  146.101970][ T6936] RBP: 00007fb901e3506b R08: 0000000000000000 R09: 0000000000000000
[  146.110108][ T6936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  146.118076][ T6936] R13: 00007fb902026038 R14: 00007fb902025fa0 R15: 00007ffec3079518
[  146.126059][ T6936]  </TASK>
[  146.229969][ T5777] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[  146.260109][ T5777] FAT-fs (loop1): Filesystem has been set read-only
[  146.275914][ T5777] VFS: Lookup of 'file0' in vfat loop1 would have caused loop
[  146.314102][ T5777] VFS: Lookup of 'file0' in vfat loop1 would have caused loop
[  146.759007][ T3550] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.878362][ T3550] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.034192][ T3550] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.193196][ T3550] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.586317][   T28] audit: type=1800 audit(1789555201.606:13): pid=6978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.346" name="c_srate" dev="configfs" ino=14395 res=0 errno=0
[  149.259807][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  149.284872][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  149.296612][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  149.306229][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  149.321971][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  149.329342][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  149.542247][   T28] audit: type=1804 audit(1789555202.566:14): pid=7005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.352" name=2020736C20206C6F63616C5F616464726573732072656D5F6164647265737320202073742074785F71756575652072785F717565756520747220746D2D3E7768656E20726574726E736D74202020756964202074696D656F757420696E6F646520202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020200A dev="ramfs" ino=14499 res=1 errno=0
[  149.957845][ T7017] loop4: detected capacity change from 0 to 512
[  150.018556][ T7017] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  150.084022][ T7017] EXT4-fs (loop4): orphan cleanup on readonly fs
[  150.123147][ T7017] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:512: comm syz.4.355: Block bitmap for bg 0 marked uninitialized
[  150.211293][ T7017] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  150.269154][ T7017] EXT4-fs (loop4): 1 orphan inode deleted
[  150.294934][ T7017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  150.543502][ T7000] chnl_net:caif_netlink_parms(): no params data found
[  150.616671][ T7017] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.141621][ T3550] hsr_slave_0: left promiscuous mode
[  151.188308][ T3550] hsr_slave_1: left promiscuous mode
[  151.213395][ T3550] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.241368][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.266775][ T3550] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.286636][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.331888][ T3550] bridge_slave_1: left allmulticast mode
[  151.349815][ T3550] bridge_slave_1: left promiscuous mode
[  151.370253][ T3550] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.401197][   T51] Bluetooth: hci3: command tx timeout
[  151.468438][ T3550] bridge_slave_0: left allmulticast mode
[  151.503107][ T3550] bridge_slave_0: left promiscuous mode
[  151.532795][ T3550] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.643730][ T3550] veth1_macvtap: left promiscuous mode
[  151.650039][ T3550] veth0_macvtap: left promiscuous mode
[  151.671421][ T3550] veth1_vlan: left promiscuous mode
[  151.677066][ T3550] veth0_vlan: left promiscuous mode
[  153.461485][   T51] Bluetooth: hci3: command tx timeout
[  153.559655][ T3550] team0 (unregistering): Port device team_slave_1 removed
[  153.680263][ T3550] team0 (unregistering): Port device team_slave_0 removed
[  153.783905][ T3550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  153.917755][ T3550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  154.562701][ T3550] bond0 (unregistering): Released all slaves
[  154.760514][ T7000] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.789004][ T7000] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.804827][ T7000] bridge_slave_0: entered allmulticast mode
[  154.822096][ T7000] bridge_slave_0: entered promiscuous mode
[  154.853358][ T7000] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.888165][ T7000] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.912040][ T7000] bridge_slave_1: entered allmulticast mode
[  154.927040][ T7000] bridge_slave_1: entered promiscuous mode
[  155.004680][ T7000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.025073][ T7000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  155.167250][ T7000] team0: Port device team_slave_0 added
[  155.204941][ T7000] team0: Port device team_slave_1 added
[  155.301994][ T7000] batman_adv: batadv0: Adding interface: batadv_slave_0
[  155.309727][ T7000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.425212][ T7000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.437988][ T7000] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.461195][ T7000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.523514][ T7000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.555390][   T51] Bluetooth: hci3: command tx timeout
[  155.686739][ T7000] hsr_slave_0: entered promiscuous mode
[  155.731850][ T7000] hsr_slave_1: entered promiscuous mode
[  155.751311][ T7000] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  155.759015][ T7000] Cannot create hsr debugfs directory
[  156.232202][ T7145] loop4: detected capacity change from 0 to 1024
[  156.314522][ T7145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.343833][ T7000] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  156.362741][ T7000] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  156.413718][ T7000] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  156.445748][ T7000] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  156.591693][ T6637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.786519][ T7000] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.854535][ T7000] 8021q: adding VLAN 0 to HW filter on device team0
[  156.897097][ T2934] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.904382][ T2934] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.948156][ T2934] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.955394][ T2934] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.051548][ T7161] fuse: Bad value for 'fd'
[  157.086812][ T7000] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  157.123748][ T7114] loop2: detected capacity change from 0 to 65536
[  157.215871][ T7114] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  157.374571][ T7114] XFS (loop2): Ending clean mount
[  157.418463][ T7114] XFS (loop2): Quotacheck needed: Please wait.
[  157.580986][ T7114] XFS (loop2): Quotacheck: Done.
[  157.631921][   T51] Bluetooth: hci3: command tx timeout
[  157.808600][   T28] audit: type=1800 audit(1789555210.836:15): pid=7114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.376" name="bus" dev="loop2" ino=42 res=0 errno=0
[  157.888894][ T7000] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.113465][ T7205] loop4: detected capacity change from 0 to 128
[  158.371859][ T7205] syz.4.391: attempt to access beyond end of device
[  158.371859][ T7205] loop4: rw=2049, sector=145, nr_sectors = 200 limit=128
[  158.549711][ T7000] veth0_vlan: entered promiscuous mode
[  158.607699][ T7000] veth1_vlan: entered promiscuous mode
[  158.713192][ T7205] syz.4.391: attempt to access beyond end of device
[  158.713192][ T7205] loop4: rw=524288, sector=153, nr_sectors = 192 limit=128
[  158.739555][ T7000] veth0_macvtap: entered promiscuous mode
[  158.760140][ T7205] syz.4.391: attempt to access beyond end of device
[  158.760140][ T7205] loop4: rw=0, sector=153, nr_sectors = 8 limit=128
[  158.779297][ T7000] veth1_macvtap: entered promiscuous mode
[  158.841946][ T7000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.881817][ T7000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.898529][ T7000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.909919][ T7000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.921510][ T7000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.933369][ T7000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.943796][ T7000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.954684][ T7000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.966740][ T7000] batman_adv: batadv0: Interface activated: batadv_slave_0
[  158.967754][ T2934] kworker/u4:8: attempt to access beyond end of device
[  158.967754][ T2934] loop4: rw=1, sector=145, nr_sectors = 6 limit=128
[  158.990827][ T7000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.991397][ T7227] fuse: Bad value for 'fd'
[  159.014283][ T7000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.026436][ T7000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.046806][ T7000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.057085][ T7000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.068241][ T7000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.078399][ T7000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.101964][ T7000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.128170][ T7000] batman_adv: batadv0: Interface activated: batadv_slave_1
[  159.177947][ T7000] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.215003][ T7000] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.242773][ T7000] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.270771][ T7000] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.296270][   T28] audit: type=1800 audit(1789555212.326:16): pid=7198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.376" name="bus" dev="loop2" ino=42 res=0 errno=0
[  159.533508][ T3550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.580234][ T3550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.644254][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.644530][ T5775] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  159.664766][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.798044][ T7274] capability: warning: `syz.2.402' uses 32-bit capabilities (legacy support in use)
[  161.075164][ T7284] jffs2: notice: (7284) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  161.201776][ T7291] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  161.497552][ T7299] overlayfs: failed to clone lowerpath
[  161.671720][ T7304] loop4: detected capacity change from 0 to 1024
[  161.763516][ T7304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  161.808432][ T7304] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.880142][ T7304] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: block 3: comm syz.4.415: lblock 3 mapped to illegal pblock 3 (length 3)
[  161.957301][ T7304] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  161.985477][ T7304] EXT4-fs (loop4): This should not happen!! Data will be lost
[  161.985477][ T7304] 
[  162.017380][ T7319] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: block 3: comm syz.4.415: lblock 3 mapped to illegal pblock 3 (length 1)
[  162.063248][ T7319] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: block 3: comm syz.4.415: lblock 3 mapped to illegal pblock 3 (length 1)
[  162.092222][ T7322] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  162.126878][ T7303] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: block 3: comm syz.4.415: lblock 3 mapped to illegal pblock 3 (length 1)
[  162.168950][ T7319] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: block 3: comm syz.4.415: lblock 3 mapped to illegal pblock 3 (length 1)
[  162.206212][ T7303] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: block 3: comm syz.4.415: lblock 3 mapped to illegal pblock 3 (length 1)
[  162.279030][ T7319] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: block 3: comm syz.4.415: lblock 3 mapped to illegal pblock 3 (length 1)
[  162.317701][ T7304] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: block 3: comm syz.4.415: lblock 3 mapped to illegal pblock 3 (length 1)
[  162.360875][ T7319] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: block 3: comm syz.4.415: lblock 3 mapped to illegal pblock 3 (length 1)
[  162.404832][ T7304] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: block 3: comm syz.4.415: lblock 3 mapped to illegal pblock 3 (length 1)
[  162.640255][ T6637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  162.959955][   T51] Bluetooth: hci4: setting up ROME/QCA6390

Hü
[  163.009396][ T7298] loop6: detected capacity change from 0 to 65536
[  163.164859][ T7349] loop2: detected capacity change from 0 to 128
[  163.230332][ T7298] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3

ü
[  163.305667][ T7349] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  163.451485][ T7349] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  163.513233][ T7365] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000003) at rIP: 0xffffffff81357752 (__mcheck_cpu_init_clear_banks+0x102/0x1e0)
[  163.524589][ T7298] XFS (loop6): Ending clean mount
[  163.529509][ T7365] Call Trace:
[  163.537935][ T7365]  <TASK>
[  163.540903][ T7365]  mce_cpu_restart+0xce/0x1b0
[  163.545618][ T7365]  ? mce_restart+0x180/0x180
[  163.550246][ T7365]  smp_call_function_many_cond+0xb71/0x1190
[  163.556201][ T7365]  ? _raw_spin_unlock+0x40/0x40
[  163.561089][ T7365]  ? mce_restart+0x180/0x180
[  163.565726][ T7365]  ? smp_call_function_many+0x40/0x40
[  163.571138][ T7365]  ? __timer_delete_sync+0x23d/0x2e0
[  163.576467][ T7365]  ? timer_delete_sync+0x20/0x20
[  163.581442][ T7365]  ? mutex_lock_nested+0x20/0x20
[  163.586413][ T7365]  ? _parse_integer_limit+0x19c/0x1e0
[  163.591997][ T7365]  ? mce_restart+0x180/0x180
[  163.596632][ T7365]  on_each_cpu_cond_mask+0x3f/0x80
[  163.601554][ T7298] XFS (loop6): Quotacheck needed: Please wait.
[  163.601961][ T7365]  mce_restart+0x104/0x180
[  163.601990][ T7365]  set_bank+0x27f/0x390
[  163.616840][ T7365]  ? show_bank+0x2a0/0x2a0
[  163.621294][ T7365]  ? sysfs_kf_write+0x187/0x2a0
[  163.626183][ T7365]  ? sysfs_kf_read+0x360/0x360
[  163.630982][ T7365]  kernfs_fop_write_iter+0x3a4/0x520
[  163.636317][ T7365]  vfs_write+0x474/0x9a0
[  163.640619][ T7365]  ? file_end_write+0x250/0x250
[  163.645623][ T7365]  ? __fget_files+0x3fc/0x460
[  163.650452][ T7365]  ? __fdget_pos+0x2a3/0x330
[  163.655096][ T7365]  ? ksys_write+0x74/0x260
[  163.659560][ T7365]  ksys_write+0x151/0x260
[  163.663944][ T7365]  ? __ia32_sys_read+0x90/0x90
[  163.668760][ T7365]  ? lockdep_hardirqs_on+0x98/0x150
[  163.674012][ T7365]  do_syscall_64+0x55/0xb0
[  163.678475][ T7365]  ? clear_bhb_loop+0x40/0x90
[  163.683194][ T7365]  ? clear_bhb_loop+0x40/0x90
[  163.687926][ T7365]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  163.693955][ T7365] RIP: 0033:0x7fb901d9e159
[  163.698397][ T7365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.718207][ T7365] RSP: 002b:00007fb902c00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  163.726651][ T7365] RAX: ffffffffffffffda RBX: 00007fb902025fa0 RCX: 00007fb901d9e159
[  163.734653][ T7365] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000004
[  163.741386][ T7298] XFS (loop6): Quotacheck: Done.
[  163.742656][ T7365] RBP: 00007fb901e3506b R08: 0000000000000000 R09: 0000000000000000
[  163.755592][ T7365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.763596][ T7365] R13: 00007fb902026038 R14: 00007fb902025fa0 R15: 00007ffec3079518
[  163.771616][ T7365]  </TASK>
[  163.809332][   T28] audit: type=1800 audit(1789555216.836:17): pid=7298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.412" name="bus" dev="loop6" ino=42 res=0 errno=0
[  164.326475][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  164.393235][ T7380] trusted_key: encrypted_key: insufficient parameters specified
[  165.105134][   T28] audit: type=1800 audit(1789555218.136:18): pid=7367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.412" name="bus" dev="loop6" ino=42 res=0 errno=0
[  165.302155][ T5779] Bluetooth: hci4: command 0xfc00 tx timeout
[  165.310667][   T51] Bluetooth: hci4: Reading QCA version information failed (-110)
[  165.319390][   T51] Bluetooth: hci4: Retry BT power ON:0

Hü
[  165.353909][ T7000] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3

ü
[  166.322225][ T7414] loop4: detected capacity change from 0 to 2048
[  166.394479][ T7414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.657304][ T7414] EXT4-fs error (device loop4): xattr_find_entry:337: inode #12: comm syz.4.434: corrupted xattr entries
[  166.860688][ T6637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.178276][ T7426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.437'.
[  167.701243][ T5779] Bluetooth: hci4: command 0xfc00 tx timeout
[  167.701706][ T7435] input: syz1 as /devices/virtual/input/input10
[  167.721343][   T51] Bluetooth: hci4: Reading QCA version information failed (-110)
[  167.729174][   T51] Bluetooth: hci4: Retry BT power ON:1

Hü

ü
[  169.021211][ T5786] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  169.277255][ T5786] usb 7-1: unable to get BOS descriptor or descriptor too short
[  169.302760][ T5786] usb 7-1: config 0 has no interfaces?
[  169.310202][ T5786] usb 7-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[  169.331219][ T5786] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  169.340364][ T5786] usb 7-1: Product: syz
[  169.359085][ T5786] usb 7-1: Manufacturer: syz
[  169.384248][ T5786] usb 7-1: config 0 descriptor??
[  169.982215][  T789] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  170.103327][ T5779] Bluetooth: hci4: command 0xfc00 tx timeout
[  170.109484][   T51] Bluetooth: hci4: Reading QCA version information failed (-110)
[  170.117543][   T51] Bluetooth: hci4: Retry BT power ON:2

Hü
[  170.221486][  T789] usb 5-1: Using ep0 maxpacket: 32
[  170.233462][  T789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  170.263028][  T789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  170.301387][  T789] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  170.334610][  T789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.402232][  T789] usb 5-1: config 0 descriptor??

ü
[  170.892148][  T789] ft260 0003:0403:6030.0003: unknown main item tag 0x0
[  170.929567][  T789] ft260 0003:0403:6030.0003: unknown main item tag 0x0
[  171.088980][  T789] ft260 0003:0403:6030.0003: chip code: 0000 0000
[  171.290879][  T789] ft260 0003:0403:6030.0003: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0
[  171.493434][  T789] ft260 0003:0403:6030.0003: failed to retrieve status: -32, no wakeup
[  171.845486][ T7471] ft260 0003:0403:6030.0003: ft260_hid_output_report_check_status: failed to start transfer, ret -38
[  172.061275][ T7471] ft260 0003:0403:6030.0003: failed to reset I2C controller: -108
[  172.090199][ T7471] ft260 0003:0403:6030.0003: ft260_i2c_write: failed with -38
[  172.181642][   T23] usb 7-1: USB disconnect, device number 2
[  172.210708][ T7508] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.218583][ T7508] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.502287][ T5779] Bluetooth: hci4: command 0xfc00 tx timeout
[  172.508525][   T51] Bluetooth: hci4: Reading QCA version information failed (-110)
[  172.922195][  T789] usb 5-1: USB disconnect, device number 2
[  173.140763][    T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  173.353618][    T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  173.375400][    T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  173.403839][    T8] usb 3-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00
[  173.421851][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.441290][    T8] usb 3-1: Product: syz
[  173.445666][    T8] usb 3-1: Manufacturer: syz
[  173.450281][    T8] usb 3-1: SerialNumber: syz
[  173.460178][ T7508] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.532435][ T7508] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.726189][    T8] kaweth 3-1:1.0: Firmware present in device.
[  173.903181][    T8] kaweth 3-1:1.0: Statistics collection: 0
[  173.909178][    T8] kaweth 3-1:1.0: Multicast filter limit: 0
[  173.929420][    T8] kaweth 3-1:1.0: MTU: 0
[  173.934304][    T8] kaweth 3-1:1.0: Read MAC address 00:00:00:00:00:00
[  174.147327][ T7508] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.156894][ T7508] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.168019][ T7508] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.177722][ T7508] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.562663][    T8] kaweth 3-1:1.0: kaweth interface created at eth5
[  174.729818][    T8] usb 3-1: USB disconnect, device number 6
[  175.225844][ T7555] 
[  175.228222][ T7555] ======================================================
[  175.235337][ T7555] WARNING: possible circular locking dependency detected
[  175.242383][ T7555] syzkaller #0 Not tainted
[  175.246825][ T7555] ------------------------------------------------------
[  175.253943][ T7555] syz.6.472/7555 is trying to acquire lock:
[  175.259848][ T7555] ffff88802006e4d0 (&sb->s_type->i_mutex_key#24){++++}-{3:3}, at: configfs_depend_item_unlocked+0x157/0x430
[  175.271473][ T7555] 
[  175.271473][ T7555] but task is already holding lock:
[  175.278860][ T7555] ffffffff8de55e88 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf9/0x550
[  175.288135][ T7555] 
[  175.288135][ T7555] which lock already depends on the new lock.
[  175.288135][ T7555] 
[  175.298556][ T7555] 
[  175.298556][ T7555] the existing dependency chain (in reverse order) is:
[  175.307585][ T7555] 
[  175.307585][ T7555] -> #3 (tpg_instances_lock){+.+.}-{3:3}:
[  175.315524][ T7555]        __mutex_lock+0x135/0xc80
[  175.320579][ T7555]        tcm_alloc_inst+0x65/0x190
[  175.325832][ T7555]        usb_get_function_instance+0xdd/0x2e0
[  175.331925][ T7555]        function_make+0x11c/0x350
[  175.337060][ T7555]        configfs_mkdir+0x515/0x9e0
[  175.342280][ T7555]        vfs_mkdir+0x2a5/0x470
[  175.347148][ T7555]        do_mkdirat+0x1dc/0x450
[  175.352023][ T7555]        __x64_sys_mkdir+0x6e/0x80
[  175.357160][ T7555]        do_syscall_64+0x55/0xb0
[  175.362124][ T7555]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  175.368572][ T7555] 
[  175.368572][ T7555] -> #2 (func_lock){+.+.}-{3:3}:
[  175.375731][ T7555]        __mutex_lock+0x135/0xc80
[  175.380792][ T7555]        usb_get_function_instance+0x2e/0x2e0
[  175.382964][ T7562] loop6: detected capacity change from 0 to 6
[  175.386863][ T7555]        function_make+0x11c/0x350
[  175.386890][ T7555]        configfs_mkdir+0x515/0x9e0
[  175.403286][ T7555]        vfs_mkdir+0x2a5/0x470
[  175.408072][ T7555]        do_mkdirat+0x1dc/0x450
[  175.412949][ T7555]        __x64_sys_mkdir+0x6e/0x80
[  175.418083][ T7555]        do_syscall_64+0x55/0xb0
[  175.423039][ T7555]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  175.429481][ T7555] 
[  175.429481][ T7555] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}:
[  175.437776][ T7555]        __mutex_lock+0x135/0xc80
[  175.442827][ T7555]        configfs_rmdir+0x63c/0x980
[  175.448042][ T7555]        vfs_rmdir+0x352/0x4b0
[  175.452829][ T7555]        do_rmdir+0x29f/0x590
[  175.457528][ T7555]        __x64_sys_rmdir+0x49/0x50
[  175.462689][ T7555]        do_syscall_64+0x55/0xb0
[  175.467651][ T7555]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  175.474092][ T7555] 
[  175.474092][ T7555] -> #0 (&sb->s_type->i_mutex_key#24){++++}-{3:3}:
[  175.482896][ T7555]        __lock_acquire+0x37ef/0x7d80
[  175.488291][ T7555]        lock_acquire+0x19e/0x420
[  175.493334][ T7555]        down_write+0x97/0x200
[  175.498125][ T7555]        configfs_depend_item_unlocked+0x157/0x430
[  175.504666][ T7555]        usbg_make_tpg+0x1e1/0x550
[  175.509811][ T7555]        target_fabric_make_tpg+0xa4/0x6d0
[  175.515654][ T7555]        configfs_mkdir+0x515/0x9e0
[  175.520882][ T7555]        vfs_mkdir+0x2a5/0x470
[  175.525685][ T7555]        do_mkdirat+0x1dc/0x450
[  175.530571][ T7555]        __x64_sys_mkdir+0x6e/0x80
[  175.535706][ T7555]        do_syscall_64+0x55/0xb0
[  175.540672][ T7555]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  175.547208][ T7555] 
[  175.547208][ T7555] other info that might help us debug this:
[  175.547208][ T7555] 
[  175.557457][ T7555] Chain exists of:
[  175.557457][ T7555]   &sb->s_type->i_mutex_key#24 --> func_lock --> tpg_instances_lock
[  175.557457][ T7555] 
[  175.571824][ T7555]  Possible unsafe locking scenario:
[  175.571824][ T7555] 
[  175.579384][ T7555]        CPU0                    CPU1
[  175.584749][ T7555]        ----                    ----
[  175.590127][ T7555]   lock(tpg_instances_lock);
[  175.594834][ T7555]                                lock(func_lock);
[  175.601261][ T7555]                                lock(tpg_instances_lock);
[  175.608644][ T7555]   lock(&sb->s_type->i_mutex_key#24);
[  175.614108][ T7555] 
[  175.614108][ T7555]  *** DEADLOCK ***
[  175.614108][ T7555] 
[  175.622330][ T7555] 4 locks held by syz.6.472/7555:
[  175.628043][ T7555]  #0: ffff888017da4418 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  175.637291][ T7555]  #1: ffff88805cc24670 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450
[  175.648183][ T7555]  #2: ffffffff8db2bdb0 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b9/0x9e0
[  175.657931][ T7555]  #3: ffffffff8de55e88 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf9/0x550
[  175.667609][ T7555] 
[  175.667609][ T7555] stack backtrace:
[  175.673487][ T7555] CPU: 1 PID: 7555 Comm: syz.6.472 Not tainted syzkaller #0
[  175.680764][ T7555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  175.690813][ T7555] Call Trace:
[  175.694091][ T7555]  <TASK>
[  175.697012][ T7555]  dump_stack_lvl+0x18c/0x250
[  175.701693][ T7555]  ? load_image+0x420/0x420
[  175.706189][ T7555]  ? show_regs_print_info+0x20/0x20
[  175.711385][ T7555]  ? print_circular_bug+0x12b/0x1a0
[  175.716588][ T7555]  check_noncircular+0x2fc/0x400
[  175.721527][ T7555]  ? look_up_lock_class+0x75/0x140
[  175.726637][ T7555]  ? print_deadlock_bug+0x5d0/0x5d0
[  175.731928][ T7555]  ? lockdep_lock+0xf5/0x230
[  175.736519][ T7555]  ? __lock_acquire+0x357f/0x7d80
[  175.741544][ T7555]  ? _find_first_zero_bit+0xd6/0x100
[  175.746831][ T7555]  __lock_acquire+0x37ef/0x7d80
[  175.751689][ T7555]  ? is_bpf_text_address+0x28f/0x2a0
[  175.756970][ T7555]  ? verify_lock_unused+0x140/0x140
[  175.762183][ T7555]  lock_acquire+0x19e/0x420
[  175.766681][ T7555]  ? configfs_depend_item_unlocked+0x157/0x430
[  175.772918][ T7555]  ? trace_raw_output_contention_end+0xd0/0xd0
[  175.779073][ T7555]  ? __might_sleep+0xe0/0xe0
[  175.783662][ T7555]  ? rcu_is_watching+0x15/0xb0
[  175.788511][ T7555]  ? read_lock_is_recursive+0x20/0x20
[  175.793896][ T7555]  ? trace_contention_end+0x39/0xe0
[  175.799095][ T7555]  ? __mutex_lock+0x30d/0xc80
[  175.803764][ T7555]  ? do_syscall_64+0x55/0xb0
[  175.808352][ T7555]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  175.814438][ T7555]  down_write+0x97/0x200
[  175.818680][ T7555]  ? configfs_depend_item_unlocked+0x157/0x430
[  175.824828][ T7555]  ? down_read_killable+0x340/0x340
[  175.830028][ T7555]  configfs_depend_item_unlocked+0x157/0x430
[  175.836013][ T7555]  usbg_make_tpg+0x1e1/0x550
[  175.840619][ T7555]  ? snprintf+0xe9/0x140
[  175.844945][ T7555]  ? configfs_mkdir+0x4b9/0x9e0
[  175.849792][ T7555]  ? usbg_drop_tport+0x20/0x20
[  175.854644][ T7555]  ? vscnprintf+0x80/0x80
[  175.858966][ T7555]  target_fabric_make_tpg+0xa4/0x6d0
[  175.864252][ T7555]  ? target_fabric_release_wwn+0xb0/0xb0
[  175.869887][ T7555]  configfs_mkdir+0x515/0x9e0
[  175.874568][ T7555]  vfs_mkdir+0x2a5/0x470
[  175.878806][ T7555]  do_mkdirat+0x1dc/0x450
[  175.883128][ T7555]  ? vfs_mkdir+0x470/0x470
[  175.887546][ T7555]  ? getname_flags+0x20a/0x500
[  175.892317][ T7555]  __x64_sys_mkdir+0x6e/0x80
[  175.896901][ T7555]  do_syscall_64+0x55/0xb0
[  175.901314][ T7555]  ? clear_bhb_loop+0x40/0x90
[  175.905987][ T7555]  ? clear_bhb_loop+0x40/0x90
[  175.910660][ T7555]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  175.916558][ T7555] RIP: 0033:0x7f207339e159
[  175.920965][ T7555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  175.940573][ T7555] RSP: 002b:00007f20742ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  175.949024][ T7555] RAX: ffffffffffffffda RBX: 00007f2073625fa0 RCX: 00007f207339e159
[  175.956990][ T7555] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600
[  175.964958][ T7555] RBP: 00007f207343506b R08: 0000000000000000 R09: 0000000000000000
[  175.972932][ T7555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  175.980900][ T7555] R13: 00007f2073626038 R14: 00007f2073625fa0 R15: 00007ffc859bc6a8
[  175.988871][ T7555]  </TASK>
[  175.999257][ T7562] Dev loop6: unable to read RDB block 6
[  176.027936][ T7562]  loop6: unable to read partition table
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  176.084047][ T7562] loop6: partition table beyond EOD, truncated
[  176.141135][ T7562] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  178.363642][   T49] hsr_slave_0: left promiscuous mode
[  178.369599][   T49] hsr_slave_1: left promiscuous mode
[  178.375877][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  178.384023][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  178.394121][   T49] bridge_slave_1: left allmulticast mode
[  178.400962][   T49] bridge_slave_1: left promiscuous mode
[  178.407119][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.416308][   T49] bridge_slave_0: left allmulticast mode
[  178.424560][   T49] bridge_slave_0: left promiscuous mode
[  178.430293][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.027725][   T49] team0 (unregistering): Port device team_slave_1 removed
[  179.084560][   T49] team0 (unregistering): Port device team_slave_0 removed
[  179.147489][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  179.207139][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  179.643785][   T49] bond0 (unregistering): Released all slaves
[  180.219073][   T49] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.259168][   T49] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.327381][   T49] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.392332][   T49] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.555719][   T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.617877][   T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.659522][   T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.747019][   T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.914098][   T49] hsr_slave_0: left promiscuous mode
[  181.931863][   T49] hsr_slave_1: left promiscuous mode
[  181.937907][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.951130][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.959169][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.968270][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  181.977145][   T49] bridge_slave_1: left allmulticast mode
[  181.994317][   T49] bridge_slave_1: left promiscuous mode
[  182.000246][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.009512][   T49] bridge_slave_0: left allmulticast mode
[  182.017137][   T49] bridge_slave_0: left promiscuous mode
[  182.023191][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.039085][   T49] hsr_slave_0: left promiscuous mode
[  182.045078][   T49] hsr_slave_1: left promiscuous mode
[  182.050980][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  182.060660][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  182.068521][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  182.079841][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  182.089313][   T49] bridge_slave_1: left allmulticast mode
[  182.096708][   T49] bridge_slave_1: left promiscuous mode
[  182.104056][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.114721][   T49] bridge_slave_0: left allmulticast mode
[  182.120381][   T49] bridge_slave_0: left promiscuous mode
[  182.126372][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.142088][   T49] veth1_macvtap: left promiscuous mode
[  182.147636][   T49] veth0_macvtap: left promiscuous mode
[  182.155494][   T49] veth1_vlan: left promiscuous mode
[  182.160810][   T49] veth0_vlan: left promiscuous mode
[  182.168141][   T49] veth1_macvtap: left promiscuous mode
[  182.176588][   T49] veth0_macvtap: left promiscuous mode
[  182.182276][   T49] veth1_vlan: left promiscuous mode
[  182.188095][   T49] veth0_vlan: left promiscuous mode
[  182.607019][   T49] team0 (unregistering): Port device team_slave_1 removed
[  182.644916][   T49] team0 (unregistering): Port device team_slave_0 removed
[  182.682749][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  182.725820][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  182.829721][   T49] bond0 (unregistering): Released all slaves
[  182.882962][   T49] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  182.892824][   T49] bridge1 (unregistering): left promiscuous mode
[  183.060263][   T49] bond1 (unregistering): Released all slaves
[  183.290551][   T49] team0 (unregistering): Port device team_slave_1 removed
[  183.337758][   T49] team0 (unregistering): Port device team_slave_0 removed
[  183.376748][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  183.417139][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  183.525667][   T49] bond0 (unregistering): Released all slaves