last executing test programs:

1m42.40125306s ago: executing program 32 (id=186):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x1d, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

1m24.872100314s ago: executing program 33 (id=258):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m22.670014978s ago: executing program 34 (id=604):
io_uring_setup(0xc90, &(0x7f0000000080))
r0 = io_uring_setup(0x4166, &(0x7f0000000140)={0x0, 0x4, 0x400, 0x3, 0x161})
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2)
io_uring_enter(r0, 0x0, 0x0, 0x1f, 0x0, 0x0)

1m17.982644151s ago: executing program 35 (id=668):
openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_setup(0x2278, 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6)
mount(&(0x7f0000000040)=@filename='./bus\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000340)='msdos\x00', 0x8080, 0x0)

1m3.752084869s ago: executing program 36 (id=660):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x80000002, 0x12)

58.068871123s ago: executing program 37 (id=903):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)='%+9llu \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc)

35.104024799s ago: executing program 38 (id=1430):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000062000/0x4000)=nil)
mincore(&(0x7f000013d000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/8)

33.150677057s ago: executing program 4 (id=1468):
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0)
write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

33.02278306s ago: executing program 4 (id=1471):
unshare(0x22020400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, 0x0)

32.966838581s ago: executing program 4 (id=1474):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x4, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
fspick(0xffffffffffffff9c, 0x0, 0x1)

32.580594811s ago: executing program 4 (id=1489):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0)

32.550415891s ago: executing program 4 (id=1491):
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x193)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = open(&(0x7f0000000200)='./file1\x00', 0x6204c2, 0x108)
flock(r0, 0x2)

32.351108996s ago: executing program 4 (id=1496):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x64)

32.312949987s ago: executing program 39 (id=1496):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x64)

20.885667314s ago: executing program 2 (id=1833):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@grpid}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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")
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f00000009c0)='.\x00', 0x0, 0x22be836, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

20.516605473s ago: executing program 2 (id=1839):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001a00010028bd70000000000002202000ff0000070002000008000300", @ANYRES32=r2, @ANYBLOB="08000100ac241433080002000a"], 0x34}}, 0xea5bc50b6199d77e)

20.090061013s ago: executing program 2 (id=1842):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4)
recvmmsg(r0, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000004f40)=""/131, 0x83}], 0x1, &(0x7f00000050c0)=""/21, 0x15}, 0x3}], 0x1, 0x40002122, 0x0)
sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e21}}, 0x10, &(0x7f0000000440)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1, 0x0, 0x0, 0x4040080}, 0x4805)

19.996986985s ago: executing program 2 (id=1844):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00')

19.857296519s ago: executing program 2 (id=1848):
syz_open_dev$usbfs(&(0x7f0000000040), 0x4000000020001000, 0x301)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', <r1=>0x0, 0x1, 0x40, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @multicast2}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f00000000c0)={'sit0\x00', r1, 0x7, 0x40, 0x3, 0x4, {{0x5, 0x4, 0x2, 0x7, 0x14, 0x64, 0x0, 0x2, 0x4, 0x0, @remote, @remote}}}})

19.755118691s ago: executing program 2 (id=1850):
r0 = syz_io_uring_setup(0x5aea, &(0x7f0000000200)={0x0, 0xcfca, 0x800, 0x8000, 0x2c1}, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000000))
r1 = eventfd2(0x3c75, 0x800)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r1, 0x1)
io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0)

19.734047162s ago: executing program 40 (id=1850):
r0 = syz_io_uring_setup(0x5aea, &(0x7f0000000200)={0x0, 0xcfca, 0x800, 0x8000, 0x2c1}, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000000))
r1 = eventfd2(0x3c75, 0x800)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r1, 0x1)
io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0)

19.071205238s ago: executing program 1 (id=1869):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000073}]})

19.01243515s ago: executing program 1 (id=1870):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000640)}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x260, 0xc8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, [0xff, 0xffffffff, 0xff000000, 0xff], [0x0, 0xff, 0xffffff00, 0xff000000], 'wg2\x00', 'veth1_to_team\x00', {0xff}, {0xd4f95740521b96ce}, 0x4f, 0x2, 0x7, 0x32}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [0xff, 0xff, 0xffffff, 0xff000000], [0xff000000, 0xffffff00, 0x0, 0xff000000], '\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x6, 0x7a, 0x0, 0x3}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c0)

18.98982991s ago: executing program 1 (id=1871):
creat(&(0x7f0000000080)='./file0\x00', 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
setresuid(0xee00, 0xee00, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

18.96560663s ago: executing program 1 (id=1872):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00')

18.854097463s ago: executing program 1 (id=1873):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000300), 0x0}, 0x20)

18.750999885s ago: executing program 1 (id=1874):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x168, 0xffffffff, 0xffffffff, 0x168, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x168, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0x5de, 0x18, 0x8}, {0x9}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520)
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0)
syz_emit_ethernet(0x60, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00f5c0", 0x2a, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{}]}}}}}}, 0x0)

18.749022685s ago: executing program 41 (id=1874):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x168, 0xffffffff, 0xffffffff, 0x168, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x168, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0x5de, 0x18, 0x8}, {0x9}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520)
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0)
syz_emit_ethernet(0x60, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00f5c0", 0x2a, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{}]}}}}}}, 0x0)

12.417230159s ago: executing program 9 (id=2095):
unshare(0x400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, 0x0, &(0x7f0000000180)=""/177}, 0x20)

11.810759274s ago: executing program 9 (id=2108):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x32874000)
preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/3, 0x3}], 0x1, 0x9, 0x4)

11.770416665s ago: executing program 9 (id=2101):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
unshare(0x400)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x17e)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0})

11.706817066s ago: executing program 9 (id=2103):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000000200)={[{@errors_continue}, {@discard}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@umask}, {@uid={'uid', 0x3d, 0xee01}}, {@sys_tz}, {@gid}, {@keep_last_dots}, {@namecase}, {@discard}, {@time_offset={'time_offset', 0x3d, 0x80}}]}, 0x41, 0x1532, &(0x7f0000000300)="$eJzs3QmcjlUbMPDrOufcY0h6mmQZzjnXzZPEIUmyJMmSJEmSZEtIkrySkBiyJQ1JyDokyxCSZWLS2Pd9SUiSJklCsiXn+03Mp97qe7fe1/u9c/1/v/s353rOfc59Pc91P8+9zPZN5yHVG9aoUp+I4F+CF78kAEAsAAwAgGsAIACAMnFl4jL6s0tM+Nc2wv5cDydf6QzYlcT1z9q4/lkb1z9r4/pnbVz/rI3rn7Vx/bM2rj9jWdnm6fmv5SXrLnz//39f3T/s4eP///98ZiO9xNgv1pa4vgtAzN87luuftXH9/2cFf89KXP+sjeufVcVe6QTYfwF+/2cF2f6wh+uftXH9GcvKrvT95yu9QCRrvwZXev9jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY1nPGXKQDIbF/pvBhjjDHGGGOMMfbn8dmudAaMMcYYY4wxxhj790MQIEFBADGQDWIhO+QAAQBXQy64BiJwLcTBdZAbroc8kBfyQX6IhwJQEDQYsEAQQiEoDFG4AYrAjVAUboJiUBwclICScDOUglugNNwKZeA2KAu3QzkoDxWgItwBleBOqAx3QRW4G6pCNagONeAeqAn3Qi24D2rD/VAHHoC68CDUg4egPjwMDeARaAiPQiN4DBpDE2gKzaD5PzX+RegOL0EP6AkJ0At6w8vQB/pCP+gPA+AVGAivwiB4DRJhMAyB12EovAHD4E0YDiNgJLwFo2A0jIGxMA7GQxJMgInwNkyCd2AyTIGpMA2SYTrMgHdhJsyC2fAezIH3YS7Mg/mwAFLgA1gIiyAVPoTF8BGkwRJYCstgOayAlbAKVsMaWAvrYD1sgI2wCTbDFtgK22A77ICd8DHsgk9gN+yBvfAp7IPP/sHxp/9qfBcEBBQoUKHCGIzBWIzFHJgDc2JOzIW5MIIRjMM4zI25MQ/mwXyYD+MxHgtiQTRokJCwEBbCKEaxCBbBolgUi2ExdOiwJJbEUngLlsbSWAbLYFksi+WwPJbHilgRK2ElrIyVsQpWwapYFatjdbwH78FeWAtrYW2sjXWwTubtKayP9bEBNsCG2BAbYSNsjI2xKTbF5tgcW2ALbIktsTW2xjbYBttiW2yH7bA9tscO2AE7YkfshJ2wM3bGLtgVu6a/mA3wJXwJe2JV0Qt7Y2/sg4nZ+mF/7I+v4EB8FV/F1zARB+MQfB1fxzdwGJ7C4TgCR+JIrCRG4xgciyTGYxIm4USciJNwEk7GKTgFp2EyTscZOANn4iyche/hHHwf38d5OA8XYAqm4EJchKmYiovxNKbhElyKy3A5rsDluApX4ypci+twLW7ADbgJN+EW3ILbcBvuwB34MSoA/AT34B5MxH24D/fjfjyAB/AgHsR0TMdDeAgP42E8gkfwKB7FY3gcT+BxPIkn8RSexjN4Bs/hOTyPz8d/1eDjm9YkgsighBIxIkbEiliRQ+QQOUVOkUvkEhEREXEiTuQWuUUekUfkE/lEvIgXBUVBYYQRJMIYABBRERVFRBFRVBQVxUQx4YQTJRFEKVFKlBalRRlxmygrbhflRHnRylUUFUUl0dpVFneJKqKKqCqqieqihqghaoqaopaoJWqL2qKOqCPqigdFPdEL++HDIqMyDcVgbCSGYGPRRMhLn2AtxDBsKVqJ1uJJMQKHY1vRwrUTz4j2Ygx2EH8RY/E50UmMx87iBdFFdBXdxIuiu2jpeoieYjL2Er3FNOwj+op+or+YidXEezgne3XxmkgUg8UQ8bpYgG+IYeJNMVyMECPFW2KUGC3GiLFinBgvksQEMVG8LSaJd8RkMUVMFdNEspguZoh3xUwxS8wW74k54n0xV8wT88UCkSI+EAvFIpEqPhSLxUciTSwRS8UysVysECvFKrFarBFrxTqxXmwQG8UmsVlsEVvFNrFd7BA7xcdil/hE7BZ7xF7xqdgnPhP7xefigPhCHBRfinTxlTgkvhaHxTfiiPhWHBXfiWPiuDghvhcnxQ/ilDgtzoiz4pz4UZwXP4kLwguQKIWUUslAxshsMlZmlznkVTKnDC69utfKOHmdzC2vl3lkXplP5pfxsoAsKLU00kqSoSwkC8uovEEWkTfKovImWUwWl06WkCXlzbKUvEWWlrfKMvI2WVbeLsvJ8rKCrCjvkJXknRIiF7dRVVaT1WUNeY9MgHtlLXmfrC3vl3XkA7KufFDWkw/J+vJh2UA+IhvKR2Uj+ZhsLJvIprKZbC4fly3kE7KlbCVbyydlG/mUbCuflu3kM7K99Jd2kedkJ/m87CxfkF1kV9lN/iQvSC97yJ4SeoHsLV+WfWRf2U/2lwPkK3KgfFUOkq/JRDlYDpGvy6HyDTlMvimHyxFypHxLjpKj5Rg5Vo6T42WSnCAnyrflJPmOnCynyKlymkyW02W/SzPNlvJvjn/7d8YP+nnrm+RmuUVuldvkdrlD7pQfy11yl9wtd8u9cq/cJ/fJ/XK/PCAPyIPyoEyX6fKQPCQPy8PyiDwij8qj8pg8Ls/K7+VJ+YM8JU/L0/KsPCfPyfOXXgNQqISSSqlAxahsKlZlVznUVSqnulrlUteoiLpWxanrVG51vcqj8qp8Kr+KVwVUQaWVUVaRClUhVVhF1Q14aYdRxVRx5VQJVVLd/I+MV0XUjaqouulX4zPzS/iD/Jqr5qqFaqFaqpaqtWqt2qg2qq1qq9qpdqq9aq86qA6qo+qoOqlOqrPqrLqoLqqb6qa6q+6qh+qhElSC6q1eVn1UX9VP9VcD1CtqoBqoBqlBKlElqiFqiBqqhqphapgaroarkWqkGqVGqTFqjBqnxqkklaQmqolqkpqkJqvJaqqaqpJVspqhZqiZaqaarWarOWqOmqvmqvlqvkpRKWqhWqhSVaparBarNLVELVHL1DK1Qq1Qq9QqtUatUevUOrVBbVBparParLaqrWq72q52qp1ql9qldqvdaq/aq/apfWq/2q8OqAPqoDqo0lW6OqQOqcPqsDqijqij6qg6po6pE+qEOqlOqlPqlDqjzqhz6pw6r86rC+pCxmlfIAIRqEAFMUFMEBvEBjmCHEHOIGeQK8gVRIJIEBfEBbmD64M8Qd4gX5A/iA8KBAUDHZjABuJS0aPBDUGR4MagaHBTUCwoHrigRFAyuDkoFdwSlA5uDcoEtwVlg9uDckH5oEJQMbgjqBTcGVQO7gqqBHcHVYNqQfWgRnBPUDO4N6gV3BfUDu4P6gQPBHWDB4N6wUNB/eDhoEHwSNAweDRoFDwWNA6aBE2DZkHzP3V+70/lfcL10D11gu6le+uXdR/dV/fT/fUA/YoeqF/Vg/RrOlEP1kP063qofkMP02/q4XqEHqnf0qP0aD1Gj9Xj9HidpCfoifptPUm/oyfrKXqqnqaT9XQ9Q7+rZ+pZerZ+T8/R7+u5ep6erxfoFP2BXqgX6VT9oV6sP9Jpeoleqpfp5XqFXqlX6dV6jV6r1+n1eoPeqDfpzXqL3qq36e16h96pP9a79Cd6t96j9+pP9T79md6vP9cH9Bf6oP5Sp+uv9CH9tT6sv9FH9Lf6qP5OH9PH9Qn9vT6pf9Cn9Gl9Rp/V5/SP+rz+SV/QPuPkPuPwbpRRJsbEmFgTa3KYHCanyWlymVwmYiImzsSZ3Ca3yWPymHwmn4k38aagKWgykCFTyBQyURM1RUwRU9QUNcVMMeOMMyVNSVPKlDKlTWlTxpQxZU1ZU86UMxVMBXOHucPcae40d5m7zN3mblPNVDM1TA1T09Q0tUwtU9vUNnVMHVPX1DX1TD1T39Q3DUwD09A0NI1MI9PYNDZNTVPT3DQ3LUwL09K0NK1Na9PGtDFtTVvTzrQz7U1708F0MB1NR9PJdDKdTWfTxXQx3Uw30910Nz1MD5NgEkxv09v0MX1MP9PPDDADzEAz0Awyg0yiSTRDzBAz1Aw1w8wwM9yMMCMzTlTNaDPGjDXjzHiTZJLMRDPRTDKTzGQz2Uw1U02ySTYzzAwz08w0s81sM8fMMXPNXDPfzDcpJsUsNAtNqkk1i81ik2bSzFKz1Cw3y81Ks9KsNqvNWrPWrIf1ZqPZaDabzWar2Wq2m+1mp9lpdpldZrfZbfaavWaf2Wf2m/3mgDlgDpqDJt2km0PmkDlsDpsj5og5ao6aY+aYOWFOmJPmpDllTpkz5ow5Z/JeOl56E2uz2xz2KpvTXm1z2WvsX8f5bH4bbwvYglbbPDbvr2JjrS1qb7LFbHHrbAlb0t78m7icLW8r2Ir2DlvJ3mkr/yauae+1tex9tra939aw9/wqrmMfsHXto7YeIoBtYhvYZrahfdQ2so/ZxraJbWqb2YyT0rb2advOPmPb22dtG/uU/WW80C6yq+0au9aus7vtHnvGnrWH7Tf2nP3R9rA97QD7ih1oX7WD7Gs20Q7+TTzSvmVH2dF2jB1rx9nxv4mn2mk22U63M+y7dqad9Zs4xX5g59hUO9fOs/Ptgp/jjJxS7Yd2sf3IptkAltpldrldYVfaVf8312V2g91oN9ld9hO71W6z2+0OuzPzRNjusXvtp3af/cwesl/bA/YLe9Aesen2q5/jjOd3xH5rj9rv7DF73J6w39uT9gf189jRfQDsj/Z7+5O9YL0FQgKSpCigGMpGsZSdctBVlJOuplx0DUXoWoqj6yg3XU95KC/lo/wUTwWoIGkyZIkopEJUmKJ0A2WmV4yKk6MSVJJuplJ0C5WmW6kM3UZl6XYqR+WpAlWkO6gS3UmV6S6qQndTVapG1akG3UM16V6qRfdRbbqf6tADVJcepHr0ENWnh6kBPUIN6VFqRI9RY2pCTakZNafHqQU9QS2pFbWmJ6kNPUVt6WlqR89Qe3qWOtBfqCM9R53oeepML1AX6krd6EXqTi9RD+pJCdSLetPL1If6Uj/qTwPoFRpIr9Igeo0SaTANoddpKL1Bw+hNGk4jaCS9RaNoNI2hsTSOxlMSTaCJ9DZNondoMk2hqTSNkmk6zaB3aSbNotn0Hs2h92kuzaP5tIBS6ANaSIsolT6kxfQRpdESWkrLaDmtoJW0ilbTGlpL62g9baCNtIk20xbaSttoO+2gnfQx7aJPaDftob30Ke2jz2g/fU4H6As6SF9SOn1Fh+hrOkyZR+vv6BgdpxP0PZ2kH+gUnaYzdJbO0Y90nn6iC+QJQgxFKEMVBmFMmC2MDbOHOcKrwpzh1WGu8JowEl4bxoXXhbnD68M8Yd4wX5g/jA8LhAVDHZrQhhSGYaGwcBgNbwiLhDeGRUMMi4XFQxeWCEuGN4elwlvC0uGtYZnwtrBseHtYLiwfPnp/xfCOsFJ4Z1g5vCusEt4dVg2rhdXDGuE9Yc3w3rBWeF9YO7w/LB0+ENYNHwzrhQ+F9cOHwwbhI2HD8NGwUfhY2DhsEjYNm4XNw8fDFuETYcuwVdg6fDJsEz4Vtg2fDtuFz4Ttw2d/7n9g0R/3J4S9wt7hy+HLoff3yfnRBdGU6AfRhdFF0dToh9HF0Y+iadEl0aXRZdHl0RXRldFV0dXRNdG10XXR9dEN0Y3RTVHva2QDh0446ZQLXCwAxLrsLoe7yuV0V7tc7hoXcde6OHedy+2ud3lcXpfP5XfxroAr6LQzzjpyoSvkCruou8EVcTe6ou4mV8wVd86VcCVdM9fcNXct3BOupWvlWrsn3ZPuKfeUe9o97Z5x7d2zroP7i+vonnOd3PPuefeC6+K6um7uRdfdTch1cU9IcL1db9fH9XH9XD83wA1wA91AN8gNcoku0Q1xQ9xQN9QNc8PccDfcjXTZL+1BY9w4N84luSQ30U10k9wkN9lNdlPdVJfskt0MN8PNdDNdpVkX157r5rr5br5LcSluocvYC1PdYrfYpbk0t9QtdcvdcrfSrXSr3Wq31q116916t9FtdJvdZrfVbXXb3Xa30+10u9wut9tfc3FSt8/td/vdAXfAHXRfunT3lTvkvnaH3TfuiPvWHXXfuWPuuDvhvncn3Q/ulDvtzriz7pz70Z13P7kLzrukyITIxMjbkUmRdyKTI1MiUyPTIsmR6ZEZkXcjMyOzIrMj70XmRN6PzI3Mi8yPLIikRD6ILIwsiqRGPowsjnwUSYssiSyNLIssj6yIeF9ga+gL+cI+6m/wRfyNvqi/yRfzxb3zJXxJf7Mv5W/xpf2tvoy/zZf1t/tyvryv4B/zjX0T39Q38839476Ff8K39K18a/+kb+Of8m39076df8a398/6Dv4vvqN/znfyz/vO/gXfxXf13fyLvrt/yffwPX2C7+V7+5d9H9/X9/P9/QD/ih/oX/WD/Gs+0Q/2Q/zrfqh/ww/zb/rhfoQfGfOWH5V5iQzjfZKf4Cf6t/0k/46f7Kf4qX6aT/bT/Qz/rp/pZ/nZ/j0/x7/v5/p5fr5f4FP8B36hX+RT/Yd+sf/Ip/klmTeV/Uq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3O/xO/7Hf5T/xu/0ev9d/6vf5z/x+/7k/4L/wB/2XPt1/5Q/5r/1h/40/4r/1R/13/pg/7k/47/1J/4M/5U/7M/6sP+d/9Of9T/4C/84aY4wxxtjfZcLlpvh1z8Xb+b1+Z4z4xcq9AeDqbfnTf9mfcUa5Ps/Fdl8R3yYCAM/07Pxw5lK1akJCwqV10yQEhecBZH4nKEMMXI6XQGt4CtpBKyj1u/n3FV3P0d+YP3obQI5fjMm4EsuML8//OQAm/M78jz85cmHZ8Ezc/2P+eQBFC18ek3GNlBkvgdY/319pBaX/IP+8LX6Zf+xv58/+RRJAy1+MyQmX48v5l4Qn4Flo96s1GWOMMcYYY4yxi/qKCh0zrz8zf+Lz967P49XlMdngcvy3rs8ZY4wxxhhjjDF25T3XtdvTj7dr16rjP96o/E+N+rsbjeDfNfM/08j8Pwn/Lfn8GxreA2Q+ogDgX5wQIKMh/5PPYst/ZFuJl946f921/KwP4L+jlH9G4wp/MDHGGGOMMcb+dJdP+n/9uLpSCTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY1nQf+LPiV3p58gYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xdaf8nAAD//2wV/yM=")
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})

11.527017571s ago: executing program 9 (id=2112):
r0 = socket(0x10, 0x3, 0x0)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x2, 0x5}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001200015e36bfa1000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x240448c0}, 0x40080)

11.447081433s ago: executing program 9 (id=2118):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil)

11.388730394s ago: executing program 42 (id=2118):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil)

4.362773494s ago: executing program 8 (id=2334):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffb}]})
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
close_range(r0, 0xffffffffffffffff, 0x0)

4.295418256s ago: executing program 8 (id=2337):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50afa, 0x70823}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @local}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x64}}, 0x24000800)

4.235755537s ago: executing program 8 (id=2340):
r0 = syz_io_uring_setup(0x38fe, 0x0, 0x0, 0x0, 0x0)
r1 = io_uring_setup(0x165, &(0x7f0000000180)={0x0, 0xd9eb, 0x40, 0x10000003, 0x400015f, 0x0, r0})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000580)=[@ioring_restriction_register_op={0x0, 0x1d}], 0x1)
io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, 0x0, 0x0)

4.198802918s ago: executing program 8 (id=2342):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x800012, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$eJzs3T+LI2UYAPBndpNJ7iySwkoEB7SwOm6vtckiOThMpaRQC128O5AkCHew4CkGK1sbSz+BINj5JWwEP4DgB7DzioNXJpkh2btJsoHLrX9+vyL77Lzv877POzPZPyzz7sevziZ3i7j/9Ze/R7ebxdEgBvE4i34cRS2llGJl8G0AAP9mj1OKP9PSJVMG5UsWEd3DlgYAHMje3/9/OnhJAMCBvff+B++cjkbDd4uiG7dn35yPy9/sy4/L9tP78WlM417cjF48Wf4toP5poXy9nVKat4pSP96Yzc/HZebso1+q8U/riU6iF/1FdDH/zmh4Uiyt5c/LOq5X8w/K+W9FL15umP/OaHirIT/Gebz5+lr9N6IXv34Sn8U07i6KWOV/dVIUb6fv/vriw7K8Mj+bn487i34r6fjFXRUAAAAAAAAAAAAAAAAAAAAAAP7rblR753RisX9Peajaf+f4SflJO4pa/+L+PMv8rB7oqf2B5im+T6nTihgNbxZFkaqOq/xWvNKK1tWsGgAAAAAAAAAAAAAAAAAAAP5ZHn7+aHI2nd570BD8dj1iQ9OGoN4NoH6sf0fW8aamwdqR1+LR5KyzecC1pqMq3DJpHNd9soity4lWux65v9dJ2D+4tqnmH37cd8Du7j7tbefn+QT13TU5y6KxTyfqI936mv683iePS86Vb2pKu2+/tSBvbOrtvfb8pUUw39Insm2FvfXH8sxVR7KnV5EvzmpjenttN47me6P5Wmx6pzwjW7yt8+f3xQcAAAAAAAAAAAAAAAAAALhg9dDvM03XdqQepc7BygIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAF2r1///3COZV8iU65/Hg4RUvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwMAAP//QSRWPA==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

3.913404525s ago: executing program 8 (id=2349):
r0 = socket$unix(0x1, 0x1, 0x0)
fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000000640)=ANY=[@ANYBLOB='utf8,dmask=00000000000000000000004,iocharset=cp949,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=iso8859-3,fmask=00000000000000000000000,uid=', @ANYRESHEX=r1, @ANYBLOB=',errors=remount-ro,errors=continue,allow_utime=00000000000000000200000,time_offset=0xfffffffffgffff05,\x00'], 0x4, 0x153b, &(0x7f0000001280)="$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")
chown(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00', r1, 0x0)

3.860690416s ago: executing program 6 (id=2353):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="240000005e00010004000000000000000c00100001000000000000800700"], 0x24}], 0x1}, 0x8000)

3.677285511s ago: executing program 8 (id=2357):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
wait4(r0, 0x0, 0x40000000, 0x0)
ptrace$cont(0x21, r0, 0x80000001, 0x10000004)

3.615143492s ago: executing program 43 (id=2357):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
wait4(r0, 0x0, 0x40000000, 0x0)
ptrace$cont(0x21, r0, 0x80000001, 0x10000004)

3.015494177s ago: executing program 6 (id=2372):
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40090}, 0x44000)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0)

2.903072789s ago: executing program 6 (id=2374):
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r0, r1, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x6b9f0ee1, 0x10000, 0xa07, 0x3}, 0x0, &(0x7f0000000240)={0x1f, 0x200000000000000, 0x0, 0x1, 0x6, 0x0, 0x4f5, 0xfffffffb}, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

2.571630748s ago: executing program 7 (id=2389):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x72d69b5a)

2.548889798s ago: executing program 7 (id=2380):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000008c0)=""/105, 0x69}, {&(0x7f0000000740)=""/103, 0x67}, {&(0x7f0000000b80)=""/172, 0xac}, {&(0x7f0000000500)=""/128, 0x80}, {&(0x7f0000000a80)=""/245, 0xf5}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/133, 0x85}, {&(0x7f0000000240)=""/65, 0x41}], 0x9}, 0x2}], 0x1, 0x40002002, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x200000c0}, 0x810)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="2000000010000107000000000000000003"], 0x20}}, 0x4000084)

2.4560789s ago: executing program 7 (id=2384):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xffffffffffffffb2, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)

2.382774332s ago: executing program 7 (id=2385):
mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x200c01, 0x0)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000000)=@md0, 0x0, &(0x7f0000000580)={0x9, 0xd2, 0x0, 0x2})

2.382374052s ago: executing program 7 (id=2387):
mkdir(&(0x7f00000000c0)='./bus\x00', 0x11e)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f00000002c0)='./bus\x00', &(0x7f0000000840), 0x1004051, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a)

2.337280153s ago: executing program 7 (id=2388):
mkdir(&(0x7f0000000100)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000e00)='dummy_udc.0', 0xb)

2.003172781s ago: executing program 6 (id=2391):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000004800)='net/netlink\x00')
preadv(r1, &(0x7f00000070c0)=[{&(0x7f0000006bc0)=""/190, 0xbe}, {&(0x7f0000006c80)=""/33, 0x21}, {&(0x7f0000006cc0)=""/132, 0x84}, {&(0x7f0000006d80)=""/126, 0x7e}, {&(0x7f0000006e00)=""/185, 0xb9}, {&(0x7f0000006ec0)=""/181, 0xb5}, {&(0x7f0000006f80)=""/86, 0x56}], 0x7, 0x1, 0x5)

1.903284504s ago: executing program 6 (id=2392):
setns(0xc9, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c, 0x0}}], 0x4d, 0x24000000)

1.903177754s ago: executing program 6 (id=2393):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)

1.007113645s ago: executing program 5 (id=2415):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af0ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000020000000850000007200000095"], 0x0, 0xc3d4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.004197655s ago: executing program 5 (id=2416):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

976.630356ms ago: executing program 3 (id=2417):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xff, 0x8, 0x7ffc1ffb}]})
r0 = io_uring_setup(0x2a6a, &(0x7f00000002c0)={0x0, 0xd610, 0x0, 0x1, 0x3c})
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x0, 0x1}, 0x20)

966.152076ms ago: executing program 5 (id=2418):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/ldiscs\x00', 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x89841)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x1000, {0x2a00, 0x80010000, 0x0, 0x8000000fcd, 0x0, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x4, 0x2]}})
writev(r1, &(0x7f0000007580)=[{&(0x7f00000006c0)="0e2f163a5c", 0x5}], 0x1)

883.138058ms ago: executing program 5 (id=2419):
r0 = socket$inet6(0xa, 0x80003, 0x1)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010501, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x200, 0x4, 0x6}, {0x10000000, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x1}, {{@in=@private=0x100000, 0x0, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3, 0x2, 0x3}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)

872.497849ms ago: executing program 5 (id=2420):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a00)={'veth0_virt_wifi\x00', &(0x7f00000009c0)=@ethtool_gstrings={0x1b, 0x4}})

460.220019ms ago: executing program 3 (id=2421):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r0, 0xee01, 0xee00)
keyctl$setperm(0x5, r0, 0x21081c22)
keyctl$chown(0x4, r0, 0x0, 0x0)

429.129329ms ago: executing program 5 (id=2422):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010000000000000000000a042900000000080000000014000200fe8000000000f0ff00000000000000bb140001"], 0x44}, 0x1, 0x0, 0x0, 0x24040845}, 0x44080)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)

421.62317ms ago: executing program 3 (id=2423):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
wait4(r0, 0x0, 0x80000000, 0x0)
ptrace$setsig(0x4203, r0, 0x8000000000000000, &(0x7f0000000240)={0x11, 0x800007, 0x6})

369.456081ms ago: executing program 0 (id=2424):
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4)
recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/67, 0x43}, 0x1}], 0x1, 0x40002122, 0x0)
sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4800)

369.211271ms ago: executing program 3 (id=2425):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x845c5000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0)

197.296505ms ago: executing program 0 (id=2426):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040)
read$FUSE(r0, &(0x7f0000002840)={0x2020}, 0x2020)

162.125596ms ago: executing program 0 (id=2427):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @dev={0xac, 0x14, 0x14, 0x42}, @rand_addr=0x64010101}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000300)=ANY=[@ANYBLOB="e0000002ac1414aa01"], 0x14)

134.170127ms ago: executing program 0 (id=2428):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000880)={r1, 0x0, 0x0}, 0x10)

59.178659ms ago: executing program 0 (id=2429):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x45)
write(r0, &(0x7f00000000c0)='on', 0x2)

39.057649ms ago: executing program 3 (id=2430):
r0 = timerfd_create(0x0, 0x800)
timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0)
clock_settime(0x0, &(0x7f0000000040)={0x77359400})
readv(r0, &(0x7f0000003200)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1)

3.14222ms ago: executing program 3 (id=2431):
r0 = socket(0x10, 0x803, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0)

0s ago: executing program 0 (id=2432):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14, r2, 0xba87317d461c07c9, 0x70bd23, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x722e45bb4b6430f2)

kernel console output (not intermixed with test programs):

.894745][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   81.905233][ T2892] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   81.914254][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   81.924124][ T2892] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.934735][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   81.943440][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   81.945037][ T2892] netlink: 87 bytes leftover after parsing attributes in process `syz.4.1044'.
[   81.952397][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   81.969567][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   81.978299][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   81.987030][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   81.997031][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.005686][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.014308][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.022912][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.031566][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.043853][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.052612][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.062621][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.071261][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.079787][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.081960][ T2542] EXT4-fs (loop4): unmounting filesystem.
[   82.088620][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.109440][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.118098][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.137877][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.158255][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.185896][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.211894][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.224737][ T2916] xt_hashlimit: size too large, truncated to 1048576
[   82.245885][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.262117][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.271037][ T2922] netlink: 'syz.7.1059': attribute type 15 has an invalid length.
[   82.297744][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.322716][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.347563][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.360270][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.370167][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.420083][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.471045][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.480868][ T2944] set_capacity_and_notify: 16 callbacks suppressed
[   82.480884][ T2944] loop7: detected capacity change from 0 to 2048
[   82.504154][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.513207][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.531551][ T2944]  loop7: p3 < > p4 < >
[   82.534497][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.541249][ T2944] loop7: partition table partially beyond EOD, truncated
[   82.545593][ T2952] loop4: detected capacity change from 0 to 256
[   82.557996][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.574306][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.592953][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.601470][ T2944] loop7: p3 start 4284289 is beyond EOD, truncated
[   82.601663][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.616606][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.626487][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.635227][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.647286][  T103]  loop7: p3 < > p4 < >
[   82.651782][  T103] loop7: partition table partially beyond EOD, truncated
[   82.653618][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.658905][  T103] loop7: p3 start 4284289 is beyond EOD, 
[   82.670634][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.685088][  T103] truncated
[   82.685437][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.701592][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.710098][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.718795][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.732832][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.752862][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.777440][  T310] udevd[310]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[   82.782730][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.807586][ T2964] loop4: detected capacity change from 0 to 256
[   82.820844][ T2962] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.828085][ T2962] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.853356][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.864794][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.873690][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.935607][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.948300][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   82.959789][ T2871] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   83.027347][ T2983] SELinux: failed to load policy
[   83.035970][ T2985] loop7: detected capacity change from 0 to 128
[   83.052643][ T2985] EXT4-fs: Ignoring removed nobh option
[   83.068370][ T2985] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[   83.077512][ T2985] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   83.128530][ T2985] fscrypt (loop7, inode 12): Reserved bits set in encryption policy
[   83.181813][ T1784] EXT4-fs (loop7): unmounting filesystem.
[   83.216749][ T3007] loop4: detected capacity change from 0 to 512
[   83.241074][ T3007] EXT4-fs: Ignoring removed nomblk_io_submit option
[   83.255191][ T3009] loop7: detected capacity change from 0 to 256
[   83.289782][ T3007] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   83.308442][ T3009] FAT-fs (loop7): Directory bread(block 64) failed
[   83.315131][ T3009] FAT-fs (loop7): Directory bread(block 65) failed
[   83.322080][ T3009] FAT-fs (loop7): Directory bread(block 66) failed
[   83.328990][ T3009] FAT-fs (loop7): Directory bread(block 67) failed
[   83.336075][ T3009] FAT-fs (loop7): Directory bread(block 68) failed
[   83.338236][ T3007] EXT4-fs (loop4): 1 truncate cleaned up
[   83.348790][ T3009] FAT-fs (loop7): Directory bread(block 69) failed
[   83.356778][ T3017] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1107'.
[   83.365146][ T3007] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   83.371288][ T3009] FAT-fs (loop7): Directory bread(block 70) failed
[   83.397791][ T3009] FAT-fs (loop7): Directory bread(block 71) failed
[   83.410423][ T3009] FAT-fs (loop7): Directory bread(block 72) failed
[   83.417773][ T3009] FAT-fs (loop7): Directory bread(block 73) failed
[   83.427919][ T3019] loop9: detected capacity change from 0 to 1024
[   83.430579][ T3021] loop3: detected capacity change from 0 to 1024
[   83.439100][ T3007] EXT4-fs (loop4): re-mounted. Quota mode: none.
[   83.447557][ T3019] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   83.459401][ T3021] EXT4-fs: Ignoring removed bh option
[   83.464923][ T3021] EXT4-fs: Ignoring removed bh option
[   83.479941][ T3019] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[   83.516565][ T2194] EXT4-fs (loop9): unmounting filesystem.
[   83.521448][ T2542] EXT4-fs (loop4): unmounting filesystem.
[   83.528727][ T3021] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   83.548444][ T3021] EXT4-fs error (device loop3): ext4_check_all_de:666: inode #12: block 7: comm syz.3.1098: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[   83.569759][ T3021] EXT4-fs (loop3): Remounting filesystem read-only
[   83.581194][ T1993] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   83.593763][  T288] EXT4-fs (loop3): unmounting filesystem.
[   83.650341][ T3043] netlink: 27 bytes leftover after parsing attributes in process `syz.7.1108'.
[   83.762688][ T1993] usb 6-1: unable to get BOS descriptor or descriptor too short
[   83.776238][ T1993] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   83.801194][ T1993] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   83.830487][ T1993] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[   83.861173][ T1993] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[   83.901170][ T1993] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   83.932417][ T1993] usb 6-1: config 1 interface 1 has no altsetting 0
[   83.948807][ T1993] usb 6-1: string descriptor 0 read error: -22
[   83.955168][ T1993] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[   83.964261][ T1993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.035717][ T3066] loop9: detected capacity change from 0 to 256
[   84.046343][ T3066] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   84.486393][ T3045] loop3: detected capacity change from 0 to 131072
[   84.511697][ T3045] F2FS-fs (loop3): Invalid log sectors per block(570425347) log sectorsize(9)
[   84.546748][ T3045] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[   84.565686][ T3045] F2FS-fs (loop3): invalid crc value
[   84.596254][ T3045] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[   84.643169][ T3045] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=90000000, run fsck to fix.
[   84.663173][ T3045] F2FS-fs (loop3): Bad quota inode 1:2415919104
[   84.669459][ T3045] F2FS-fs (loop3): Failed to enable quota tracking (type=1, err=-22). Please run fsck to fix.
[   84.699693][ T3054] F2FS-fs (loop4): Invalid segment/section count (458783, 24 x 150994945)
[   84.718435][ T3045] F2FS-fs (loop3): Cannot turn on quotas: error -22
[   84.725415][ T3054] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   84.735163][ T3054] F2FS-fs (loop4): invalid crc value
[   84.742079][ T3045] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[   84.749425][ T3045] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b
[   84.758660][ T3054] F2FS-fs (loop4): Found nat_bits in checkpoint
[   84.788818][ T1993] usb 6-1: 2:0: failed to get current value for ch 1 (-71)
[   84.814946][ T1993] usb 6-1: USB disconnect, device number 5
[   84.842457][ T3054] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   84.859699][ T3054] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   84.973934][ T3054] F2FS-fs (loop4): sanity_check_inode: inode (ino=4, mode=16877) should not have inline_data, run fsck to fix
[   85.146621][ T3045] F2FS-fs (loop3): QUOTA feature is enabled, so ignore qf_name
[   85.164405][ T3045] F2FS-fs (loop3): QUOTA feature is enabled, so ignore jquota_fmt
[   85.182542][ T3045] F2FS-fs (loop3): Start checkpoint disabled!
[   85.201760][ T3045] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[   85.400907][ T3093] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d)
[   85.407634][ T3097] bridge0: port 3(vlan2) entered blocking state
[   85.455457][ T3097] bridge0: port 3(vlan2) entered disabled state
[   85.540394][   T19] smpboot: CPU 1 is now offline
[   85.811672][ T3133] bridge0: port 3(syz_tun) entered blocking state
[   85.834540][ T3133] bridge0: port 3(syz_tun) entered disabled state
[   85.870816][ T3133] device syz_tun entered promiscuous mode
[   85.947711][ T3140] overlayfs: filesystem on './bus' not supported
[   86.001270][ T1993] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   86.050309][   T28] kauditd_printk_skb: 7 callbacks suppressed
[   86.050319][   T28] audit: type=1400 audit(1785088281.366:398): avc:  denied  { read write } for  pid=3149 comm="syz.9.1152" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   86.100184][ T3120] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[   86.148168][ T3120] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   86.221193][ T1993] usb 8-1: Using ep0 maxpacket: 16
[   86.231232][ T3120] F2FS-fs (loop5): Found nat_bits in checkpoint
[   86.244763][ T1993] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[   86.254039][   T28] audit: type=1400 audit(1785088281.406:399): avc:  denied  { open } for  pid=3149 comm="syz.9.1152" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   86.307555][ T1993] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.346057][ T1993] usb 8-1: config 0 descriptor??
[   86.365243][ T3120] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[   86.383849][ T1993] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected
[   86.396604][   T28] audit: type=1400 audit(1785088281.406:400): avc:  denied  { ioctl } for  pid=3149 comm="syz.9.1152" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   86.433906][ T3181] 
[   86.440401][ T3120] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   86.493724][ T3178] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[   86.570481][ T3178] EXT4-fs error (device loop9): ext4_find_extent:900: inode #2: comm syz.9.1163: inode has invalid extent depth: 8
[   86.584966][ T1993] usb 8-1: Detected FT232B
[   86.611428][   T28] audit: type=1400 audit(1785088281.756:401): avc:  denied  { write } for  pid=3179 comm="syz.3.1165" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1
[   86.705699][ T3178] EXT4-fs (loop9): Remounting filesystem read-only
[   86.721811][ T3200] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   86.750589][ T3204] EXT4-fs error (device loop9): ext4_find_extent:900: inode #2: comm syz.9.1163: inode has invalid extent depth: 8
[   86.782581][ T3200] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #12: block 2: comm syz.3.1173: lblock 0 mapped to illegal pblock 2 (length 1)
[   86.797058][ T1993] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[   86.803893][   T28] audit: type=1400 audit(1785088281.926:402): avc:  denied  { setopt } for  pid=3195 comm="syz.3.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   86.827353][ T1993] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   86.848286][ T3204] EXT4-fs (loop9): Remounting filesystem read-only
[   86.883276][  T288] EXT4-fs (loop3): unmounting filesystem.
[   86.895774][   T28] audit: type=1400 audit(1785088282.106:403): avc:  denied  { read } for  pid=3199 comm="syz.3.1173" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[   86.932081][ T2194] EXT4-fs (loop9): unmounting filesystem.
[   86.960677][ T3210] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1176'.
[   87.012095][ T3210] netlink: 'syz.3.1176': attribute type 1 has an invalid length.
[   87.050445][   T28] audit: type=1400 audit(1785088282.326:404): avc:  denied  { write } for  pid=3213 comm="syz.9.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   87.070089][ T1993] usb 8-1: USB disconnect, device number 4
[   87.076667][ T3216] bridge0: port 3(syz_tun) entered blocking state
[   87.084990][ T3210] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1176'.
[   87.102142][ T1993] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   87.111827][ T3216] bridge0: port 3(syz_tun) entered disabled state
[   87.118548][ T3216] device syz_tun entered promiscuous mode
[   87.131212][ T3210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'.
[   87.141679][ T1993] ftdi_sio 8-1:0.0: device disconnected
[   87.150614][ T3216] bridge0: port 3(syz_tun) entered blocking state
[   87.157092][ T3216] bridge0: port 3(syz_tun) entered forwarding state
[   87.164635][ T3120] syz.5.1139: attempt to access beyond end of device
[   87.164635][ T3120] loop5: rw=2049, sector=77824, nr_sectors = 2080 limit=40427
[   87.234307][ T3222] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   87.245226][ T3120] syz.5.1139: attempt to access beyond end of device
[   87.245226][ T3120] loop5: rw=2049, sector=79904, nr_sectors = 2016 limit=40427
[   87.285887][   T28] audit: type=1400 audit(1785088282.606:405): avc:  denied  { map } for  pid=3221 comm="syz.3.1181" path="/288/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   87.322168][  T288] EXT4-fs (loop3): unmounting filesystem.
[   87.374373][ T3120] syz.5.1139: attempt to access beyond end of device
[   87.374373][ T3120] loop5: rw=2049, sector=49152, nr_sectors = 2224 limit=40427
[   87.460558][ T3120] syz.5.1139: attempt to access beyond end of device
[   87.460558][ T3120] loop5: rw=2049, sector=51376, nr_sectors = 1872 limit=40427
[   87.513568][ T3120] syz.5.1139: attempt to access beyond end of device
[   87.513568][ T3120] loop5: rw=2049, sector=57344, nr_sectors = 2152 limit=40427
[   87.572911][ T3120] syz.5.1139: attempt to access beyond end of device
[   87.572911][ T3120] loop5: rw=2049, sector=59496, nr_sectors = 2368 limit=40427
[   87.599266][ T3227] set_capacity_and_notify: 8 callbacks suppressed
[   87.599281][ T3227] loop9: detected capacity change from 0 to 40427
[   87.618067][ T3243] loop4: detected capacity change from 0 to 256
[   87.674244][   T28] audit: type=1400 audit(1785088282.996:406): avc:  denied  { ioctl } for  pid=3247 comm="syz.4.1193" path="socket:[29139]" dev="sockfs" ino=29139 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   87.704976][ T3227] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[   87.712881][ T1993] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   87.723126][ T3120] syz.5.1139: attempt to access beyond end of device
[   87.723126][ T3120] loop5: rw=2049, sector=61864, nr_sectors = 2360 limit=40427
[   87.769486][ T3227] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[   87.808332][ T3120] syz.5.1139: attempt to access beyond end of device
[   87.808332][ T3120] loop5: rw=2049, sector=64224, nr_sectors = 2232 limit=40427
[   87.827793][ T3227] F2FS-fs (loop9): invalid crc value
[   87.871988][ T3227] F2FS-fs (loop9): Found nat_bits in checkpoint
[   87.921191][ T1993] usb 4-1: Using ep0 maxpacket: 16
[   87.930492][ T3120] syz.5.1139: attempt to access beyond end of device
[   87.930492][ T3120] loop5: rw=2049, sector=66456, nr_sectors = 3856 limit=40427
[   87.952541][ T1993] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   87.985784][ T1993] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[   87.995965][ T3272] loop4: detected capacity change from 0 to 2048
[   88.002522][ T3227] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[   88.037179][ T3227] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[   88.046098][ T1993] usb 4-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40
[   88.058669][ T3272] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   88.068912][ T3120] syz.5.1139: attempt to access beyond end of device
[   88.068912][ T3120] loop5: rw=2049, sector=70312, nr_sectors = 7512 limit=40427
[   88.089410][ T3272] EXT4-fs error (device loop4): ext4_find_extent:900: inode #2: comm syz.4.1203: inode has invalid extent depth: 8
[   88.106143][ T1993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.134516][ T1993] usb 4-1: Product: syz
[   88.138706][ T1993] usb 4-1: Manufacturer: syz
[   88.151743][ T3272] EXT4-fs (loop4): Remounting filesystem read-only
[   88.171223][ T1993] usb 4-1: SerialNumber: syz
[   88.179660][ T3277] EXT4-fs error (device loop4): ext4_find_extent:900: inode #2: comm syz.4.1203: inode has invalid extent depth: 8
[   88.242553][ T3277] EXT4-fs (loop4): Remounting filesystem read-only
[   88.290267][ T2542] EXT4-fs (loop4): unmounting filesystem.
[   88.351921][ T3281] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3281 comm=syz.4.1206
[   88.405596][ T3238] netlink: 79 bytes leftover after parsing attributes in process `syz.3.1188'.
[   88.470595][ T1993] usb 4-1: USB disconnect, device number 6
[   88.598356][ T3296] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1212'.
[   88.726600][ T3289] loop5: detected capacity change from 0 to 40427
[   88.741210][  T796] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   88.755754][ T3302] can0: slcan on ptm0.
[   88.774230][ T3289] F2FS-fs (loop5): Invalid SB checksum offset: 0
[   88.796572][ T3292] loop9: detected capacity change from 0 to 40427
[   88.809673][ T3289] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[   88.831383][ T3301] can0 (unregistered): slcan off ptm0.
[   88.837299][ T3292] F2FS-fs (loop9): Corrupted extension count (64 + 1 > 64)
[   88.845251][ T3289] F2FS-fs (loop5): invalid crc value
[   88.867886][ T3289] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   88.879075][ T3292] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[   88.915984][ T3292] F2FS-fs (loop9): Image doesn't support compression
[   88.933240][  T796] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   88.961908][ T3292] F2FS-fs (loop9): Image doesn't support compression
[   88.969894][  T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.982827][ T3289] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[   89.013016][ T3327] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1219'.
[   89.038669][ T3292] F2FS-fs (loop9): invalid crc value
[   89.044899][ T3329] loop7: detected capacity change from 0 to 128
[   89.052816][  T796] usb 5-1: config 0 descriptor??
[   89.057854][ T3289] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   89.068418][ T3292] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   89.118929][ T3329] EXT4-fs (loop7): Test dummy encryption mode enabled
[   89.201973][ T3329] ext4 filesystem being mounted at /141/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   89.255374][ T3292] F2FS-fs (loop9): Start checkpoint disabled!
[   89.293120][ T3292] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0
[   89.341709][ T3292] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[   89.414695][ T3292] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[   89.471524][  T796] usb 5-1: Cannot set MAC address
[   89.486765][  T796] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71
[   89.518024][  T796] usb 5-1: USB disconnect, device number 2
[   89.770240][ T3391] loop3: detected capacity change from 0 to 256
[   89.965092][ T3417] loop9: detected capacity change from 0 to 512
[   89.997884][ T3417] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   90.037633][   T28] audit: type=1400 audit(1785088285.356:407): avc:  denied  { bind } for  pid=3420 comm="syz.4.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   90.078208][ T3417] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.1252: invalid indirect mapped block 256 (level 2)
[   90.123927][ T3417] EXT4-fs (loop9): 2 truncates cleaned up
[   90.388265][ T3456] loop5: detected capacity change from 0 to 512
[   90.442142][ T3463] input: syz1 as /devices/virtual/input/input8
[   90.457010][ T3456] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   90.542070][ T3456] EXT4-fs (loop5): 1 truncate cleaned up
[   90.550130][ T3476] loop4: detected capacity change from 0 to 512
[   90.608331][ T3476] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   90.687504][ T3476] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.755986][ T3476] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.1278: corrupted xattr block 32
[   90.812312][ T3476] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[   90.871289][ T3476] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.1278: corrupted xattr block 32
[   90.936508][ T3476] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[   90.962129][ T3472] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   91.000915][ T3508] EXT4-fs: Ignoring removed orlov option
[   91.008096][ T3476] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.1278: corrupted xattr block 32
[   91.032364][ T3472] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   91.071601][ T3472] F2FS-fs (loop3): invalid crc value
[   91.077492][ T3476] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[   91.089879][ T3508] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   91.090475][   T28] kauditd_printk_skb: 3 callbacks suppressed
[   91.090482][   T28] audit: type=1400 audit(1785088286.416:411): avc:  denied  { create } for  pid=3507 comm="syz.7.1292" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[   91.208077][ T3472] F2FS-fs (loop3): Found nat_bits in checkpoint
[   91.319503][ T3476] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.1278: corrupted xattr block 32
[   91.356364][ T3520] xt_hashlimit: size too large, truncated to 1048576
[   91.381335][ T3476] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[   91.408413][ T3476] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.1278: corrupted xattr block 32
[   91.461367][ T3476] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[   91.721283][ T3472] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   91.741380][ T3472] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   92.154872][ T3513] F2FS-fs (loop5): invalid crc value
[   92.169241][ T3560] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   92.197262][ T3513] F2FS-fs (loop5): Found nat_bits in checkpoint
[   92.216216][ T3560] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.1313: bad orphan inode 13
[   92.237245][ T3560] ext4_test_bit(bit=12, block=18) = 1
[   92.247011][ T3513] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[   92.254586][ T3560] is_bad_inode(inode)=0
[   92.262391][ T3560] NEXT_ORPHAN(inode)=0
[   92.286872][ T3560] max_ino=32
[   92.297195][ T3513] F2FS-fs (loop5): Corrupted max_depth of 3: 16842753
[   92.304189][ T3560] i_nlink=1
[   92.323434][ T3560] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   92.358477][ T3549] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[   92.379632][ T3560] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1313: bg 0: block 248: padding at end of block bitmap is not set
[   92.407659][ T3549] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[   92.420464][ T3560] Quota error (device loop3): write_blk: dquota write failed
[   92.434508][ T3560] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[   92.447279][ T3549] F2FS-fs (loop7): invalid crc value
[   92.475018][ T3560] EXT4-fs error (device loop3): ext4_acquire_dquot:6828: comm syz.3.1313: Failed to acquire dquot type 1
[   92.531829][ T3549] F2FS-fs (loop7): Found nat_bits in checkpoint
[   92.591290][ T3560] syz.3.1313 (3560) used greatest stack depth: 20960 bytes left
[   92.709797][ T3549] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[   92.763595][ T3549] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   92.897411][   T28] audit: type=1400 audit(1785088288.216:412): avc:  denied  { create } for  pid=3547 comm="syz.7.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   93.023575][   T28] audit: type=1400 audit(1785088288.346:413): avc:  denied  { connect } for  pid=3606 comm="syz.4.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   93.062207][ T3609] netlink: 'syz.3.1331': attribute type 11 has an invalid length.
[   93.120695][ T3609] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1331'.
[   93.132284][ T3613] set_capacity_and_notify: 6 callbacks suppressed
[   93.132297][ T3613] loop4: detected capacity change from 0 to 512
[   93.178595][ T3615] loop9: detected capacity change from 0 to 256
[   93.210861][ T3617] input: syz1 as /devices/virtual/input/input9
[   93.226207][ T3613] EXT4-fs error (device loop4): ext4_iget_extra_inode:4765: inode #15: comm syz.4.1333: corrupted in-inode xattr
[   93.282251][   T28] audit: type=1326 audit(1785088288.606:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3621 comm="syz.9.1336" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42079de99 code=0x7ffc0000
[   93.322122][ T3613] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1333: couldn't read orphan inode 15 (err -117)
[   93.370141][ T3628] loop3: detected capacity change from 0 to 512
[   93.428382][ T3628] EXT4-fs (loop3): Test dummy encryption mode enabled
[   93.465208][   T28] audit: type=1326 audit(1785088288.636:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3621 comm="syz.9.1336" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42079de99 code=0x7ffc0000
[   93.507011][ T3605] loop5: detected capacity change from 0 to 40427
[   93.514387][ T3628] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.1338: inode has both inline data and extents flags
[   95.358303][ T3605] F2FS-fs (loop5): invalid crc value
[   95.364597][ T3628] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.1338: couldn't read orphan inode 15 (err -117)
[   96.353277][ T3605] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-4)
[   96.372657][   T28] audit: type=1326 audit(1785088288.636:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3621 comm="syz.9.1336" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42079de99 code=0x7ffc0000
[   97.354121][ T3628] EXT4-fs mount: 14 callbacks suppressed
[   97.354134][ T3628] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   97.429999][ T3643] device ip6gre1 entered promiscuous mode
[   97.459496][  T288] EXT4-fs (loop3): unmounting filesystem.
[   97.482685][   T28] audit: type=1326 audit(1785088288.636:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3621 comm="syz.9.1336" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42079de99 code=0x7ffc0000
[   97.652939][   T28] audit: type=1326 audit(1785088288.636:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3621 comm="syz.9.1336" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fd42079de99 code=0x7ffc0000
[   97.838805][ T3687] IPv6: Can't replace route, no match found
[   97.867645][   T28] audit: type=1326 audit(1785088288.636:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3621 comm="syz.9.1336" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42079de99 code=0x7ffc0000
[   97.934985][ T3696] loop7: detected capacity change from 0 to 512
[   98.004455][ T3696] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   98.036462][   T28] audit: type=1326 audit(1785088288.636:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3621 comm="syz.9.1336" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42079de99 code=0x7ffc0000
[   98.107258][ T3714] loop4: detected capacity change from 0 to 1024
[   98.119787][ T3696] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[   98.153318][ T3714] EXT4-fs (loop4): Test dummy encryption mode enabled
[   98.188010][   T28] audit: type=1326 audit(1785088288.636:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3621 comm="syz.9.1336" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42079de99 code=0x7ffc0000
[   98.214836][ T3714] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   98.226103][ T3696] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   98.293913][ T2542] EXT4-fs (loop4): unmounting filesystem.
[   98.358172][   T28] audit: type=1326 audit(1785088288.636:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3621 comm="syz.9.1336" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42079de99 code=0x7ffc0000
[   98.403904][ T1784] EXT4-fs (loop7): unmounting filesystem.
[   98.510192][ T3756] loop4: detected capacity change from 0 to 128
[   98.531340][   T28] audit: type=1326 audit(1785088288.636:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3621 comm="syz.9.1336" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fd42079de99 code=0x7ffc0000
[   98.579081][ T3756] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   98.645317][ T3756] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   98.675014][   T28] audit: type=1326 audit(1785088288.636:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3621 comm="syz.9.1336" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42079de99 code=0x7ffc0000
[   98.736047][ T3767] loop3: detected capacity change from 0 to 2048
[   98.772353][   T10] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   98.822369][ T3767] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   98.822417][ T3767] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.826356][ T3767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1403'.
[   98.826440][ T3767] syz_tun: refused to change device tx_queue_len
[   98.851930][  T288] EXT4-fs (loop3): unmounting filesystem.
[   98.890261][   T28] audit: type=1326 audit(1785088288.636:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3621 comm="syz.9.1336" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42079de99 code=0x7ffc0000
[   99.228270][ T3797] netlink: 8964 bytes leftover after parsing attributes in process `syz.9.1415'.
[   99.228312][ T3797] netlink: 2 bytes leftover after parsing attributes in process `syz.9.1415'.
[   99.238461][ T3795] loop5: detected capacity change from 0 to 4096
[   99.248048][ T3779] loop3: detected capacity change from 0 to 40427
[   99.253407][ T3779] F2FS-fs (loop3): heap/no_heap options were deprecated
[   99.261059][ T3795] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   99.261078][ T3795] EXT4-fs (loop5): Test dummy encryption mode enabled
[   99.266388][ T3795] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802c1a8, mo2=0003]
[   99.266425][ T3795] System zones: 0-5
[   99.267316][ T3779] F2FS-fs (loop3): Found nat_bits in checkpoint
[   99.275524][ T3795] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   99.282711][ T3795] fscrypt: AES-256-XTS using blk-crypto-fallback
[   99.303667][ T3795] EXT4-fs (loop5): re-mounted. Quota mode: writeback.
[   99.314185][ T3779] F2FS-fs (loop3): Start checkpoint disabled!
[   99.314859][ T3779] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[   99.323853][  T765] EXT4-fs (loop5): unmounting filesystem.
[   99.324599][ T3779] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   99.444313][  T288] bio_check_eod: 7 callbacks suppressed
[   99.444328][  T288] syz-executor: attempt to access beyond end of device
[   99.444328][  T288] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[   99.444368][  T288] syz-executor: attempt to access beyond end of device
[   99.444368][  T288] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427
[   99.494983][   T43] kworker/u4:2: attempt to access beyond end of device
[   99.494983][   T43] loop3: rw=2049, sector=40960, nr_sectors = 72 limit=40427
[   99.496339][ T1028] device syz_tun left promiscuous mode
[   99.496351][ T1028] bridge0: port 3(syz_tun) entered disabled state
[   99.578963][ T3826] loop5: detected capacity change from 0 to 2048
[   99.608158][ T3826] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   99.608209][ T3826] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.635897][  T765] EXT4-fs (loop5): unmounting filesystem.
[   99.812120][   T43] device bridge_slave_1 left promiscuous mode
[   99.812158][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.812359][   T43] device bridge_slave_0 left promiscuous mode
[   99.812403][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.039135][ T3846] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.039150][ T3846] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.039371][ T3846] device bridge_slave_0 entered promiscuous mode
[  100.051954][ T3846] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.051971][ T3846] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.052227][ T3846] device bridge_slave_1 entered promiscuous mode
[  100.163100][ T3846] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.163118][ T3846] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.163166][ T3846] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.163174][ T3846] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.198309][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  100.198536][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.198677][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.200135][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  100.200232][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.200242][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.201459][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  100.201563][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.201572][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.220664][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  100.222716][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  100.250334][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  100.260961][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  100.261315][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  100.261461][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  100.262142][ T3846] device veth0_vlan entered promiscuous mode
[  100.265317][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  100.266218][ T3846] device veth1_macvtap entered promiscuous mode
[  100.270416][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  100.272103][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  101.011158][    T6] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  101.196778][    T6] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 80, changing to 7
[  101.198040][    T6] usb 6-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40
[  101.198059][    T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.198070][    T6] usb 6-1: Product: syz
[  101.198078][    T6] usb 6-1: Manufacturer: syz
[  101.198086][    T6] usb 6-1: SerialNumber: syz
[  101.568469][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  101.568480][   T28] audit: type=1400 audit(1785088296.886:434): avc:  denied  { bind } for  pid=3914 comm="syz.2.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  101.593640][    T6] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  101.593931][    T6] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  101.596954][    T6] usb 6-1: USB disconnect, device number 6
[  101.681499][ T3790] tty tty28: ldisc open failed (-12), clearing slot 27
[  101.733403][ T3928] loop9: detected capacity change from 0 to 16
[  101.766606][ T3928] erofs: (device loop9): mounted with root inode @ nid 36.
[  101.782796][ T3930] netlink: 'syz.7.1470': attribute type 9 has an invalid length.
[  101.791990][  T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  101.889921][ T3939] loop7: detected capacity change from 0 to 256
[  102.042636][   T28] audit: type=1400 audit(1785088297.366:435): avc:  denied  { bind } for  pid=3948 comm="syz.7.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  102.319275][ T2542] bridge0: port 3(syz_tun) entered disabled state
[  102.351714][ T2542] device syz_tun left promiscuous mode
[  102.372508][ T2542] bridge0: port 3(syz_tun) entered disabled state
[  102.379320][ T3978] loop7: detected capacity change from 0 to 256
[  102.420928][ T3978] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d)
[  102.593965][ T3991] loop7: detected capacity change from 0 to 512
[  102.658692][ T3991] EXT4-fs: Ignoring removed nobh option
[  102.706391][ T3991] EXT4-fs (loop7): orphan cleanup on readonly fs
[  102.721685][    T8] device bridge_slave_1 left promiscuous mode
[  102.727833][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.778306][ T3991] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #11: block 1: comm syz.7.1499: lblock 0 mapped to illegal pblock 1 (length 1)
[  102.792856][    T8] device bridge_slave_0 left promiscuous mode
[  102.798951][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.826867][    T8] device veth1_macvtap left promiscuous mode
[  102.844759][    T8] device veth0_vlan left promiscuous mode
[  102.853900][ T3991] EXT4-fs (loop7): Remounting filesystem read-only
[  102.868153][ T3987] loop2: detected capacity change from 0 to 40427
[  102.893436][ T3991] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  102.914071][ T3987] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  102.947157][ T3987] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  102.966425][ T3987] F2FS-fs (loop2): invalid crc value
[  102.978438][ T3991] EXT4-fs error (device loop7): ext4_xattr_inode_update_ref:984: inode #11: comm syz.7.1499: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  102.998255][ T3987] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  103.031200][ T3987] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  103.040016][ T3991] EXT4-fs (loop7): Remounting filesystem read-only
[  103.049996][ T4005] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1507'.
[  103.064411][ T3987] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  103.076748][ T3991] EXT4-fs warning (device loop7): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.7.1499: ea_inode dec ref err=-117
[  103.156430][ T4019] device lo entered promiscuous mode
[  103.183448][ T4001] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.213441][ T3991] EXT4-fs (loop7): 1 orphan inode deleted
[  103.231719][ T4001] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.241715][ T4023] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2
[  103.257138][ T3991] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  103.267094][ T4001] device bridge_slave_0 entered promiscuous mode
[  103.273925][ T3846] syz-executor: attempt to access beyond end of device
[  103.273925][ T3846] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  103.288129][ T4023] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2
[  103.297277][ T4016] device lo left promiscuous mode
[  103.305033][ T4001] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.330685][ T4023] EXT4-fs (loop9): 1 truncate cleaned up
[  103.339704][ T4001] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.360604][ T4023] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  103.376064][ T4001] device bridge_slave_1 entered promiscuous mode
[  103.394244][ T1784] EXT4-fs (loop7): unmounting filesystem.
[  103.434479][ T4023] EXT4-fs (loop9): re-mounted. Quota mode: writeback.
[  103.521634][ T2194] EXT4-fs (loop9): unmounting filesystem.
[  103.577726][   T28] audit: type=1400 audit(1785088298.896:436): avc:  denied  { append } for  pid=4042 comm="syz.2.1522" name="file0" dev="tmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  103.680877][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  103.720417][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  103.733841][ T4060] set_capacity_and_notify: 1 callbacks suppressed
[  103.733855][ T4060] loop2: detected capacity change from 0 to 512
[  103.771640][ T4062] netlink: 'syz.5.1529': attribute type 12 has an invalid length.
[  103.779481][ T4062] netlink: 'syz.5.1529': attribute type 29 has an invalid length.
[  103.807768][ T4060] EXT4-fs: Ignoring removed mblk_io_submit option
[  103.828355][ T4062] netlink: 'syz.5.1529': attribute type 7 has an invalid length.
[  103.846797][ T4062] netlink: 'syz.5.1529': attribute type 37 has an invalid length.
[  103.865493][ T4060] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  103.881281][ T4062] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1529'.
[  103.890369][ T4060] ext4 filesystem being mounted at /10/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.922085][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  103.951644][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  103.970417][    T6] kernel write not supported for file /uhid (pid: 6 comm: kworker/0:0)
[  103.980397][ T3846] EXT4-fs (loop2): unmounting filesystem.
[  103.987692][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  104.023738][ T4070] loop2: detected capacity change from 0 to 512
[  104.040470][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.047543][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.066186][ T4070] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  104.092056][ T4070] EXT4-fs (loop2): invalid journal inode
[  104.101370][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  104.131445][ T4070] EXT4-fs (loop2): can't get journal size
[  104.139675][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  104.160697][ T4070] EXT4-fs (loop2): 1 truncate cleaned up
[  104.168686][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.175755][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.183783][ T4070] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  104.233723][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  104.243014][ T3846] EXT4-fs (loop2): unmounting filesystem.
[  104.256554][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  104.295498][ T4001] device veth0_vlan entered promiscuous mode
[  104.308599][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  104.341537][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  104.363131][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  104.390847][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  104.411062][ T4091] syzkaller1: tun_chr_ioctl cmd 1074025692
[  104.432009][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  104.449300][ T4001] device veth1_macvtap entered promiscuous mode
[  104.491690][   T28] audit: type=1400 audit(1785088299.816:437): avc:  denied  { mount } for  pid=4097 comm="syz.9.1542" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  104.517144][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  104.555478][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  104.600565][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  104.631669][   T28] audit: type=1400 audit(1785088299.856:438): avc:  denied  { mounton } for  pid=4097 comm="syz.9.1542" path="/157/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  104.676197][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  104.770380][ T4126] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  104.783530][   T28] audit: type=1400 audit(1785088299.866:439): avc:  denied  { unmount } for  pid=2194 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  104.892544][   T28] audit: type=1400 audit(1785088300.086:440): avc:  denied  { map } for  pid=4125 comm="syz.5.1554" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  104.955814][ T4147] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  104.965105][ T4148] loop1: detected capacity change from 0 to 256
[  104.993411][ T4148] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  105.027790][ T4152] netlink: 8964 bytes leftover after parsing attributes in process `syz.5.1565'.
[  105.042604][   T28] audit: type=1400 audit(1785088300.166:441): avc:  denied  { getopt } for  pid=4132 comm="syz.9.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  105.086818][ T4152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1565'.
[  105.197533][ T4160] loop1: detected capacity change from 0 to 4096
[  105.232247][ T4160] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  105.303275][ T4160] EXT4-fs error (device loop1): ext4_empty_dir:3154: inode #12: block 80: comm syz.1.1569: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[  105.400030][ T4160] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz.1.1569: directory missing '..'
[  105.489024][ T4001] EXT4-fs (loop1): unmounting filesystem.
[  105.511615][ T4192] tipc: Started in network mode
[  105.516496][ T4192] tipc: Node identity ff07, cluster identity 4711
[  105.569178][ T4198] loop2: detected capacity change from 0 to 512
[  105.587085][ T4192] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  105.629685][ T4198] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.1586: inode has both inline data and extents flags
[  105.653283][ T4203] bridge0: port 3(syz_tun) entered blocking state
[  105.690708][ T4198] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1586: couldn't read orphan inode 15 (err -117)
[  105.703172][ T4203] bridge0: port 3(syz_tun) entered disabled state
[  105.740264][ T4198] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  105.749979][ T4203] device syz_tun entered promiscuous mode
[  105.781712][ T4206] netlink: 'syz.5.1589': attribute type 12 has an invalid length.
[  105.829512][ T4206] netlink: 'syz.5.1589': attribute type 29 has an invalid length.
[  105.839712][ T3846] EXT4-fs (loop2): unmounting filesystem.
[  105.851466][ T4222] loop7: detected capacity change from 0 to 256
[  105.871696][ T4206] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1589'.
[  105.904048][ T4222] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  105.922589][ T4206] netlink: 59 bytes leftover after parsing attributes in process `syz.5.1589'.
[  106.033077][   T28] audit: type=1400 audit(1785088301.324:442): avc:  denied  { map } for  pid=4221 comm="syz.7.1596" path="/190/file2/file1" dev="loop7" ino=1048711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  106.058052][ T4222] exFAT-fs (loop7): invalid start cluster (17)
[  106.198366][   T28] audit: type=1400 audit(1785088301.436:443): avc:  denied  { write } for  pid=4253 comm="syz.9.1608" name="file2" dev="tmpfs" ino=905 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  106.234994][ T4258] loop7: detected capacity change from 0 to 512
[  106.311739][ T4258] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  106.427819][ T4258] EXT4-fs (loop7): 1 truncate cleaned up
[  106.476967][ T4258] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  106.556469][ T1784] EXT4-fs (loop7): unmounting filesystem.
[  106.804283][    T6] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  106.996591][  T796] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  107.008173][    T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  107.038107][    T6] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  107.065826][ T4329] loop1: detected capacity change from 0 to 512
[  107.078122][    T6] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  107.102719][ T4329] FAT-fs (loop1): Directory bread(block 199916) failed
[  107.122033][ T4329] FAT-fs (loop1): Directory bread(block 199917) failed
[  107.129994][    T6] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  107.144976][    T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  107.153333][ T4329] FAT-fs (loop1): Directory bread(block 199918) failed
[  107.161263][ T4329] FAT-fs (loop1): Directory bread(block 199919) failed
[  107.168732][    T6] usb 3-1: Product: syz
[  107.172925][    T6] usb 3-1: Manufacturer: syz
[  107.177493][    T6] usb 3-1: SerialNumber: syz
[  107.182632][ T4329] FAT-fs (loop1): Directory bread(block 199920) failed
[  107.189631][ T4329] FAT-fs (loop1): Directory bread(block 199921) failed
[  107.207139][ T4329] FAT-fs (loop1): Directory bread(block 199922) failed
[  107.214253][  T796] usb 10-1: Using ep0 maxpacket: 16
[  107.219707][ T4329] FAT-fs (loop1): Directory bread(block 199923) failed
[  107.231364][  T796] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  107.249041][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  107.249051][   T28] audit: type=1400 audit(1785088302.456:446): avc:  denied  { mount } for  pid=4328 comm="syz.1.1644" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  107.293420][ T4329] FAT-fs (loop1): FAT read failed (blocknr 128)
[  107.302823][  T796] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  107.331163][  T796] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  107.376834][  T796] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  107.408373][  T796] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.419368][    T6] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  107.450311][  T796] usb 10-1: config 0 descriptor??
[  107.520018][ T4353] overlayfs: failed to set xattr on upper
[  107.652148][   T28] audit: type=1400 audit(1785088302.840:447): avc:  denied  { read write } for  pid=4280 comm="syz.2.1620" name="lp0" dev="devtmpfs" ino=1352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  107.701761][    T6] usb 3-1: USB disconnect, device number 3
[  107.722397][    T6] usblp0: removed
[  107.734466][ T4376] loop7: detected capacity change from 0 to 512
[  107.744611][   T19] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  107.756067][   T28] audit: type=1400 audit(1785088302.868:448): avc:  denied  { open } for  pid=4280 comm="syz.2.1620" path="/dev/usb/lp0" dev="devtmpfs" ino=1352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  107.796036][ T4376] EXT4-fs (loop7): 1 truncate cleaned up
[  107.815195][ T4376] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  107.832066][ T4386] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1670'.
[  107.864766][ T1784] EXT4-fs (loop7): unmounting filesystem.
[  107.894836][  T796] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max
[  107.908022][ T4390] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1673'.
[  107.919801][  T796] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  107.927966][ T4392] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1672'.
[  107.938729][  T796] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  107.945951][  T796] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  107.969039][   T19] usb 2-1: Using ep0 maxpacket: 8
[  107.979977][  T796] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  107.989698][   T19] usb 2-1: New USB device found, idVendor=0499, idProduct=1503, bcdDevice= 0.40
[  108.008198][  T796] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  108.022478][   T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.040061][  T796] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  108.050868][   T19] usb 2-1: Product: syz
[  108.063717][   T19] usb 2-1: Manufacturer: syz
[  108.068567][  T796] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  108.082888][   T19] usb 2-1: SerialNumber: syz
[  108.091899][  T796] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  108.112946][  T796] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  108.134347][  T796] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  108.159287][  T796] microsoft 0003:045E:07DA.000A: No inputs registered, leaving
[  108.178034][  T796] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0
[  108.214412][  T796] microsoft 0003:045E:07DA.000A: no inputs found
[  108.230492][  T796] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway
[  108.282545][   T28] audit: type=1400 audit(1785088303.429:449): avc:  denied  { shutdown } for  pid=4427 comm="syz.2.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  108.454060][  T796] usb 10-1: USB disconnect, device number 3
[  108.534809][   T19] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  108.710623][ T4466] pim6reg0: tun_chr_ioctl cmd 1074025672
[  108.731586][ T4466] pim6reg0: ignored: set checksum disabled
[  108.755989][   T19] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  108.797605][   T19] usb 2-1: USB disconnect, device number 5
[  108.857873][ T4481] SELinux:  Context system_u:object_r:system_dbusd_var_lib_t:s0 is not valid (left unmapped).
[  108.884167][   T28] audit: type=1400 audit(1785088303.991:450): avc:  denied  { relabelto } for  pid=4480 comm="syz.5.1714" name="/" dev="overlay" ino=1798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:system_dbusd_var_lib_t:s0"
[  108.963202][   T28] audit: type=1400 audit(1785088304.019:451): avc:  denied  { associate } for  pid=4480 comm="syz.5.1714" name="file0" dev="tmpfs" ino=1798 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:system_dbusd_var_lib_t:s0"
[  109.083477][   T28] audit: type=1326 audit(1785088304.047:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4487 comm="syz.5.1717" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281e79de99 code=0x7ffc0000
[  109.132972][ T4506] netlink: 'syz.5.1726': attribute type 11 has an invalid length.
[  109.158218][ T4506] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1726'.
[  109.214226][   T28] audit: type=1326 audit(1785088304.047:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4487 comm="syz.5.1717" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281e79de99 code=0x7ffc0000
[  109.315522][   T28] audit: type=1326 audit(1785088304.047:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4487 comm="syz.5.1717" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281e79de99 code=0x7ffc0000
[  109.440770][ T4541] loop7: detected capacity change from 0 to 256
[  109.457715][   T28] audit: type=1326 audit(1785088304.047:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4487 comm="syz.5.1717" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f281e79de99 code=0x7ffc0000
[  109.496348][ T4541] exfat: Deprecated parameter 'utf8'
[  109.516586][ T4541] exfat: Deprecated parameter 'namecase'
[  109.530642][ T4547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1744'.
[  109.543064][ T4541] exfat: Deprecated parameter 'namecase'
[  109.564312][ T4541] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  109.683240][ T4528] loop9: detected capacity change from 0 to 40427
[  109.749528][ T4528] F2FS-fs (loop9): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  109.795613][ T4528] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  109.842678][ T4576] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  109.873945][ T4528] F2FS-fs (loop9): invalid crc value
[  109.935793][ T4528] F2FS-fs (loop9): Found nat_bits in checkpoint
[  110.022875][ T4603] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1767'.
[  110.037083][ T4602] loop1: detected capacity change from 0 to 256
[  110.062838][ T4602] FAT-fs (loop1): Unrecognized mount option "utf8=tf8=1" or missing value
[  110.087018][ T4528] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  110.139939][ T4528] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  110.168519][ T4612] Falling back ldisc for ptm0.
[  110.186504][ T4616] loop1: detected capacity change from 0 to 512
[  110.233734][ T4616] EXT4-fs: Ignoring removed oldalloc option
[  110.277668][ T4616] EXT4-fs (loop1): Test dummy encryption mode enabled
[  110.296921][ T4528] syz.9.1736: attempt to access beyond end of device
[  110.296921][ T4528] loop9: rw=2051, sector=36912, nr_sectors = 8144 limit=40427
[  110.331446][ T4616] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  110.357945][ T4528] syz.9.1736: attempt to access beyond end of device
[  110.357945][ T4528] loop9: rw=2051, sector=45096, nr_sectors = 20440 limit=40427
[  110.380382][ T4616] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[  110.400716][ T4622] syz.2.1777[4622] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  110.403078][ T4622] syz.2.1777[4622] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  110.417477][ T4001] EXT4-fs (loop1): unmounting filesystem.
[  110.439194][ T4528] F2FS-fs (loop9): Issue discard(4614, 4614, 1018) failed, ret: -5
[  110.439212][ T4528] F2FS-fs (loop9): Issue discard(5637, 5637, 2555) failed, ret: -5
[  110.664955][ T4646] kvm [4645]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000005) = 0x100000801
[  110.826564][ T4662] xt_hashlimit: size too large, truncated to 1048576
[  110.883030][ T4666] xt_connbytes: Forcing CT accounting to be enabled
[  111.114304][ T4679] loop1: detected capacity change from 0 to 256
[  111.405408][ T4692] loop1: detected capacity change from 0 to 256
[  111.481424][ T4698] input: syz0 as /devices/virtual/input/input10
[  111.554746][ T4704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1811'.
[  111.686503][ T4709] loop1: detected capacity change from 0 to 1024
[  111.720871][ T4709] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  111.753625][ T4709] EXT4-fs (loop1): shut down requested (2)
[  111.779284][ T4001] EXT4-fs (loop1): unmounting filesystem.
[  111.869787][ T4723] loop2: detected capacity change from 0 to 256
[  113.974196][   T28] kauditd_printk_skb: 20 callbacks suppressed
[  113.974208][   T28] audit: type=1400 audit(1785088564.801:476): avc:  denied  { execute_no_trans } for  pid=4744 comm="syz.7.1828" path="/247/file0" dev="tmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  114.010463][ T4750] loop9: detected capacity change from 0 to 1024
[  114.020801][ T4751] loop2: detected capacity change from 0 to 512
[  114.061196][ T4751] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  114.080186][ T4750] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002]
[  114.092211][ T4751] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  114.104342][ T4750] System zones: 0-1, 3-12
[  114.108956][ T4750] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  114.134571][   T28] audit: type=1400 audit(1785088564.951:477): avc:  denied  { execmem } for  pid=4756 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  114.155311][ T4751] EXT4-fs (loop2): 1 truncate cleaned up
[  114.177825][ T4762] PM: suspend entry (deep)
[  114.193627][ T4751] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  114.210812][ T4764] input: syz0 as /devices/virtual/input/input11
[  114.246809][ T4750] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2800: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  114.261754][ T4751] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[  114.272928][   T28] audit: type=1400 audit(1785088565.063:478): avc:  denied  { create } for  pid=4749 comm="syz.9.1832" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  114.315498][    T8] Filesystems sync: 0.101 seconds
[  114.327039][ T3846] EXT4-fs (loop2): unmounting filesystem.
[  114.338447][ T4762] Freezing user space processes
[  114.365148][ T4762] Freezing user space processes completed (elapsed 0.003 seconds)
[  114.374750][ T4762] OOM killer disabled.
[  114.378828][ T4762] Freezing remaining freezable tasks
[  114.385703][ T4762] Freezing remaining freezable tasks completed (elapsed 0.001 seconds)
[  114.394220][ T4762] printk: Suspending console(s) (use no_console_suspend to debug)
[  114.435377][  T758] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  114.547155][ T4762] ACPI: PM: Preparing to enter system sleep state S3
[  114.547311][ T4762] ACPI: PM: Saving platform NVS memory
[  114.547345][ T4762] Disabling non-boot CPUs ...
[  114.549622][ T4762] ACPI: PM: Low-level resume complete
[  114.549666][ T4762] ACPI: PM: Restoring platform NVS memory
[  114.560567][ T4762] ACPI: PM: Waking up from system sleep state S3
[  114.607411][ T2011] usb usb1: PM: dpm_run_callback(): usb_dev_resume+0x0/0x20 returns -107
[  114.607445][ T2011] usb usb1: PM: failed to resume async: error -107
[  114.672202][   T43] device bridge_slave_1 left promiscuous mode
[  114.672241][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.672503][   T43] device bridge_slave_0 left promiscuous mode
[  114.672534][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.673301][   T43] device veth1_macvtap left promiscuous mode
[  114.673327][   T43] device veth0_vlan left promiscuous mode
[  114.710638][ T4762] OOM killer enabled.
[  114.711186][ T4762] Restarting tasks ... done.
[  114.737039][ T4762] random: crng reseeded on system resumption
[  114.737896][ T4762] Resume cause unknown
[  114.738483][ T4762] PM: suspend exit
[  114.749710][ T2194] EXT4-fs (loop9): unmounting filesystem.
[  114.790304][   T28] audit: type=1400 audit(1785088565.573:479): avc:  denied  { set_context_mgr } for  pid=4777 comm="syz.9.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  114.794259][ T4778] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  114.863064][ T4784] loop2: detected capacity change from 0 to 512
[  114.893123][ T4784] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  114.894576][ T4784] ext4 filesystem being mounted at /67/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.900567][ T4773] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.901665][ T4773] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.902922][ T4773] device bridge_slave_0 entered promiscuous mode
[  114.921076][   T28] audit: type=1400 audit(1785088565.695:480): avc:  denied  { write open } for  pid=4783 comm="syz.2.1844" path=2F202864656C6574656429 dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  114.925605][   T28] audit: type=1400 audit(1785088565.695:481): avc:  denied  { rename } for  pid=4783 comm="syz.2.1844" name="#f" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  114.939257][   T28] audit: type=1400 audit(1785088565.704:482): avc:  denied  { unlink } for  pid=4783 comm="syz.2.1844" name="#10" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  114.947799][ T4784] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  114.949829][ T4773] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.950822][ T4773] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.952039][ T4773] device bridge_slave_1 entered promiscuous mode
[  114.960350][ T4784] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  114.962121][ T4784] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.1844: Failed to acquire dquot type 0
[  114.963805][   T28] audit: type=1400 audit(1785088565.713:483): avc:  denied  { setattr } for  pid=4783 comm="syz.2.1844" name="/" dev="overlay" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  114.991799][ T3846] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz-executor: Failed to acquire dquot type 0
[  115.002961][  T796] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  115.025693][ T3846] EXT4-fs (loop2): unmounting filesystem.
[  115.131149][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  115.132490][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  115.137268][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  115.138693][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  115.141988][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.142997][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.158249][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  115.163971][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  115.168726][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  115.174181][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.175210][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.195093][  T796] usb 8-1: Using ep0 maxpacket: 16
[  115.196542][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  115.198110][  T796] usb 8-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 119, changing to 10
[  115.199596][  T796] usb 8-1: config 0 interface 0 has no altsetting 0
[  115.200517][  T796] usb 8-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00
[  115.202194][  T796] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.215730][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  115.219834][  T796] usb 8-1: config 0 descriptor??
[  115.221445][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  115.223949][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  115.228741][ T4773] device veth0_vlan entered promiscuous mode
[  115.233818][ T4773] device veth1_macvtap entered promiscuous mode
[  115.264996][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  115.266763][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  115.268140][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  115.269595][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  115.280046][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  115.283503][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  115.290963][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  115.302548][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  115.376409][ T4815] loop1: detected capacity change from 0 to 256
[  115.395085][   T43] device bridge_slave_1 left promiscuous mode
[  115.396063][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.397362][   T43] device bridge_slave_0 left promiscuous mode
[  115.399128][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.405707][ T4815] FAT-fs (loop1): Directory bread(block 64) failed
[  115.406695][ T4815] FAT-fs (loop1): Directory bread(block 65) failed
[  115.407598][ T4815] FAT-fs (loop1): Directory bread(block 66) failed
[  115.408554][ T4815] FAT-fs (loop1): Directory bread(block 67) failed
[  115.410238][   T43] device veth1_macvtap left promiscuous mode
[  115.411184][   T43] device veth0_vlan left promiscuous mode
[  115.425050][ T4815] FAT-fs (loop1): Directory bread(block 68) failed
[  115.426091][ T4815] FAT-fs (loop1): Directory bread(block 69) failed
[  115.427024][ T4815] FAT-fs (loop1): Directory bread(block 70) failed
[  115.440675][ T4815] FAT-fs (loop1): Directory bread(block 71) failed
[  115.447127][ T4815] FAT-fs (loop1): Directory bread(block 72) failed
[  115.448109][ T4815] FAT-fs (loop1): Directory bread(block 73) failed
[  115.605871][ T4830] loop9: detected capacity change from 0 to 256
[  115.618124][ T4830] exfat: Deprecated parameter 'utf8'
[  115.619045][ T4830] exfat: Deprecated parameter 'namecase'
[  115.619835][ T4830] exfat: Deprecated parameter 'namecase'
[  115.620680][ T4830] exfat: Deprecated parameter 'namecase'
[  115.650385][ T4771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.651696][ T4771] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.669459][  T796] monterey 0003:0566:3004.000B: fixing up button/consumer in HID report descriptor
[  115.670887][  T796] monterey 0003:0566:3004.000B: unknown main item tag 0x2
[  115.671886][  T796] monterey 0003:0566:3004.000B: unknown main item tag 0x0
[  115.672946][  T796] monterey 0003:0566:3004.000B: unknown main item tag 0x0
[  115.673913][  T796] monterey 0003:0566:3004.000B: unknown main item tag 0x0
[  115.674943][  T796] monterey 0003:0566:3004.000B: unknown main item tag 0x0
[  115.676493][ T4830] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  115.681405][ T4838] loop1: detected capacity change from 0 to 1024
[  115.682585][ T4838] EXT4-fs: Ignoring removed nomblk_io_submit option
[  115.686064][ T4813] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.690113][ T4813] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.691376][ T4813] device bridge_slave_0 entered promiscuous mode
[  115.692700][ T4813] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.693696][ T4813] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.698126][  T796] monterey 0003:0566:3004.000B: unknown main item tag 0x0
[  115.699169][  T796] monterey 0003:0566:3004.000B: unknown main item tag 0x0
[  115.700183][  T796] monterey 0003:0566:3004.000B: unknown main item tag 0x0
[  115.701250][  T796] monterey 0003:0566:3004.000B: unknown main item tag 0x4
[  115.702243][  T796] monterey 0003:0566:3004.000B: unknown main item tag 0x0
[  115.703234][  T796] monterey 0003:0566:3004.000B: unknown main item tag 0x0
[  115.704236][  T796] monterey 0003:0566:3004.000B: unknown main item tag 0x0
[  115.705211][  T796] monterey 0003:0566:3004.000B: item fetching failed at offset 39/40
[  115.712181][ T4813] device bridge_slave_1 entered promiscuous mode
[  115.715919][ T4838] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  115.735633][  T796] monterey: probe of 0003:0566:3004.000B failed with error -22
[  115.771605][ T4773] EXT4-fs (loop1): unmounting filesystem.
[  115.864568][ T4813] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.865592][ T4813] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.866613][ T4813] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.867568][ T4813] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.895662][ T4856] loop1: detected capacity change from 0 to 512
[  115.917717][  T796] usb 8-1: USB disconnect, device number 5
[  115.922709][ T4856] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  115.924447][ T4856] ext4 filesystem being mounted at /6/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.926109][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  115.927418][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.928570][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.946145][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  115.947518][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.948637][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.956008][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  115.958898][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.959895][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.968337][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  115.970947][ T4856] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.1872: Failed to acquire dquot type 0
[  115.972905][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  115.980868][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  115.987501][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  115.988938][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  115.990722][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  115.993267][ T4773] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz-executor: Failed to acquire dquot type 0
[  115.995633][ T4813] device veth0_vlan entered promiscuous mode
[  116.003451][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  116.006783][ T4813] device veth1_macvtap entered promiscuous mode
[  116.012645][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  116.015183][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  116.042254][ T4773] EXT4-fs (loop1): unmounting filesystem.
[  116.263502][ T4864] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.264789][ T4864] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.266106][ T4864] device bridge_slave_0 entered promiscuous mode
[  116.267765][ T4864] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.268776][ T4864] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.270065][ T4864] device bridge_slave_1 entered promiscuous mode
[  116.304887][ T4864] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.305921][ T4864] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.306961][ T4864] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.307899][ T4864] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.322805][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  116.324186][  T758] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.325357][  T758] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.328353][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  116.329780][  T758] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.330760][  T758] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.335479][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  116.336844][  T758] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.337821][  T758] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.345631][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  116.346992][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  116.351942][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  116.355796][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  116.357205][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  116.358516][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  116.361429][ T4864] device veth0_vlan entered promiscuous mode
[  116.366631][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  116.369335][ T4864] device veth1_macvtap entered promiscuous mode
[  116.372193][   T43] device bridge_slave_1 left promiscuous mode
[  116.373203][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.374505][   T43] device bridge_slave_0 left promiscuous mode
[  116.375617][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.377224][   T43] device veth1_macvtap left promiscuous mode
[  116.378112][   T43] device veth0_vlan left promiscuous mode
[  116.438965][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  116.441779][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  116.509276][ T4877] loop0: detected capacity change from 0 to 512
[  116.516122][ T4877] FAT-fs (loop0): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1)
[  116.553422][   T10] FAT-fs (loop0): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1)
[  116.739678][ T4904] loop0: detected capacity change from 0 to 2048
[  116.763093][ T4904] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  116.770046][ T4904] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  116.786436][ T4864] EXT4-fs (loop0): unmounting filesystem.
[  116.821472][ T4910] loop0: detected capacity change from 0 to 256
[  116.904263][ T4920] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1898'.
[  116.995328][ T4931] xt_hashlimit: size too large, truncated to 1048576
[  117.168031][ T4936] loop6: detected capacity change from 0 to 512
[  117.180231][ T4936] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  117.182921][ T4936] EXT4-fs (loop6): orphan cleanup on readonly fs
[  117.186537][ T4936] EXT4-fs warning (device loop6): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  117.191035][ T4936] EXT4-fs (loop6): Cannot turn on quotas: error -117
[  117.193842][ T4936] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.1905: bg 0: block 15: invalid block bitmap
[  117.197024][ T4936] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  117.200961][ T4936] EXT4-fs (loop6): 1 truncate cleaned up
[  117.201915][ T4936] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  117.227167][ T4813] EXT4-fs (loop6): unmounting filesystem.
[  117.317158][ T4945] loop6: detected capacity change from 0 to 512
[  117.323290][ T4945] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  117.336832][ T4945] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  117.338583][ T4945] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  117.363474][ T4813] EXT4-fs (loop6): unmounting filesystem.
[  117.802945][ T4988] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  117.836282][ T4988] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  117.837698][ T4988] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  117.856141][ T4992] FAT-fs (loop7): Directory bread(block 64) failed
[  117.865291][ T4992] FAT-fs (loop7): Directory bread(block 65) failed
[  117.866298][ T4992] FAT-fs (loop7): Directory bread(block 66) failed
[  117.872226][ T2194] EXT4-fs (loop9): unmounting filesystem.
[  117.873137][ T4992] FAT-fs (loop7): Directory bread(block 67) failed
[  117.874050][ T4992] FAT-fs (loop7): Directory bread(block 68) failed
[  117.874933][ T4992] FAT-fs (loop7): Directory bread(block 69) failed
[  117.875814][ T4992] FAT-fs (loop7): Directory bread(block 70) failed
[  117.876697][ T4992] FAT-fs (loop7): Directory bread(block 71) failed
[  117.914047][ T4992] FAT-fs (loop7): Directory bread(block 72) failed
[  117.916228][ T4992] FAT-fs (loop7): Directory bread(block 73) failed
[  117.948106][ T5003] EXT4-fs: Ignoring removed orlov option
[  117.948941][ T5003] EXT4-fs: Ignoring removed mblk_io_submit option
[  117.973987][ T5003] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  117.975726][ T5003] ext4 filesystem being mounted at /201/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  118.033919][ T2194] EXT4-fs (loop9): unmounting filesystem.
[  118.264507][ T5011] F2FS-fs (loop9): invalid crc value
[  118.269883][ T5011] F2FS-fs (loop9): Found nat_bits in checkpoint
[  118.288825][ T5020] EXT4-fs: Ignoring removed nobh option
[  118.325942][ T5020] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  118.328529][ T5020] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  118.367466][ T5011] F2FS-fs (loop9): Start checkpoint disabled!
[  118.372058][ T5011] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0
[  118.379637][ T5011] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[  118.706171][ T4864] EXT4-fs (loop0): unmounting filesystem.
[  118.974238][ T5052] input: syz1 as /devices/virtual/input/input13
[  118.977584][ T5052] input: failed to attach handler leds to device input13, error: -6
[  119.154251][ T5054] netlink: 'syz.7.1954': attribute type 1 has an invalid length.
[  119.754017][ T5088] EXT4-fs: Ignoring removed orlov option
[  119.769631][ T5088] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  119.775114][ T5089] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  119.776500][ T5089] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.803876][ T5088] EXT4-fs error (device loop7): ext4_ext_check_inode:520: inode #16: comm syz.7.1966: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0)
[  119.809163][ T5088] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.1966: couldn't read orphan inode 16 (err -117)
[  119.820945][ T2194] EXT4-fs (loop9): unmounting filesystem.
[  119.838812][ T5088] EXT4-fs (loop7): 1 orphan inode deleted
[  119.839697][ T5088] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  119.882598][ T1784] EXT4-fs (loop7): unmounting filesystem.
[  119.908614][ T5105] tap0: tun_chr_ioctl cmd 1074025677
[  119.909775][ T5105] tap0: linktype set to 773
[  120.147302][ T5131] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1986'.
[  120.151688][ T5131] netlink: 'syz.5.1986': attribute type 1 has an invalid length.
[  120.259062][ T5050] set_capacity_and_notify: 9 callbacks suppressed
[  120.259078][ T5050] loop0: detected capacity change from 0 to 131072
[  120.268344][ T5050] F2FS-fs (loop0): invalid crc value
[  120.287341][ T5050] F2FS-fs (loop0): Found nat_bits in checkpoint
[  120.316997][ T5050] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  120.349427][   T28] kauditd_printk_skb: 12 callbacks suppressed
[  120.349437][   T28] audit: type=1400 audit(1785088570.774:489): avc:  denied  { rename } for  pid=5049 comm="syz.0.1951" name="file0" dev="loop0" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  120.365940][ T5140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1989'.
[  120.388307][   T28] audit: type=1400 audit(1785088570.802:490): avc:  denied  { setopt } for  pid=5141 comm="syz.5.1990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  120.513660][ T5150] loop0: detected capacity change from 0 to 256
[  120.524695][ T5150] exfat: Unknown parameter 'ic”½„Jecard'
[  120.552132][  T310] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  120.625109][ T5161] overlayfs: failed to set xattr on upper
[  120.628219][ T5163] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1998'.
[  120.860867][ T5189] pim6reg: tun_chr_ioctl cmd 2147767506
[  120.923755][   T28] audit: type=1400 audit(1785088571.317:491): avc:  denied  { map } for  pid=5196 comm="syz.0.2015" path="/proc/80/net/pfkey" dev="proc" ino=4026532798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  121.083401][ T5214] tun0: tun_chr_ioctl cmd 1074025673
[  121.153712][ T5223] loop0: detected capacity change from 0 to 1024
[  121.199307][ T5223] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  121.229008][ T4864] EXT4-fs (loop0): unmounting filesystem.
[  121.352985][   T28] audit: type=1400 audit(1785088571.720:492): avc:  denied  { create } for  pid=5246 comm="syz.9.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  121.356515][   T28] audit: type=1400 audit(1785088571.720:493): avc:  denied  { write } for  pid=5246 comm="syz.9.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  121.382278][   T28] audit: type=1400 audit(1785088571.720:494): avc:  denied  { nlmsg_write } for  pid=5246 comm="syz.9.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  121.550882][   T28] audit: type=1400 audit(1785088571.897:495): avc:  denied  { mount } for  pid=5266 comm="syz.5.2045" name="/" dev="configfs" ino=14268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  121.561352][   T28] audit: type=1400 audit(1785088571.907:496): avc:  denied  { search } for  pid=5266 comm="syz.5.2045" name="/" dev="configfs" ino=14268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  121.579541][   T28] audit: type=1400 audit(1785088571.925:497): avc:  denied  { unmount } for  pid=765 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  121.636817][   T28] audit: type=1400 audit(1785088571.972:498): avc:  denied  { map } for  pid=5276 comm="syz.7.2050" path="socket:[38773]" dev="sockfs" ino=38773 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  121.753644][ T5288] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  121.861054][ T5302] loop9: detected capacity change from 0 to 512
[  121.910073][ T5302] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  121.911381][ T5302] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  121.950171][ T2194] EXT4-fs (loop9): unmounting filesystem.
[  122.014824][ T5321] netlink: 71 bytes leftover after parsing attributes in process `syz.0.2068'.
[  122.109739][ T5330] pim6reg0: tun_chr_ioctl cmd 1074025672
[  122.110594][ T5330] pim6reg0: ignored: set checksum disabled
[  122.219712][ T5347] netlink: 'syz.9.2077': attribute type 11 has an invalid length.
[  122.220946][ T5347] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2077'.
[  122.275748][ T5355] loop7: detected capacity change from 0 to 256
[  122.399282][ T5374] loop0: detected capacity change from 0 to 512
[  122.417576][ T5374] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  122.433835][ T5374] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  122.444237][ T5374] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  122.451027][ T5374] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  122.455230][ T5374] System zones: 0-2, 18-18, 34-35
[  122.456411][ T5374] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  122.508078][ T4864] EXT4-fs (loop0): unmounting filesystem.
[  123.058093][ T5392] loop7: detected capacity change from 0 to 512
[  123.066643][ T5390] loop0: detected capacity change from 0 to 4096
[  123.095199][ T5390] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  123.096388][ T5390] EXT4-fs (loop0): Test dummy encryption mode enabled
[  123.109724][ T5392] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.127319][ T5390] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  123.128492][ T5390] System zones: 0-5
[  123.170657][ T5406] loop9: detected capacity change from 0 to 256
[  123.186544][ T5406] exfat: Deprecated parameter 'namecase'
[  123.218272][ T5406] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d)
[  123.275652][ T5415] loop0: detected capacity change from 0 to 1024
[  123.302289][ T5415] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  123.320951][ T5415] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2110'.
[  123.461020][ T5434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2119'.
[  123.462264][ T5434] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2119'.
[  123.531117][ T5436] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.637076][   T19] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  123.674309][ T5429] syz.7.2117[5429] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  123.674360][ T5429] syz.7.2117[5429] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  123.830025][   T19] usb 6-1: not running at top speed; connect to a high speed hub
[  123.834626][   T19] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  123.837071][   T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.840446][   T19] usb 6-1: Product: syz
[  123.841075][   T19] usb 6-1: Manufacturer: syz
[  123.846282][   T19] usb 6-1: SerialNumber: syz
[  123.852638][   T10] device bridge_slave_1 left promiscuous mode
[  123.853570][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.854919][   T10] device bridge_slave_0 left promiscuous mode
[  123.857190][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.861765][   T10] device veth1_macvtap left promiscuous mode
[  123.866343][   T10] device veth0_vlan left promiscuous mode
[  123.900814][ T5477] ext4 filesystem being mounted at /289/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  123.960909][ T5458] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.961976][ T5458] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.963255][ T5458] device bridge_slave_0 entered promiscuous mode
[  123.966726][ T5458] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.969082][ T5458] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.971256][ T5458] device bridge_slave_1 entered promiscuous mode
[  124.072052][ T5458] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.073162][ T5458] bridge0: port 2(bridge_slave_1) entered forwarding state
[  124.074370][ T5458] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.075705][ T5458] bridge0: port 1(bridge_slave_0) entered forwarding state
[  124.119786][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  124.121259][  T758] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.122403][  T758] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.127300][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  124.129999][  T758] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.131035][  T758] bridge0: port 1(bridge_slave_0) entered forwarding state
[  124.134406][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  124.136945][  T758] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.137990][  T758] bridge0: port 2(bridge_slave_1) entered forwarding state
[  124.144996][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  124.150155][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  124.167728][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  124.174946][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  124.176934][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  124.180206][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  124.185902][ T5458] device veth0_vlan entered promiscuous mode
[  124.194021][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  124.204533][ T5458] device veth1_macvtap entered promiscuous mode
[  124.217116][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  124.220753][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  124.333588][ T5503] EXT4-fs (loop7): Test dummy encryption mode enabled
[  124.350870][ T5503] EXT4-fs (loop7): shut down requested (2)
[  124.360317][ T5503] EXT4-fs (loop7): re-mounted. Quota mode: writeback.
[  124.709457][   T19] usb 6-1: MIDIStreaming interface descriptor not found
[  124.717831][   T19] usb 6-1: USB disconnect, device number 7
[  124.912577][ T5534] F2FS-fs (loop0): Found nat_bits in checkpoint
[  124.958046][ T5534] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  125.177576][ T5554] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  125.555564][ T5610] exfat: Deprecated parameter 'utf8'
[  125.556380][ T5610] exfat: Deprecated parameter 'utf8'
[  125.569404][ T5610] exfat: Deprecated parameter 'utf8'
[  125.575664][ T5610] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  125.727376][ T5636] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2207'.
[  125.761605][ T5642] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  125.765361][ T5642] SELinux: failed to load policy
[  126.191480][ T5705] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2240'.
[  126.201604][ T5705] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2240'.
[  126.442792][ T5731] netlink: 'syz.8.2252': attribute type 12 has an invalid length.
[  126.497219][ T5736] set_capacity_and_notify: 6 callbacks suppressed
[  126.497233][ T5736] loop8: detected capacity change from 0 to 512
[  126.516287][ T5736] EXT4-fs error (device loop8): ext4_generic_delete_entry:2729: inode #2: block 6: comm syz.8.2254: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=4096 fake=0
[  126.523177][ T5736] EXT4-fs (loop8): Remounting filesystem read-only
[  126.533806][ T5736] EXT4-fs error (device loop8) in ext4_delete_entry:2800: Corrupt filesystem
[  126.536784][ T5736] EXT4-fs (loop8): Remounting filesystem read-only
[  126.568308][ T5742] loop8: detected capacity change from 0 to 512
[  126.576483][ T5742] EXT4-fs: Ignoring removed oldalloc option
[  126.584306][ T5742] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002]
[  126.585783][ T5742] EXT4-fs (loop8): orphan cleanup on readonly fs
[  126.589837][ T5742] EXT4-fs warning (device loop8): ext4_enable_quotas:7080: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  126.598937][ T5742] EXT4-fs (loop8): Cannot turn on quotas: error -22
[  126.607153][ T5742] EXT4-fs error (device loop8): ext4_ext_check_inode:520: inode #13: comm syz.8.2256: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  126.610154][ T5742] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.2256: couldn't read orphan inode 13 (err -117)
[  126.630211][ T5742] EXT4-fs error (device loop8): ext4_lookup:1862: inode #2: comm syz.8.2256: deleted inode referenced: 12
[  126.949741][ T4770] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  127.009981][ T5740] loop0: detected capacity change from 0 to 131072
[  127.016842][ T5740] F2FS-fs (loop0): Test dummy encryption mode enabled
[  127.034031][ T5740] F2FS-fs (loop0): invalid crc value
[  127.045044][ T5740] F2FS-fs (loop0): Found nat_bits in checkpoint
[  127.053514][   T28] kauditd_printk_skb: 9 callbacks suppressed
[  127.053524][   T28] audit: type=1400 audit(1785088577.049:507): avc:  denied  { bind } for  pid=5761 comm="syz.7.2266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  127.093278][ T5740] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  127.142066][ T4770] usb 9-1: Using ep0 maxpacket: 16
[  127.148884][ T4770] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11
[  127.150436][ T4770] usb 9-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[  127.151633][ T4770] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.161809][ T4770] usb 9-1: config 0 descriptor??
[  127.518149][ T1784] device syz_tun left promiscuous mode
[  127.519016][ T1784] bridge0: port 3(syz_tun) entered disabled state
[  127.594347][ T4770] sony 0003:054C:0BA0.000C: unknown main item tag 0x4
[  127.595399][ T4770] sony 0003:054C:0BA0.000C: unknown main item tag 0xd
[  127.596986][ T4770] sony 0003:054C:0BA0.000C: hidraw0: USB HID v89.42 Device [HID 054c:0ba0] on usb-dummy_hcd.8-1/input0
[  127.601697][ T4770] sony 0003:054C:0BA0.000C: failed to claim input
[  127.763997][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.774929][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.777413][ T5810] device bridge_slave_0 entered promiscuous mode
[  127.779984][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.781030][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.782254][ T5810] device bridge_slave_1 entered promiscuous mode
[  127.817827][   T10] device bridge_slave_1 left promiscuous mode
[  127.818831][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.820109][   T10] device bridge_slave_0 left promiscuous mode
[  127.821085][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.830535][ T5821] binder: 5820:5821 ioctl c0306201 200000000640 returned -22
[  127.914305][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.915399][ T5810] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.916537][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.917518][ T5810] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.931591][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  127.933023][  T308] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.934189][  T308] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.936749][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  127.938246][  T308] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.939256][  T308] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.943075][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  127.944836][  T308] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.945886][  T308] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.951160][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  127.952546][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  127.958926][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  127.962598][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  127.963980][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  127.965934][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  127.967629][ T5810] device veth0_vlan entered promiscuous mode
[  127.972095][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  127.974385][ T5810] device veth1_macvtap entered promiscuous mode
[  127.978275][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  127.980890][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  128.103162][   T28] audit: type=1400 audit(1785088578.023:508): avc:  denied  { bind } for  pid=5834 comm="syz.5.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  128.413828][   T19] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[  128.607289][   T19] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  128.608532][   T19] usb 8-1: config 0 has no interface number 0
[  128.609359][   T19] usb 8-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  128.610973][   T19] usb 8-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.612291][   T19] usb 8-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  128.614119][   T19] usb 8-1: config 0 interface 1 has no altsetting 0
[  128.615161][   T19] usb 8-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  128.616413][   T19] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.620446][   T19] usb 8-1: config 0 descriptor??
[  129.265664][   T19] input: HID 145f:0212 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.1/0003:145F:0212.000D/input/input14
[  129.268274][   T19] input: HID 145f:0212 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.1/0003:145F:0212.000D/input/input15
[  129.271776][   T19] uclogic 0003:145F:0212.000D: input,hiddev96,hidraw0: USB HID v4.06 Keypad [HID 145f:0212] on usb-dummy_hcd.7-1/input1
[  129.400694][ T5855] binder: 5854:5855 ioctl c0306201 200000000640 returned -22
[  129.462191][ T5853] ipvlan1: renamed from veth0_vlan
[  129.495282][ T4770] usb 8-1: USB disconnect, device number 6
[  129.499711][ T5853] syz.0.2302 (5853) used greatest stack depth: 20648 bytes left
[  129.510597][ T5869] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2308'.
[  129.547415][ T5859] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  129.581641][ T5873] tap0: tun_chr_ioctl cmd 1074025677
[  129.597616][ T5873] tap0: linktype set to 773
[  129.874140][ T4770] usb 9-1: USB disconnect, device number 3
[  130.028149][ T5895] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  130.082103][ T5899] loop7: detected capacity change from 0 to 128
[  130.219202][ T5903] loop7: detected capacity change from 0 to 256
[  130.253661][   T28] audit: type=1400 audit(1785088580.050:509): avc:  denied  { remount } for  pid=5887 comm="syz.5.2319" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  130.333574][ T5910] loop8: detected capacity change from 0 to 1024
[  130.387485][ T5910] EXT4-fs mount: 18 callbacks suppressed
[  130.387498][ T5910] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  130.486960][ T5458] EXT4-fs (loop8): unmounting filesystem.
[  130.592103][ T5886] loop6: detected capacity change from 0 to 131072
[  130.634181][ T5886] F2FS-fs (loop6): invalid crc value
[  130.670104][ T5944] loop8: detected capacity change from 0 to 256
[  130.685409][ T5886] F2FS-fs (loop6): Found nat_bits in checkpoint
[  130.706358][ T5944] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  130.786684][ T5944] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  130.804282][ T5886] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  130.920100][ T5458] FAT-fs (loop8): error, corrupted directory (invalid entries)
[  130.954545][ T5965] loop0: detected capacity change from 0 to 128
[  130.972379][ T5458] FAT-fs (loop8): Filesystem has been set read-only
[  131.019348][ T5965] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  131.028608][ T5458] FAT-fs (loop8): error, corrupted directory (invalid entries)
[  131.077184][ T5965] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  131.136899][ T5965] ext2 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.214275][ T4864] EXT4-fs (loop0): unmounting filesystem.
[  131.360061][ T5991] bridge0: port 3(syz_tun) entered blocking state
[  131.391303][ T5991] bridge0: port 3(syz_tun) entered disabled state
[  131.435457][ T5995] loop6: detected capacity change from 0 to 512
[  131.442457][ T5991] device syz_tun entered promiscuous mode
[  131.448266][ T5991] bridge0: port 3(syz_tun) entered blocking state
[  131.454699][ T5991] bridge0: port 3(syz_tun) entered forwarding state
[  131.504500][ T5995] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  131.529002][ T5995] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  131.545722][  T308] device bridge_slave_1 left promiscuous mode
[  131.551842][  T308] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.608921][  T308] device bridge_slave_0 left promiscuous mode
[  131.639563][  T308] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.673639][  T308] device veth1_macvtap left promiscuous mode
[  131.690925][ T6009] FAT-fs (loop0): codepage cp73 not found
[  131.703715][  T308] device veth0_vlan left promiscuous mode
[  131.750852][ T6011] overlayfs: upper fs does not support file handles, falling back to index=off.
[  131.770352][ T6011] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  131.826820][ T4813] EXT4-fs (loop6): unmounting filesystem.
[  131.871379][ T5997] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.883146][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.894229][ T5997] device bridge_slave_0 entered promiscuous mode
[  131.923302][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.946543][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.959662][ T5997] device bridge_slave_1 entered promiscuous mode
[  132.050670][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.057765][ T5997] bridge0: port 2(bridge_slave_1) entered forwarding state
[  132.065015][ T5997] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.072053][ T5997] bridge0: port 1(bridge_slave_0) entered forwarding state
[  132.090831][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  132.098542][  T308] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.105987][  T308] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.118147][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  132.129874][  T308] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.136969][  T308] bridge0: port 1(bridge_slave_0) entered forwarding state
[  132.156920][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  132.172033][  T308] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.179165][  T308] bridge0: port 2(bridge_slave_1) entered forwarding state
[  132.203208][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  132.222092][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  132.255248][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  132.275824][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  132.307963][ T5997] device veth0_vlan entered promiscuous mode
[  132.321296][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  132.335038][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  132.356104][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  132.370514][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  132.398991][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  132.428407][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  132.450733][ T5997] device veth1_macvtap entered promiscuous mode
[  132.476309][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  132.492940][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  132.504090][ T5810] ------------[ cut here ]------------
[  132.509653][ T5810] WARNING: CPU: 0 PID: 5810 at fs/inode.c:335 drop_nlink+0xc5/0x110
[  132.517767][ T5810] Modules linked in:
[  132.521654][ T5810] CPU: 0 PID: 5810 Comm: syz-executor Tainted: G        W          syzkaller #0
[  132.530692][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  132.540884][ T5810] RIP: 0010:drop_nlink+0xc5/0x110
[  132.546427][ T5810] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 c3 b4 f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 5b 27 ab ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c
[  132.566126][ T5810] RSP: 0018:ffffc90000ae7c60 EFLAGS: 00010293
[  132.572270][ T5810] RAX: ffffffff81c63ee5 RBX: ffff8881402d71a8 RCX: ffff888120592880
[  132.580271][ T5810] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  132.588267][ T5810] RBP: ffffc90000ae7c88 R08: 0000000000000003 R09: 0000000000000004
[  132.596258][ T5810] R10: dffffc0000000000 R11: fffff5200015cf7c R12: dffffc0000000000
[  132.604465][ T5810] R13: 1ffff1102805ae3e R14: ffff8881402d71f0 R15: 0000000000000000
[  132.612430][ T5810] FS:  000055559533c500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  132.621390][ T5810] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  132.627979][ T5810] CR2: 000055559535f948 CR3: 00000001388ac000 CR4: 00000000003506b0
[  132.635969][ T5810] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  132.644030][ T5810] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  132.652046][ T5810] Call Trace:
[  132.655340][ T5810]  <TASK>
[  132.658285][ T5810]  shmem_rmdir+0x5b/0x90
[  132.662539][ T5810]  vfs_rmdir+0x381/0x4f0
[  132.666854][ T5810]  incfs_kill_sb+0xfe/0x210
[  132.671349][ T5810]  deactivate_locked_super+0xb5/0x120
[  132.676713][ T5810]  deactivate_super+0xaf/0xe0
[  132.681397][ T5810]  cleanup_mnt+0x45e/0x4e0
[  132.685793][ T5810]  __cleanup_mnt+0x19/0x20
[  132.690291][ T5810]  task_work_run+0x1e1/0x250
[  132.694866][ T5810]  ? __cfi_task_work_run+0x10/0x10
[  132.700002][ T5810]  ? __x64_sys_umount+0x12d/0x170
[  132.705017][ T5810]  ? __cfi___x64_sys_umount+0x10/0x10
[  132.710398][ T5810]  exit_to_user_mode_loop+0x9b/0xb0
[  132.715575][ T5810]  exit_to_user_mode_prepare+0x87/0xd0
[  132.721091][ T5810]  syscall_exit_to_user_mode+0x1a/0x30
[  132.726546][ T5810]  do_syscall_64+0x58/0xa0
[  132.730965][ T5810]  ? clear_bhb_loop+0x30/0x80
[  132.735615][ T5810]  ? clear_bhb_loop+0x30/0x80
[  132.740272][ T5810]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  132.746173][ T5810] RIP: 0033:0x7f1add99f0d7
[  132.750662][ T5810] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  132.770425][ T5810] RSP: 002b:00007fff3eece028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  132.778904][ T5810] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1add99f0d7
[  132.786883][ T5810] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3eece0e0
[  132.794930][ T5810] RBP: 00007fff3eece0e0 R08: 00007fff3eecf0e0 R09: 00000000ffffffff
[  132.802896][ T5810] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff3eecf170
[  132.810945][ T5810] R13: 00007f1adda3330a R14: 000000000001feb0 R15: 00007fff3eecf1b0
[  132.819367][ T5810]  </TASK>
[  132.823255][ T5810] ---[ end trace 0000000000000000 ]---
[  132.864062][ T6058] netlink: 'syz.0.2390': attribute type 2 has an invalid length.
[  132.880698][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  132.910910][ T6058] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2390'.
[  132.929663][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  132.968766][   T28] audit: type=1326 audit(1785088582.586:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.6.2393" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa654f9de99 code=0x7ffc0000
[  133.009156][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  133.123432][   T28] audit: type=1326 audit(1785088582.615:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.6.2393" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa654f9de99 code=0x7ffc0000
[  133.159700][ T6075] pimreg1: tun_chr_ioctl cmd 2147767507
[  133.254802][   T28] audit: type=1326 audit(1785088582.615:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.6.2393" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa654f9de99 code=0x7ffc0000
[  133.418021][ T6094] set_capacity_and_notify: 1 callbacks suppressed
[  133.418034][ T6094] loop0: detected capacity change from 0 to 512
[  133.432629][   T28] audit: type=1326 audit(1785088582.615:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.6.2393" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa654f9de99 code=0x7ffc0000
[  133.478315][ T6097] loop3: detected capacity change from 0 to 4096
[  133.526271][ T6097] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  133.537552][ T6094] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  133.561866][ T6104] netlink: 'syz.5.2410': attribute type 5 has an invalid length.
[  133.596437][ T6097] EXT4-fs (loop3): Test dummy encryption mode enabled
[  133.606403][   T28] audit: type=1326 audit(1785088582.615:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.6.2393" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa654f9de99 code=0x7ffc0000
[  133.638622][ T4864] EXT4-fs (loop0): unmounting filesystem.
[  133.645659][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2410'.
[  133.660725][ T6097] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[  133.699681][ T6097] System zones: 0-5
[  133.729006][ T6097] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  133.766215][   T28] audit: type=1326 audit(1785088582.615:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.6.2393" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fa654f9de99 code=0x7ffc0000
[  133.865993][ T5997] EXT4-fs (loop3): unmounting filesystem.
[  133.928636][   T28] audit: type=1326 audit(1785088582.615:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.6.2393" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa654f9de99 code=0x7ffc0000
[  134.029229][   T28] audit: type=1326 audit(1785088582.615:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.6.2393" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa654f9de99 code=0x7ffc0000
[  134.118980][ T6114] loop0: detected capacity change from 0 to 40427
[  134.139748][   T28] audit: type=1326 audit(1785088582.615:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.6.2393" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa654f3f219 code=0x7ffc0000
[  134.173885][ T6114] F2FS-fs (loop0): invalid crc value
[  134.199786][ T6114] F2FS-fs (loop0): Found nat_bits in checkpoint
[  134.259897][   T28] audit: type=1326 audit(1785088582.615:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.6.2393" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa654f3f219 code=0x7ffc0000
[  134.293443][ T6114] F2FS-fs (loop0): Start checkpoint disabled!
[  134.313991][ T6114] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  134.341103][ T6114] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  134.441480][ T6133] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2422'.
[  134.763587][ T6150] x86: Booting SMP configuration:
[  134.782551][ T6150] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  134.846737][ T5810] ==================================================================
[  134.854918][ T5810] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60
[  134.861189][ T5810] Write of size 4 at addr 0000000000000170 by task syz-executor/5810
[  134.869258][ T5810] 
[  134.871586][ T5810] CPU: 1 PID: 5810 Comm: syz-executor Tainted: G        W          syzkaller #0
[  134.880605][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  134.890663][ T5810] Call Trace:
[  134.893947][ T5810]  <TASK>
[  134.896909][ T5810]  __dump_stack+0x21/0x24
[  134.901250][ T5810]  dump_stack_lvl+0x110/0x170
[  134.905932][ T5810]  ? __cfi_dump_stack_lvl+0x8/0x8
[  134.910994][ T5810]  ? __cfi_call_rcu+0x10/0x10
[  134.915681][ T5810]  ? ihold+0x20/0x60
[  134.919586][ T5810]  ? ihold+0x20/0x60
[  134.923492][ T5810]  print_report+0x3d/0x60
[  134.927935][ T5810]  kasan_report+0x122/0x150
[  134.932457][ T5810]  ? ihold+0x20/0x60
[  134.936362][ T5810]  kasan_check_range+0x249/0x2a0
[  134.941318][ T5810]  __kasan_check_write+0x14/0x20
[  134.946268][ T5810]  ihold+0x20/0x60
[  134.949999][ T5810]  vfs_rmdir+0x24c/0x4f0
[  134.954256][ T5810]  incfs_kill_sb+0xfe/0x210
[  134.958777][ T5810]  deactivate_locked_super+0xb5/0x120
[  134.964168][ T5810]  deactivate_super+0xaf/0xe0
[  134.968856][ T5810]  cleanup_mnt+0x45e/0x4e0
[  134.973281][ T5810]  __cleanup_mnt+0x19/0x20
[  134.977728][ T5810]  task_work_run+0x1e1/0x250
[  134.982331][ T5810]  ? __cfi_task_work_run+0x10/0x10
[  134.987455][ T5810]  ? __x64_sys_umount+0x12d/0x170
[  134.992497][ T5810]  ? __cfi___x64_sys_umount+0x10/0x10
[  134.997889][ T5810]  exit_to_user_mode_loop+0x9b/0xb0
[  135.003106][ T5810]  exit_to_user_mode_prepare+0x87/0xd0
[  135.008578][ T5810]  syscall_exit_to_user_mode+0x1a/0x30
[  135.014053][ T5810]  do_syscall_64+0x58/0xa0
[  135.018486][ T5810]  ? clear_bhb_loop+0x30/0x80
[  135.023188][ T5810]  ? clear_bhb_loop+0x30/0x80
[  135.027871][ T5810]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  135.033788][ T5810] RIP: 0033:0x7f1add99f0d7
[  135.038213][ T5810] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  135.057830][ T5810] RSP: 002b:00007fff3eece028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  135.066258][ T5810] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1add99f0d7
[  135.074236][ T5810] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3eece0e0
[  135.082217][ T5810] RBP: 00007fff3eece0e0 R08: 00007fff3eecf0e0 R09: 00000000ffffffff
[  135.090198][ T5810] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff3eecf170
[  135.098183][ T5810] R13: 00007f1adda3330a R14: 000000000001feb0 R15: 00007fff3eecf1b0
[  135.106170][ T5810]  </TASK>
[  135.109198][ T5810] ==================================================================
[  135.138209][ T5810] Disabling lock debugging due to kernel taint
[  135.147100][ T5810] BUG: kernel NULL pointer dereference, address: 0000000000000170
[  135.154970][ T5810] #PF: supervisor write access in kernel mode
[  135.161036][ T5810] #PF: error_code(0x0002) - not-present page
[  135.167028][ T5810] PGD 12a2b5067 P4D 12a2b5067 PUD 0 
[  135.172326][ T5810] Oops: 0002 [#1] PREEMPT SMP KASAN
[  135.177512][ T5810] CPU: 1 PID: 5810 Comm: syz-executor Tainted: G    B   W          syzkaller #0
[  135.186519][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  135.196580][ T5810] RIP: 0010:ihold+0x26/0x60
[  135.201072][ T5810] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 c1 1e ab ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 00 ac f0 ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 b1
[  135.220941][ T5810] RSP: 0018:ffffc90000ae7ca0 EFLAGS: 00010246
[  135.226995][ T5810] RAX: ffff888120592800 RBX: 0000000000000000 RCX: ffff888120592880
[  135.234972][ T5810] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  135.242929][ T5810] RBP: ffffc90000ae7cb0 R08: ffffffff87b757e7 R09: 1ffffffff0f6eafc
[  135.250892][ T5810] R10: dffffc0000000000 R11: fffffbfff0f6eafd R12: ffff8881402d71b4
[  135.258851][ T5810] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000
[  135.266913][ T5810] FS:  000055559533c500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  135.275925][ T5810] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  135.282508][ T5810] CR2: 0000000000000170 CR3: 00000001388ac000 CR4: 00000000003506a0
[  135.290464][ T5810] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  135.298420][ T5810] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  135.306385][ T5810] Call Trace:
[  135.309649][ T5810]  <TASK>
[  135.312565][ T5810]  vfs_rmdir+0x24c/0x4f0
[  135.316799][ T5810]  incfs_kill_sb+0xfe/0x210
[  135.321296][ T5810]  deactivate_locked_super+0xb5/0x120
[  135.326655][ T5810]  deactivate_super+0xaf/0xe0
[  135.331319][ T5810]  cleanup_mnt+0x45e/0x4e0
[  135.335744][ T5810]  __cleanup_mnt+0x19/0x20
[  135.340147][ T5810]  task_work_run+0x1e1/0x250
[  135.344727][ T5810]  ? __cfi_task_work_run+0x10/0x10
[  135.349822][ T5810]  ? __x64_sys_umount+0x12d/0x170
[  135.354840][ T5810]  ? __cfi___x64_sys_umount+0x10/0x10
[  135.360203][ T5810]  exit_to_user_mode_loop+0x9b/0xb0
[  135.365409][ T5810]  exit_to_user_mode_prepare+0x87/0xd0
[  135.370851][ T5810]  syscall_exit_to_user_mode+0x1a/0x30
[  135.376731][ T5810]  do_syscall_64+0x58/0xa0
[  135.381135][ T5810]  ? clear_bhb_loop+0x30/0x80
[  135.385823][ T5810]  ? clear_bhb_loop+0x30/0x80
[  135.390486][ T5810]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  135.396370][ T5810] RIP: 0033:0x7f1add99f0d7
[  135.400772][ T5810] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  135.420364][ T5810] RSP: 002b:00007fff3eece028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  135.428823][ T5810] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1add99f0d7
[  135.436880][ T5810] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3eece0e0
[  135.445401][ T5810] RBP: 00007fff3eece0e0 R08: 00007fff3eecf0e0 R09: 00000000ffffffff
[  135.453484][ T5810] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff3eecf170
[  135.461452][ T5810] R13: 00007f1adda3330a R14: 000000000001feb0 R15: 00007fff3eecf1b0
[  135.469525][ T5810]  </TASK>
[  135.472531][ T5810] Modules linked in:
[  135.476431][ T5810] CR2: 0000000000000170
[  135.480658][ T5810] ---[ end trace 0000000000000000 ]---
[  135.486095][ T5810] RIP: 0010:ihold+0x26/0x60
[  135.490622][ T5810] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 c1 1e ab ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 00 ac f0 ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 b1
[  135.510655][ T5810] RSP: 0018:ffffc90000ae7ca0 EFLAGS: 00010246
[  135.516729][ T5810] RAX: ffff888120592800 RBX: 0000000000000000 RCX: ffff888120592880
[  135.525691][ T5810] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  135.533701][ T5810] RBP: ffffc90000ae7cb0 R08: ffffffff87b757e7 R09: 1ffffffff0f6eafc
[  135.541661][ T5810] R10: dffffc0000000000 R11: fffffbfff0f6eafd R12: ffff8881402d71b4
[  135.549627][ T5810] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000
[  135.557590][ T5810] FS:  000055559533c500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  135.566516][ T5810] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  135.573192][ T5810] CR2: 0000000000000170 CR3: 00000001388ac000 CR4: 00000000003506a0
[  135.581157][ T5810] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  135.589129][ T5810] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  135.597471][ T5810] Kernel panic - not syncing: Fatal exception
[  135.603643][ T5810] Kernel Offset: disabled
[  135.607998][ T5810] Rebooting in 86400 seconds..