last executing test programs: 4m34.66694786s ago: executing program 4 (id=20): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 4m34.189553516s ago: executing program 4 (id=25): r0 = socket$nl_generic(0x10, 0x3, 0x10) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1061) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 4m33.919792938s ago: executing program 4 (id=27): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0xf0, 0x1a, 0x803, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0xe23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x4, 0x10001, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}}, 0xf0}}, 0x844) 4m33.825850049s ago: executing program 4 (id=29): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x2, 0xc2d, &(0x7f00000001c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) modify_ldt$write(0x1, &(0x7f0000000a40)={0x476, 0x20000000, 0x1000, 0x0, 0x1, 0x0, 0x1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/193, 0xc1}], 0x1, 0x0) 4m33.167859176s ago: executing program 4 (id=34): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x158, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x3, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2c, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x0) 4m32.199289327s ago: executing program 4 (id=41): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f00000001c0)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00'], 0x4, 0x2dc, &(0x7f0000000bc0)="$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") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1bd) 4m32.044414869s ago: executing program 32 (id=41): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f00000001c0)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00'], 0x4, 0x2dc, &(0x7f0000000bc0)="$eJzs3c1uG1UfBvBnEsf221fCXrBCSIwEC1ZV0ytwhFIJkRVVFsACIppKKI6QWikSH8Ltii0bFiy4AiQkLoQNd8AFILGjlSoNmvE4toubj6pu+fj9Nj45c54z/zMZJ5NFjj969fjoVpnb97/8Nf1+kY1RRnlQZJiNzNzLktE3AQD+yR5UVX6vplYdL+6tzhVJ+muuDQBYj/N+/7deOm391L52114aALAmN997/52dvb3dd8uynxvHX5/s13/Z16/T4zu380nGOcy1DPIoaR4UttI8LdTNG1VVTTrlw7Ish3njeHKyXyePP/y5nX/nt6TJb2eQYdN1+rTR5N/e290upxbyk7qOK+35R3X+egZ5+TS8lL++Ip/9bt58faH+qxnkl4/zaca51RQxzfeyt/vVdlm+VX37xxcf1OXV+WJyst9rxs1Vm8/5WwMAAAAAAAAAAAAAAAAAAAAAwL/Y1XbvnF6a/Xvqrnb/nc1H9RdbKWeGy/vzTPPFbKLF/YGqqppU+X62P8+1siyrduA838krnXRezKoBAAAAAAAAAAAAAAAAAADg7+XuZ58fHYzHh3eeSaPYmM7aSfLwZvK084wWel7L8phRstTTa1dyMB63Z8/4cLgwYafpaePZnI0pkjPLqBfxjC7LeY3/LVa42Pjhx8tO2D9/zNbqcz1V48rqazi7u44OitXXsJdZT7+9Sb7rJvMx3VywjO6TDlW5zO3XXVFhMrhIfLbW6Tz/bw5NzkileHJhm6fvy7aneHwV3eaqroxvtY089gaZ3xsXup/Tn8b/+rOisFsHAAAAAAAAAAAAAAAAAACs1fy/f1ccvH9mdKPqra0sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHiu5p//f4nGpA1fYHA3d+6+4CUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwH/BnAAAA//+lXFN6") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1bd) 4m18.537468057s ago: executing program 3 (id=98): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(0x0, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, 0x18, 0x229, 0x70bd29, 0x25dfdbff, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @uid}, @generic="4156c35c38b4d2de68cc281e03ddb6f3684b8ca7411a21f50d921aa5c2ea67685110dc00", @typed={0x8, 0x1e, 0x0, 0x0, @uid}, @nested={0x4, 0x97}]}, 0x4c}}, 0xc004) 4m17.33427335s ago: executing program 3 (id=102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) 4m15.958049005s ago: executing program 3 (id=104): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x3, 0x1eb, &(0x7f0000000640)="$eJzslU+L00AYxp9JYpKKVy9ePLjgHjRNUhUvC+vFkwdBYfEgWNzsspq10uZgCyJ+Au/ePPgxhHr1Q0gVRFH0op5H5l8ytknFtlrB9wedPMm8efPOO+kTEATx3/L2zfcJ/7b1PgRwDBsI9PUPbhXjWPGvwy8PX165vPPk5vNXwSRq/Zwt+O3newDGl1wU+pxzzu35DX28DsfoI/b8DhgirW/B+XhN6wwMN7S+Y+meiI+ivYM8i2738l0hYjEkYkjF0Jmu7/Njhl2rPmbND4aju908z/qVcGeuLCnqOzf+VNYXAltWffZ+RVDVxlX/kMBBonUHDKZnFxGY3qiWWOs/4VX53bnr97Hkst8BqK7sra6Ps8IXj1rodoDV7f2fE0HzC7eEcCGF2dHZGG/B/vwrAt7KEvIA+FWM+Jf8xQUaK3yxrY5lqY/UefPtx8+oCHtquyHYn5NnTucRGk96xnDa8idlJU/lG90uDu+3B8PR2YPD7n62n91L086F+Fwcn0/b0ojUWGeArvK/lvSno1X+Vr1fAj7z8aBbFP1EjeV5qsY6x3Wk/znYPKW+O8JN/am8XwGYhzL9c+RRqE23qR6CIIh1chJMerL0ZSP016Sc4Dy9uuY6CYIgCIIgCIIgCIJYnB8BAAD///LkUpg=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x0) stat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x54) 4m12.379280354s ago: executing program 3 (id=110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, 0x0, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r2) 4m10.98201808s ago: executing program 3 (id=113): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000a00)={[{@quota}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x22042, 0x20) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x200, 0x100000002, 0x7ab2, 0xfff}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r2 = dup(r1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'batadv_slave_1\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x1}}) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40383d0c, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_', @ANYRESDEC=0x0]) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r4, 0xffffffffffffffff, 0x0) 4m4.635622279s ago: executing program 3 (id=117): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) unshare(0x400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x8002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000300)=0x4) bind$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r5, &(0x7f0000000000)='\x00', 0x1, 0x4041, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) 3m47.474123948s ago: executing program 33 (id=117): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) unshare(0x400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x8002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000300)=0x4) bind$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r5, &(0x7f0000000000)='\x00', 0x1, 0x4041, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) 3m39.487806585s ago: executing program 2 (id=140): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x4, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="611404"], 0xa8) 3m39.119407319s ago: executing program 2 (id=142): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x20, r4, 0x321, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044094}, 0x4) 3m36.451793648s ago: executing program 2 (id=144): open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_mount_image$exfat(&(0x7f0000000700), &(0x7f00000001c0)='./file0\x00', 0x4000418, &(0x7f0000000280)=ANY=[], 0x1, 0x1504, &(0x7f0000000740)="$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") connect$inet6(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f00000000c0)='./file1\x00', 0x6e3) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sync() rename(0x0, 0x0) 3m31.7144339s ago: executing program 2 (id=150): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x2, 0x13, 0x0, 0x6, 0x2, 0x0, 0xffffffff}, 0x10}}, 0x4000840) 3m31.296832825s ago: executing program 2 (id=154): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x100000, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) 3m29.710687822s ago: executing program 2 (id=157): unshare(0x6a040000) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x80, r1}) 3m14.619987937s ago: executing program 34 (id=157): unshare(0x6a040000) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x80, r1}) 1m37.046751577s ago: executing program 7 (id=480): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000380)=0xfffffffe, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_pid(r2, &(0x7f0000002380), 0x12) syz_genetlink_get_family_id$team(&(0x7f0000000240), r0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@local, @empty}, &(0x7f0000000340)=0xc) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000325bd7000fedbdf250400000800000000000000002700000005000300060000"], 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x40081) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3800000010003b15fdffffffffdbdf2500000023", @ANYRES32=0x0, @ANYBLOB="00000000015001001800128008000100677470000c0002800800030001"], 0x38}}, 0x2400c080) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0c000000040000000400", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000009e492a626a68033b16732db03e94f9f5692794296197ee5ec6be3d2562e271f31fb0ee0d81d0e9dc24df7108a001171c4415dc8f9a11436a9005da29fcd7a09602c78415b5864bf8051b9625d013cafc6935fe3c08e10ba15f9685f02e6f05ae883f15a0a3b02a26149dd50a52ffd6591c966bf7a8ed19c1ae2be066fa553a00a4c7607e12c2e1b8352d44302f346a10cc67cf3316ad8dfd7568130eb02f9d1a1941d13dbf491347112b2fe8275c95a7b6bc75a7deb2f3b23d1305f4f651ea9de1324ce9d84caffd3bbda96062716bbdd595d12b3b7c325cc2227a2d26c8a06900c65c15922519c73744c23c191e21946b8f39", @ANYRESDEC=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000e002000000000300000002000000090000000300000000000084234b03616231ef8edf192f130400000700000001000000000000000e00000004000000ffffff7f0700000005000000010400000c00000000000000ff0300000c000000050000000300000010000000ffff0000010000000000"], 0x0, 0x42}, 0x28) r9 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x10, 0x80000) setsockopt$inet_opts(r9, 0x0, 0x0, &(0x7f0000000140), 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x48) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r10, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) sendto$inet6(r10, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m34.680324592s ago: executing program 6 (id=482): process_vm_writev(0x0, &(0x7f00000012c0), 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010f40)={0x0, 0x0, &(0x7f0000010200)={&(0x7f00000001c0)={0x1001c, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x5, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './bus'}}, 0x1001c}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m34.513091794s ago: executing program 7 (id=484): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@usrquota}, {@grpquota}, {@noload}, {@nobarrier}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvOk6a9PFLfyU8GloIFETEI2nSBz1wAYHEAQQSHIo4BSetQt0GNUGiVQSBQxDigCpxRxyR+As4wQUBJySucEeVEMqlhZPR2rtp4tohDydO8ecjbTuzu+7Md2fHnp2xG0DHGkr/SCL2R8SvEdEfEcX6E4Zqf91cmi/9tTRfSqJSee3PJH1Z3FiaL2X/RHVL7avtqFSy/J4G5S6+GTFRLk9dzvKjcxffGZ29cvWp6YsT56fOT10aP3Pm5ImjPafHT7UkzjSuG4Pvzxw5/OIb114unb321o9fp/Xdnx3P42ilodrVbejRVhfWZgdWpJNiGyvChhzI+nt3tf/3R1f0LR/rjxc+amvlgG1VqVQqjT6fMwsV4D8siXbXAGiP/IM+ff7Ntx0aeuwKfzxbewBK476ZbbUjxShk53TXPd+2Um9EnF34+4t0i22ahwAAWOnbdPzzZKPxXyHuWXHe/7I1lIMR8f+IOBQRd0XEQETcHVE9996IuG+D5devkNw+/ilc31Rg65SO/57J1rZWj//y0V8c7MpyB6rxdyfnpstTx7NrMhzde9L82KqXrPbd8798Vr/v02yafWjF+C/d0vLzsWBWj+vFugm6yYm5iZYEn8b/YcRgsVH8yfI6YBIRhyNicJNlTD/+1ZFmx/49/jW0YJ2p8mXEY7X2X4i6+HNJ0/XJsadPj58a7Y3y1PHR/K643U8/L77arPwtxd8CafvvbXj/1+JPnxGT3ojZK1cvVNdrZzdexuJvH5eSJscGNnn/9ySvV9M92b73JubmLo9F9CQvpdm+VfvHb702z+fnp/EPH2vc/w/VHs+qV+L+iEhv4qMR8UBEPJi13UMR8XBEHFsj/h+ee+TtZseat/8as/ItlMY/uUb7p295aepW+2880XXh+2+alV9ZV/ufrKaGsz3ref9bbwW3cu0AAADgTlGofgc+KYwspwuFkZHad/gHYm+hPDM798S5mXcvTda+K38wugv5TFf/ivnQsWxuOM+P1+VPZPPGn3f1VfMjpZnyZLuDhw63r0n/T/3e1e7aAdvO77Wgc+n/0Ln0f+hc+j90Lv0fOlRP490f7HQ9gLbY+Od/77bUA9h5xv/QufR/6Fz6P3Skpr+NL2zpJ/93aqK4O6rRMNG3O6qRJ6KwK6rRusQrn9S6xG6pT54orvs/s9hkYk/DQ+1+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiNfwIAAP//RwfmeQ==") syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10081, &(0x7f00000001c0)={[{@nodioread_nolock}, {@nobh}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 1m33.800056882s ago: executing program 6 (id=486): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x93) 1m33.689512913s ago: executing program 7 (id=487): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000f7ff0000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getresuid(&(0x7f0000000840), &(0x7f0000000900), &(0x7f0000000940)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x2f, 0x28, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m33.207543948s ago: executing program 6 (id=489): r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000600)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/fscaps', 0x101001, 0x391) write$tun(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10b) setreuid(0xffffffffffffffff, 0xee01) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) readv(r0, &(0x7f0000001c00)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001780)=""/170, 0xaa}], 0x2) 1m31.588760206s ago: executing program 6 (id=491): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000240)={[{@bsdgroups}, {@discard}, {@nodiscard}, {@errors_remount}, {@noauto_da_alloc}, {@test_dummy_encryption_v1}, {@grpjquota}, {@noauto_da_alloc}, {@errors_remount}]}, 0x1, 0x476, &(0x7f0000000e00)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) sync() lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x4000) 1m31.23981163s ago: executing program 7 (id=495): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x410, &(0x7f0000000040)=ANY=[], 0x11, 0x48f, &(0x7f0000000480)="$eJzs29trHOUfx/HPd7K72Wz7+3XbpmmVgquCSsWaQ4/Gix5iqNBDmjYiRYXYbOLSnMim0hTR4o233ngjIgoKUkULIt54pb3zD1AQBL3wQgT3wgMIgjyzMzuTZNOk3UO67fsF7U6e+c7Mc5hn5tmZZwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKQjTx3u7rH1zgUAAGimk2eGu3u5/wMAcFc5y/d/AACAu4nJ0/cyDQyX7IT/d1n6eGH64qWRgcHqm3WYv2WbH+/+pXt6+/bs3bf/QPh54+3r7R6dOnP2cO7ozNTsXL5YzI/lRqYL52fG8mveQ63bL7XLr4Dc1IWLY+PjxVzv7r5Fqy9lf2nf0JXt3991yAtjRwYGB8/EYhLJWz76MiuN8FPytEOm3x761E5K8lR7Xaxy7jRah1+IXX4hRgYG/YJMFkan593KobAivKCsgVRYR01oi5p0Si5flqrPd7akPB2Sqevnkp2S1BbWw6P+g+GVN0zU5fC3zOXzeUkPqAXa7DbWLk8/yjS1Ka2h9W9WNFlCni7J9Ed/yU771wPXn9xl8/gzuaenx2disUMW9KhWvz80021+bUrL00n/il+y4fXODJrODZbekmnbxy/74wr549JN/fufON0XH2FsX2U/LnZ3MH5cyz05GcQO2ZCZV/9yAQAAAAAAAJDazdN3MpW+ykWJWZMXe2WcVvnFUG59sgigUczT2zKdHi75j+Hj81LaYvN7Klr93V9j89+RPjozuzBXmHhpvur6TPrwi8X5udHz1Verw11n2+Ipq81jqVHSPKVkeu7Pj6xy3PL1P5gKEOXmwyejOTPppcf3z5v/l+czhe+QDp7bHl+umuWbeD/qjmnmaV6mI1t2BHNVMlpWZyrHfS7T7+/tDOK8lMt8uNtseY/jhcl8t4v9Wqb3/w1j/WlR2hDEbo1ie1ysyfTmicWxG4PYzii218UOynT9heqx26LYPhf7ukyzv+bC2IyLvS+I7Ypid5+fmRyrVpXAzXL9/yeZ3u3MWdg3EuXzb3n/fyW6F1xZuqMV+nyt/T8bS7sS9Otzrv//tcPvy37/96r3/zdk+uSLnUFcue+lgvWb/f+j/v+sTBPfLo7NBLFbotieNVdsi3Dtv1OmY9uuVeomaP+gBaJW89s/fpLEz44Gtf/mWJo7F+5NSO31KTokFRcuXxidnMzPscACCyxUFtb7yoRmcPf/z9wo6ssfKuOd4P4ffE2JRlZ/vxqNBvqX7qhB9/8tsbT+YDSSTPhzeGeT26V0ceHyY4Wp0Yn8RH56T/e+7r17DvYcPJBMhYO7aKnmuroTufb/RqZ/NlytfN9dPP6rPv7PLN1Rg9p/aywts2i8UnPREbT/VZnuv36t8lziRuP/8PnPIw+WPyv9s9b296q3f2csLRsc93/1KToAAAAAAAAAAAAAAAAAtLSkefpApmOPJyz8rdla5v8t+wFag+b/dcXSxpr0e4WaKxUAWoAnT+/I9LBK9ppL2CidiH/ijvZfAAAA//+v4SJX") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r0, 0xfffffffffffffffe, 0x29) 1m29.252626122s ago: executing program 7 (id=498): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m28.632977929s ago: executing program 7 (id=500): setsockopt(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000100)="2fd3", 0x2) open(0x0, 0x82000, 0x86) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') read$FUSE(r3, &(0x7f00000051c0)={0x2020}, 0x2020) 1m28.039608836s ago: executing program 6 (id=504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000010401f007000000000000b0e64cc305060006"], 0x30}}, 0x24004000) 1m16.039400017s ago: executing program 6 (id=521): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x28}}, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0xde, 0x0}, 0x3}}}, 0x108) 1m11.275202999s ago: executing program 35 (id=500): setsockopt(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000100)="2fd3", 0x2) open(0x0, 0x82000, 0x86) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') read$FUSE(r3, &(0x7f00000051c0)={0x2020}, 0x2020) 1m0.814142354s ago: executing program 36 (id=521): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x28}}, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0xde, 0x0}, 0x3}}}, 0x108) 18.926034563s ago: executing program 8 (id=653): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="580100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000000021"], 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x2094) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000084d46c000000fc020000000000000000000000000000000000000100000000000000000000000c3d000000000000fdffffffffffffffff07000000000000fcfffffffffffffffdffffffffffffff000000000000000000000000000000000000000000000000fcffffffffffffffa3000000000000006d930000493d00000040000003000000033500000a0001046000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0008"], 0x144}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 18.593614406s ago: executing program 8 (id=654): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) 15.967267575s ago: executing program 8 (id=663): syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000403512100040000102030109028a000301046008080b0001012430010904000000010130000a2401f5260005000000132403050004030306070000000400010004000924050602"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac3(0x6, 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) 15.805608707s ago: executing program 5 (id=665): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004004}, 0x10) 15.56544903s ago: executing program 5 (id=667): r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000600)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/fscaps', 0x101001, 0x391) write$tun(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10b) setreuid(0xffffffffffffffff, 0xee01) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) readv(r0, &(0x7f0000001c00)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001780)=""/170, 0xaa}], 0x2) 14.63991034s ago: executing program 5 (id=669): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000701, 0x0, 0xee01, &(0x7f0000000340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x30) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x72) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, 0x0, 0x0, r3) ppoll(&(0x7f0000000000)=[{r3, 0x522}], 0x1, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x204100, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x3c) 13.71855785s ago: executing program 5 (id=672): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) setpriority(0x0, r0, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0xc8, 0x8, 0x130, 0x5803, 0x220, 0x2e8, 0x2e8, 0x220, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00', [], [], 'batadv0\x00', 'wlan0\x00'}, 0x0, 0x110, 0x130, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@connlimit={{0x40}, {[0x3ebbff225716156f, 0xffff00, 0xff000000], 0x7, 0x2, {0x7}}}, @common=@inet=@socket1={{0x28}, 0x4c}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 12.995943638s ago: executing program 8 (id=673): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcd", 0x40}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00\x00'], 0x0, 0x0, 0x0}, 0x0) 12.223883676s ago: executing program 9 (id=676): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="580100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000000021"], 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x2094) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="440100001a00ffff2abd7040030000000a01010100"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000084d46c000000fc020000000000000000000000000000000000000100000000000000000000000c3d000000000000fdffffffffffffffff07000000000000fcfffffffffffffffdffffffffffffff000000000000000000000000000000000000000000000000fcffffffffffffffa3000000000000006d930000493d00000040000003000000033500000a0001046000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0008"], 0x144}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 11.270792857s ago: executing program 1 (id=678): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 11.187366787s ago: executing program 9 (id=679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000019) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x88) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) inotify_init1(0x80000) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket(0x28, 0x801, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000100)=0xfffffffffffffff9, 0x4) 11.114973488s ago: executing program 5 (id=680): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x10010, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x1c0000}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x576, &(0x7f00000011c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) 9.987942111s ago: executing program 9 (id=681): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r5, &(0x7f0000000180)='1\x00', 0x2) 9.841540492s ago: executing program 1 (id=682): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000701, 0x0, 0xee01, &(0x7f0000000340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x30) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x72) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, 0x0, 0x0, r3) ppoll(&(0x7f0000000000)=[{r3, 0x522}], 0x1, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x204100, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x3c) 9.671316764s ago: executing program 9 (id=683): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4040050) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, 0x0) memfd_create(&(0x7f00000003c0)='(@^\\\x00', 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='statm\x00') lseek(r4, 0xfffd, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r5, &(0x7f0000000440), 0x0, 0x400c404) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000050) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x1330, 0x1168, 0x178, 0xc, 0x1168, 0x178, 0x1260, 0x258, 0x258, 0x1260, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'pim6reg0\x00', 'netpci0\x00'}, 0x0, 0x1100, 0x1168, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@addrtype1={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1390) 9.465458786s ago: executing program 0 (id=684): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@usrquota}, {@grpquota}, {@noload}, {@nobarrier}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvOk6a9PFLfyU8GloIFETEI2nSBz1wAYHEAQQSHIo4BSetQt0GNUGiVQSBQxDigCpxRxyR+As4wQUBJySucEeVEMqlhZPR2rtp4tohDydO8ecjbTuzu+7Md2fHnp2xG0DHGkr/SCL2R8SvEdEfEcX6E4Zqf91cmi/9tTRfSqJSee3PJH1Z3FiaL2X/RHVL7avtqFSy/J4G5S6+GTFRLk9dzvKjcxffGZ29cvWp6YsT56fOT10aP3Pm5ImjPafHT7UkzjSuG4Pvzxw5/OIb114unb321o9fp/Xdnx3P42ilodrVbejRVhfWZgdWpJNiGyvChhzI+nt3tf/3R1f0LR/rjxc+amvlgG1VqVQqjT6fMwsV4D8siXbXAGiP/IM+ff7Ntx0aeuwKfzxbewBK476ZbbUjxShk53TXPd+2Um9EnF34+4t0i22ahwAAWOnbdPzzZKPxXyHuWXHe/7I1lIMR8f+IOBQRd0XEQETcHVE9996IuG+D5devkNw+/ilc31Rg65SO/57J1rZWj//y0V8c7MpyB6rxdyfnpstTx7NrMhzde9L82KqXrPbd8798Vr/v02yafWjF+C/d0vLzsWBWj+vFugm6yYm5iZYEn8b/YcRgsVH8yfI6YBIRhyNicJNlTD/+1ZFmx/49/jW0YJ2p8mXEY7X2X4i6+HNJ0/XJsadPj58a7Y3y1PHR/K643U8/L77arPwtxd8CafvvbXj/1+JPnxGT3ojZK1cvVNdrZzdexuJvH5eSJscGNnn/9ySvV9M92b73JubmLo9F9CQvpdm+VfvHb702z+fnp/EPH2vc/w/VHs+qV+L+iEhv4qMR8UBEPJi13UMR8XBEHFsj/h+ee+TtZseat/8as/ItlMY/uUb7p295aepW+2880XXh+2+alV9ZV/ufrKaGsz3ref9bbwW3cu0AAADgTlGofgc+KYwspwuFkZHad/gHYm+hPDM798S5mXcvTda+K38wugv5TFf/ivnQsWxuOM+P1+VPZPPGn3f1VfMjpZnyZLuDhw63r0n/T/3e1e7aAdvO77Wgc+n/0Ln0f+hc+j90Lv0fOlRP490f7HQ9gLbY+Od/77bUA9h5xv/QufR/6Fz6P3Skpr+NL2zpJ/93aqK4O6rRMNG3O6qRJ6KwK6rRusQrn9S6xG6pT54orvs/s9hkYk/DQ+1+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiNfwIAAP//RwfmeQ==") syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10081, &(0x7f00000001c0)={[{@nodioread_nolock}, {@nobh}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 9.10791868s ago: executing program 0 (id=685): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@private=0xa010100, @in=@broadcast, 0x0, 0x0, 0x0, 0xfffe, 0xa, 0x0, 0x0, 0x4f}, {}, {0x9}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0xa, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b0001"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x2, 0x13, 0x0, 0x6, 0x2, 0x0, 0xffffffff}, 0x10}}, 0x4000840) 9.084522751s ago: executing program 0 (id=686): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000be9b2a204705202755af010203010902240001000010"], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usbip_server_init(0x3) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 8.703433475s ago: executing program 1 (id=687): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x200000, 0x2, 0x0, 0x2, 0x8007, 0xff}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r2, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100000e000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000005000500000000000a00"/89], 0x70}}, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x8000, 0x8000, 0x4, 0x6, {{0x7, 0x4, 0x3, 0x7, 0x1c, 0x66, 0x0, 0x5e, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@ra={0x94, 0x4, 0x1}, @end]}}}}}) socket(0x10, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000100037040000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800600060000000000050007"], 0x44}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 8.549925297s ago: executing program 9 (id=688): setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x0, 0x806, 0x0, 0x100, 0x6, 0x180107}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0) getresuid(&(0x7f0000000180), 0x0, &(0x7f00000002c0)) r7 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000cab000)) 8.388014388s ago: executing program 8 (id=689): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="580100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000000021"], 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x2094) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="440100001a00ffff2abd7040030000000a01010100"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000084d46c000000fc020000000000000000000000000000000000000100000000000000000000000c3d000000000000fdffffffffffffffff07000000000000fcfffffffffffffffdffffffffffffff000000000000000000000000000000000000000000000000fcffffffffffffffa3000000000000006d930000493d00000040000003000000033500000a0001046000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0008"], 0x144}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 8.372330718s ago: executing program 0 (id=690): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000010401f007000000000000b0e64cc305060006"], 0x30}}, 0x24004000) 8.360238439s ago: executing program 1 (id=691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704", @ANYRESHEX], 0xfdef) 3.632055581s ago: executing program 0 (id=692): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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") inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x4000423) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000000000d002"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 3.63189835s ago: executing program 1 (id=693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r5, &(0x7f0000000180)='1\x00', 0x2) 3.631788161s ago: executing program 8 (id=694): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 3.618099441s ago: executing program 9 (id=695): openat$ptp0(0xffffffffffffff9c, 0x0, 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000e00)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x7, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000000), 0xfffffffffffffffe) mkdir(0x0, 0x81) 3.592770501s ago: executing program 5 (id=696): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@usrquota}, {@grpquota}, {@noload}, {@nobarrier}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10081, &(0x7f00000001c0)={[{@nodioread_nolock}, {@nobh}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 50.63155ms ago: executing program 1 (id=697): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000701, 0x0, 0xee01, &(0x7f0000000340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x30) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x72) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, 0x0, 0x0, r3) ppoll(&(0x7f0000000000)=[{r3, 0x522}], 0x1, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x204100, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x3c) 0s ago: executing program 0 (id=698): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) setuid(0xee00) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): [ 88.917886][ T4408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.959333][ T4408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.123379][ T4408] device hsr_slave_0 entered promiscuous mode [ 89.140441][ T4408] device hsr_slave_1 entered promiscuous mode [ 89.167050][ T4408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.186557][ T4408] Cannot create hsr debugfs directory [ 89.316860][ T4266] usb 4-1: unable to get BOS descriptor or descriptor too short [ 90.219111][ T1108] Bluetooth: hci4: command 0x041b tx timeout [ 90.254115][ T4266] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x82 is Bulk; changing to Interrupt [ 90.294137][ T4266] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x3 is Bulk; changing to Interrupt [ 90.323651][ T4266] usb 4-1: config 1 interface 0 has no altsetting 0 [ 90.524189][ T1111] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.574251][ T4266] usb 4-1: string descriptor 0 read error: -22 [ 90.582549][ T4266] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.626802][ T4266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.684391][ T4472] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 90.714033][ T4472] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 90.745981][ T4266] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 90.824197][ T1111] usb 2-1: Using ep0 maxpacket: 32 [ 90.949485][ T4178] usb 4-1: USB disconnect, device number 2 [ 90.984339][ T1111] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 91.003991][ T1111] usb 2-1: config 0 has no interface number 0 [ 91.154904][ T4408] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 91.653700][ T1111] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 91.673676][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.684331][ T1111] usb 2-1: Product: syz [ 91.690878][ T1111] usb 2-1: Manufacturer: syz [ 91.696831][ T1111] usb 2-1: SerialNumber: syz [ 91.707737][ T1111] usb 2-1: config 0 descriptor?? [ 91.740065][ T4532] loop3: detected capacity change from 0 to 16 [ 91.755045][ T1111] smsc95xx v2.0.0 [ 91.792258][ T4408] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 91.802428][ T4532] erofs: (device loop3): mounted with root inode @ nid 36. [ 91.827048][ T4408] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 91.869295][ T4408] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 92.085195][ T140] device hsr_slave_0 left promiscuous mode [ 92.092524][ T140] device hsr_slave_1 left promiscuous mode [ 92.116148][ T140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.131875][ T140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.143237][ T4545] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 92.144544][ T140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.181791][ T140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.193248][ T1111] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 92.212401][ T1111] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 92.231919][ T140] device bridge_slave_1 left promiscuous mode [ 92.305612][ T140] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.354440][ T2266] Bluetooth: hci4: command 0x040f tx timeout [ 92.405361][ T140] device bridge_slave_0 left promiscuous mode [ 92.434344][ T140] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.470604][ T140] device veth1_macvtap left promiscuous mode [ 92.511349][ T140] device veth0_macvtap left promiscuous mode [ 92.526839][ T140] device veth1_vlan left promiscuous mode [ 92.538908][ T4266] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 92.549880][ T13] cfg80211: failed to load regulatory.db [ 92.558573][ T140] device veth0_vlan left promiscuous mode [ 92.838295][ T140] team0 (unregistering): Port device team_slave_1 removed [ 92.860273][ T140] team0 (unregistering): Port device team_slave_0 removed [ 92.882472][ T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.903605][ T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.935300][ T4266] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.963913][ T4266] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 93.004357][ T1111] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -71 [ 93.026170][ T140] bond0 (unregistering): Released all slaves [ 93.027815][ T1111] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 93.059805][ T1111] usb 2-1: USB disconnect, device number 2 [ 93.144560][ T4266] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 93.165646][ C1] hrtimer: interrupt took 236541 ns [ 93.172509][ T4266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.184247][ T4266] usb 4-1: Product: syz [ 93.190435][ T4266] usb 4-1: Manufacturer: syz [ 93.197870][ T4266] usb 4-1: SerialNumber: syz [ 93.217471][ T4266] usb 4-1: config 0 descriptor?? [ 93.397449][ T4408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.575426][ T4551] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 93.583725][ T4551] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 93.607309][ T4551] vhci_hcd vhci_hcd.0: Device attached [ 93.679152][ T4574] vhci_hcd: connection closed [ 93.682521][ T4253] vhci_hcd: stop threads [ 93.697461][ T7] usb 4-1: USB disconnect, device number 3 [ 93.707955][ T4253] vhci_hcd: release socket [ 93.713053][ T4408] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.716470][ T4253] vhci_hcd: disconnect device [ 93.753270][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.824247][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.888717][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.925276][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.974379][ T3034] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.982304][ T3034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.040395][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.079510][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.138508][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.190655][ T3034] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.200956][ T3034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.231940][ T4592] loop1: detected capacity change from 0 to 4096 [ 94.379857][ T4592] EXT4-fs (loop1): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 94.409561][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.541430][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.748136][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.012409][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.254446][ T4604] sched: RT throttling activated [ 96.815697][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.860498][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.927661][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.989159][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.076387][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.133882][ T4237] Bluetooth: hci4: command 0x0419 tx timeout [ 97.144593][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.220209][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.733109][ T4636] netlink: 48 bytes leftover after parsing attributes in process `syz.3.98'. [ 99.258600][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.359167][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.057773][ T4408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.508652][ T4657] loop1: detected capacity change from 0 to 512 [ 101.976781][ T4657] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.958999][ T4669] loop3: detected capacity change from 0 to 16 [ 103.012544][ T4669] erofs: (device loop3): mounted with root inode @ nid 36. [ 103.218212][ T4669] attempt to access beyond end of device [ 103.218212][ T4669] loop3: rw=0, want=34359738368, limit=16 [ 103.271256][ T4674] erofs: (device loop3): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 104.635657][ T4690] loop0: detected capacity change from 0 to 512 [ 104.670471][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.855844][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.915315][ T4690] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.109: iget: bad i_size value: 38620345925642 [ 104.994590][ T4690] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.109: couldn't read orphan inode 15 (err -117) [ 105.283210][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.313594][ T4690] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 105.383394][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.506396][ T4408] device veth0_vlan entered promiscuous mode [ 105.604285][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.634174][ T4690] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.109: bg 0: block 5: invalid block bitmap [ 105.718189][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.985967][ T4408] device veth1_vlan entered promiscuous mode [ 106.098606][ T4702] loop3: detected capacity change from 0 to 512 [ 106.153887][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #104!!! [ 106.165986][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18e!!! [ 106.179653][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18e!!! [ 106.192806][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18e!!! [ 106.213873][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18e!!! [ 106.232094][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18e!!! [ 106.248786][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18e!!! [ 106.265754][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18e!!! [ 106.282569][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18e!!! [ 106.296774][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18e!!! [ 112.247379][ T4408] device veth0_macvtap entered promiscuous mode [ 112.370192][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.444063][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.971076][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.797255][ T4408] device veth1_macvtap entered promiscuous mode [ 114.604500][ T4408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.360485][ T4408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.504038][ T4408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.632294][ T4408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.770416][ T4408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.894315][ T4408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.042232][ T4408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.196715][ T4408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.474494][ T4408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.654657][ T4408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.855335][ T4408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.983529][ T4408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.123937][ T4408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.300045][ T4408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.439839][ T4408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.494138][ T4408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.523070][ T4408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.603648][ T4408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.737928][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.795373][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.883168][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.980334][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.098950][ T4408] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.235989][ T4408] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.338000][ T4408] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.824910][ T4723] ODEBUG: Out of memory. ODEBUG disabled [ 119.888846][ T4408] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.120158][ T4753] device syzkaller0 entered promiscuous mode [ 122.453354][ T4314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.514338][ T4314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.654327][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.734048][ T4266] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 122.749227][ T4442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.785404][ T4442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.869127][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 123.184946][ T4266] usb 3-1: unable to get BOS descriptor or descriptor too short [ 123.304715][ T4266] usb 3-1: config 16 has an invalid interface number: 102 but max is 0 [ 124.963489][ T4775] xt_socket: unknown flags 0x4c [ 129.054070][ T4266] usb 3-1: config 16 has no interface number 0 [ 129.062106][ T4266] usb 3-1: config 16 interface 102 altsetting 7 bulk endpoint 0x9 has invalid maxpacket 8 [ 129.250723][ T4266] usb 3-1: config 16 interface 102 altsetting 7 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 129.374193][ T4266] usb 3-1: config 16 interface 102 has no altsetting 0 [ 130.613818][ T4784] Zero length message leads to an empty skb [ 130.704673][ T4784] netlink: 220 bytes leftover after parsing attributes in process `syz.5.134'. [ 131.896514][ T4783] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 134.993805][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.998850][ T4266] usb 3-1: string descriptor 0 read error: -71 [ 135.004014][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.132068][ T4266] usb 3-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice=dc.62 [ 135.328782][ T4266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.664801][ T4266] usb 3-1: can't set config #16, error -71 [ 135.677700][ T4266] usb 3-1: USB disconnect, device number 3 [ 137.296685][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.626219][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.889154][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.415428][ T4818] loop0: detected capacity change from 0 to 1024 [ 139.860868][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.890745][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 140.116390][ T4807] chnl_net:caif_netlink_parms(): no params data found [ 140.349548][ T4824] loop2: detected capacity change from 0 to 256 [ 140.823354][ T4824] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xecc0b056, utbl_chksum : 0xe619d30d) [ 142.450265][ T26] audit: type=1800 audit(1777951244.334:5): pid=4831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.143" name="file1" dev="loop0" ino=2 res=0 errno=0 [ 142.570667][ T4807] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.728243][ T4807] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.734540][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 142.896550][ T4807] device bridge_slave_0 entered promiscuous mode [ 142.983856][ T4807] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.985322][ T4824] attempt to access beyond end of device [ 142.985322][ T4824] loop2: rw=2049, want=34225520826, limit=256 [ 143.266314][ T4824] Buffer I/O error on dev loop2, logical block 34225520825, lost async page write [ 143.322845][ T4807] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.389687][ T4807] device bridge_slave_1 entered promiscuous mode [ 143.727371][ T4842] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.204424][ T4824] attempt to access beyond end of device [ 144.204424][ T4824] loop2: rw=2049, want=34225520827, limit=256 [ 144.220940][ T4845] loop1: detected capacity change from 0 to 512 [ 144.366179][ T4824] Buffer I/O error on dev loop2, logical block 34225520826, lost async page write [ 144.405140][ T4845] EXT4-fs (loop1): Ignoring removed oldalloc option [ 144.449667][ T4845] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 144.464194][ T4824] attempt to access beyond end of device [ 144.464194][ T4824] loop2: rw=2049, want=34225520828, limit=256 [ 144.594385][ T4845] EXT4-fs (loop1): 1 truncate cleaned up [ 144.614630][ T4824] Buffer I/O error on dev loop2, logical block 34225520827, lost async page write [ 144.695110][ T4845] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 144.766210][ T4178] Bluetooth: hci0: command 0x040f tx timeout [ 144.813404][ T4807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.918598][ T4807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.393293][ T4866] loop5: detected capacity change from 0 to 512 [ 145.393351][ T4868] loop0: detected capacity change from 0 to 512 [ 145.418165][ T4807] team0: Port device team_slave_0 added [ 145.611400][ T4807] team0: Port device team_slave_1 added [ 145.743496][ T4807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.825901][ T4807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.858867][ T4866] EXT4-fs (loop5): Ignoring removed nobh option [ 145.869557][ T4866] EXT4-fs (loop5): Ignoring removed orlov option [ 145.893644][ T4866] EXT4-fs error (device loop5): __ext4_iget:4919: inode #11: block 1: comm syz.5.151: invalid block [ 145.907330][ T4866] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.151: couldn't read orphan inode 11 (err -117) [ 145.916446][ T4868] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.153: inode #1: comm syz.0.153: iget: illegal inode # [ 145.921128][ T4807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.285260][ T4866] EXT4-fs (loop5): mounted filesystem without journal. Opts: stripe=0x0000000000000000,nobh,max_dir_size_kb=0x0000000000000008,debug_want_extra_isize=0x0000000000000080,nogrpid,sysvgroups,orlov,grpquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 146.317241][ T4868] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.153: error while reading EA inode 1 err=-117 [ 146.405814][ T4868] EXT4-fs (loop0): 1 orphan inode deleted [ 146.412741][ T4868] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 146.574614][ T4866] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 146.666661][ T4807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.854004][ T4807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.984000][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 147.154325][ T4807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.710818][ T4807] device hsr_slave_0 entered promiscuous mode [ 149.005548][ T4807] device hsr_slave_1 entered promiscuous mode [ 149.316713][ T4936] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 150.465932][ T4961] loop1: detected capacity change from 0 to 16 [ 150.660451][ T4961] erofs: (device loop1): mounted with root inode @ nid 36. [ 150.940746][ T4961] attempt to access beyond end of device [ 150.940746][ T4961] loop1: rw=0, want=34359214088, limit=16 [ 151.084967][ T4961] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 46 [ 151.265826][ T4972] loop5: detected capacity change from 0 to 1024 [ 151.311135][ T4972] EXT4-fs (loop5): Ignoring removed orlov option [ 151.406230][ T4972] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 151.457094][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 151.549006][ T4980] loop1: detected capacity change from 0 to 512 [ 151.754598][ T4980] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.166: inode #1: comm syz.1.166: iget: illegal inode # [ 151.785019][ T4980] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.166: error while reading EA inode 1 err=-117 [ 151.914475][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.940066][ T4980] EXT4-fs (loop1): 1 orphan inode deleted [ 151.979077][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.986971][ T4980] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.088092][ T7] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 152.141250][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.222050][ T7] usb 1-1: config 0 descriptor?? [ 152.672305][ T9] device hsr_slave_0 left promiscuous mode [ 154.177732][ T7] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 154.232431][ T7] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 154.283687][ T9] device hsr_slave_1 left promiscuous mode [ 154.335986][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.377468][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.395388][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.404802][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.415243][ T9] device bridge_slave_1 left promiscuous mode [ 154.422968][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.436750][ T9] device bridge_slave_0 left promiscuous mode [ 154.445597][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.446052][ T4999] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 154.514771][ T9] device veth1_macvtap left promiscuous mode [ 154.522241][ T9] device veth0_macvtap left promiscuous mode [ 154.544121][ T4234] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 154.551045][ T9] device veth1_vlan left promiscuous mode [ 154.572837][ T9] device veth0_vlan left promiscuous mode [ 154.807382][ T4234] usb 6-1: Using ep0 maxpacket: 32 [ 154.934212][ T4234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 154.948965][ T4234] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 155.002073][ T5015] netlink: 224 bytes leftover after parsing attributes in process `syz.1.176'. [ 155.034250][ T9] team0 (unregistering): Port device team_slave_1 removed [ 155.052512][ T9] team0 (unregistering): Port device team_slave_0 removed [ 155.075305][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.105064][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.144319][ T4234] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 155.158768][ T4234] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.170680][ T4234] usb 6-1: Product: syz [ 155.179936][ T4234] usb 6-1: Manufacturer: syz [ 155.187376][ T4234] usb 6-1: SerialNumber: syz [ 155.202059][ T4234] usb 6-1: config 0 descriptor?? [ 155.236676][ T9] bond0 (unregistering): Released all slaves [ 155.254804][ T4234] hub 6-1:0.0: bad descriptor, ignoring hub [ 155.261607][ T4234] hub: probe of 6-1:0.0 failed with error -5 [ 155.276002][ T4234] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input6 [ 155.296644][ T4234] usbtouchscreen 6-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 155.325970][ T4234] usbtouchscreen: probe of 6-1:0.0 failed with error -90 [ 155.545849][ T4807] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 155.614254][ T4234] usb 6-1: USB disconnect, device number 2 [ 155.749431][ T4807] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 155.784372][ T4807] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 155.818230][ T4807] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 156.658372][ T5028] loop5: detected capacity change from 0 to 512 [ 156.693807][ T5026] loop1: detected capacity change from 0 to 2048 [ 156.761563][ T4807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.836680][ T5028] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.178: inode #1: comm syz.5.178: iget: illegal inode # [ 156.847307][ T4807] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.864727][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.899271][ T5026] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.912243][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.940736][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.952760][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.963242][ T3034] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.972369][ T3034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.981838][ T5028] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.178: error while reading EA inode 1 err=-117 [ 157.003454][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.017327][ T5028] EXT4-fs (loop5): 1 orphan inode deleted [ 157.041846][ T5028] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.079098][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.111819][ T3034] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.119643][ T3034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.232953][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.394087][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.402936][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.457357][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.551243][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.602147][ T4807] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 157.669863][ T4807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.765301][ T5040] netlink: 188 bytes leftover after parsing attributes in process `syz.1.180'. [ 157.789050][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.819077][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.867851][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.895180][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.955493][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.002117][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 158.028458][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.114776][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 158.622661][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.633117][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.712944][ T4807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.774084][ T4237] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 159.014788][ T4237] usb 2-1: Using ep0 maxpacket: 8 [ 159.134473][ T4237] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.160961][ T4237] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 159.244050][ T4237] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 96 [ 161.715313][ T7] cp2112 0003:10C4:EA90.0002: error requesting version [ 161.752106][ T7] cp2112: probe of 0003:10C4:EA90.0002 failed with error -110 [ 161.788079][ T4237] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.939276][ T5088] loop1: detected capacity change from 0 to 164 [ 161.984263][ T4237] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 162.059412][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 162.094107][ T4237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.143186][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 162.174223][ T4237] usb 2-1: can't set config #16, error -71 [ 162.445576][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 162.463120][ T4237] usb 2-1: USB disconnect, device number 3 [ 162.468762][ T5088] ======================================================= [ 162.468762][ T5088] WARNING: The mand mount option has been deprecated and [ 162.468762][ T5088] and is ignored by this kernel. Remove the mand [ 162.468762][ T5088] option from the mount to silence this warning. [ 162.468762][ T5088] ======================================================= [ 162.479732][ T4651] usb 1-1: USB disconnect, device number 3 [ 162.534672][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 162.564017][ T5088] Unable to read rock-ridge attributes [ 163.258110][ T4807] device veth0_vlan entered promiscuous mode [ 163.353062][ T5097] loop0: detected capacity change from 0 to 2048 [ 163.364512][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.406869][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.440059][ T4807] device veth1_vlan entered promiscuous mode [ 163.506116][ T5097] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 163.525751][ T5088] Unable to read rock-ridge attributes [ 163.533081][ T5088] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 163.665684][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.704321][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.794751][ T4807] device veth0_macvtap entered promiscuous mode [ 163.855746][ T4807] device veth1_macvtap entered promiscuous mode [ 163.959810][ T5106] loop0: detected capacity change from 0 to 512 [ 164.070052][ T5106] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.191: inode #1: comm syz.0.191: iget: illegal inode # [ 164.145813][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.219283][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.251148][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.286358][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.298376][ T5106] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.191: error while reading EA inode 1 err=-117 [ 164.328519][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.364482][ T5106] EXT4-fs (loop0): 1 orphan inode deleted [ 164.371335][ T5106] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.415003][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.481842][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.559073][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.610197][ T4807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.738961][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 164.771601][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 164.809671][ T5129] netlink: 224 bytes leftover after parsing attributes in process `syz.5.186'. [ 164.830358][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.867183][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.982790][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.083102][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.113912][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.140624][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.179104][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.224656][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.268221][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.355946][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.412423][ T4807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.481999][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 165.523386][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 165.629680][ T4807] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.679196][ T4807] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.714243][ T4234] Bluetooth: hci5: command 0x0409 tx timeout [ 165.733783][ T4807] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.792148][ T4807] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.833074][ T5150] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 166.844718][ T5150] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 166.921444][ T5157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.196'. [ 166.988391][ T5150] vhci_hcd vhci_hcd.0: Device attached [ 167.264171][ T4651] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 167.281962][ T5160] loop0: detected capacity change from 0 to 512 [ 167.345300][ T5152] vhci_hcd: connection reset by peer [ 167.353392][ T3034] vhci_hcd: stop threads [ 167.394361][ T3034] vhci_hcd: release socket [ 167.505280][ T3034] vhci_hcd: disconnect device [ 167.646520][ T5160] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.203: inode #1: comm syz.0.203: iget: illegal inode # [ 167.665201][ T4189] syz-executor (4189) used greatest stack depth: 21104 bytes left [ 167.770590][ T5170] cgroup: Unknown subsys name 'nofavordynmods' [ 168.165125][ T4234] Bluetooth: hci5: command 0x041b tx timeout [ 168.185283][ T5160] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.203: error while reading EA inode 1 err=-117 [ 168.326272][ T3034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.361995][ T3034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.378542][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 168.407376][ T5160] EXT4-fs (loop0): 1 orphan inode deleted [ 168.464568][ T5160] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.487607][ T5102] chnl_net:caif_netlink_parms(): no params data found [ 168.714591][ T4428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.749138][ T4428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.976170][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 169.061318][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.104183][ T5102] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.202239][ T5102] device bridge_slave_0 entered promiscuous mode [ 169.216871][ T5196] loop5: detected capacity change from 0 to 1024 [ 169.240600][ T5102] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.269411][ T5102] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.295029][ T5102] device bridge_slave_1 entered promiscuous mode [ 169.462072][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.464085][ T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 169.532860][ T5102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.582368][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.650315][ T5196] hfsplus: keylen 65060 too large [ 169.665576][ T5102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.684064][ T5196] hfsplus: xattr search failed [ 169.736346][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.784035][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 169.856332][ T5102] team0: Port device team_slave_0 added [ 169.904310][ T21] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 169.922036][ T5210] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 169.922497][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.929121][ T5210] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 169.940993][ T5210] vhci_hcd vhci_hcd.0: Device attached [ 169.971812][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.003804][ T5102] team0: Port device team_slave_1 added [ 170.004045][ T21] usb 2-1: config 0 has no interface number 0 [ 170.103028][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.111395][ T5211] vhci_hcd: connection closed [ 170.116352][ T4428] vhci_hcd: stop threads [ 170.145021][ T4428] vhci_hcd: release socket [ 170.151913][ T4428] vhci_hcd: disconnect device [ 170.155566][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.193939][ T4234] Bluetooth: hci5: command 0x040f tx timeout [ 170.224449][ T21] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 170.235700][ T5102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.254118][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.269041][ T5215] netlink: 20 bytes leftover after parsing attributes in process `syz.0.212'. [ 170.277311][ T21] usb 2-1: Product: syz [ 170.308279][ T21] usb 2-1: Manufacturer: syz [ 170.343589][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.361301][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.370175][ T21] usb 2-1: SerialNumber: syz [ 170.473968][ T5102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.481987][ T21] usb 2-1: config 0 descriptor?? [ 170.704057][ T5102] device hsr_slave_0 entered promiscuous mode [ 170.725960][ T5102] device hsr_slave_1 entered promiscuous mode [ 170.736434][ T5102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.746533][ T5102] Cannot create hsr debugfs directory [ 170.784544][ T21] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 170.792574][ T21] usb 2-1: No valid video chain found. [ 170.836651][ T21] usb 2-1: USB disconnect, device number 4 [ 171.486026][ T5102] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 171.564279][ T5236] cgroup: Unknown subsys name 'nofavordynmods' [ 171.681236][ T5102] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 171.711387][ T5102] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 172.275470][ T4196] Bluetooth: hci5: command 0x0419 tx timeout [ 172.411935][ T5102] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 172.434376][ T4651] vhci_hcd: vhci_device speed not set [ 173.744010][ T4311] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 173.888771][ T5259] loop5: detected capacity change from 0 to 128 [ 173.954319][ T9] device hsr_slave_0 left promiscuous mode [ 173.978308][ T9] device hsr_slave_1 left promiscuous mode [ 173.979658][ T5259] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,acl,,errors=continue. Quota mode: writeback. [ 173.999347][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.017951][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.029298][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.047217][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.056257][ T9] device bridge_slave_1 left promiscuous mode [ 174.064674][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.074095][ T5259] ext4 filesystem being mounted at /27/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.086647][ T9] device bridge_slave_0 left promiscuous mode [ 174.092986][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.138762][ T26] audit: type=1326 audit(1777951277.344:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5258 comm="syz.5.224" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb287e5dd9 code=0x0 [ 174.171534][ T9] device veth1_macvtap left promiscuous mode [ 174.182471][ T9] device veth0_macvtap left promiscuous mode [ 174.198989][ T9] device veth1_vlan left promiscuous mode [ 174.205883][ T4311] usb 2-1: unable to get BOS descriptor or descriptor too short [ 174.209123][ T9] device veth0_vlan left promiscuous mode [ 174.304355][ T4311] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.334042][ T4311] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 174.372131][ T4311] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 174.397850][ T4311] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 174.417679][ T4311] usb 2-1: config 1 interface 1 has no altsetting 0 [ 174.584180][ T4311] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 174.595841][ T4311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.605440][ T4311] usb 2-1: Product: syz [ 174.611080][ T4311] usb 2-1: Manufacturer: syz [ 174.617139][ T4311] usb 2-1: SerialNumber: syz [ 174.641111][ T9] team0 (unregistering): Port device team_slave_1 removed [ 174.659645][ T9] team0 (unregistering): Port device team_slave_0 removed [ 174.675953][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.694187][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.694543][ T4651] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 174.854792][ T9] bond0 (unregistering): Released all slaves [ 174.953224][ T5102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.954137][ T4651] usb 1-1: Using ep0 maxpacket: 8 [ 175.006404][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.044575][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.077934][ T5102] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.104807][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.124233][ T4651] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 175.155802][ T4651] usb 1-1: config 0 has no interface number 0 [ 175.159386][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.191379][ T4311] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 175.200418][ T3034] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.208618][ T3034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.266390][ T4311] usb 2-1: USB disconnect, device number 5 [ 175.277203][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.328125][ T4651] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 175.350582][ T4651] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.360069][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.384139][ T4651] usb 1-1: Product: syz [ 175.399792][ T4651] usb 1-1: Manufacturer: syz [ 175.405924][ T4651] usb 1-1: SerialNumber: syz [ 175.428612][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.451745][ T3034] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.459049][ T3034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.481560][ T4651] usb 1-1: config 0 descriptor?? [ 175.504397][ T5296] loop1: detected capacity change from 0 to 16 [ 175.592850][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.622912][ T5296] erofs: (device loop1): mounted with root inode @ nid 36. [ 175.642249][ T4787] udevd[4787]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.710614][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.806519][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.989536][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.110315][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.236549][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.382477][ T5102] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.483950][ T5102] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.521841][ T5306] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.560371][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.578111][ T4651] usb 1-1: USB disconnect, device number 4 [ 176.624565][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.694277][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.728479][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.774152][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.846417][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.783908][ T5330] input: syz1 as /devices/virtual/input/input7 [ 180.387059][ T4234] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 180.432812][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.483191][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.558947][ T5102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.734507][ T4234] usb 6-1: Using ep0 maxpacket: 8 [ 180.874266][ T4234] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 180.897831][ T4234] usb 6-1: config 0 has no interface number 0 [ 181.114655][ T4234] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 181.147226][ T4234] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.203895][ T4234] usb 6-1: Product: syz [ 181.216829][ T5420] loop1: detected capacity change from 0 to 16 [ 181.233430][ T4234] usb 6-1: Manufacturer: syz [ 181.271490][ T4234] usb 6-1: SerialNumber: syz [ 181.285608][ T4234] usb 6-1: config 0 descriptor?? [ 181.356186][ T5420] erofs: (device loop1): mounted with root inode @ nid 36. [ 181.400227][ T5420] attempt to access beyond end of device [ 181.400227][ T5420] loop1: rw=0, want=34359214088, limit=16 [ 181.422760][ T5428] netlink: 20 bytes leftover after parsing attributes in process `syz.6.250'. [ 181.524223][ T5420] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 46 [ 181.608066][ T5428] device veth0_to_bond entered promiscuous mode [ 181.624069][ T4234] usb 6-1: USB disconnect, device number 3 [ 181.742654][ T5378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 181.793747][ T5378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.881398][ T5436] loop0: detected capacity change from 0 to 512 [ 181.891764][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 181.905127][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 181.965918][ T5102] device veth0_vlan entered promiscuous mode [ 181.995501][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.008581][ T5436] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.241: Invalid inode bitmap blk 4 in block_group 0 [ 182.032541][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.049965][ T5436] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,usrquota,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback. [ 182.082344][ T5102] device veth1_vlan entered promiscuous mode [ 182.204362][ T5428] syz.6.250 (5428) used greatest stack depth: 19792 bytes left [ 182.812253][ T5386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 183.214529][ T5386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 183.527060][ T5386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 183.697315][ T5386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 183.765119][ T5102] device veth0_macvtap entered promiscuous mode [ 183.814212][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 183.847214][ T5102] device veth1_macvtap entered promiscuous mode [ 183.958700][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.031874][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.100358][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.146179][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.207582][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.309254][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.467003][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.582745][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.730018][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.947890][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.059138][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.109862][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.203308][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.227422][ T5510] loop5: detected capacity change from 0 to 16 [ 185.287262][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.323151][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.385225][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.428776][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.519939][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.554785][ T4266] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 185.558031][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 185.643382][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 185.649909][ T5510] erofs: (device loop5): mounted with root inode @ nid 36. [ 185.687350][ T5510] attempt to access beyond end of device [ 185.687350][ T5510] loop5: rw=0, want=34359214088, limit=16 [ 185.786220][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.794451][ T5510] erofs: (device loop5): erofs_readdir: fail to readdir of logical block 0 of nid 46 [ 185.867657][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.874409][ T4266] usb 2-1: Using ep0 maxpacket: 32 [ 185.947730][ T5102] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.008207][ T5102] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.037404][ T4266] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x55, skipping [ 186.133340][ T5102] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.223410][ T5102] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.334248][ T4266] usb 2-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 186.373289][ T4266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.424045][ T4266] usb 2-1: Product: syz [ 187.140925][ T4266] usb 2-1: Manufacturer: syz [ 187.481101][ T4266] usb 2-1: SerialNumber: syz [ 187.898840][ T5574] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.267' sets config #0 [ 188.434524][ T5574] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.267' sets config #1 [ 188.659415][ T5585] loop0: detected capacity change from 0 to 16 [ 188.694371][ T4266] usb 2-1: MIDIStreaming interface descriptor not found [ 188.743399][ T5585] erofs: (device loop0): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 188.820661][ T5585] binder: 5583:5585 ioctl 5441 6 returned -22 [ 188.866803][ T5585] netlink: 'syz.0.270': attribute type 4 has an invalid length. [ 188.943984][ T4266] usb 2-1: USB disconnect, device number 6 [ 189.241663][ T5389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.320471][ T5389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.467990][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 189.829526][ T5389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.857834][ T5389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.110869][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 191.274310][ T5605] xt_socket: unknown flags 0x4c [ 192.449172][ T4235] Bluetooth: hci1: command 0x0406 tx timeout [ 192.514508][ T4235] Bluetooth: hci3: command 0x0406 tx timeout [ 192.794627][ T4734] udevd[4734]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.677200][ T4235] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 195.193938][ T4235] usb 7-1: Using ep0 maxpacket: 8 [ 195.316909][ T4235] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 195.353935][ T4235] usb 7-1: config 0 has no interface number 0 [ 195.472227][ T5685] capability: warning: `syz.0.289' uses 32-bit capabilities (legacy support in use) [ 195.564814][ T4235] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 195.604504][ T4235] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.670863][ T4235] usb 7-1: Product: syz [ 195.754767][ T4235] usb 7-1: Manufacturer: syz [ 195.788767][ T4235] usb 7-1: SerialNumber: syz [ 195.836789][ T4235] usb 7-1: config 0 descriptor?? [ 196.262714][ T4235] usb 7-1: USB disconnect, device number 2 [ 196.918674][ T5691] xt_socket: unknown flags 0x4c [ 197.989794][ T5700] loop7: detected capacity change from 0 to 16 [ 198.161574][ T5700] erofs: (device loop7): mounted with root inode @ nid 36. [ 198.220812][ T5700] attempt to access beyond end of device [ 198.220812][ T5700] loop7: rw=0, want=34359738368, limit=16 [ 198.336124][ T5714] loop1: detected capacity change from 0 to 1024 [ 199.144964][ T5700] erofs: (device loop7): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 200.115382][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.122426][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.298482][ T26] audit: type=1800 audit(1777951303.474:7): pid=5750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.298" name="file1" dev="loop1" ino=2 res=0 errno=0 [ 201.355364][ T5761] netlink: 48 bytes leftover after parsing attributes in process `syz.1.304'. [ 202.144122][ T23] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 202.237862][ T4787] udevd[4787]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 202.367658][ T4788] udevd[4788]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 202.384025][ T23] usb 7-1: Using ep0 maxpacket: 16 [ 202.524261][ T23] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.567817][ T23] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 202.614013][ T2266] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 202.797199][ T23] usb 7-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 203.014755][ T2266] usb 1-1: Using ep0 maxpacket: 8 [ 203.227958][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.250856][ T23] usb 7-1: config 0 descriptor?? [ 203.344336][ T2266] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 203.357719][ T2266] usb 1-1: config 0 has no interface number 0 [ 203.543347][ T4235] usb 7-1: USB disconnect, device number 3 [ 203.564135][ T2266] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 203.609408][ T2266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.650864][ T2266] usb 1-1: Product: syz [ 203.655786][ T2266] usb 1-1: Manufacturer: syz [ 203.660967][ T2266] usb 1-1: SerialNumber: syz [ 203.691343][ T2266] usb 1-1: config 0 descriptor?? [ 203.864054][ T4196] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 203.984419][ T2266] usb 1-1: USB disconnect, device number 5 [ 204.046283][ T5804] loop7: detected capacity change from 0 to 512 [ 204.124093][ T4196] usb 6-1: Using ep0 maxpacket: 16 [ 204.176877][ T5804] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.309: Invalid inode bitmap blk 4 in block_group 0 [ 204.190800][ T5804] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,usrquota,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback. [ 204.784008][ T4196] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.803359][ T4196] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.865141][ T4196] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 204.895567][ T4196] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.959540][ T4196] usb 6-1: config 0 descriptor?? [ 205.216677][ T5818] cgroup: Unknown subsys name 'nofavordynmods' [ 205.874762][ T5808] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 206.128819][ T5821] loop6: detected capacity change from 0 to 16 [ 206.344197][ T5821] erofs: (device loop6): mounted with root inode @ nid 36. [ 206.355940][ T4196] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 206.403350][ T4196] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 206.429191][ T5821] attempt to access beyond end of device [ 206.429191][ T5821] loop6: rw=0, want=34359738368, limit=16 [ 206.463979][ T4196] hid-multitouch 0003:1FD2:6007.0003: item fetching failed at offset 2/5 [ 206.473144][ T4196] hid-multitouch: probe of 0003:1FD2:6007.0003 failed with error -22 [ 206.475028][ T5821] erofs: (device loop6): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 206.581313][ T1111] usb 6-1: USB disconnect, device number 4 [ 207.294372][ T5842] xt_socket: unknown flags 0x4c [ 208.523987][ T4234] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 210.008732][ T4234] usb 8-1: device descriptor read/all, error -71 [ 211.341561][ T5869] loop6: detected capacity change from 0 to 512 [ 211.505045][ T5869] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: comm syz.6.327: inode #1: comm syz.6.327: iget: illegal inode # [ 211.541125][ T5869] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.327: error while reading EA inode 1 err=-117 [ 211.598209][ T5869] EXT4-fs (loop6): 1 orphan inode deleted [ 211.604979][ T5869] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 211.896103][ T5884] loop6: detected capacity change from 0 to 128 [ 212.506494][ T5888] xt_socket: unknown flags 0x4c [ 213.783291][ T5891] netlink: 84 bytes leftover after parsing attributes in process `syz.0.334'. [ 213.834761][ T5884] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 213.843003][ T5884] System zones: 1-3, 19-19, 35-36 [ 213.899075][ T5884] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 213.974128][ T5884] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 214.639647][ T5903] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.862145][ T5915] loop1: detected capacity change from 0 to 1024 [ 216.564042][ T26] audit: type=1800 audit(1777951319.754:8): pid=5917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.340" name="file1" dev="loop1" ino=2 res=0 errno=0 [ 217.496603][ T4234] hid-generic 0005:0006:5508.0004: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 218.314831][ T5948] netlink: 84 bytes leftover after parsing attributes in process `syz.7.346'. [ 219.397345][ T5958] loop6: detected capacity change from 0 to 512 [ 221.709283][ T5967] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.112430][ T5958] EXT4-fs (loop6): Ignoring removed nobh option [ 226.156880][ T5978] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 226.384947][ T5958] EXT4-fs (loop6): Unrecognized mount option "seclabel" or missing value [ 226.969348][ T5988] loop1: detected capacity change from 0 to 16 [ 228.258331][ T5988] erofs: (device loop1): mounted with root inode @ nid 36. [ 228.275401][ T5998] netlink: 84 bytes leftover after parsing attributes in process `syz.6.360'. [ 228.353315][ T5988] attempt to access beyond end of device [ 228.353315][ T5988] loop1: rw=0, want=34359214088, limit=16 [ 228.509470][ T5988] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 46 [ 228.722296][ T6014] xt_CT: You must specify a L4 protocol and not use inversions on it [ 229.133903][ T1111] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 229.375056][ T6019] loop7: detected capacity change from 0 to 1024 [ 229.434200][ T1111] usb 6-1: no configurations [ 229.438994][ T1111] usb 6-1: can't read configurations, error -22 [ 229.604002][ T1111] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 229.880550][ T26] audit: type=1800 audit(1777951333.064:9): pid=6032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.367" name="file1" dev="loop7" ino=2 res=0 errno=0 [ 229.952259][ T1111] usb 6-1: no configurations [ 229.959084][ T1111] usb 6-1: can't read configurations, error -22 [ 230.134896][ T1111] usb usb6-port1: attempt power cycle [ 231.460703][ T6037] loop6: detected capacity change from 0 to 16 [ 232.256531][ T6040] loop0: detected capacity change from 0 to 16 [ 232.282170][ T6041] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.291576][ T6041] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.300455][ T6041] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.310180][ T6041] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.356486][ T6037] erofs: (device loop6): mounted with root inode @ nid 36. [ 232.360178][ T6040] erofs: (device loop0): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 232.382627][ T6037] attempt to access beyond end of device [ 232.382627][ T6037] loop6: rw=0, want=34359738368, limit=16 [ 232.410601][ T6037] erofs: (device loop6): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 232.487820][ T6041] device vxlan0 entered promiscuous mode [ 232.857856][ T6057] loop1: detected capacity change from 0 to 16 [ 232.900560][ T6057] erofs: (device loop1): mounted with root inode @ nid 36. [ 232.999575][ T6057] attempt to access beyond end of device [ 232.999575][ T6057] loop1: rw=0, want=34359214088, limit=16 [ 233.102255][ T6057] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 46 [ 233.259553][ T6069] netlink: 84 bytes leftover after parsing attributes in process `syz.6.375'. [ 233.500110][ T6075] netlink: 'syz.5.382': attribute type 13 has an invalid length. [ 233.550347][ T6079] loop0: detected capacity change from 0 to 1024 [ 233.552938][ T6082] loop1: detected capacity change from 0 to 1024 [ 233.586847][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 233.667628][ T6082] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 233.684213][ T6082] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 233.684213][ T6082] [ 233.702151][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 233.749082][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 233.883347][ T6079] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 233.922996][ T6079] hfsplus: xattr search failed [ 233.959739][ T6094] loop1: detected capacity change from 0 to 16 [ 233.976645][ T6079] attempt to access beyond end of device [ 233.976645][ T6079] loop0: rw=0, want=917506, limit=1024 [ 234.048775][ T6079] Buffer I/O error on dev loop0, logical block 458752, async page read [ 234.059553][ T6079] hfsplus: unable to mark blocks free: error -5 [ 234.067571][ T6094] erofs: (device loop1): mounted with root inode @ nid 36. [ 234.079442][ T6079] hfsplus: can't free extent [ 234.093305][ T6094] attempt to access beyond end of device [ 234.093305][ T6094] loop1: rw=0, want=34359738368, limit=16 [ 234.176867][ T6099] erofs: (device loop1): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 234.336942][ T13] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 234.434470][ T6105] loop6: detected capacity change from 0 to 16 [ 235.021272][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.393'. [ 235.024597][ T6105] erofs: (device loop6): mounted with root inode @ nid 36. [ 235.090111][ T6105] attempt to access beyond end of device [ 235.090111][ T6105] loop6: rw=0, want=34359214088, limit=16 [ 235.120649][ T6105] erofs: (device loop6): erofs_readdir: fail to readdir of logical block 0 of nid 46 [ 235.131009][ T6117] loop5: detected capacity change from 0 to 512 [ 235.197127][ T6117] EXT4-fs (loop5): Ignoring removed oldalloc option [ 235.209612][ T6117] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 235.290007][ T6117] EXT4-fs (loop5): 1 truncate cleaned up [ 235.309267][ T6117] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 235.334017][ T13] usb 8-1: unable to get BOS descriptor or descriptor too short [ 235.584154][ T13] usb 8-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice= 0.40 [ 235.622754][ T13] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.672630][ T6136] loop6: detected capacity change from 0 to 16 [ 235.683772][ T13] usb 8-1: Product: syz [ 235.707110][ T13] usb 8-1: Manufacturer: syz [ 235.729229][ T6137] loop0: detected capacity change from 0 to 1024 [ 235.736635][ T6136] erofs: (device loop6): mounted with root inode @ nid 36. [ 235.753025][ T13] usb 8-1: SerialNumber: syz [ 235.787652][ T6136] attempt to access beyond end of device [ 235.787652][ T6136] loop6: rw=0, want=34359738368, limit=16 [ 235.860151][ T6137] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 235.904803][ T6137] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.965117][ T6137] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.401: bg 0: block 112: padding at end of block bitmap is not set [ 236.040340][ T6148] loop6: detected capacity change from 0 to 512 [ 236.056476][ T13] usb 8-1: Invalid firmware size=96. [ 236.106771][ T6148] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,minixdf,. Quota mode: writeback. [ 236.122645][ T13] usb 8-1: Invalid firmware size=96. [ 236.124259][ T6148] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 236.130221][ T13] usb 8-1: Invalid firmware size=96. [ 236.141131][ T6137] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: comm syz.0.401: lblock 0 mapped to illegal pblock 0 (length 3) [ 236.152178][ T13] usb 8-1: USB disconnect, device number 4 [ 236.219302][ T6137] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: comm syz.0.401: lblock 0 mapped to illegal pblock 0 (length 1) [ 236.273515][ T4314] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: block 3: comm kworker/u4:9: lblock 3 mapped to illegal pblock 3 (length 3) [ 236.310064][ T4314] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 236.319858][ T6153] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.404: Invalid inode bitmap blk 4 in block_group 0 [ 236.323000][ T4314] EXT4-fs (loop0): This should not happen!! Data will be lost [ 236.323000][ T4314] [ 236.354363][ T5378] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:23: lblock 8 mapped to illegal pblock 8 (length 5) [ 236.382021][ T5378] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 236.408397][ T6153] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,usrquota,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback. [ 236.434381][ T5378] EXT4-fs (loop0): This should not happen!! Data will be lost [ 236.434381][ T5378] [ 236.503919][ T4234] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 237.464375][ T4234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.172265][ T4234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.291984][ T6177] set_capacity_and_notify: 1 callbacks suppressed [ 238.292001][ T6177] loop0: detected capacity change from 0 to 512 [ 238.314900][ T4234] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 238.437386][ T4234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.943543][ T6177] EXT4-fs (loop0): Ignoring removed oldalloc option [ 238.974412][ T4234] usb 6-1: config 0 descriptor?? [ 239.008352][ T6177] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 239.124479][ T6177] EXT4-fs (loop0): 1 truncate cleaned up [ 239.177085][ T6177] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 239.219448][ T6188] loop1: detected capacity change from 0 to 1024 [ 239.324389][ T6194] netlink: 224 bytes leftover after parsing attributes in process `syz.7.413'. [ 239.334103][ T4234] usbhid 6-1:0.0: can't add hid device: -71 [ 239.341563][ T4234] usbhid: probe of 6-1:0.0 failed with error -71 [ 239.408600][ T4234] usb 6-1: USB disconnect, device number 8 [ 239.422587][ T6194] netlink: 36 bytes leftover after parsing attributes in process `syz.7.413'. [ 239.639343][ T6204] loop1: detected capacity change from 0 to 128 [ 239.738449][ T6204] FAT-fs (loop1): Unrecognized mount option "uni_x" or missing value [ 240.698741][ T6225] loop5: detected capacity change from 0 to 512 [ 240.875798][ T6233] loop1: detected capacity change from 0 to 512 [ 241.071224][ T6233] EXT4-fs (loop1): Ignoring removed oldalloc option [ 241.092427][ T6225] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.422: Invalid inode bitmap blk 4 in block_group 0 [ 241.093933][ T6233] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 241.117021][ T6239] loop6: detected capacity change from 0 to 1024 [ 241.134361][ T1111] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 241.148572][ T6233] EXT4-fs (loop1): 1 truncate cleaned up [ 241.174156][ T6225] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,usrquota,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback. [ 241.192313][ T6233] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 241.554058][ T1111] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.710797][ T1111] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.085399][ T1111] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 242.284535][ T1111] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.391717][ T1111] usb 8-1: config 0 descriptor?? [ 242.629895][ T6265] netlink: 224 bytes leftover after parsing attributes in process `syz.1.429'. [ 242.740218][ T6267] netlink: 36 bytes leftover after parsing attributes in process `syz.1.429'. [ 245.171663][ T6275] loop0: detected capacity change from 0 to 2048 [ 245.194028][ T1111] usbhid 8-1:0.0: can't add hid device: -71 [ 245.203295][ T1111] usbhid: probe of 8-1:0.0 failed with error -71 [ 245.265726][ T1111] usb 8-1: USB disconnect, device number 5 [ 245.317140][ T6281] loop5: detected capacity change from 0 to 1024 [ 245.387636][ T6275] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.623994][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 245.924116][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 246.044908][ T7] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.086456][ T6298] loop7: detected capacity change from 0 to 512 [ 246.164101][ T7] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.188201][ T7] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 246.212248][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 246.220427][ T7] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 246.236930][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.253133][ T7] usb 2-1: config 0 descriptor?? [ 246.491530][ T6306] loop0: detected capacity change from 0 to 512 [ 246.499042][ T6298] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.438: Invalid inode bitmap blk 4 in block_group 0 [ 246.524914][ T6298] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,usrquota,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback. [ 246.558827][ T6306] EXT4-fs (loop0): Ignoring removed oldalloc option [ 246.605097][ T6306] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 246.691047][ T6306] EXT4-fs (loop0): 1 truncate cleaned up [ 246.726158][ T6306] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 246.814412][ T6322] loop6: detected capacity change from 0 to 128 [ 246.821782][ T6281] hfsplus: keylen 65060 too large [ 246.832479][ T6281] hfsplus: xattr search failed [ 246.883986][ T6322] EXT4-fs warning (device loop6): ext4_fill_super:4027: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 246.928393][ T6322] EXT4-fs (loop6): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 246.979640][ T6291] usb 2-1: USB disconnect, device number 7 [ 247.031225][ T6329] netlink: 224 bytes leftover after parsing attributes in process `syz.5.445'. [ 247.091486][ T6329] netlink: 36 bytes leftover after parsing attributes in process `syz.5.445'. [ 247.782285][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.447'. [ 247.813953][ T4311] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 248.174366][ T4311] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.273951][ T4311] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.428454][ T4311] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 248.534037][ T4311] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.076418][ T4311] usb 8-1: config 0 descriptor?? [ 250.162494][ T6359] loop5: detected capacity change from 0 to 512 [ 250.174686][ T4311] usb 8-1: can't set config #0, error -71 [ 250.197737][ T6361] loop7: detected capacity change from 0 to 1024 [ 250.326517][ T6359] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.454: Invalid inode bitmap blk 4 in block_group 0 [ 250.368238][ T6359] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,usrquota,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback. [ 250.464895][ T4311] usb 8-1: USB disconnect, device number 6 [ 250.649214][ T6361] hfsplus: keylen 65060 too large [ 250.664163][ T6361] hfsplus: xattr search failed [ 250.904098][ T5601] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 250.967440][ T6374] netlink: 224 bytes leftover after parsing attributes in process `syz.7.460'. [ 251.691934][ T6384] netlink: 36 bytes leftover after parsing attributes in process `syz.7.460'. [ 251.784362][ T5601] usb 2-1: unable to get BOS descriptor or descriptor too short [ 252.154590][ T5601] usb 2-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice= 0.40 [ 252.259328][ T6378] loop0: detected capacity change from 0 to 4096 [ 252.259682][ T5601] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.355473][ T5601] usb 2-1: Product: syz [ 252.393254][ T5601] usb 2-1: Manufacturer: syz [ 252.400004][ T6391] 9pnet: Insufficient options for proto=fd [ 252.417402][ T5601] usb 2-1: SerialNumber: syz [ 252.464197][ T6378] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=abort,,errors=continue. Quota mode: writeback. [ 252.738662][ T5601] usb 2-1: Invalid firmware size=96. [ 252.763958][ T5601] usb 2-1: Invalid firmware size=96. [ 252.827269][ T5601] usb 2-1: Invalid firmware size=96. [ 252.884024][ T6291] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 252.886429][ T5601] usb 2-1: USB disconnect, device number 8 [ 253.304099][ T6291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.366150][ T6291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.458603][ T6291] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 253.564509][ T6291] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 253.828943][ T6291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.851509][ T6291] usb 1-1: config 0 descriptor?? [ 253.941028][ T6424] loop7: detected capacity change from 0 to 512 [ 254.134064][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 254.145242][ T6291] usbhid 1-1:0.0: can't add hid device: -71 [ 254.184644][ T6424] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.469: Invalid inode bitmap blk 4 in block_group 0 [ 254.244770][ T6291] usbhid: probe of 1-1:0.0 failed with error -71 [ 254.266361][ T6424] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,usrquota,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback. [ 254.378238][ T6291] usb 1-1: USB disconnect, device number 6 [ 256.795963][ T6393] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 256.924304][ T7] usb 2-1: device descriptor read/all, error -71 [ 257.068036][ T6444] loop1: detected capacity change from 0 to 256 [ 257.161699][ T6444] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 257.208883][ T6450] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 257.209863][ T6445] loop6: detected capacity change from 0 to 1024 [ 257.248337][ T6444] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 257.323701][ T6444] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 257.350772][ T6450] 9pnet: p9_fd_create_tcp (6450): problem connecting socket to 127.0.0.1 [ 257.393618][ T6450] 9pnet: p9_fd_create_tcp (6450): problem connecting socket to 127.0.0.1 [ 257.458116][ T6450] 9pnet: p9_fd_create_tcp (6450): problem connecting socket to 127.0.0.1 [ 257.546665][ T6450] 9pnet: p9_fd_create_tcp (6450): problem connecting socket to 127.0.0.1 [ 257.738103][ T6450] 9pnet: p9_fd_create_tcp (6450): problem connecting socket to 127.0.0.1 [ 257.753936][ T6445] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 257.761923][ T6445] hfsplus: xattr searching failed [ 257.798176][ T6450] 9pnet: p9_fd_create_tcp (6450): problem connecting socket to 127.0.0.1 [ 257.950928][ T26] audit: type=1800 audit(1777951361.154:10): pid=6459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.473" name="file1" dev="loop1" ino=1048604 res=0 errno=0 [ 258.315350][ T6450] 9pnet: p9_fd_create_tcp (6450): problem connecting socket to 127.0.0.1 [ 258.480758][ T5381] hfsplus: b-tree write err: -5, ino 25 [ 258.865293][ T5601] Bluetooth: hci4: command 0x0406 tx timeout [ 259.125473][ T5381] hfsplus: b-tree write err: -5, ino 4 [ 259.131264][ T5381] hfsplus: b-tree write err: -5, ino 2 [ 259.210705][ T5381] hfsplus: b-tree write err: -5, ino 23 [ 261.490477][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.497485][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.342966][ T6502] loop7: detected capacity change from 0 to 512 [ 262.621476][ T6502] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.484: Invalid inode bitmap blk 4 in block_group 0 [ 262.672556][ T6502] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,usrquota,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback. [ 262.835519][ T6291] Bluetooth: hci0: command 0x1407 tx timeout [ 265.469549][ T6532] loop6: detected capacity change from 0 to 512 [ 265.910887][ T6539] loop7: detected capacity change from 0 to 128 [ 266.860699][ T6532] EXT4-fs (loop6): Test dummy encryption mode enabled [ 266.895986][ T6546] loop5: detected capacity change from 0 to 512 [ 266.941237][ T6539] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 267.018739][ T6539] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 267.036797][ T6532] EXT4-fs (loop6): 1 truncate cleaned up [ 267.200113][ T6532] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,discard,nodiscard,errors=remount-ro,noauto_da_alloc,test_dummy_encryption=v1,grpjquota=,noauto_da_alloc,errors=remount-ro,. Quota mode: none. [ 267.274008][ T6546] EXT4-fs (loop5): Ignoring removed oldalloc option [ 267.294129][ T6546] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 267.423343][ T6546] EXT4-fs (loop5): 1 truncate cleaned up [ 267.575879][ T6546] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 274.031141][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 275.237597][ T6595] loop1: detected capacity change from 0 to 512 [ 275.476000][ T6595] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.509: Invalid inode bitmap blk 4 in block_group 0 [ 275.694735][ T6595] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,usrquota,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback. [ 277.226676][ T6611] loop5: detected capacity change from 0 to 512 [ 277.354536][ T6611] EXT4-fs (loop5): Ignoring removed oldalloc option [ 277.424084][ T6611] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 277.622656][ T6611] EXT4-fs (loop5): 1 truncate cleaned up [ 277.854045][ T6611] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 288.067914][ T6679] netlink: 12 bytes leftover after parsing attributes in process `syz.5.528'. [ 288.651861][ T6686] loop5: detected capacity change from 0 to 128 [ 288.867411][ T6686] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 289.014544][ T6686] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 292.327843][ T4233] Bluetooth: hci2: command 0x0409 tx timeout [ 292.431356][ T4271] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.495858][ T4271] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.566732][ T6715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.535'. [ 292.695783][ T4271] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.174013][ T4271] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.301683][ T6723] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.170579][ T4271] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.284095][ T4271] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.513999][ T5601] Bluetooth: hci2: command 0x041b tx timeout [ 294.621578][ T4271] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.717168][ T4271] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.383268][ T6692] chnl_net:caif_netlink_parms(): no params data found [ 296.554557][ T6692] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.562789][ T6692] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.604098][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 296.649322][ T6692] device bridge_slave_0 entered promiscuous mode [ 297.235989][ T23] Bluetooth: hci0: command 0x1407 tx timeout [ 298.163966][ T6765] netlink: 12 bytes leftover after parsing attributes in process `syz.5.546'. [ 298.185990][ T6692] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.194441][ T6692] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.256979][ T6692] device bridge_slave_1 entered promiscuous mode [ 298.922996][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 300.884808][ T13] Bluetooth: hci5: command 0x0409 tx timeout [ 301.026145][ T6773] xt_socket: unknown flags 0x4c [ 301.105281][ T6692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.218404][ T6692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.648829][ T6692] team0: Port device team_slave_0 added [ 301.777667][ T6692] team0: Port device team_slave_1 added [ 302.038354][ T6692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.094283][ T6692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.510250][ T6692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.347875][ T6291] Bluetooth: hci5: command 0x041b tx timeout [ 304.486718][ T6692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.534785][ T6692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.754371][ T6692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.371225][ T6692] device hsr_slave_0 entered promiscuous mode [ 305.459693][ T6692] device hsr_slave_1 entered promiscuous mode [ 305.505667][ T6692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.578247][ T6692] Cannot create hsr debugfs directory [ 305.976435][ T4271] device hsr_slave_0 left promiscuous mode [ 306.066638][ T4271] device hsr_slave_1 left promiscuous mode [ 306.162032][ T4271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.202571][ T4271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.294229][ T4271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.302815][ T4271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.383033][ T4271] device bridge_slave_1 left promiscuous mode [ 306.434349][ T6291] Bluetooth: hci5: command 0x040f tx timeout [ 306.445118][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.558110][ T4271] device bridge_slave_0 left promiscuous mode [ 306.598318][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.974650][ T4271] device veth1_macvtap left promiscuous mode [ 306.980816][ T4271] device veth0_macvtap left promiscuous mode [ 307.201481][ T4271] device veth1_vlan left promiscuous mode [ 307.780355][ T4271] device veth0_vlan left promiscuous mode [ 308.174252][ T6823] xt_socket: unknown flags 0x4c [ 308.514017][ T7] Bluetooth: hci5: command 0x0419 tx timeout [ 308.842164][ T4271] team0 (unregistering): Port device team_slave_1 removed [ 308.875756][ T4271] team0 (unregistering): Port device team_slave_0 removed [ 308.924500][ T4271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.976720][ T4271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.261421][ T6829] netlink: 20 bytes leftover after parsing attributes in process `syz.5.560'. [ 309.318835][ T4271] bond0 (unregistering): Released all slaves [ 309.448932][ T6763] chnl_net:caif_netlink_parms(): no params data found [ 310.103027][ T6763] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.132804][ T6763] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.184767][ T6763] device bridge_slave_0 entered promiscuous mode [ 310.275761][ T6763] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.283652][ T6763] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.309697][ T6763] device bridge_slave_1 entered promiscuous mode [ 310.403929][ T6692] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 310.443090][ T6692] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 310.575360][ T6860] netlink: 224 bytes leftover after parsing attributes in process `syz.1.568'. [ 310.586699][ T6692] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 310.633089][ T6763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.654882][ T6692] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 310.670914][ T6860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'. [ 310.712498][ T6763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.916886][ T6763] team0: Port device team_slave_0 added [ 310.961208][ T6763] team0: Port device team_slave_1 added [ 311.759709][ T6763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.814565][ T6763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.993995][ T6763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.038272][ T6763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.076941][ T6763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.737298][ T6763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.908094][ T6692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.009941][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 313.045452][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 313.109311][ T6692] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.152878][ T6763] device hsr_slave_0 entered promiscuous mode [ 313.191410][ T6763] device hsr_slave_1 entered promiscuous mode [ 313.235360][ T6763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.242957][ T6763] Cannot create hsr debugfs directory [ 313.397988][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 313.430983][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 313.470206][ T5381] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.477370][ T5381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.643201][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 313.665780][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 313.690028][ T5381] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.697609][ T5381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.745663][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 313.768764][ T6912] netlink: 224 bytes leftover after parsing attributes in process `syz.1.581'. [ 313.875279][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 313.908716][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 314.022566][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 314.079153][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 314.108388][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 314.179693][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 314.255382][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 314.276743][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 314.319779][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 314.351637][ T6692] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.395872][ T26] audit: type=1326 audit(1777951417.604:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.1.585" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba158ddd9 code=0x7fc00000 [ 314.432468][ T6692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 316.071673][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 316.079765][ T26] audit: type=1326 audit(1777951417.634:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.1.585" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ba158ddd9 code=0x7fc00000 [ 316.131248][ T26] audit: type=1326 audit(1777951417.634:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.1.585" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba158ddd9 code=0x7fc00000 [ 316.171264][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 316.231089][ T6936] loop1: detected capacity change from 0 to 1024 [ 316.241873][ T26] audit: type=1326 audit(1777951417.634:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.1.585" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba158ddd9 code=0x7fc00000 [ 316.285055][ T26] audit: type=1326 audit(1777951417.634:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.1.585" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba158ddd9 code=0x7fc00000 [ 316.525325][ T26] audit: type=1326 audit(1777951417.634:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.1.585" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba158ddd9 code=0x7fc00000 [ 316.648238][ T26] audit: type=1326 audit(1777951417.634:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.1.585" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba158ddd9 code=0x7fc00000 [ 316.714052][ T26] audit: type=1326 audit(1777951417.634:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.1.585" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba158ddd9 code=0x7fc00000 [ 316.776868][ T6763] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 316.818223][ T5384] hfsplus: bad catalog file entry [ 316.835683][ T5384] hfsplus: b-tree write err: -5, ino 3 [ 316.841263][ T6763] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 316.873109][ T6763] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 316.892137][ T26] audit: type=1326 audit(1777951417.634:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.1.585" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba158ddd9 code=0x7fc00000 [ 316.929481][ T6763] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 317.030752][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 317.084768][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 317.089835][ T26] audit: type=1326 audit(1777951417.634:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.1.585" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba158ddd9 code=0x7fc00000 [ 317.123206][ T6692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.351547][ T6968] loop1: detected capacity change from 0 to 128 [ 317.395628][ T6763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.464677][ T6968] EXT4-fs (loop1): Ignoring removed nobh option [ 317.471017][ T6968] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 317.523020][ T6763] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.584285][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 317.621290][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 317.691379][ T6968] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,max_dir_size_kb=0x0000000000000002,nobh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 317.752049][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 317.764600][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 317.798850][ T5371] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.805996][ T5371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.849298][ T6968] ext4 filesystem being mounted at /151/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 317.940509][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 317.974943][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 318.045107][ T5371] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.052456][ T5371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.104529][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 318.249861][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 318.263991][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 318.354888][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 318.406331][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 318.459283][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 318.509555][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 318.529017][ T6987] loop1: detected capacity change from 0 to 2048 [ 318.577453][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 318.623545][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 318.688417][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 318.710959][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 318.762261][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 318.771805][ T6987] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c018, mo2=0002] [ 318.788477][ T6987] System zones: 0-4 [ 318.795324][ T6987] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,debug,journal_dev=0x0000000000000001,init_itable,,errors=continue. Quota mode: none. [ 318.830528][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 318.855632][ T6987] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.905055][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 318.959800][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 319.016974][ T6692] device veth0_vlan entered promiscuous mode [ 319.105312][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 319.119839][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 319.190686][ T6692] device veth1_vlan entered promiscuous mode [ 319.221107][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 319.229769][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 319.267283][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 319.387537][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 319.422247][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 319.440245][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 319.639714][ T6692] device veth0_macvtap entered promiscuous mode [ 319.702010][ T6692] device veth1_macvtap entered promiscuous mode [ 321.147568][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 321.193615][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 321.302823][ T6763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.367633][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 321.401710][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 321.456358][ T6692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.502049][ T6692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.549147][ T6692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.585458][ T6692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.621811][ T6692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.668301][ T6692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.698329][ T6692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.738570][ T6692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.795257][ T6692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.836142][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 321.863445][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 322.286955][ T7044] loop1: detected capacity change from 0 to 2048 [ 322.392990][ T7044] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c018, mo2=0002] [ 322.417076][ T7044] System zones: 0-4 [ 322.453650][ T7044] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,debug,journal_dev=0x0000000000000001,init_itable,,errors=continue. Quota mode: none. [ 322.528162][ T6763] device veth0_vlan entered promiscuous mode [ 322.536675][ T7044] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.604675][ T6763] device veth1_vlan entered promiscuous mode [ 322.647807][ T5378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 322.661087][ T5378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 322.684683][ T5378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 322.705560][ T5378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 322.731877][ T5378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 322.759069][ T5378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 322.838977][ T5378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 322.847085][ T5378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 322.868653][ T7053] loop5: detected capacity change from 0 to 1024 [ 322.876195][ T6692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.887082][ T6692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.906512][ T6692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.923421][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.931014][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.947745][ T6692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.961190][ T6692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.966794][ T7054] netlink: 20 bytes leftover after parsing attributes in process `syz.0.608'. [ 322.972166][ T6692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.992008][ T6692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.003471][ T6692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.015249][ T6692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.046128][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 323.058066][ T7053] EXT4-fs (loop5): Ignoring removed bh option [ 323.075203][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 323.155425][ T7053] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x00000000001c0000,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,dioread_lock,stripe=0x0000000000000010,bh,init_itable,,errors=continue. Quota mode: none. [ 323.188196][ T6692] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.200963][ T6692] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.209883][ T6692] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.223968][ T6692] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.244390][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 323.326004][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 323.516879][ T6763] device veth0_macvtap entered promiscuous mode [ 324.104567][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 324.472454][ T6763] device veth1_macvtap entered promiscuous mode [ 324.715879][ T7068] loop1: detected capacity change from 0 to 1024 [ 324.763589][ T7068] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 324.818564][ T7068] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 324.991390][ T6763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.588932][ T6763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.684790][ T6763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.773632][ T6763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.866354][ T6763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.953888][ T6763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.038272][ T6763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.075853][ T6763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.085984][ T6763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.188609][ T6763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.306186][ T6763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.449218][ T4271] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.613171][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 326.635773][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 326.750068][ T6763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.774557][ T6763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.806182][ T6763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.848292][ T6763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.879619][ T6763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.923309][ T6763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.956015][ T6763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.003886][ T6763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.013752][ T6763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.043969][ T6763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.070651][ T6763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.096602][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 327.121317][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 327.167157][ T4271] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.335808][ T6763] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.354174][ T6763] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.363973][ T6763] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.373826][ T6763] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.419548][ T4428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.439801][ T4271] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.468738][ T4428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.519757][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 327.573360][ T4271] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.631106][ T5381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.689721][ T5381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.768505][ T5378] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 327.807259][ T5371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.853964][ T5371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.004374][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 328.074105][ T5371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.124147][ T5371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.774598][ T7108] loop8: detected capacity change from 0 to 512 [ 328.804263][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 328.946320][ T7108] EXT4-fs (loop8): Ignoring removed oldalloc option [ 328.973218][ T7108] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 329.081064][ T7117] loop5: detected capacity change from 0 to 512 [ 329.117281][ T7108] EXT4-fs (loop8): 1 truncate cleaned up [ 329.124097][ T7108] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 329.265326][ T7117] EXT4-fs (loop5): Ignoring removed oldalloc option [ 329.354099][ T7117] EXT4-fs (loop5): 1 truncate cleaned up [ 329.359881][ T7117] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,bsdgroups,lazytime,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 329.512378][ T7117] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.619: invalid indirect mapped block 234881024 (level 0) [ 329.742643][ T7129] loop9: detected capacity change from 0 to 256 [ 330.200502][ T7117] EXT4-fs (loop5): Remounting filesystem read-only [ 330.386056][ T7129] exfat: Deprecated parameter 'utf8' [ 330.391931][ T7129] exfat: Deprecated parameter 'namecase' [ 330.398186][ T7129] exfat: Deprecated parameter 'namecase' [ 330.404432][ T7129] exfat: Deprecated parameter 'utf8' [ 330.437342][ T7129] exFAT-fs (loop9): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 331.742050][ T7150] netlink: 20 bytes leftover after parsing attributes in process `syz.5.625'. [ 332.164100][ T4236] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 332.287649][ T7171] loop9: detected capacity change from 0 to 128 [ 332.504974][ T7177] loop1: detected capacity change from 0 to 256 [ 332.915096][ T7177] exfat: Deprecated parameter 'utf8' [ 332.920970][ T7177] exfat: Deprecated parameter 'namecase' [ 332.927423][ T7177] exfat: Deprecated parameter 'namecase' [ 332.933689][ T7177] exfat: Deprecated parameter 'utf8' [ 332.953094][ T7171] EXT4-fs warning (device loop9): ext4_fill_super:4027: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 332.957014][ T7177] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 333.007735][ T7171] EXT4-fs (loop9): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 333.062462][ T4787] udevd[4787]: incorrect ext4 checksum on /dev/loop9 [ 333.139950][ T4787] udevd[4787]: incorrect ext4 checksum on /dev/loop9 [ 333.156323][ T4236] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.233095][ T4236] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 333.308338][ T4271] device hsr_slave_0 left promiscuous mode [ 333.323292][ T4271] device hsr_slave_1 left promiscuous mode [ 334.318432][ T4271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.381022][ T4271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.700368][ T4271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.754006][ T4236] usb 9-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 334.757513][ T4271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.788489][ T4236] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.829934][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.8.642'. [ 334.839659][ T4271] device bridge_slave_1 left promiscuous mode [ 334.861229][ T4236] usb 9-1: config 0 descriptor?? [ 334.870137][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.894444][ T4236] usb 9-1: can't set config #0, error -71 [ 334.914439][ T4271] device bridge_slave_0 left promiscuous mode [ 334.932750][ T4236] usb 9-1: USB disconnect, device number 2 [ 334.961920][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.097133][ T4271] device veth1_macvtap left promiscuous mode [ 335.114761][ T4271] device veth0_macvtap left promiscuous mode [ 335.122431][ T4271] device veth1_vlan left promiscuous mode [ 335.146997][ T4271] device veth0_vlan left promiscuous mode [ 335.910278][ T7222] xt_socket: unknown flags 0x4c [ 336.841822][ T4271] team0 (unregistering): Port device team_slave_1 removed [ 336.875153][ T4271] team0 (unregistering): Port device team_slave_0 removed [ 336.907579][ T4271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.944651][ T4271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.148564][ T4271] bond0 (unregistering): Released all slaves [ 339.817757][ T7266] xt_socket: unknown flags 0x4c [ 341.234616][ T13] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 341.314882][ T4236] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 341.644220][ T13] usb 9-1: unable to get BOS descriptor or descriptor too short [ 341.684124][ T4236] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.699817][ T4236] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 341.734036][ T13] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.750776][ T13] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 341.874047][ T4236] usb 10-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 341.888593][ T4236] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.924084][ T13] usb 9-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 341.944203][ T4236] usb 10-1: Product: syz [ 341.948493][ T4236] usb 10-1: Manufacturer: syz [ 341.953182][ T4236] usb 10-1: SerialNumber: syz [ 341.967058][ T13] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.997298][ T13] usb 9-1: Product: syz [ 342.160971][ T13] usb 9-1: Manufacturer: syz [ 342.165792][ T13] usb 9-1: SerialNumber: syz [ 342.173041][ T4236] usb 10-1: config 0 descriptor?? [ 342.920231][ T13] usb 9-1: selecting invalid altsetting 1 [ 343.049918][ T7283] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 343.056863][ T7283] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 343.067751][ T13] usb 9-1: unit 3 not found! [ 343.144337][ T13] usb 9-1: cannot request logical cluster ID: 0 (err: -71) [ 343.238981][ T13] usb 9-1: invalid MIXER UNIT descriptor 6 [ 343.286291][ T7283] vhci_hcd vhci_hcd.0: Device attached [ 343.581819][ T13] snd-usb-audio: probe of 9-1:1.0 failed with error -71 [ 343.695117][ T13] usb 9-1: USB disconnect, device number 3 [ 343.709328][ T4787] udevd[4787]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 343.823982][ T4236] usb 51-1: new high-speed USB device number 2 using vhci_hcd [ 343.862943][ T7303] vhci_hcd: connection reset by peer [ 343.879717][ T7] usb 10-1: USB disconnect, device number 2 [ 343.889153][ T5384] vhci_hcd: stop threads [ 343.894454][ T5384] vhci_hcd: release socket [ 343.933739][ T5384] vhci_hcd: disconnect device [ 344.124155][ T13] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 344.393942][ T13] usb 9-1: Using ep0 maxpacket: 32 [ 344.437146][ T7308] xt_socket: unknown flags 0x4c [ 345.254611][ T13] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.261618][ T7319] netlink: 84 bytes leftover after parsing attributes in process `syz.9.676'. [ 345.309981][ T13] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.395634][ T13] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 345.466672][ T13] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.532245][ T13] usb 9-1: config 0 descriptor?? [ 345.771321][ T13] hub 9-1:0.0: USB hub found [ 346.644097][ T13] hub 9-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 347.414887][ T7344] xt_CT: You must specify a L4 protocol and not use inversions on it [ 347.584108][ T13] usbhid 9-1:0.0: can't add hid device: -71 [ 347.591539][ T13] usbhid: probe of 9-1:0.0 failed with error -71 [ 347.654797][ T13] usb 9-1: USB disconnect, device number 4 [ 348.057195][ T7359] netlink: 224 bytes leftover after parsing attributes in process `syz.1.687'. [ 348.137322][ T7363] netlink: 36 bytes leftover after parsing attributes in process `syz.1.687'. [ 348.320849][ T7367] netlink: 84 bytes leftover after parsing attributes in process `syz.8.689'. [ 352.973966][ T4236] vhci_hcd: vhci_device speed not set [ 384.357780][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.364178][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.798829][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.805228][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 460.243887][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 460.250888][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4271/1:b..l [ 460.259487][ C0] (detected by 0, t=10502 jiffies, g=23625, q=512) [ 460.266173][ C0] task:kworker/u4:6 state:R running task stack:24880 pid: 4271 ppid: 2 flags:0x00004000 [ 460.278843][ C0] Workqueue: netns cleanup_net [ 460.283908][ C0] Call Trace: [ 460.287192][ C0] [ 460.290130][ C0] __schedule+0x11ef/0x43c0 [ 460.294666][ C0] ? release_firmware_map_entry+0x190/0x190 [ 460.300573][ C0] ? preempt_schedule_irq+0xb0/0x160 [ 460.305870][ C0] preempt_schedule_irq+0xbb/0x160 [ 460.310999][ C0] ? __cond_resched+0xd0/0xd0 [ 460.315688][ C0] ? rcu_is_watching+0x11/0xa0 [ 460.320462][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 460.326898][ C0] irqentry_exit+0x63/0x70 [ 460.331325][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 460.337425][ C0] RIP: 0010:lock_acquire+0x208/0x400 [ 460.342725][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 460.362437][ C0] RSP: 0018:ffffc900031cf900 EFLAGS: 00000206 [ 460.368518][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: cbc39ba1724f4900 [ 460.376495][ C0] RDX: 0000000000000000 RSI: ffffffff8a2b3aa0 RDI: ffffffff8a79fe00 [ 460.384478][ C0] RBP: ffffc900031cfa20 R08: dffffc0000000000 R09: 1ffffffff203aa18 [ 460.392502][ C0] R10: dffffc0000000000 R11: fffffbfff203aa19 R12: ffffffff8c31eb20 [ 460.400482][ C0] R13: 1ffff92000639f2c R14: 0000000000000246 R15: dffffc0000000000 [ 460.408499][ C0] ? rcu_lock_release+0x5/0x20 [ 460.413311][ C0] ? read_lock_is_recursive+0x10/0x10 [ 460.418713][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 460.423761][ C0] rcu_lock_acquire+0x2a/0x30 [ 460.428448][ C0] ? rcu_lock_acquire+0x5/0x30 [ 460.433244][ C0] inet_twsk_purge+0x119/0x840 [ 460.438042][ C0] ? __inet_twsk_schedule+0x130/0x130 [ 460.443736][ C0] ? iput+0x706/0x8a0 [ 460.447839][ C0] ? dccp_v4_exit_net+0x80/0x80 [ 460.452708][ C0] cleanup_net+0x791/0xba0 [ 460.457135][ C0] ? ops_free_list+0x330/0x330 [ 460.461934][ C0] process_one_work+0x85f/0x1010 [ 460.466894][ C0] ? worker_detach_from_pool+0x240/0x240 [ 460.472548][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 460.478583][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 460.483617][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 460.489173][ C0] ? wq_worker_running+0x97/0x170 [ 460.494218][ C0] worker_thread+0xaa6/0x1290 [ 460.498920][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 460.504216][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 460.510123][ C0] kthread+0x436/0x520 [ 460.514198][ C0] ? rcu_lock_release+0x20/0x20 [ 460.519138][ C0] ? kthread_blkcg+0xd0/0xd0 [ 460.523732][ C0] ret_from_fork+0x1f/0x30 [ 460.528173][ C0] [ 460.531193][ C0] rcu: rcu_preempt kthread starved for 9590 jiffies! g23625 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 460.542311][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 460.552626][ C0] rcu: RCU grace-period kthread stack dump: [ 460.558509][ C0] task:rcu_preempt state:R running task stack:27800 pid: 15 ppid: 2 flags:0x00004000 [ 460.569309][ C0] Call Trace: [ 460.572602][ C0] [ 460.575542][ C0] __schedule+0x11ef/0x43c0 [ 460.580120][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 460.586023][ C0] ? release_firmware_map_entry+0x190/0x190 [ 460.591935][ C0] ? __mod_timer+0x91e/0xd00 [ 460.596638][ C0] schedule+0x11b/0x1e0 [ 460.600801][ C0] schedule_timeout+0x184/0x2d0 [ 460.605661][ C0] ? console_conditional_schedule+0x40/0x40 [ 460.612688][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 460.618596][ C0] ? update_process_times+0x200/0x200 [ 460.624421][ C0] ? prepare_to_swait_event+0x331/0x350 [ 460.630064][ C0] rcu_gp_fqs_loop+0x2be/0x11d0 [ 460.634937][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 460.641196][ C0] ? rcu_gp_init+0x10f0/0x10f0 [ 460.646258][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 460.651637][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 460.656853][ C0] rcu_gp_kthread+0x9b/0x370 [ 460.661450][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 460.667440][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 460.672658][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 460.678576][ C0] ? __kthread_parkme+0x157/0x1b0 [ 460.684776][ C0] kthread+0x436/0x520 [ 460.688868][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 460.694406][ C0] ? kthread_blkcg+0xd0/0xd0 [ 460.699029][ C0] ret_from_fork+0x1f/0x30 [ 460.703474][ C0] [ 460.706497][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 460.712832][ C0] NMI backtrace for cpu 0 [ 460.717189][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 460.724317][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 460.734663][ C0] Call Trace: [ 460.737950][ C0] [ 460.740810][ C0] dump_stack_lvl+0x188/0x250 [ 460.745983][ C0] ? show_regs_print_info+0x20/0x20 [ 460.751630][ C0] ? load_image+0x400/0x400 [ 460.756144][ C0] ? irq_work_queue+0xbf/0x140 [ 460.760914][ C0] nmi_cpu_backtrace+0x3a2/0x3d0 [ 460.765861][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 460.772194][ C0] ? _printk+0xda/0x130 [ 460.776368][ C0] ? cpu_online+0x1d/0x30 [ 460.780709][ C0] ? load_image+0x400/0x400 [ 460.785329][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 460.791864][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 460.798214][ C0] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 460.804382][ C0] print_other_cpu_stall+0x1110/0x1270 [ 460.809971][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 460.815008][ C0] ? timekeeping_advance+0x7f6/0xac0 [ 460.820313][ C0] rcu_sched_clock_irq+0x843/0x1120 [ 460.825796][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 460.830658][ C0] ? account_process_tick+0x22a/0x3a0 [ 460.836054][ C0] update_process_times+0x193/0x200 [ 460.841287][ C0] tick_sched_timer+0x37d/0x560 [ 460.846150][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 460.851704][ C0] __hrtimer_run_queues+0x4b4/0xb70 [ 460.857109][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 460.862305][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 460.868503][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 460.873576][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 460.879755][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 460.885417][ C0] [ 460.888348][ C0] [ 460.891285][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 460.897565][ C0] RIP: 0010:default_idle+0xb/0x10 [ 460.902612][ C0] Code: b7 48 89 df e8 76 39 f8 f7 eb ad e8 4f af f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d 97 b5 5f 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 460.922316][ C0] RSP: 0018:ffffffff8c007dc8 EFLAGS: 000002c6 [ 460.928401][ C0] RAX: 812c863d8c590d00 RBX: ffffffff8c0bc480 RCX: 812c863d8c590d00 [ 460.936566][ C0] RDX: 0000000000000001 RSI: ffffffff8a2b2800 RDI: ffffffff8a79fe00 [ 460.944751][ C0] RBP: ffffffff8c007ef8 R08: ffff8880b903b30b R09: 1ffff11017207661 [ 460.952882][ C0] R10: dffffc0000000000 R11: ffffed1017207662 R12: 1ffffffff1800fc4 [ 460.960967][ C0] R13: dffffc0000000000 R14: 1ffffffff1817890 R15: 0000000000000000 [ 460.968963][ C0] default_idle_call+0x81/0xc0 [ 460.973738][ C0] do_idle+0x251/0x650 [ 460.977903][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 460.983115][ C0] ? schedule_idle+0x57/0x90 [ 460.987710][ C0] ? do_idle+0x63a/0x650 [ 460.991970][ C0] cpu_startup_entry+0x14/0x20 [ 460.997046][ C0] ? time_init+0x40/0x40 [ 461.001333][ C0] start_kernel+0x489/0x540 [ 461.005866][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 461.011882][ C0]