last executing test programs: 5m58.660430583s ago: executing program 0 (id=159): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) dup(r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f0000000240), &(0x7f0000000340)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r4, r2, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0x8, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0x8}}}}}}, 0x0) 5m56.763617249s ago: executing program 0 (id=163): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x28, &(0x7f0000000100)=r0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5m56.632873772s ago: executing program 0 (id=164): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) 5m56.404888628s ago: executing program 0 (id=166): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r0, 0xae80, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6, 0x0, 0x80, 0x4, 0x4000200}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @remote, 0x0, 0x6, 0x0, 0x100, 0x6, 0x4180107}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000004c0)={@remote, @dev={0xfe, 0x80, '\x00', 0x2b}, @private1, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86120186, r8}) 5m55.937023359s ago: executing program 0 (id=168): bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f00000002c0)=@base={0x10, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) 5m54.425106206s ago: executing program 0 (id=174): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000500000009f23f000004"], 0x50) 5m39.125017579s ago: executing program 32 (id=174): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000500000009f23f000004"], 0x50) 5m36.63085486s ago: executing program 2 (id=235): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x80000000000007, 0x12) 5m36.296747348s ago: executing program 2 (id=236): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1, 0x3, 0x220104, 0xb, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000140), &(0x7f0000000580)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38) 5m35.757406412s ago: executing program 2 (id=237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x1f, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 5m35.609412575s ago: executing program 2 (id=238): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 5m35.336932511s ago: executing program 2 (id=241): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e0000000400000004000000ffed010000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/27], 0x50) 5m34.950901721s ago: executing program 2 (id=244): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) getdents64(r1, &(0x7f0000000140)=""/46, 0x2e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x6000000, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) syz_open_dev$usbmon(&(0x7f0000000040), 0xfffffffffffffe01, 0x420) socketpair$unix(0x1, 0x5, 0x0, 0x0) 5m19.41421364s ago: executing program 33 (id=244): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) getdents64(r1, &(0x7f0000000140)=""/46, 0x2e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x6000000, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) syz_open_dev$usbmon(&(0x7f0000000040), 0xfffffffffffffe01, 0x420) socketpair$unix(0x1, 0x5, 0x0, 0x0) 1m47.224905165s ago: executing program 5 (id=1006): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 1m46.964269481s ago: executing program 5 (id=1007): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80000000100001e026bd700402d4df2500000000", @ANYRES32=r2, @ANYBLOB="884e0600c16a010060001280110001006272696467655f736c617665000000004800058005001c0000000000050020000000000005000500000000000500"], 0x80}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 1m46.692783467s ago: executing program 5 (id=1009): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) r5 = openat$cgroup_devices(r3, 0x0, 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000140)={'b', ' *:* ', 'rm\x00'}, 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, r0, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 1m46.260187498s ago: executing program 5 (id=1011): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) write(r2, &(0x7f0000000000)="5a000300", 0x4) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') preadv(r3, 0x0, 0x0, 0x0, 0x0) writev(r3, &(0x7f00000003c0), 0x100000000000022d) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f00000000c0), 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @empty, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) 1m44.909312931s ago: executing program 5 (id=1013): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000012700)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"04dfc86351907bcbc9293982262169af775bedfb0a63cb8031ecdc5351097e022d45a9640a4a4b506dc328f61ac030dacac442d82b9e81e6847961e65610b8f6e25f9eaf1a9f48ac011b67d68f8725991345a1f8ed6450a11246c6424cd7837f6bfc47209662ba0d0f44149fcefbbf6fa5b40644bce6cf7210107f57b850d0c9af06c766af1c637aa057167a6910e2e185b8d972e49eeda481d9a58394ef43958ce7407e73d6460653fc672aa4ab6a26bd1a631fa3a0f2b025ba137b8e3f933af28e1ea9984bc0438ea00b5f5b16893a22bb83ff1c92407a946d4dc7d347d526db0e71bb38f873937ca7343fb7248867adf5decd52e74f05c768c3b1c8282b9b1b1bc0f7ae08917b2abe3d3305e32b8db562d19dd7c83fde6dbe03ef72aa7ddc00144895b2a1981105046a28ca0852521afbcd560c15cd9f33e36417a251af7100392b6cdb0bbed4670d746c45fb5589f279cfd594911cb11f2a7336af10b2332e731f2eec8287c735f2346449f1629fde95d6c78bed90645bb280e222976d5721ee6dd6068cfd6174d2382e524672a2656eed5cf34eff27c2974deebf2aa6226e3fa2f15ea8db5891a062d422607a450a32cfdfaaeadfb2498e79fe9e47089b2a8bbdbdcbb0768c189c8fdc6246c00a34176a1c46a924ab4c3877215e5666c7b384e9238b3ad6ac559d90e22170d6915c7150a1858eb3f20a1847642018840b49c335074496991fb3193914f5213846ff8bf5b389298d797dfdd4a1d116caec17f13152c9699caab72a96d364134266030e67ada0de8d2bb05091f7d855fe1c435574856b0f8de9dc6af14ce179e3c0b6b563ccb8e02900fa9412784b0e5fa71a6e4499fecd1343d289daeb929d0cbd96f9f4501bc9d6d9d0b4f462aaf2556ce92ae6438bb3e3aa258c8c4ba6646f99f5a3d4f14f6773538faee834613461239487bee1b53724eb28301420ced16a8110a8680c91c665f8eff65e2d48f95db7ad4f30d079a39a2286fb3df3472d330f6f11fc7d1939a923c50263b3e0314037ec808df7cec279df5785fa2124d1650563799defc378cb9506ee7142eb108b3f4125ade3d9a73646bfdac795c753895b2ad51d358eff496d1c1a885c30b85b50eca89bf14ee50ae3301805f1691b3a391d7575c9a0a514710ad3e590491c60bdab122222c66cbb155452a01cb9750d14ffdc77ad11d4495c53bf38c8185c769c1409eb0b1c613eac8101d6784c9510790dd1df8fa6f2b4dbdbde3bdcbf6bfc456f68b680f2595853178e89a32e9c56d66fd2210fb0fc0e3cda61e6980e16e47ae8071182af80950c43ba221fe072e6945107a6edcd38bfeb201a657969bf340960a67e30987e56c953a177404fdf67b5d99bbc06d705a0fc9659336b458ea0d575ddfe59706738d1e65c50527200"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m42.930553069s ago: executing program 5 (id=1017): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000020601020000000000000000040000010500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b00000000d8"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140e000000208000a409186000205000300020000000900020073797a310000000005000100070000008c5cb79f8cbb4fb639a230e6593a"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1m27.680942071s ago: executing program 34 (id=1017): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000020601020000000000000000040000010500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b00000000d8"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140e000000208000a409186000205000300020000000900020073797a310000000005000100070000008c5cb79f8cbb4fb639a230e6593a"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 18.932098628s ago: executing program 7 (id=1262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x70}}, 0x0) 18.481572159s ago: executing program 7 (id=1264): syz_mount_image$fuse(0x0, 0x0, 0x364c64, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r3 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) ftruncate(r3, 0x80079a0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r4, r3, 0x0, 0x10000000000) syz_emit_ethernet(0x6a, 0x0, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000240)=ANY=[@ANYRES64], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="702300001d00"], 0x2370}, 0x1, 0x0, 0x0, 0x8800}, 0x20048104) 16.859932768s ago: executing program 4 (id=1267): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvfrom(r0, &(0x7f0000001380)=""/179, 0xb3, 0x1, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x12, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab6", 0xb}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 16.304938122s ago: executing program 4 (id=1270): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000002000)={0x1, 0x0, [{0x4b564d01, 0x0, 0xfff}]}) 15.628892458s ago: executing program 4 (id=1273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000001480)=ANY=[@ANYRES32=0x0, @ANYBLOB="3ccc02984ec464417323afe3a38e923a920aa75b4ca4c8cff2b2efe84268584146149ab75dca38f0b6b8cea74e3f09f401738b7fce48e36a86c6abd5d79cbfd2d60c3e7527073e97f898cc3f2bef9baa2832dae95feb46fbf32c1f1ceb52688d6795c41090030878088e842990ebeca8294a3c5760e385d86a23", @ANYRES8, @ANYRES8, @ANYRES32, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRES8, @ANYRES8, @ANYRESDEC, @ANYRESHEX, @ANYRES64=r1, @ANYBLOB="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"], 0xfb, 0x20f, &(0x7f0000000d40)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1e, 0x1, 0x0) 14.534781595s ago: executing program 6 (id=1279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$pptp(0x18, 0x1, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000003100)='fdinfo\x00') getdents(r3, &(0x7f0000001ec0)=""/4096, 0x1000) syz_io_uring_setup(0xeff, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x83, 0x3ac}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r4, r5, 0x2c, 0x10000) syz_io_uring_setup(0x1d10, &(0x7f0000000640)={0x0, 0x5288, 0x400, 0x1, 0x2a6}, &(0x7f00000001c0)=0x0, 0x0, &(0x7f0000000600)) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101041, 0x66) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000140)) munmap$IORING_OFF_CQ_RING(0x0, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002ec0)=@getchain={0x34, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x5}, {0xfff3}}, [{0x8, 0xb, 0xf}, {0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x0) syz_io_uring_complete(r6, 0x0) 10.823691665s ago: executing program 6 (id=1285): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), 0xffffffffffffffff) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) 10.6288026s ago: executing program 4 (id=1287): openat(0xffffffffffffff9c, 0x0, 0x141442, 0x40) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000300)='./bus\x00', 0x2010414, &(0x7f0000000c00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESHEX, @ANYRES64], 0x1, 0x2d3, &(0x7f00000010c0)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', 0xdb9303c4986513a7, 0x0, 0x1, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000000)={[{@quota}, {@noload}, {@init_itable}]}, 0x1, 0x4d1, &(0x7f0000000500)="$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") setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)="bbcd74725f02caa7bcf87a5c9919061ee2fb99f38bdc9be4501b5b91fabbf8ad777281630f5e8a49051ae36787550262342cc78ca97b208dc1857be32bb60ef89177987ca1cf4a9ba01a17ca6018c83a8a1a05f02be79040183c9370bb7f26b7ca9896b7", 0x64) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x403, 0x40000000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}, @IFLA_IPTUN_ENCAP_FLAGS={0x6}]}}}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x880}, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x80) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000001c00)=r0, 0x12) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 10.537221032s ago: executing program 6 (id=1289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c000780080012400000000505000500020000000500040001000000110003006861"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 10.24420522s ago: executing program 7 (id=1291): keyctl$set_reqkey_keyring(0xe, 0x5) r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x2) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x200, 0x2, 0x8, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x80009, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x7, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg(r4, 0x0, 0x0, 0x200040a0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x1}, 0x1c) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r7, &(0x7f0000000500), 0x0}, 0x20) setresuid(0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r0, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) 10.243633519s ago: executing program 3 (id=1292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, 0x0, 0x0) write(r2, &(0x7f0000000000)="5a000300", 0x4) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') preadv(r4, 0x0, 0x0, 0x0, 0x0) writev(r4, &(0x7f00000003c0), 0x100000000000022d) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f00000000c0), 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @empty, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) 8.614903079s ago: executing program 4 (id=1294): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r1) read$FUSE(r0, &(0x7f0000000e00)={0x2020}, 0x2020) write$cgroup_pressure(r0, 0x0, 0x0) 8.612495229s ago: executing program 3 (id=1295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$pptp(0x18, 0x1, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000003100)='fdinfo\x00') getdents(r3, &(0x7f0000001ec0)=""/4096, 0x1000) syz_io_uring_setup(0xeff, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x83, 0x3ac}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r4, r5, 0x2c, 0x10000) syz_io_uring_setup(0x1d10, &(0x7f0000000640)={0x0, 0x5288, 0x400, 0x1, 0x2a6}, &(0x7f00000001c0)=0x0, 0x0, &(0x7f0000000600)) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101041, 0x66) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000140)) munmap$IORING_OFF_CQ_RING(0x0, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002ec0)=@getchain={0x34, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x5}, {0xfff3}}, [{0x8, 0xb, 0xf}, {0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x0) syz_io_uring_complete(r6, 0x0) 7.694001942s ago: executing program 6 (id=1296): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000)=0x9, 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 7.690610372s ago: executing program 7 (id=1297): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)=ANY=[@ANYBLOB="000000004c900200010000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000a6"]) 7.621405363s ago: executing program 1 (id=1298): r0 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") write$tun(0xffffffffffffffff, 0x0, 0x42) openat(r0, 0x0, 0x42, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x20902) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz1\x00', 0x200002, 0x0) 6.758008815s ago: executing program 3 (id=1299): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), 0xffffffffffffffff) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) 6.688852796s ago: executing program 4 (id=1300): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010) open(&(0x7f00000000c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x1, 0x0, 0x0, 0x15, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d17fffffffffffffff5263bd9bffbc03542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177f9b48b00e9ff00000100001500", "fa8359738e229a4c66810000000000d3000100000000000000003952dc830001", [0x204, 0x40000000000000]}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x0) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc)=0x10, 0x5, 0x801, 0x0, &(0x7f0000000280), 0x2) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0xf, 0xdfdf, 0x10015, 0x80, 0x9, 0x0, 0xcf, 0xfffffffffffffffb, 0x3, 0x7ffffffffffffffc, 0x1, 0x9, 0x5, 0x4, 0xfffffffffffffffd], 0x0, 0x1119c4}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.652130277s ago: executing program 1 (id=1301): syz_mount_image$fuse(0x0, 0x0, 0x364c64, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r1 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) ftruncate(r1, 0x80079a0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r2, r1, 0x0, 0x10000000000) syz_emit_ethernet(0x6a, 0x0, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000240)=ANY=[@ANYRES64], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="702300001d00"], 0x2370}, 0x1, 0x0, 0x0, 0x8800}, 0x20048104) 6.585089279s ago: executing program 1 (id=1302): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_attach_bpf(r1, 0x10e, 0xb, &(0x7f0000000180), 0x4) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x9}, {0x0}], 0x2}, 0x0) 6.486733841s ago: executing program 1 (id=1303): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) 6.381673054s ago: executing program 3 (id=1304): openat(0xffffffffffffff9c, 0x0, 0x141442, 0x40) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000300)='./bus\x00', 0x2010414, &(0x7f0000000c00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESHEX, @ANYRES64], 0x1, 0x2d3, &(0x7f00000010c0)="$eJzs3U9rE0EYx/GnSWzSlDYRRFBQB73oZWnjC9AgLYgBpTaiHoSt3WjImpTdUImIzUW8+jqKR2+C+gZ6ES/evRVB8NKDdKS7m3TTpG1q06R/vh8oO7szP2bSTcqzC92sPnz/olRwjYJZlUhCSUSkLmsi6Y1WYCjYRrz2sITV5dronx8X7j96fCeby03NKDWdnb2eUUqNX/r88vWHy1+row8+jn+Ky0r6yervzM+V4ZVzq+uzz4uuKrqqXKkqU81VKlVzzrbUfNEtGUrdsy3TtVSx7FpOS3/Briws1JRZnh9LLjiW6yqzXFMlq6aqFVV1asp8ZhbLyjAMNZaUky3WxZj88syMmd22Ww+Fzj6OgJFOBx0nW+/cmV/uw5oAAMAhs3P979f629X/0WZrL/X/2d3rf5Fw/Z8IJqH+74F6y94u9T+OBcfJmsng89uK+h8AAAAAAAAAAAAAAAAAAAAAgKNgTeuU1jq1sQ0OeftxEUmIiI76+wNeJg5I+Pzr0E/z/Af7W2I3BrRc9FjoH/cSIva7xfxi3t/6/dmCFMUWSyYkJX+990PAb0/fzk1NKE9avthLQX5pMR+VeCPfkO6Uv3h60s+r1vwpSYbnz0hKznSeP9MxPyxXr4TyhqTk21OpiC3z3vt6M/9mUqlbd3Nb8iPeOAAAAAAAjgNDNbVdv3v93oCEtPf7+dD9Aa31UkSal+ht9we2XF/H5Hw3j6gEAAAAAAD75tZelUzbtpz/aMRFZB/x3je0Fhn8MqJyOH4brY2bItK3SWMDf8kJEfGPqJYu/86UyC7xX814V5PqLsbEgm/g8I8M9eWzs76P+KD/MgEAAADotc2ifw+h728PcEUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJw83T4PrDG+ravRsUM8NF207y8QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOET+BQAA//9mAxFo") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', 0xdb9303c4986513a7, 0x0, 0x1, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000000)={[{@quota}, {@noload}, {@init_itable}]}, 0x1, 0x4d1, &(0x7f0000000500)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', 0x0, &(0x7f0000001400)=ANY=[], 0x835, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)="bbcd74725f02caa7bcf87a5c9919061ee2fb99f38bdc9be4501b5b91fabbf8ad777281630f5e8a49051ae36787550262342cc78ca97b208dc1857be32bb60ef89177987ca1cf4a9ba01a17ca6018c83a8a1a05f02be79040183c9370bb7f26b7ca9896b7", 0x64) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x403, 0x40000000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}, @IFLA_IPTUN_ENCAP_FLAGS={0x6}]}}}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x880}, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x80) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000001c00)=r0, 0x12) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 6.228903488s ago: executing program 7 (id=1305): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, 0x0, 0x0) write(r2, &(0x7f0000000000)="5a000300", 0x4) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') preadv(r4, 0x0, 0x0, 0x0, 0x0) writev(r4, &(0x7f00000003c0), 0x100000000000022d) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f00000000c0), 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @empty, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) 6.176229239s ago: executing program 1 (id=1306): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = timerfd_create(0x0, 0x0) read(r1, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x5, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x65, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100, 0x0, 0x800, 0x9, 0x0, 0x100, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x100000001, 0x2, 0x1ff, 0x0, 0x3}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 3.6745294s ago: executing program 7 (id=1307): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 3.67429453s ago: executing program 6 (id=1308): keyctl$set_reqkey_keyring(0xe, 0x5) r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x2) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x200, 0x2, 0x8, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x80009, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x7, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg(r4, 0x0, 0x0, 0x200040a0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x1}, 0x1c) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r7, &(0x7f0000000500), 0x0}, 0x20) setresuid(0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r0, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) 3.472409405s ago: executing program 3 (id=1309): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$pptp(0x18, 0x1, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000003100)='fdinfo\x00') getdents(r3, &(0x7f0000001ec0)=""/4096, 0x1000) syz_io_uring_setup(0xeff, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x83, 0x3ac}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r4, r5, 0x2c, 0x10000) syz_io_uring_setup(0x1d10, &(0x7f0000000640)={0x0, 0x5288, 0x400, 0x1, 0x2a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000240), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101041, 0x66) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000140)) munmap$IORING_OFF_CQ_RING(0x0, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002ec0)=@getchain={0x34, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x5}, {0xfff3}}, [{0x8, 0xb, 0xf}, {0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x0) syz_io_uring_complete(r6, 0x0) 278.006293ms ago: executing program 1 (id=1310): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc4042, 0x1ff) sendfile(r0, r0, 0x0, 0xfffe80) 88.234917ms ago: executing program 6 (id=1311): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x68, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[], 0x0) 0s ago: executing program 3 (id=1312): syz_mount_image$fuse(0x0, 0x0, 0x364c64, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r1 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) ftruncate(r1, 0x80079a0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r2, r1, 0x0, 0x10000000000) syz_emit_ethernet(0x6a, 0x0, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000240)=ANY=[@ANYRES64], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="702300001d00"], 0x2370}, 0x1, 0x0, 0x0, 0x8800}, 0x20048104) kernel console output (not intermixed with test programs): uous mode [ 86.785370][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.796089][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.806340][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.815846][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.824423][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.835375][ T4271] device veth0_macvtap entered promiscuous mode [ 86.849104][ T4281] device veth1_vlan entered promiscuous mode [ 86.873092][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.883745][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.893595][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.906920][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.918732][ T4271] device veth1_macvtap entered promiscuous mode [ 86.928003][ T4270] device veth1_macvtap entered promiscuous mode [ 87.039902][ T4358] loop0: detected capacity change from 0 to 16 [ 87.102075][ T4358] erofs: (device loop0): mounted with root inode @ nid 36. [ 87.933999][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.954616][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 87.960970][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 87.967134][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 87.973177][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 87.984528][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 88.014933][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.050657][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.081873][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.213040][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.232396][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.242373][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.251906][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.260908][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.309638][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.342671][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.361177][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.386533][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.403135][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.454301][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.492995][ T4271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.536391][ T4271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.556927][ T4271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.572472][ T4271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.593105][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.618172][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.693065][ T4365] ======================================================= [ 88.693065][ T4365] WARNING: The mand mount option has been deprecated and [ 88.693065][ T4365] and is ignored by this kernel. Remove the mand [ 88.693065][ T4365] option from the mount to silence this warning. [ 88.693065][ T4365] ======================================================= [ 89.501999][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.515241][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.538251][ T4281] device veth0_macvtap entered promiscuous mode [ 89.559563][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.578417][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.589994][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.610918][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.628008][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.639278][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.652378][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.708846][ T4281] device veth1_macvtap entered promiscuous mode [ 89.757303][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.773911][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.795951][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.811902][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.821943][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.835866][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.846653][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.857783][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.903964][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.127480][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.142012][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.168898][ T4270] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.192630][ T4270] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.212028][ T4270] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.222661][ T4270] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.386500][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.505064][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.594801][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.695060][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.706297][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.714171][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.733959][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.784788][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.803384][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.813636][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.825873][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.836485][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.851069][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.862570][ T4375] loop0: detected capacity change from 0 to 512 [ 90.873549][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.894142][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.905728][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.915136][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.926740][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.947691][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.969175][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.975305][ T4375] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 90.980483][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.000779][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.012915][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.018623][ T4375] EXT4-fs (loop0): orphan cleanup on readonly fs [ 91.037162][ T4375] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 91.044622][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.063536][ T4375] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 91.077844][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.089018][ T4375] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2918: inode #16: comm syz.0.8: corrupted xattr block 31 [ 91.091773][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.130965][ T4375] EXT4-fs warning (device loop0): ext4_evict_inode:301: xattr delete (err -117) [ 91.141643][ T4375] EXT4-fs (loop0): 1 orphan inode deleted [ 91.151943][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.170304][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.181873][ T4375] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 91.198966][ T4281] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.223068][ T4281] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.247232][ T4281] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.259477][ T4281] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.335957][ T4375] EXT4-fs (loop0): Couldn't mount because of unsupported optional features (829) [ 91.353771][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.410682][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.425858][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.433840][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.975509][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 92.171584][ T7] cfg80211: failed to load regulatory.db [ 92.207103][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.246386][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.514866][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.526202][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.587666][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.615281][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.623180][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.649226][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.688612][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.698326][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.725629][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.768555][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.784421][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.805976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.014012][ T4394] loop4: detected capacity change from 0 to 128 [ 93.312690][ T4394] syz.4.5: attempt to access beyond end of device [ 93.312690][ T4394] loop4: rw=2049, sector=145, nr_sectors = 79 limit=128 [ 94.467143][ T4394] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.844453][ C0] sched: RT throttling activated [ 95.476426][ T4404] loop3: detected capacity change from 0 to 1024 [ 95.484100][ T4404] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.620801][ T4404] EXT4-fs: failed to create workqueue [ 96.626366][ T4404] EXT4-fs (loop3): mount failed [ 96.828343][ T4401] syz.4.5: attempt to access beyond end of device [ 96.828343][ T4401] loop4: rw=524288, sector=145, nr_sectors = 79 limit=128 [ 97.003123][ T4412] loop2: detected capacity change from 0 to 2048 [ 97.054700][ T4401] syz.4.5: attempt to access beyond end of device [ 97.054700][ T4401] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 97.092332][ T4414] configfs-gadget.g1 gadget.32: Error: no playback and capture channels [ 97.162012][ T4414] udc usbip-vudc.0: failed to start g1: -22 [ 97.201112][ T4412] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 97.245983][ T4414] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 97.262769][ T4401] syz.4.5: attempt to access beyond end of device [ 97.262769][ T4401] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 97.325377][ T4414] UDC core: g1: couldn't find an available UDC or it's busy [ 97.417934][ T4401] syz.4.5: attempt to access beyond end of device [ 97.417934][ T4401] loop4: rw=0, sector=151, nr_sectors = 1 limit=128 [ 97.757286][ T4427] overlayfs: overlapping lowerdir path [ 98.220226][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 98.732730][ T4435] loop1: detected capacity change from 0 to 1024 [ 98.777879][ T4435] EXT4-fs: Ignoring removed bh option [ 98.800903][ T4435] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.928122][ T4435] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 99.008100][ T4435] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 99.354084][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 100.416147][ T4457] futex_wake_op: syz.2.26 tries to shift op by 144; fix this program [ 101.191973][ T4438] loop4: detected capacity change from 0 to 40427 [ 101.249675][ T4438] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 101.277832][ T4438] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 101.328229][ T4438] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 101.448880][ T4438] F2FS-fs (loop4): Found nat_bits in checkpoint [ 101.495270][ T4473] loop2: detected capacity change from 0 to 512 [ 101.512845][ T4473] ext3: Unknown parameter 'defcontext' [ 101.678747][ T4438] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 101.698838][ T4438] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 101.882965][ T4479] loop2: detected capacity change from 0 to 256 [ 101.934927][ T4479] exfat: Deprecated parameter 'utf8' [ 101.940339][ T4479] exfat: Deprecated parameter 'utf8' [ 101.998574][ T4479] exfat: Deprecated parameter 'utf8' [ 102.016265][ T4479] exfat: Deprecated parameter 'namecase' [ 102.039833][ T4482] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 102.039909][ T4482] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 102.083176][ T4479] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 102.134207][ T4482] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 102.134237][ T4482] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 102.153160][ T4482] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 102.183038][ T4482] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 102.203338][ T4482] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 102.252248][ T4482] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 102.271408][ T4482] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 102.282700][ T4482] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 102.451692][ T4488] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 102.856080][ T4479] futex_wake_op: syz.2.32 tries to shift op by 32; fix this program [ 103.228423][ T4464] loop0: detected capacity change from 0 to 40427 [ 103.277195][ T4464] F2FS-fs (loop0): invalid crc value [ 103.331794][ T4464] F2FS-fs (loop0): Found nat_bits in checkpoint [ 103.562926][ T4500] netlink: 'syz.3.38': attribute type 16 has an invalid length. [ 103.590672][ T4464] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 103.608970][ T4500] netlink: 'syz.3.38': attribute type 17 has an invalid length. [ 103.634249][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.645846][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.669565][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.700716][ T4500] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.186189][ T4278] syz-executor: attempt to access beyond end of device [ 104.186189][ T4278] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 106.043840][ T4517] netlink: 36 bytes leftover after parsing attributes in process `syz.2.39'. [ 106.512238][ T4519] futex_wake_op: syz.4.44 tries to shift op by 144; fix this program [ 106.853470][ T4522] netlink: 'syz.1.45': attribute type 4 has an invalid length. [ 106.967770][ T4522] loop1: detected capacity change from 0 to 1024 [ 107.032543][ T4522] EXT4-fs: Ignoring removed bh option [ 107.194055][ T4522] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 107.284910][ T27] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.487956][ T27] usb 5-1: unable to get BOS descriptor or descriptor too short [ 107.512944][ T27] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 107.588280][ T27] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 107.618348][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.661663][ T27] usb 5-1: Product: syz [ 107.704318][ T27] usb 5-1: Manufacturer: syz [ 107.724576][ T27] usb 5-1: SerialNumber: syz [ 108.022180][ T4533] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 108.104910][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 108.113306][ T27] usb 5-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 108.165795][ T27] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 108.171215][ T4536] loop2: detected capacity change from 0 to 256 [ 108.208670][ T4536] exfat: Deprecated parameter 'namecase' [ 108.220188][ T27] usb 5-1: failed to enable PITCH for EP 0x1 [ 108.244278][ T4536] exfat: Deprecated parameter 'namecase' [ 108.276392][ T4536] exfat: Deprecated parameter 'utf8' [ 108.286846][ T27] usb 5-1: unit 2 not found! [ 108.307085][ T27] usb 5-1: unit 0 not found! [ 108.349105][ T4536] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 109.037909][ T27] usb 5-1: USB disconnect, device number 2 [ 110.254523][ T4353] udevd[4353]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.024648][ T4563] loop0: detected capacity change from 0 to 512 [ 111.072759][ T4563] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.52: Unrecognised inode hash code 4 [ 111.084748][ T4563] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.52: Corrupt directory, running e2fsck is recommended [ 111.100440][ T4563] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 111.109319][ T4563] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.52: corrupted in-inode xattr [ 111.123017][ T4563] EXT4-fs (loop0): Remounting filesystem read-only [ 111.129906][ T4563] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.52: couldn't read orphan inode 15 (err -117) [ 111.144847][ T4563] EXT4-fs (loop0): Remounting filesystem read-only [ 111.151607][ T4563] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 112.711641][ T4593] futex_wake_op: syz.4.58 tries to shift op by 144; fix this program [ 112.834518][ T4320] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 112.886590][ T4565] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 112.919855][ T4565] EXT4-fs (loop0): Remounting filesystem read-only [ 113.032382][ T4320] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.049123][ T4320] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.062644][ T4320] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 113.077765][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 113.092300][ T4320] usb 2-1: SerialNumber: syz [ 113.340494][ T4320] usb 2-1: 0:2 : does not exist [ 113.451673][ T4320] usb 2-1: USB disconnect, device number 2 [ 113.585343][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 113.757444][ T4601] loop3: detected capacity change from 0 to 256 [ 113.781621][ T4601] exfat: Deprecated parameter 'utf8' [ 113.797885][ T4601] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 116.626688][ T4625] loop4: detected capacity change from 0 to 512 [ 116.680117][ T4625] EXT4-fs: Ignoring removed nobh option [ 116.734877][ T4625] ext4: Unknown parameter 'grpquota..' [ 117.159182][ T4632] futex_wake_op: syz.3.72 tries to shift op by 144; fix this program [ 117.260452][ T4637] loop2: detected capacity change from 0 to 512 [ 117.293111][ T4637] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.71: Unrecognised inode hash code 4 [ 117.304783][ T4637] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.71: Corrupt directory, running e2fsck is recommended [ 117.321700][ T4637] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 117.333067][ T4637] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.71: corrupted in-inode xattr [ 117.346538][ T4637] EXT4-fs (loop2): Remounting filesystem read-only [ 117.353224][ T4637] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.71: couldn't read orphan inode 15 (err -117) [ 117.366637][ T4637] EXT4-fs (loop2): Remounting filesystem read-only [ 117.373229][ T4637] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 117.434680][ T4639] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 117.474045][ T4612] loop0: detected capacity change from 0 to 40427 [ 117.509357][ T4639] EXT4-fs (loop2): Remounting filesystem read-only [ 117.530456][ T4612] F2FS-fs (loop0): Unrecognized mount option "whint_mode=fs-based" or missing value [ 117.965784][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 118.574766][ T4320] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.835264][ T4320] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.966479][ T4320] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.160088][ T4662] loop1: detected capacity change from 0 to 512 [ 119.187832][ T4320] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 119.204659][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 119.247954][ T4320] usb 5-1: SerialNumber: syz [ 119.831298][ T4662] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 119.841909][ T4320] usb 5-1: 0:2 : does not exist [ 119.882733][ T4662] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.962009][ T4320] usb 5-1: USB disconnect, device number 3 [ 120.179895][ T26] audit: type=1326 audit(1785244645.396:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="syz.3.81" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310039de99 code=0x7ffc0000 [ 120.288112][ T26] audit: type=1326 audit(1785244645.436:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="syz.3.81" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f310039f707 code=0x7ffc0000 [ 120.317064][ T4551] udevd[4551]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.449359][ T26] audit: type=1326 audit(1785244645.436:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="syz.3.81" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f310035e6ce code=0x7ffc0000 [ 120.520661][ T26] audit: type=1326 audit(1785244645.436:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="syz.3.81" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f310035e6ce code=0x7ffc0000 [ 120.553913][ T4681] loop0: detected capacity change from 0 to 131072 [ 120.615736][ T26] audit: type=1326 audit(1785244645.436:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="syz.3.81" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f310035e6ce code=0x7ffc0000 [ 120.735827][ T26] audit: type=1326 audit(1785244645.436:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="syz.3.81" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f310035e6ce code=0x7ffc0000 [ 120.756281][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 120.761138][ T26] audit: type=1326 audit(1785244645.466:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="syz.3.81" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310039de99 code=0x7ffc0000 [ 120.989262][ T4686] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.078143][ T4691] futex_wake_op: syz.2.86 tries to shift op by 144; fix this program [ 122.458766][ T22] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 122.844695][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 123.206310][ T22] usb 4-1: unable to get BOS descriptor or descriptor too short [ 123.277075][ T22] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 123.284968][ T4321] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 123.323251][ T22] usb 4-1: can't read configurations, error -71 [ 123.390227][ T4712] loop2: detected capacity change from 0 to 128 [ 123.498547][ T4321] usb 5-1: unable to get BOS descriptor or descriptor too short [ 123.518773][ T4712] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 123.546411][ T4321] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16 [ 123.613007][ T4321] usb 5-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 123.638194][ T4712] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 123.675910][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.732701][ T4714] configfs-gadget.g1 gadget.32: Error: no playback and capture channels [ 123.743776][ T4321] usb 5-1: Product: syz [ 123.783004][ T4321] usb 5-1: Manufacturer: syz [ 123.823939][ T4714] udc usbip-vudc.0: failed to start g1: -22 [ 123.830556][ T4321] usb 5-1: SerialNumber: syz [ 124.079670][ T4709] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 124.104772][ T4714] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 124.815999][ T4714] UDC core: g1: couldn't find an available UDC or it's busy [ 124.969169][ T4298] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 125.040470][ T4709] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 125.226947][ T4725] loop2: detected capacity change from 0 to 128 [ 125.348093][ T14] usb 5-1: USB disconnect, device number 4 [ 125.398357][ T4725] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 125.470785][ T4725] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 128.013215][ T4737] syz.3.96 uses obsolete (PF_INET,SOCK_PACKET) [ 128.077100][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 128.441797][ T4742] futex_wake_op: syz.4.99 tries to shift op by 144; fix this program [ 129.361788][ T4756] loop4: detected capacity change from 0 to 128 [ 129.411276][ T4759] loop0: detected capacity change from 0 to 128 [ 129.731988][ T4759] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 130.294662][ T4759] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 130.460569][ T4758] loop3: detected capacity change from 0 to 4096 [ 130.750798][ T4758] EXT4-fs: inline encryption not supported [ 131.586564][ T4758] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 131.676353][ T4758] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 131.760011][ T4758] System zones: 0-5 [ 131.805573][ T4758] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 131.972116][ T4399] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 132.009154][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 132.077777][ T4778] sd 0:0:1:0: PR command failed: 1026 [ 132.085531][ T4778] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 132.124306][ T4778] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 132.348973][ T4774] loop4: detected capacity change from 0 to 4096 [ 132.406060][ T4774] EXT4-fs: inline encryption not supported [ 132.445749][ T4774] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 132.489371][ T4774] EXT4-fs (loop4): Test dummy encryption mode enabled [ 132.529565][ T4786] loop1: detected capacity change from 0 to 512 [ 132.545023][ T4774] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 132.592967][ T4774] System zones: 0-5 [ 132.599067][ T4786] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 132.630791][ T4774] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 133.012502][ T4803] futex_wake_op: syz.0.116 tries to shift op by 144; fix this program [ 133.031600][ T4786] capability: warning: `syz.1.112' uses deprecated v2 capabilities in a way that may be insecure [ 133.248829][ T4813] loop3: detected capacity change from 0 to 128 [ 133.256619][ T4813] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 134.843878][ T4776] overlayfs: failed to resolve './bus': -2 [ 135.869629][ T4813] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 136.529563][ T26] audit: type=1800 audit(1785245429.744:9): pid=4797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.107" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 137.009242][ T4815] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 137.707757][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 137.749140][ T4818] loop0: detected capacity change from 0 to 128 [ 137.768686][ T4818] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.842749][ T4818] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 137.885420][ T4822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.119'. [ 138.095067][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.101531][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.066764][ T9] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 139.158545][ T4822] loop3: detected capacity change from 0 to 8192 [ 139.522904][ T4822] FAT-fs (loop3): bogus logical sector size 1792 [ 139.630329][ T4822] FAT-fs (loop3): Can't find a valid FAT filesystem [ 140.529422][ T4846] futex_wake_op: syz.1.128 tries to shift op by 144; fix this program [ 140.912102][ T4850] xt_TCPMSS: Only works on TCP SYN packets [ 142.266216][ T4854] loop3: detected capacity change from 0 to 512 [ 142.336596][ T4854] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 144.324663][ T4867] xt_TCPMSS: Only works on TCP SYN packets [ 145.261975][ T4883] futex_wake_op: syz.2.140 tries to shift op by 144; fix this program [ 145.848849][ T4890] xt_TCPMSS: Only works on TCP SYN packets [ 147.910764][ T4903] loop2: detected capacity change from 0 to 512 [ 147.982075][ T4903] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 153.069329][ T4930] futex_wake_op: syz.3.156 tries to shift op by 144; fix this program [ 154.277784][ T4941] xt_TCPMSS: Only works on TCP SYN packets [ 154.297654][ T4942] configfs-gadget.g1 gadget.32: Error: no playback and capture channels [ 154.315410][ T4942] udc usbip-vudc.0: failed to start g1: -22 [ 154.321571][ T4942] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 154.333009][ T4942] UDC core: g1: couldn't find an available UDC or it's busy [ 155.704342][ T4959] loop4: detected capacity change from 0 to 512 [ 155.751079][ T4963] futex_wake_op: syz.1.171 tries to shift op by 144; fix this program [ 155.795449][ T4959] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 155.956795][ T4959] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 156.127013][ T4959] EXT4-fs (loop4): 1 truncate cleaned up [ 156.172641][ T4959] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 156.400989][ T4959] netlink: 'syz.4.170': attribute type 322 has an invalid length. [ 156.678415][ T4977] loop2: detected capacity change from 0 to 512 [ 156.700397][ T4977] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.155: Unrecognised inode hash code 4 [ 156.712501][ T4977] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.155: Corrupt directory, running e2fsck is recommended [ 156.729626][ T4977] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 156.741377][ T4977] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.155: corrupted in-inode xattr [ 156.754145][ T4977] EXT4-fs (loop2): Remounting filesystem read-only [ 156.761064][ T4977] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.155: couldn't read orphan inode 15 (err -117) [ 156.773760][ T4977] EXT4-fs (loop2): Remounting filesystem read-only [ 156.780548][ T4977] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 157.318518][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 157.521695][ T4987] configfs-gadget.g1 gadget.32: Error: no playback and capture channels [ 157.561576][ T4987] udc usbip-vudc.0: failed to start g1: -22 [ 157.581931][ T4987] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 157.606510][ T4987] UDC core: g1: couldn't find an available UDC or it's busy [ 157.873748][ T4993] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.307792][ T4996] xt_TCPMSS: Only works on TCP SYN packets [ 158.406891][ T4320] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 158.507159][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 158.604634][ T4320] usb 3-1: Using ep0 maxpacket: 16 [ 158.622034][ T4320] usb 3-1: unable to get BOS descriptor or descriptor too short [ 158.638463][ T4320] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 158.652613][ T4320] usb 3-1: can't read configurations, error -71 [ 159.787757][ T5008] futex_wake_op: syz.1.183 tries to shift op by 144; fix this program [ 160.301635][ T5013] xt_TCPMSS: Only works on TCP SYN packets [ 161.918945][ T5038] futex_wake_op: syz.4.196 tries to shift op by 144; fix this program [ 162.555132][ T5046] xt_CT: You must specify a L4 protocol and not use inversions on it [ 162.884657][ T4366] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 163.074995][ T4366] usb 2-1: Using ep0 maxpacket: 16 [ 163.106486][ T4366] usb 2-1: unable to get BOS descriptor or descriptor too short [ 163.106693][ T5054] xt_TCPMSS: Only works on TCP SYN packets [ 163.152132][ T4366] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 163.214702][ T4366] usb 2-1: can't read configurations, error -71 [ 164.608495][ T5075] xt_hashlimit: size too large, truncated to 1048576 [ 168.945565][ T5124] tipc: Started in network mode [ 168.950824][ T5124] tipc: Node identity 4, cluster identity 4711 [ 168.957213][ T5124] tipc: Node number set to 4 [ 169.633055][ T5131] xt_TCPMSS: Only works on TCP SYN packets [ 170.287355][ T5132] loop3: detected capacity change from 0 to 512 [ 170.374798][ T5132] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 171.132667][ T5137] loop4: detected capacity change from 0 to 512 [ 173.122438][ T5137] EXT4-fs (loop4): Test dummy encryption mode enabled [ 173.168690][ T5137] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.4.231: corrupted xattr block 95 [ 173.211789][ T5137] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.231: bg 0: block 7: invalid block bitmap [ 173.256406][ T5137] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 173.359236][ T5137] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2918: inode #11: comm syz.4.231: corrupted xattr block 95 [ 173.673374][ T5137] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -117) [ 173.745745][ T4286] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 173.767950][ T4286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 173.783373][ T4286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 173.833291][ T4286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 173.861509][ T4286] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 173.874614][ T4286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.096092][ T5137] EXT4-fs (loop4): 1 orphan inode deleted [ 174.219886][ T5137] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 174.968501][ T5150] chnl_net:caif_netlink_parms(): no params data found [ 175.333811][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.341475][ T5150] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.358651][ T5150] device bridge_slave_0 entered promiscuous mode [ 175.410701][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 175.419885][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.435600][ T5150] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.448570][ T5150] device bridge_slave_1 entered promiscuous mode [ 175.691050][ T5150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.736621][ T5150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.792132][ T5150] team0: Port device team_slave_0 added [ 175.868029][ T5150] team0: Port device team_slave_1 added [ 175.953736][ T5150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.964975][ T5178] loop4: detected capacity change from 0 to 512 [ 175.999987][ T5178] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 176.012364][ T4286] Bluetooth: hci5: command 0x0409 tx timeout [ 176.021131][ T5150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.047892][ T5150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.060948][ T5150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.069046][ T5150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.098845][ T5150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.416724][ T5150] device hsr_slave_0 entered promiscuous mode [ 176.441097][ T5150] device hsr_slave_1 entered promiscuous mode [ 176.452201][ T5150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.476368][ T5150] Cannot create hsr debugfs directory [ 176.989707][ T5190] xt_TCPMSS: Only works on TCP SYN packets [ 177.971879][ T5150] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 178.047001][ T5150] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 178.074695][ T4286] Bluetooth: hci5: command 0x041b tx timeout [ 178.128950][ T5150] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 178.166240][ T5150] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 178.185794][ T5198] loop4: detected capacity change from 0 to 512 [ 178.239069][ T5198] EXT4-fs (loop4): Test dummy encryption mode enabled [ 178.326644][ T5198] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.4.250: corrupted xattr block 95 [ 178.398935][ T5198] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.250: bg 0: block 7: invalid block bitmap [ 178.413489][ T5205] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.438816][ T5198] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 178.493013][ T5198] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2918: inode #11: comm syz.4.250: corrupted xattr block 95 [ 178.561651][ T5150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.565798][ T5198] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -117) [ 178.578351][ T5198] EXT4-fs (loop4): 1 orphan inode deleted [ 178.608106][ T5198] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 178.621470][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.632725][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.673739][ T5150] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.729590][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.770241][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.788060][ T4406] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.795726][ T4406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.164300][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.587976][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.606271][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 179.614064][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.874197][ T4406] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.881457][ T4406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.165866][ T4286] Bluetooth: hci5: command 0x040f tx timeout [ 180.218270][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.809618][ T5224] loop1: detected capacity change from 0 to 512 [ 180.860741][ T5224] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 181.026925][ T5226] loop3: detected capacity change from 0 to 128 [ 181.096818][ T5226] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 181.198670][ T5150] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 181.279700][ T5150] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.295726][ T5226] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 181.497382][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.556486][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.626165][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.675279][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.731909][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.771071][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.812843][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.826492][ T4286] Bluetooth: hci5: command 0x0419 tx timeout [ 182.845847][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.854723][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.863499][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.925865][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 183.780505][ T4406] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 184.129915][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 184.180796][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 184.221059][ T5150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.309496][ T5256] xt_CT: You must specify a L4 protocol and not use inversions on it [ 185.852310][ T5265] loop4: detected capacity change from 0 to 512 [ 185.872404][ T5269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.267'. [ 186.228638][ T5265] EXT4-fs (loop4): Test dummy encryption mode enabled [ 186.650276][ T5265] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.4.265: corrupted xattr block 95 [ 186.697359][ T5265] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.265: bg 0: block 7: invalid block bitmap [ 186.729745][ T5265] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 186.745285][ T5265] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2918: inode #11: comm syz.4.265: corrupted xattr block 95 [ 186.770408][ T5265] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -117) [ 186.840602][ T5265] EXT4-fs (loop4): 1 orphan inode deleted [ 186.847182][ T5265] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 187.234824][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 187.261945][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.305698][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 187.488378][ T5284] loop3: detected capacity change from 0 to 1024 [ 187.510515][ T5284] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.669520][ T5284] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c018, mo2=0102] [ 187.679286][ T5284] System zones: 0-1, 3-12 [ 187.697566][ T5284] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 188.554965][ T5278] EXT4-fs (loop3): unmounting filesystem. [ 188.846651][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.878577][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.941592][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.987950][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.652602][ T5150] device veth0_vlan entered promiscuous mode [ 189.715292][ T5150] device veth1_vlan entered promiscuous mode [ 189.755289][ T4319] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 189.807651][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 189.826462][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.907937][ T5150] device veth0_macvtap entered promiscuous mode [ 189.943111][ T5308] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.947371][ T5150] device veth1_macvtap entered promiscuous mode [ 189.960502][ T4319] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.984629][ T4319] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.010136][ T4319] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 190.040863][ T4319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 190.049374][ T4319] usb 2-1: SerialNumber: syz [ 190.079370][ T5150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.100558][ T5150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.144484][ T5150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.164245][ T5150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.175269][ T5150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.216714][ T5150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.240731][ T5150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.263910][ T5150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.288362][ T5150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.298885][ T4319] usb 2-1: 0:2 : does not exist [ 190.342612][ T5150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.362781][ T4319] usb 2-1: USB disconnect, device number 5 [ 190.370319][ T5150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.392184][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 190.497724][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.847417][ T4551] udevd[4551]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.204881][ T5150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.222730][ T5150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.233205][ T5150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.244703][ T5150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.254865][ T5150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.304754][ T5150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.371939][ T5150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.400083][ T5150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.434653][ T5150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.464922][ T5150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.658859][ T5150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.722996][ T5150] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.774037][ T5150] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.825654][ T5150] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.886193][ T5150] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.420512][ T4400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.479432][ T4400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.618156][ T5321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.282'. [ 192.647638][ T5321] bridge0: port 3(batadv1) entered blocking state [ 192.663607][ T5321] bridge0: port 3(batadv1) entered disabled state [ 192.705809][ T5321] device batadv1 entered promiscuous mode [ 192.796262][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.827134][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.875179][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 192.899623][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 192.915685][ T4408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.928906][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 192.938143][ T4285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 192.944791][ T4408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.100444][ T5331] loop1: detected capacity change from 0 to 1024 [ 193.116242][ T5331] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.199296][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 193.218967][ T4285] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 193.232021][ T4285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 193.515084][ T5331] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c018, mo2=0102] [ 193.523934][ T5331] System zones: 0-1, 3-12 [ 193.580086][ T5331] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 194.358806][ T4408] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 194.368640][ T4408] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 195.190859][ T5335] EXT4-fs (loop1): unmounting filesystem. [ 195.217222][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 195.364091][ T4285] Bluetooth: hci3: command 0x0409 tx timeout [ 195.475594][ T5345] xt_CT: You must specify a L4 protocol and not use inversions on it [ 195.568125][ T4673] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.765577][ T4673] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.870761][ T4673] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.899738][ T5348] futex_wake_op: syz.3.285 tries to shift op by 32; fix this program [ 196.033012][ T4673] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.069500][ T5328] chnl_net:caif_netlink_parms(): no params data found [ 196.083588][ T5355] tipc: Started in network mode [ 196.089862][ T5355] tipc: Node identity 92403e2d7b07, cluster identity 4711 [ 196.098490][ T5355] tipc: Enabled bearer , priority 0 [ 196.148251][ T5354] device syzkaller0 entered promiscuous mode [ 196.193469][ T5354] tipc: Resetting bearer [ 196.227237][ T5353] tipc: Resetting bearer [ 196.272544][ T5353] tipc: Disabling bearer [ 196.448472][ T5328] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.484843][ T5328] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.493234][ T5328] device bridge_slave_0 entered promiscuous mode [ 196.548190][ T5328] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.570902][ T5328] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.594795][ T5328] device bridge_slave_1 entered promiscuous mode [ 196.728540][ T5328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.917643][ T5328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.065463][ T5328] team0: Port device team_slave_0 added [ 197.223569][ T5328] team0: Port device team_slave_1 added [ 197.291610][ T5328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.444559][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 197.480670][ T5328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.514869][ T5328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.716313][ T5394] loop5: detected capacity change from 0 to 1024 [ 197.730888][ T5394] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.827112][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 199.835621][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.841940][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.603506][ T5399] overlayfs: failed to clone lowerpath [ 200.655033][ T5394] EXT4-fs warning (device loop5): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop5. [ 201.045287][ T5328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.055871][ T5328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.141243][ T5328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.445416][ T5328] device hsr_slave_0 entered promiscuous mode [ 201.475390][ T5328] device hsr_slave_1 entered promiscuous mode [ 201.781950][ T5328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.823878][ T5406] futex_wake_op: syz.3.302 tries to shift op by 32; fix this program [ 201.835020][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 201.842534][ T4280] Bluetooth: hci0: command 0x0406 tx timeout [ 201.850176][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 201.857266][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 201.987359][ T5328] Cannot create hsr debugfs directory [ 202.744586][ T27] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 202.936352][ T27] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.960365][ T27] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.009395][ T27] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 203.057910][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 203.107311][ T27] usb 6-1: SerialNumber: syz [ 203.347110][ T27] usb 6-1: 0:2 : does not exist [ 203.403913][ T27] usb 6-1: USB disconnect, device number 2 [ 203.628371][ T5328] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 203.681543][ T4673] device hsr_slave_0 left promiscuous mode [ 203.688385][ T4551] udevd[4551]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.753675][ T4673] device hsr_slave_1 left promiscuous mode [ 203.805004][ T4673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.812641][ T4673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.861979][ T4673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.883871][ T4673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.912687][ T4673] device bridge_slave_1 left promiscuous mode [ 203.936821][ T4673] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.986489][ T4673] device bridge_slave_0 left promiscuous mode [ 204.003154][ T4673] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.216838][ T4673] device veth1_macvtap left promiscuous mode [ 204.233664][ T4673] device veth0_macvtap left promiscuous mode [ 204.266672][ T4673] device veth1_vlan left promiscuous mode [ 204.287219][ T4673] device veth0_vlan left promiscuous mode [ 205.184335][ T5481] futex_wake_op: syz.4.318 tries to shift op by 32; fix this program [ 206.775045][ T4673] team0 (unregistering): Port device team_slave_1 removed [ 206.824470][ T4673] team0 (unregistering): Port device team_slave_0 removed [ 206.867540][ T4673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.917179][ T4673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.123927][ T5496] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 207.402102][ T4673] bond0 (unregistering): Released all slaves [ 207.609122][ T5328] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 207.632101][ T5328] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 207.687882][ T5328] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 207.743049][ T5500] device syzkaller0 entered promiscuous mode [ 207.985631][ T5513] Zero length message leads to an empty skb [ 208.313337][ T5328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.375275][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.395019][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.411905][ T5328] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.452138][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.472415][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.505480][ T4587] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.512826][ T4587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.635534][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.655555][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.699213][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.732845][ T4587] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.740403][ T4587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.806635][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.870939][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.891498][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.914269][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.939751][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.957363][ T5539] configfs-gadget.g1 gadget.32: Error: no playback and capture channels [ 208.974231][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.997511][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.009752][ T5539] udc usbip-vudc.0: failed to start g1: -22 [ 209.047901][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.080420][ T5539] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 209.090169][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.110343][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.134718][ T5539] UDC core: g1: couldn't find an available UDC or it's busy [ 209.151634][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.182929][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.822790][ T5559] xt_TCPMSS: Only works on TCP SYN packets [ 210.227218][ T5566] device syzkaller0 entered promiscuous mode [ 210.535409][ T5574] loop5: detected capacity change from 0 to 128 [ 210.552104][ T5574] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 210.577918][ T5574] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 211.969679][ T5575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.147667][ T5575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.257026][ T5575] bond0 (unregistering): Released all slaves [ 212.382446][ T5328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.764292][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 212.811296][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 212.933408][ T5585] device batadv0 entered promiscuous mode [ 212.969543][ T5585] device macsec1 entered promiscuous mode [ 213.433529][ T5598] xt_TCPMSS: Only works on TCP SYN packets [ 213.516945][ T5605] device syzkaller0 entered promiscuous mode [ 214.282958][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 214.329104][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 214.422693][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 214.445521][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 214.491431][ T5328] device veth0_vlan entered promiscuous mode [ 214.500512][ T5636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.357'. [ 214.513566][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 214.532300][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 214.559485][ T5328] device veth1_vlan entered promiscuous mode [ 214.673845][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 214.709223][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 214.755253][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 214.792417][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 214.830796][ T5642] configfs-gadget.g1 gadget.32: Error: no playback and capture channels [ 214.845605][ T5328] device veth0_macvtap entered promiscuous mode [ 214.901172][ T5642] udc usbip-vudc.0: failed to start g1: -22 [ 214.928651][ T5328] device veth1_macvtap entered promiscuous mode [ 214.930513][ T5642] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 214.974212][ T5642] UDC core: g1: couldn't find an available UDC or it's busy [ 215.051755][ T4587] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.190083][ T5328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.223307][ T5328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.274763][ T5328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.314881][ T5328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.352244][ T5328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.397560][ T5328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.421614][ T5328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.440856][ T5328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.474064][ T5328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.496101][ T5328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.528085][ T5328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.596603][ T4587] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.650898][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 215.684180][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 215.876140][ T5652] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.912425][ T5650] xt_TCPMSS: Only works on TCP SYN packets [ 215.918812][ T5328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.984496][ T5328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.025058][ T5328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.089243][ T5328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.119869][ T5328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.140654][ T5328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.160927][ T5328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.219986][ T5328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.235131][ T5328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.254446][ T5328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.270016][ T5328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.303244][ T4587] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.336002][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 216.363479][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.384879][ T14] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 216.466861][ T4587] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.503023][ T5328] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.513010][ T5328] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.523397][ T5328] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.532633][ T5328] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.584730][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 216.594520][ T5661] device syzkaller0 entered promiscuous mode [ 216.649406][ T14] usb 5-1: unable to get BOS descriptor or descriptor too short [ 216.683900][ T14] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 216.703804][ T14] usb 5-1: can't read configurations, error -71 [ 217.011208][ T4408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.038251][ T4408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.060635][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 217.145162][ T4408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.188433][ T4408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.301015][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 217.478865][ T5673] device syzkaller1 entered promiscuous mode [ 219.615710][ T5701] futex_wake_op: syz.3.373 tries to shift op by 144; fix this program [ 220.550501][ T5715] device syzkaller0 entered promiscuous mode [ 220.786460][ T5718] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.194549][ T14] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 221.394680][ T14] usb 6-1: Using ep0 maxpacket: 16 [ 221.490449][ T14] usb 6-1: unable to get BOS descriptor or descriptor too short [ 221.507169][ T5733] loop6: detected capacity change from 0 to 128 [ 221.519477][ T14] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 221.531610][ T5733] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 221.552818][ T14] usb 6-1: can't read configurations, error -71 [ 221.625650][ T5733] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 221.657261][ T4587] device hsr_slave_0 left promiscuous mode [ 221.674304][ T4587] device hsr_slave_1 left promiscuous mode [ 221.706322][ T4587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.713828][ T4587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.786236][ T4587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.852911][ T4587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.115658][ T4587] device bridge_slave_1 left promiscuous mode [ 222.138193][ T4587] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.290038][ T4587] device bridge_slave_0 left promiscuous mode [ 222.387073][ T4400] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 222.461820][ T4587] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.754542][ T4275] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 222.770190][ T4587] device veth1_macvtap left promiscuous mode [ 222.804819][ T4587] device veth0_macvtap left promiscuous mode [ 222.811025][ T4587] device veth1_vlan left promiscuous mode [ 222.829607][ T4587] device veth0_vlan left promiscuous mode [ 222.964295][ T4275] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.987252][ T4275] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.018418][ T4275] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 223.049442][ T4275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 223.082238][ T4275] usb 5-1: SerialNumber: syz [ 223.316726][ T4275] usb 5-1: 0:2 : does not exist [ 223.356976][ T4275] usb 5-1: USB disconnect, device number 7 [ 223.595750][ T4551] udevd[4551]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.394209][ T4587] team0 (unregistering): Port device team_slave_1 removed [ 224.444188][ T4587] team0 (unregistering): Port device team_slave_0 removed [ 224.492471][ T4587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.550309][ T4587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.878776][ T4587] bond0 (unregistering): Released all slaves [ 225.285668][ T5781] Cannot find set identified by id 2 to match [ 226.979840][ T5803] configfs-gadget.g1 gadget.32: Error: no playback and capture channels [ 227.055087][ T5805] futex_wake_op: syz.5.397 tries to shift op by 144; fix this program [ 227.081434][ T5803] udc usbip-vudc.0: failed to start g1: -22 [ 227.130927][ T5803] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 227.187867][ T5803] UDC core: g1: couldn't find an available UDC or it's busy [ 228.355564][ T5809] netlink: 56 bytes leftover after parsing attributes in process `syz.3.399'. [ 228.914599][ T4320] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 229.107477][ T4320] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.131557][ T4320] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 229.188179][ T4320] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 229.215441][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 229.231888][ T4320] usb 5-1: SerialNumber: syz [ 229.290393][ T5829] device wlan0 entered promiscuous mode [ 229.312501][ T5829] batman_adv: batadv0: Adding interface: wlan0 [ 229.334703][ T5829] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.394808][ T5829] batman_adv: batadv0: Interface activated: wlan0 [ 229.487252][ T4320] usb 5-1: 0:2 : does not exist [ 229.552041][ T4320] usb 5-1: USB disconnect, device number 8 [ 231.014815][ T5851] device syzkaller0 entered promiscuous mode [ 232.385642][ T5850] futex_wake_op: syz.4.410 tries to shift op by 144; fix this program [ 233.361700][ T5877] xt_CT: You must specify a L4 protocol and not use inversions on it [ 234.473244][ T5887] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 234.559669][ T5887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.585907][ T5911] futex_wake_op: syz.4.426 tries to shift op by 144; fix this program [ 239.236122][ T5951] xt_CT: You must specify a L4 protocol and not use inversions on it [ 239.660305][ T5962] netlink: 56 bytes leftover after parsing attributes in process `syz.3.439'. [ 239.684894][ T5691] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 239.928990][ T5691] usb 5-1: Using ep0 maxpacket: 16 [ 239.965865][ T5691] usb 5-1: unable to get BOS descriptor or descriptor too short [ 240.064633][ T5691] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 240.134552][ T5691] usb 5-1: can't read configurations, error -71 [ 241.117665][ T5976] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 241.485256][ T5993] futex_wake_op: syz.4.445 tries to shift op by 144; fix this program [ 241.963974][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.6.448'. [ 242.078790][ T6003] netlink: 4 bytes leftover after parsing attributes in process `syz.6.448'. [ 242.233418][ T6008] netlink: 28 bytes leftover after parsing attributes in process `syz.3.450'. [ 245.799012][ T6028] xt_CT: You must specify a L4 protocol and not use inversions on it [ 245.830233][ T6027] smc: net device lo applied user defined pnetid SYZ0 [ 246.176669][ T4361] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 246.569016][ T4361] usb 5-1: Using ep0 maxpacket: 16 [ 247.445262][ T4361] usb 5-1: unable to get BOS descriptor or descriptor too short [ 247.491223][ T4361] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 247.552409][ T4361] usb 5-1: can't read configurations, error -71 [ 247.601053][ T6061] futex_wake_op: syz.5.461 tries to shift op by 144; fix this program [ 248.127838][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.464'. [ 248.243727][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.464'. [ 248.591192][ T6086] loop4: detected capacity change from 0 to 128 [ 248.599051][ T6086] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 249.992488][ T6086] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 251.363032][ T6091] tipc: Started in network mode [ 251.368588][ T6091] tipc: Node identity 4, cluster identity 4711 [ 251.374922][ T6091] tipc: Node number set to 4 [ 251.769975][ T4408] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 253.767564][ T6121] netlink: 'syz.1.479': attribute type 1 has an invalid length. [ 254.114512][ T14] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 254.122632][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.479'. [ 254.139564][ T6121] device bridge1 entered promiscuous mode [ 254.151785][ T6121] bond1: (slave bridge1): making interface the new active one [ 254.163705][ T6121] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 255.181419][ T14] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.193494][ T6142] netlink: 36 bytes leftover after parsing attributes in process `syz.1.482'. [ 255.222968][ T14] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.254771][ T14] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 255.284635][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 255.292724][ T14] usb 7-1: SerialNumber: syz [ 255.336166][ T6142] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.485727][ T6147] tipc: Started in network mode [ 255.490896][ T6147] tipc: Node identity 4, cluster identity 4711 [ 255.497482][ T6147] tipc: Node number set to 4 [ 256.286195][ T14] usb 7-1: 0:2 : does not exist [ 256.300057][ T14] usb 7-1: USB disconnect, device number 2 [ 258.515969][ T4551] udevd[4551]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.857847][ T6213] loop5: detected capacity change from 0 to 128 [ 260.867173][ T6213] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 260.974956][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.981337][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.850052][ T6213] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 263.616326][ T4298] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 263.677000][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.498'. [ 264.866040][ T6229] loop5: detected capacity change from 0 to 512 [ 264.955988][ T6229] EXT4-fs (loop5): Test dummy encryption mode enabled [ 265.025404][ T6229] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.5.501: corrupted xattr block 95 [ 265.046159][ T6229] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.501: bg 0: block 7: invalid block bitmap [ 265.075391][ T6229] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 265.101924][ T6229] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2918: inode #11: comm syz.5.501: corrupted xattr block 95 [ 265.122875][ T6229] EXT4-fs warning (device loop5): ext4_evict_inode:301: xattr delete (err -117) [ 265.132328][ T6229] EXT4-fs (loop5): 1 orphan inode deleted [ 265.138239][ T6229] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 265.476475][ T5150] EXT4-fs (loop5): unmounting filesystem. [ 266.956810][ T6253] tipc: Started in network mode [ 266.961762][ T6253] tipc: Node identity 4, cluster identity 4711 [ 266.992213][ T6253] tipc: Node number set to 4 [ 267.443099][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.508'. [ 267.564837][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.508'. [ 267.574003][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.508'. [ 267.616196][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.508'. [ 267.666158][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.508'. [ 267.803856][ T6271] netlink: 36 bytes leftover after parsing attributes in process `syz.5.511'. [ 267.817783][ T6271] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.884660][ T7] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 268.094328][ T7] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.110790][ T7] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 268.132063][ T7] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 268.164594][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 268.193110][ T7] usb 7-1: SerialNumber: syz [ 268.426800][ T6285] loop4: detected capacity change from 0 to 512 [ 268.430469][ T7] usb 7-1: 0:2 : does not exist [ 268.464224][ T6285] EXT4-fs (loop4): Test dummy encryption mode enabled [ 268.503568][ T7] usb 7-1: USB disconnect, device number 3 [ 268.533032][ T6285] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.4.516: corrupted xattr block 95 [ 268.626633][ T6285] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.516: bg 0: block 7: invalid block bitmap [ 268.655843][ T6285] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 268.685089][ T6285] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2918: inode #11: comm syz.4.516: corrupted xattr block 95 [ 268.708370][ T6285] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -117) [ 268.719640][ T6285] EXT4-fs (loop4): 1 orphan inode deleted [ 268.744633][ T6285] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 268.765568][ T6298] netlink: 20 bytes leftover after parsing attributes in process `syz.5.519'. [ 268.798017][ T4551] udevd[4551]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.904087][ T6305] futex_wake_op: syz.1.520 tries to shift op by 144; fix this program [ 269.910141][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 271.514929][ T6353] futex_wake_op: syz.1.531 tries to shift op by 144; fix this program [ 272.641872][ T6364] loop4: detected capacity change from 0 to 512 [ 272.695365][ T6364] EXT4-fs (loop4): Test dummy encryption mode enabled [ 272.791203][ T6364] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.4.535: corrupted xattr block 95 [ 272.865913][ T6364] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.535: bg 0: block 7: invalid block bitmap [ 272.896905][ T6364] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 272.942186][ T6364] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2918: inode #11: comm syz.4.535: corrupted xattr block 95 [ 273.156726][ T6364] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -117) [ 273.331305][ T6364] EXT4-fs (loop4): 1 orphan inode deleted [ 273.406583][ T6364] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 274.152622][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 274.434183][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.544'. [ 275.979943][ T6425] tipc: Cannot configure node identity twice [ 276.885234][ T6438] loop5: detected capacity change from 0 to 512 [ 276.961532][ T6438] EXT4-fs (loop5): Test dummy encryption mode enabled [ 277.062221][ T6438] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.5.554: corrupted xattr block 95 [ 277.145442][ T6438] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.554: bg 0: block 7: invalid block bitmap [ 277.163896][ T6438] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 277.201435][ T6438] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2918: inode #11: comm syz.5.554: corrupted xattr block 95 [ 277.224930][ T6438] EXT4-fs warning (device loop5): ext4_evict_inode:301: xattr delete (err -117) [ 277.234091][ T6438] EXT4-fs (loop5): 1 orphan inode deleted [ 277.245251][ T6444] netlink: 20 bytes leftover after parsing attributes in process `syz.3.556'. [ 277.274546][ T6438] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 277.885372][ T5150] EXT4-fs (loop5): unmounting filesystem. [ 280.067007][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.563'. [ 281.171175][ T6487] xt_CT: You must specify a L4 protocol and not use inversions on it [ 283.259647][ T6520] futex_wake_op: syz.6.575 tries to shift op by 144; fix this program [ 284.901347][ T6540] loop5: detected capacity change from 0 to 128 [ 284.909276][ T6540] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 284.938945][ T6540] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 287.500349][ T6569] futex_wake_op: syz.6.588 tries to shift op by 144; fix this program [ 288.653978][ T6573] syz.6.590 (6573) used greatest stack depth: 18128 bytes left [ 288.670349][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.592'. [ 292.196219][ T6612] bridge0: port 3(vlan2) entered blocking state [ 292.202755][ T6612] bridge0: port 3(vlan2) entered disabled state [ 292.210523][ T6612] device vlan2 entered promiscuous mode [ 292.216398][ T6612] device geneve0 entered promiscuous mode [ 292.445763][ T6621] futex_wake_op: syz.4.602 tries to shift op by 144; fix this program [ 295.745832][ T6649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.612'. [ 296.356188][ T6671] futex_wake_op: syz.4.617 tries to shift op by 144; fix this program [ 296.461987][ T6669] netlink: 60 bytes leftover after parsing attributes in process `syz.5.618'. [ 296.765915][ T6669] netlink: 60 bytes leftover after parsing attributes in process `syz.5.618'. [ 297.183159][ T6680] netlink: 60 bytes leftover after parsing attributes in process `syz.5.618'. [ 297.866981][ T6690] xt_TCPMSS: Only works on TCP SYN packets [ 298.963101][ T4285] Bluetooth: hci5: command 0x0406 tx timeout [ 300.939687][ T6723] futex_wake_op: syz.6.630 tries to shift op by 144; fix this program [ 301.018602][ T6725] netlink: 'syz.5.635': attribute type 1 has an invalid length. [ 301.667604][ T6736] xt_TCPMSS: Only works on TCP SYN packets [ 301.806333][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.635'. [ 303.093044][ T6733] device bridge1 entered promiscuous mode [ 303.225786][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.640'. [ 304.878346][ T6774] netlink: 312 bytes leftover after parsing attributes in process `syz.5.648'. [ 304.985002][ T6774] netlink: 220 bytes leftover after parsing attributes in process `syz.5.648'. [ 305.383933][ T6780] xt_TCPMSS: Only works on TCP SYN packets [ 305.708038][ T6784] xt_CT: You must specify a L4 protocol and not use inversions on it [ 305.772518][ T6786] netlink: 'syz.5.652': attribute type 29 has an invalid length. [ 305.803810][ T6786] netlink: 'syz.5.652': attribute type 29 has an invalid length. [ 305.857035][ T6789] netlink: 'syz.5.652': attribute type 29 has an invalid length. [ 306.903613][ T6800] netlink: 'syz.3.654': attribute type 1 has an invalid length. [ 307.858840][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.654'. [ 307.928245][ T6800] device bridge1 entered promiscuous mode [ 308.027750][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.5.656'. [ 308.758594][ T6830] xt_TCPMSS: Only works on TCP SYN packets [ 308.966577][ T6835] xt_CT: You must specify a L4 protocol and not use inversions on it [ 309.156761][ T6847] futex_wake_op: syz.4.665 tries to shift op by 144; fix this program [ 310.467216][ T6869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.673'. [ 310.982507][ T6875] xt_TCPMSS: Only works on TCP SYN packets [ 311.750751][ T6894] xt_CT: You must specify a L4 protocol and not use inversions on it [ 313.311515][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.689'. [ 313.831797][ T6933] loop6: detected capacity change from 0 to 128 [ 313.839644][ T6933] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 313.857638][ T6933] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 314.595247][ T4408] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 315.545411][ T6949] netlink: 36 bytes leftover after parsing attributes in process `syz.3.695'. [ 315.805333][ T6949] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.238658][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.704'. [ 318.460446][ T7001] netlink: 'syz.4.710': attribute type 1 has an invalid length. [ 319.655111][ T7027] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 320.406531][ T7029] xt_CT: You must specify a L4 protocol and not use inversions on it [ 320.695686][ T7041] netlink: 36 bytes leftover after parsing attributes in process `syz.4.720'. [ 320.746372][ T7041] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.844597][ T5691] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 321.044460][ T5691] usb 7-1: Using ep0 maxpacket: 16 [ 321.394835][ T5691] usb 7-1: unable to get BOS descriptor or descriptor too short [ 321.488359][ T5691] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 321.653436][ T5691] usb 7-1: can't read configurations, error -71 [ 321.843681][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.721'. [ 322.401510][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.407986][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.543382][ T7068] netlink: 'syz.4.726': attribute type 1 has an invalid length. [ 322.862126][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.726'. [ 322.889536][ T7076] device bridge1 entered promiscuous mode [ 322.901920][ T7076] bond3: (slave bridge1): making interface the new active one [ 322.910955][ T7076] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 323.101279][ T7081] overlayfs: failed to clone lowerpath [ 323.810584][ T7088] netlink: 20 bytes leftover after parsing attributes in process `syz.5.730'. [ 325.851121][ T7120] xt_CT: You must specify a L4 protocol and not use inversions on it [ 326.194734][ T4319] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 326.477406][ T4319] usb 6-1: Using ep0 maxpacket: 16 [ 326.916581][ T4319] usb 6-1: unable to get BOS descriptor or descriptor too short [ 326.935659][ T4319] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 326.943347][ T4319] usb 6-1: can't read configurations, error -71 [ 328.264864][ T4319] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 328.424896][ T4319] usb 6-1: device descriptor read/64, error -71 [ 328.725692][ T4319] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 328.935130][ T4319] usb 6-1: device descriptor read/64, error -71 [ 329.064994][ T4319] usb usb6-port1: attempt power cycle [ 329.619368][ T4319] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 329.698963][ T4319] usb 6-1: device descriptor read/8, error -71 [ 330.284522][ T4319] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 330.327032][ T7179] netlink: 'syz.1.758': attribute type 1 has an invalid length. [ 330.334276][ T4319] usb 6-1: device descriptor read/8, error -71 [ 330.454732][ T4319] usb usb6-port1: unable to enumerate USB device [ 330.568856][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.759'. [ 330.578399][ T7188] openvswitch: netlink: Flow key attr not present in new flow. [ 330.583213][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.758'. [ 330.640309][ T7179] device bridge2 entered promiscuous mode [ 330.688493][ T7179] bond3: (slave bridge2): making interface the new active one [ 330.733143][ T7179] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 335.236825][ T7262] overlayfs: failed to clone lowerpath [ 338.325682][ T7299] netlink: 'syz.6.793': attribute type 1 has an invalid length. [ 338.594544][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.6.793'. [ 338.697236][ T7305] device bridge1 entered promiscuous mode [ 338.753576][ T7305] bond1: (slave bridge1): making interface the new active one [ 338.793684][ T7305] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 341.404605][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.802'. [ 341.413593][ T7330] device wlan0 entered promiscuous mode [ 344.772578][ T7393] netlink: 'syz.1.817': attribute type 1 has an invalid length. [ 345.027934][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.817'. [ 345.129369][ T7397] device bridge3 entered promiscuous mode [ 345.215220][ T7397] bond5: (slave bridge3): making interface the new active one [ 345.271502][ T7397] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 345.710443][ T7416] netlink: 71 bytes leftover after parsing attributes in process `syz.5.825'. [ 346.974431][ T4275] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 347.187316][ T4275] usb 5-1: config 1 has an invalid descriptor of length 103, skipping remainder of the config [ 347.234549][ T4275] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 347.258224][ T4275] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 347.295987][ T4275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 347.334714][ T4275] usb 5-1: SerialNumber: syz [ 347.550832][ T7448] overlayfs: overlapping lowerdir path [ 348.211120][ T4275] usb 5-1: 0:2 : does not exist [ 348.222747][ T4275] usb 5-1: unit 101 not found! [ 348.326238][ T4275] usb 5-1: USB disconnect, device number 13 [ 348.625745][ T4551] udevd[4551]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.623329][ T7475] futex_wake_op: syz.6.840 tries to shift op by 144; fix this program [ 351.716152][ T7516] device wlan0 entered promiscuous mode [ 352.083912][ T7523] futex_wake_op: syz.4.855 tries to shift op by 144; fix this program [ 352.974608][ T7528] netlink: 'syz.6.857': attribute type 2 has an invalid length. [ 353.024703][ T7528] netlink: 'syz.6.857': attribute type 1 has an invalid length. [ 354.501372][ T7559] netlink: 64 bytes leftover after parsing attributes in process `syz.4.865'. [ 354.794661][ T7563] device wlan0 entered promiscuous mode [ 355.174983][ T7577] futex_wake_op: syz.4.869 tries to shift op by 144; fix this program [ 356.405614][ T7584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.837'. [ 360.617166][ T7635] futex_wake_op: syz.3.880 tries to shift op by 144; fix this program [ 366.095719][ T7630] netlink: 56 bytes leftover after parsing attributes in process `syz.6.879'. [ 366.448066][ T7655] device wlan0 entered promiscuous mode [ 366.872155][ T7668] netlink: 'syz.1.889': attribute type 29 has an invalid length. [ 366.974863][ T7668] netlink: 'syz.1.889': attribute type 29 has an invalid length. [ 367.235818][ T7668] netlink: 'syz.1.889': attribute type 29 has an invalid length. [ 367.500044][ T7672] netlink: 'syz.1.889': attribute type 29 has an invalid length. [ 372.526852][ T7694] netlink: 56 bytes leftover after parsing attributes in process `syz.6.895'. [ 373.402535][ T7719] Driver unsupported XDP return value 0 on prog (id 59) dev N/A, expect packet loss! [ 374.018859][ T7737] IPv6: NLM_F_CREATE should be specified when creating new route [ 374.090770][ T7737] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.098791][ T7737] IPv6: NLM_F_CREATE should be set when creating new route [ 374.159707][ T7741] netlink: 28 bytes leftover after parsing attributes in process `syz.1.897'. [ 375.610179][ T7757] netlink: 56 bytes leftover after parsing attributes in process `syz.5.910'. [ 376.327228][ T7779] netlink: 'syz.1.915': attribute type 29 has an invalid length. [ 376.385843][ T7779] netlink: 'syz.1.915': attribute type 29 has an invalid length. [ 376.394916][ T7783] netlink: 'syz.1.915': attribute type 29 has an invalid length. [ 376.482892][ T7779] netlink: 'syz.1.915': attribute type 29 has an invalid length. [ 376.785434][ T7789] netlink: 28 bytes leftover after parsing attributes in process `syz.4.919'. [ 379.594718][ T7825] netlink: 'syz.3.927': attribute type 1 has an invalid length. [ 380.001363][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.927'. [ 380.121225][ T7825] device bridge1 entered promiscuous mode [ 380.200812][ T7841] netlink: 28 bytes leftover after parsing attributes in process `syz.5.932'. [ 380.975046][ T7867] tipc: Cannot configure node identity twice [ 383.204186][ T7889] loop4: detected capacity change from 0 to 128 [ 383.273075][ T7889] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 383.355185][ T7889] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 383.837230][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.852844][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.445291][ T7899] netlink: 56 bytes leftover after parsing attributes in process `syz.5.943'. [ 384.734683][ T47] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 385.304986][ T7914] netlink: 'syz.5.947': attribute type 1 has an invalid length. [ 385.504529][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.947'. [ 385.589418][ T7919] device bridge2 entered promiscuous mode [ 386.547249][ T7945] loop5: detected capacity change from 0 to 128 [ 386.665919][ T7945] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 386.776033][ T7945] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 388.041996][ T4408] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 391.034609][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 391.508129][ T8002] loop5: detected capacity change from 0 to 128 [ 391.638615][ T8002] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 391.796540][ T8002] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 393.137976][ T4624] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 394.942951][ T8050] netlink: 44 bytes leftover after parsing attributes in process `syz.1.956'. [ 395.188679][ T8058] loop5: detected capacity change from 0 to 128 [ 395.265638][ T8058] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 395.434739][ T8058] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 396.874242][ T8092] futex_wake_op: syz.1.985 tries to shift op by 144; fix this program [ 398.235092][ T4426] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 399.441805][ T8123] netlink: 44 bytes leftover after parsing attributes in process `syz.5.992'. [ 401.310042][ T8143] futex_wake_op: syz.5.998 tries to shift op by 144; fix this program [ 403.941157][ T8169] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1007'. [ 404.790505][ T8186] futex_wake_op: syz.6.1010 tries to shift op by 144; fix this program [ 408.196599][ T8211] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1019'. [ 408.239628][ T8211] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.935715][ T8221] futex_wake_op: syz.6.1022 tries to shift op by 144; fix this program [ 410.737480][ T8235] loop6: detected capacity change from 0 to 128 [ 410.745545][ T8235] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 410.760290][ T8235] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 413.510486][ T4673] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 414.607826][ T8256] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1032'. [ 415.354248][ T8261] futex_wake_op: syz.1.1033 tries to shift op by 144; fix this program [ 421.694368][ T8308] futex_wake_op: syz.6.1046 tries to shift op by 144; fix this program [ 423.863005][ T26] audit: type=1326 audit(1785251349.068:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.1.1057" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f459de99 code=0x7ffc0000 [ 424.448380][ T26] audit: type=1326 audit(1785251349.148:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.1.1057" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f459de99 code=0x7ffc0000 [ 424.839075][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 424.850033][ T4280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 424.860766][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 424.892443][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 424.901223][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 424.910372][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 425.316902][ T8354] futex_wake_op: syz.4.1059 tries to shift op by 144; fix this program [ 425.643304][ T8345] chnl_net:caif_netlink_parms(): no params data found [ 425.682299][ T8207] Set syz1 is full, maxelem 65536 reached [ 425.997452][ T8345] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.061828][ T8345] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.114696][ T8345] device bridge_slave_0 entered promiscuous mode [ 426.163954][ T8345] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.187886][ T8345] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.214628][ T8345] device bridge_slave_1 entered promiscuous mode [ 426.298005][ T8345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.332604][ T8345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.473522][ T8345] team0: Port device team_slave_0 added [ 426.513540][ T8345] team0: Port device team_slave_1 added [ 426.600879][ T8345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.618360][ T8345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.698293][ T8345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.867465][ T8345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.887974][ T8345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.954507][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 427.012240][ T8345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.350852][ T4399] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.437272][ T8377] loop6: detected capacity change from 0 to 16 [ 427.485376][ T8377] erofs: (device loop6): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 427.626781][ T4399] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.637829][ T8377] erofs: (device loop6): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 427.693395][ T8345] device hsr_slave_0 entered promiscuous mode [ 427.713739][ T8377] erofs: (device loop6): erofs_read_inode: unsupported datalayout 7 of nid 36 [ 427.727332][ T8345] device hsr_slave_1 entered promiscuous mode [ 427.798625][ T4399] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.037230][ T4399] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.962230][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 431.672761][ T8345] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 431.879215][ T8345] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 431.949915][ T4399] tipc: Left network mode [ 431.974985][ T8345] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 431.994563][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 432.193843][ T8345] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 433.835372][ T8429] futex_wake_op: syz.6.1076 tries to shift op by 144; fix this program [ 433.854212][ T8428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1078'. [ 434.010378][ T8345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.084705][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 434.304741][ T8440] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1081'. [ 434.403446][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 434.435435][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 434.470412][ T8345] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.663783][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 434.686187][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 434.715155][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.722430][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.764923][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 434.998724][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 435.019238][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 435.075168][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.083010][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.429027][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 435.476872][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 436.248247][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 436.287923][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 436.335094][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 436.355486][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 436.395434][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 436.436273][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 436.465352][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 436.591870][ T8345] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 436.640007][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 436.654626][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 437.772691][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 437.802755][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 437.859692][ T8345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.570166][ T4399] device hsr_slave_0 left promiscuous mode [ 438.606395][ T4399] device hsr_slave_1 left promiscuous mode [ 438.730142][ T4399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.747599][ T4399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.815280][ T4399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.831374][ T4399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.939934][ T4399] device bridge_slave_1 left promiscuous mode [ 438.951245][ T4399] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.041208][ T4399] device bridge_slave_0 left promiscuous mode [ 439.066756][ T4399] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.302188][ T4399] device batadv0 left promiscuous mode [ 439.349731][ T4399] device veth1_macvtap left promiscuous mode [ 439.391842][ T4399] device veth0_macvtap left promiscuous mode [ 440.093371][ T4399] bond4 (unregistering): Released all slaves [ 440.133140][ T4399] bond3 (unregistering): Released all slaves [ 440.143528][ T8509] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1091'. [ 440.258228][ T4399] bond2 (unregistering): Released all slaves [ 440.292946][ T4399] bond1 (unregistering): Released all slaves [ 442.869201][ T4399] team0 (unregistering): Port device team_slave_1 removed [ 443.155470][ T4399] team0 (unregistering): Port device team_slave_0 removed [ 443.277284][ T4399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.412434][ T4399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.068197][ T4399] bond0 (unregistering): Released all slaves [ 444.996849][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 445.019072][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 445.136702][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 445.165431][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 445.188203][ T8345] device veth0_vlan entered promiscuous mode [ 445.213243][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 445.254217][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 445.277527][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.283903][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.309263][ T8345] device veth1_vlan entered promiscuous mode [ 445.426139][ T8345] device veth0_macvtap entered promiscuous mode [ 445.475004][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 445.495191][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 445.535955][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 445.576724][ T8345] device veth1_macvtap entered promiscuous mode [ 445.656086][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.708534][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.742245][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.773740][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.854421][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.894371][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.985089][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.019195][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.062553][ T8345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.129723][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 446.145356][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 446.185370][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 446.224515][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.259499][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.314528][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.364471][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.390206][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.424474][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.466763][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.495776][ T8564] futex_wake_op: syz.3.1102 tries to shift op by 144; fix this program [ 446.519531][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.565007][ T8345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.599981][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 446.622082][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 446.666179][ T8345] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.693876][ T8345] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.737515][ T8345] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.775925][ T8345] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.029275][ T8345] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 447.084384][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.167829][ T4408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.186213][ T4408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.356018][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 447.424944][ T4408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.432865][ T4408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.515488][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 449.005141][ T8583] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1107'. [ 453.492070][ T8634] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1122'. [ 454.598815][ T8654] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1119'. [ 457.623775][ T8676] futex_wake_op: syz.6.1132 tries to shift op by 144; fix this program [ 459.069501][ T8692] loop6: detected capacity change from 0 to 1764 [ 459.625276][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1139'. [ 461.331633][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1147'. [ 464.081365][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1155'. [ 464.424577][ T4317] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 464.432633][ T8775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1150'. [ 464.471059][ T8775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.624571][ T4317] usb 5-1: Using ep0 maxpacket: 16 [ 464.680397][ T8775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.791837][ T4317] usb 5-1: unable to get BOS descriptor or descriptor too short [ 464.819911][ T4317] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 464.832064][ T4317] usb 5-1: can't read configurations, error -71 [ 468.870985][ T8824] tipc: Started in network mode [ 468.880650][ T8824] tipc: Node identity 4, cluster identity 4711 [ 468.901647][ T8824] tipc: Node number set to 4 [ 469.656138][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1172'. [ 471.740270][ T8892] fuse: Bad value for 'fd' [ 473.689550][ T8900] futex_wake_op: syz.6.1184 tries to shift op by 144; fix this program [ 475.311959][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1195'. [ 477.376580][ T8973] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1207'. [ 477.634521][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1208'. [ 480.210765][ T9013] loop4: detected capacity change from 0 to 512 [ 480.295395][ T9013] EXT4-fs: Ignoring removed oldalloc option [ 480.364510][ T9013] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 480.628468][ T9018] device bond_slave_0 entered promiscuous mode [ 480.635431][ T9018] device bond_slave_1 entered promiscuous mode [ 480.642732][ T9013] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 480.679958][ T9013] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.826497][ T9018] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 481.023355][ T9018] bond2: (slave macvlan2): making interface the new active one [ 481.171898][ T9018] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 481.412963][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 482.809773][ T9052] futex_wake_op: syz.3.1227 tries to shift op by 144; fix this program [ 483.176946][ T9063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1224'. [ 483.329628][ T9063] device bridge2 entered promiscuous mode [ 484.462828][ T9076] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1232'. [ 484.688780][ T9081] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1234'. [ 486.642226][ T9111] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1242'. [ 486.652785][ T9113] loop4: detected capacity change from 0 to 256 [ 486.669770][ T9113] exfat: Deprecated parameter 'utf8' [ 486.730531][ T9113] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x00000006, checksum : 0x1119abd0) [ 486.752051][ T9113] exFAT-fs (loop4): invalid boot region [ 486.764501][ T9113] exFAT-fs (loop4): failed to recognize exfat type [ 486.843050][ T9117] loop7: detected capacity change from 0 to 16 [ 486.877007][ T9117] erofs: (device loop7): mounted with root inode @ nid 36. [ 486.949038][ T9117] erofs: (device loop7): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 486.968164][ T9117] syz.7.1245: attempt to access beyond end of device [ 486.968164][ T9117] loop7: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 487.047304][ T9117] erofs: (device loop7): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 487.073034][ T9117] syz.7.1245: attempt to access beyond end of device [ 487.073034][ T9117] loop7: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 487.095741][ T9117] syz.7.1245: attempt to access beyond end of device [ 487.095741][ T9117] loop7: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 487.138247][ T26] audit: type=1800 audit(1785252948.352:12): pid=9117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1245" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 487.585580][ T9126] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1247'. [ 487.959095][ T9135] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1248'. [ 488.742582][ T9153] futex_wake_op: syz.4.1253 tries to shift op by 144; fix this program [ 489.711844][ T9161] loop4: detected capacity change from 0 to 512 [ 489.983256][ T9161] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 490.034702][ T9161] ext4 filesystem being mounted at /270/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.157174][ T9172] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1258'. [ 492.045148][ T9189] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1261'. [ 492.055788][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1262'. [ 493.166823][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 493.777387][ T9205] futex_wake_op: syz.3.1266 tries to shift op by 144; fix this program [ 494.674071][ T9220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1269'. [ 495.268186][ T9229] fuse: Bad value for 'fd' [ 496.036320][ T9245] netlink: 'syz.1.1277': attribute type 2 has an invalid length. [ 496.293667][ T9258] futex_wake_op: syz.3.1278 tries to shift op by 144; fix this program [ 499.834894][ T9282] fuse: Bad value for 'fd' [ 500.213955][ T9292] loop4: detected capacity change from 0 to 128 [ 500.265767][ T9292] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 500.313951][ T9292] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 500.434082][ T9298] overlayfs: failed to clone upperpath [ 502.142195][ T9296] Can't find ip_set type ha [ 502.183924][ T4426] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 502.608808][ T9311] futex_wake_op: syz.7.1291 tries to shift op by 144; fix this program [ 503.978205][ T9322] loop7: detected capacity change from 0 to 512 [ 504.132590][ T9322] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 504.203114][ T9322] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.294168][ T9337] loop4: detected capacity change from 0 to 512 [ 504.371449][ T9337] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 504.409002][ T9337] ext4 filesystem being mounted at /276/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 504.515267][ T8345] EXT4-fs (loop7): unmounting filesystem. [ 504.550703][ T26] audit: type=1800 audit(1785253989.770:13): pid=9349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1300" name="bus" dev="loop4" ino=19 res=0 errno=0 [ 504.841597][ T9349] loop4: detected capacity change from 512 to 0 [ 505.427510][ T4300] loop: Write error at byte offset 9223372036854816767, length 4096. [ 506.982859][ C0] I/O error, dev loop4, sector 80 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 506.992570][ C0] EXT4-fs warning (device loop4): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 20) [ 507.004153][ C0] Buffer I/O error on device loop4, logical block 20 [ 507.011415][ C0] Buffer I/O error on device loop4, logical block 21 [ 507.018225][ C0] Buffer I/O error on device loop4, logical block 22 [ 507.024953][ C0] Buffer I/O error on device loop4, logical block 23 [ 507.031724][ C0] Buffer I/O error on device loop4, logical block 24 [ 507.038471][ C0] Buffer I/O error on device loop4, logical block 25 [ 507.045245][ C0] Buffer I/O error on device loop4, logical block 26 [ 507.051985][ C0] Buffer I/O error on device loop4, logical block 27 [ 507.059147][ T4300] loop: Write error at byte offset 9223372036854865919, length 4096. [ 507.076869][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.083392][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.293300][ C0] I/O error, dev loop4, sector 176 op 0x1:(WRITE) flags 0x800 phys_seg 7 prio class 2 [ 507.303458][ C0] EXT4-fs warning (device loop4): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 44) [ 507.315072][ C0] Buffer I/O error on device loop4, logical block 44 [ 507.321812][ C0] Buffer I/O error on device loop4, logical block 45 [ 507.417973][ T9337] EXT4-fs (loop4): unmounting filesystem. [ 510.168244][ T4399] loop: Write error at byte offset 9223372036854800383, length 2048. [ 510.168782][ T4426] loop: Write error at byte offset 9223372036854775807, length 2048. [ 510.484128][ C1] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 510.494002][ C1] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 510.504553][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 510.514438][ T9337] EXT4-fs (loop4): I/O error while writing superblock [ 510.534351][ C0] I/O error, dev loop4, sector 48 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 510.544033][ C0] Buffer I/O error on dev loop4, logical block 12, lost sync page write [ 510.552563][ T9343] EXT4-fs error (device loop4): kmmpd:186: comm kmmpd-loop4: Error writing to MMP block [ 510.581109][ T4399] loop: Write error at byte offset 9223372036854775807, length 2048. [ 510.605624][ C0] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 510.615369][ C0] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 510.625011][ C0] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 510.669107][ T9343] EXT4-fs (loop4): I/O error while writing superblock [ 510.686734][ T4300] loop: Write error at byte offset 9223372036854800383, length 2048. [ 510.704392][ C1] I/O error, dev loop4, sector 48 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 510.714434][ C1] Buffer I/O error on dev loop4, logical block 12, lost sync page write [ 510.722985][ T9337] ------------[ cut here ]------------ [ 510.728785][ T9337] ODEBUG: free active (active state 0) object type: timer_list hint: print_daily_error_info+0x0/0x480 [ 510.780878][ T9337] WARNING: CPU: 0 PID: 9337 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x395/0x520 [ 510.791594][ T9337] Modules linked in: [ 510.795622][ T9337] CPU: 0 PID: 9337 Comm: syz.4.1300 Not tainted syzkaller #0 [ 510.803152][ T9337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 510.813552][ T9337] RIP: 0010:debug_check_no_obj_freed+0x395/0x520 [ 510.820106][ T9337] Code: e8 00 1b b9 fd 4c 8b 45 00 48 c7 c7 a0 67 df 8a 48 c7 c6 00 64 df 8a 48 c7 c2 00 69 df 8a 8b 4c 24 1c 4d 89 e9 e8 9b 72 33 fd <0f> 0b 4c 8b 6c 24 10 48 b9 00 00 00 00 00 fc ff df ff 05 dc f9 06 [ 510.840143][ T9337] RSP: 0018:ffffc9000da178e0 EFLAGS: 00010246 [ 510.846482][ T9337] RAX: 0e602f752b548a00 RBX: ffffffff96e31bf8 RCX: 0000000000080000 [ 510.854605][ T9337] RDX: ffffc9000e5f3000 RSI: 0000000000037812 RDI: 0000000000037813 [ 510.862650][ T9337] RBP: ffffffff8a8df4e0 R08: ffffc9000da17567 R09: 1ffff92001b42eac [ 510.870759][ T9337] R10: dffffc0000000000 R11: fffff52001b42ead R12: 0000000000000001 [ 510.878878][ T9337] R13: ffffffff82354e60 R14: ffff88805201c000 R15: ffff88805201c728 [ 510.886986][ T9337] FS: 00007f9925e3f6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 510.896120][ T9337] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 510.902755][ T9337] CR2: 00007fe10ecc8c50 CR3: 000000007d2d1000 CR4: 00000000003526f0 [ 510.911032][ T9337] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 510.919131][ T9337] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 510.927210][ T9337] Call Trace: [ 510.930606][ T9337] [ 510.933662][ T9337] slab_free_freelist_hook+0xd2/0x1b0 [ 510.939189][ T9337] ? generic_shutdown_super+0x130/0x340 [ 510.944885][ T9337] __kmem_cache_free+0xb6/0x200 [ 510.949824][ T9337] ? ext4_drop_inode+0x2b0/0x2b0 [ 510.954883][ T9337] generic_shutdown_super+0x130/0x340 [ 510.960346][ T9337] kill_block_super+0x7c/0xe0 [ 510.965139][ T9337] deactivate_locked_super+0x93/0xf0 [ 510.970483][ T9337] cleanup_mnt+0x471/0x4f0 [ 510.975082][ T9337] task_work_run+0x1d0/0x260 [ 510.979820][ T9337] ? task_work_cancel+0x220/0x220 [ 510.984983][ T9337] ? fput+0xd9/0x1a0 [ 510.988923][ T9337] ? do_syscall_64+0x4c/0xa0 [ 510.993595][ T9337] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 510.999869][ T9337] get_signal+0x118d/0x1340 [ 511.004553][ T9337] arch_do_signal_or_restart+0xc4/0x1310 [ 511.010518][ T9337] ? kick_process+0xd4/0x140 [ 511.015492][ T9337] ? task_work_add+0x2cb/0x330 [ 511.020496][ T9337] ? get_sigframe_size+0x10/0x10 [ 511.025673][ T9337] ? __ia32_sys_pidfd_getfd+0x80/0x80 [ 511.031130][ T9337] ? ksys_write+0x1fd/0x260 [ 511.035828][ T9337] ? exit_to_user_mode_loop+0x3b/0x110 [ 511.041627][ T9337] exit_to_user_mode_loop+0x70/0x110 [ 511.047063][ T9337] exit_to_user_mode_prepare+0xee/0x180 [ 511.053122][ T9337] syscall_exit_to_user_mode+0x16/0x40 [ 511.058799][ T9337] do_syscall_64+0x58/0xa0 [ 511.063295][ T9337] ? clear_bhb_loop+0x60/0xb0 [ 511.068109][ T9337] ? clear_bhb_loop+0x60/0xb0 [ 511.072873][ T9337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 511.079032][ T9337] RIP: 0033:0x7f9924f9de99 [ 511.083602][ T9337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.103345][ T9337] RSP: 002b:00007f9925e3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 511.111874][ T9337] RAX: fffffffffffffffb RBX: 00007f9925225fa0 RCX: 00007f9924f9de99 [ 511.120066][ T9337] RDX: 0000000000010010 RSI: 000020000000e0c0 RDI: 0000000000000006 [ 511.128495][ T9337] RBP: 00007f9925033eaf R08: 0000000000000000 R09: 0000000000000000 [ 511.136595][ T9337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.144764][ T9337] R13: 00007f9925226038 R14: 00007f9925225fa0 R15: 00007fff555cc508 [ 511.152903][ T9337] [ 511.156070][ T9337] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 511.163616][ T9337] CPU: 0 PID: 9337 Comm: syz.4.1300 Not tainted syzkaller #0 [ 511.171044][ T9337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 511.181336][ T9337] Call Trace: [ 511.184664][ T9337] [ 511.187641][ T9337] dump_stack_lvl+0x188/0x24e [ 511.192476][ T9337] ? memcpy+0x3c/0x60 [ 511.196591][ T9337] ? show_regs_print_info+0x12/0x12 [ 511.201959][ T9337] ? load_image+0x410/0x410 [ 511.206662][ T9337] panic+0x2d3/0x710 [ 511.210623][ T9337] ? bpf_jit_dump+0xd0/0xd0 [ 511.215206][ T9337] __warn+0x2f8/0x4f0 [ 511.219252][ T9337] ? debug_check_no_obj_freed+0x395/0x520 [ 511.225040][ T9337] ? debug_check_no_obj_freed+0x395/0x520 [ 511.230808][ T9337] report_bug+0x2ba/0x4f0 [ 511.235210][ T9337] ? debug_check_no_obj_freed+0x395/0x520 [ 511.240965][ T9337] handle_bug+0x3a/0x70 [ 511.245178][ T9337] exc_invalid_op+0x16/0x40 [ 511.249800][ T9337] asm_exc_invalid_op+0x16/0x20 [ 511.254714][ T9337] RIP: 0010:debug_check_no_obj_freed+0x395/0x520 [ 511.261085][ T9337] Code: e8 00 1b b9 fd 4c 8b 45 00 48 c7 c7 a0 67 df 8a 48 c7 c6 00 64 df 8a 48 c7 c2 00 69 df 8a 8b 4c 24 1c 4d 89 e9 e8 9b 72 33 fd <0f> 0b 4c 8b 6c 24 10 48 b9 00 00 00 00 00 fc ff df ff 05 dc f9 06 [ 511.280767][ T9337] RSP: 0018:ffffc9000da178e0 EFLAGS: 00010246 [ 511.286910][ T9337] RAX: 0e602f752b548a00 RBX: ffffffff96e31bf8 RCX: 0000000000080000 [ 511.295004][ T9337] RDX: ffffc9000e5f3000 RSI: 0000000000037812 RDI: 0000000000037813 [ 511.303030][ T9337] RBP: ffffffff8a8df4e0 R08: ffffc9000da17567 R09: 1ffff92001b42eac [ 511.311044][ T9337] R10: dffffc0000000000 R11: fffff52001b42ead R12: 0000000000000001 [ 511.319050][ T9337] R13: ffffffff82354e60 R14: ffff88805201c000 R15: ffff88805201c728 [ 511.327253][ T9337] ? ext4_group_desc_init+0x20c0/0x20c0 [ 511.332861][ T9337] slab_free_freelist_hook+0xd2/0x1b0 [ 511.338273][ T9337] ? generic_shutdown_super+0x130/0x340 [ 511.343854][ T9337] __kmem_cache_free+0xb6/0x200 [ 511.348734][ T9337] ? ext4_drop_inode+0x2b0/0x2b0 [ 511.353699][ T9337] generic_shutdown_super+0x130/0x340 [ 511.359227][ T9337] kill_block_super+0x7c/0xe0 [ 511.363935][ T9337] deactivate_locked_super+0x93/0xf0 [ 511.369248][ T9337] cleanup_mnt+0x471/0x4f0 [ 511.373695][ T9337] task_work_run+0x1d0/0x260 [ 511.378322][ T9337] ? task_work_cancel+0x220/0x220 [ 511.383375][ T9337] ? fput+0xd9/0x1a0 [ 511.387294][ T9337] ? do_syscall_64+0x4c/0xa0 [ 511.391924][ T9337] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 511.398114][ T9337] get_signal+0x118d/0x1340 [ 511.402669][ T9337] arch_do_signal_or_restart+0xc4/0x1310 [ 511.408360][ T9337] ? kick_process+0xd4/0x140 [ 511.413064][ T9337] ? task_work_add+0x2cb/0x330 [ 511.417944][ T9337] ? get_sigframe_size+0x10/0x10 [ 511.422915][ T9337] ? __ia32_sys_pidfd_getfd+0x80/0x80 [ 511.428329][ T9337] ? ksys_write+0x1fd/0x260 [ 511.432889][ T9337] ? exit_to_user_mode_loop+0x3b/0x110 [ 511.438381][ T9337] exit_to_user_mode_loop+0x70/0x110 [ 511.443706][ T9337] exit_to_user_mode_prepare+0xee/0x180 [ 511.449396][ T9337] syscall_exit_to_user_mode+0x16/0x40 [ 511.454951][ T9337] do_syscall_64+0x58/0xa0 [ 511.459412][ T9337] ? clear_bhb_loop+0x60/0xb0 [ 511.464121][ T9337] ? clear_bhb_loop+0x60/0xb0 [ 511.468831][ T9337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 511.474777][ T9337] RIP: 0033:0x7f9924f9de99 [ 511.479239][ T9337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.498964][ T9337] RSP: 002b:00007f9925e3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 511.507407][ T9337] RAX: fffffffffffffffb RBX: 00007f9925225fa0 RCX: 00007f9924f9de99 [ 511.515411][ T9337] RDX: 0000000000010010 RSI: 000020000000e0c0 RDI: 0000000000000006 [ 511.523589][ T9337] RBP: 00007f9925033eaf R08: 0000000000000000 R09: 0000000000000000 [ 511.531679][ T9337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.539674][ T9337] R13: 00007f9925226038 R14: 00007f9925225fa0 R15: 00007fff555cc508 [ 511.547775][ T9337] [ 511.551425][ T9337] Kernel Offset: disabled [ 511.555846][ T9337] Rebooting in 86400 seconds..