last executing test programs: 5m43.775898833s ago: executing program 0 (id=64): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) io_uring_setup(0x66a4, 0x0) r3 = socket(0x1e, 0x4, 0x0) socket(0x400000000010, 0x3, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 5m42.583204931s ago: executing program 0 (id=66): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r3, 0x100, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 5m42.397389676s ago: executing program 0 (id=69): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$dh_compute(0x17, &(0x7f0000000040), &(0x7f00000000c0)=""/61, 0xfffffffffffffd7e, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200000000}], 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2711, &(0x7f0000019580)=""/102397, &(0x7f0000000040)=0x18ffd) 5m41.153879835s ago: executing program 0 (id=72): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000e40)={[{@abort}, {@barrier_val={'barrier', 0x3d, 0x10001}}]}, 0x2, 0x569, &(0x7f0000000e80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x24) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_IKEY={0x8, 0x4, 0x10000}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) 5m39.076894604s ago: executing program 0 (id=81): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getrusage(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 5m36.560847384s ago: executing program 0 (id=85): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001040)=@getlink={0x20, 0x12, 0x2fa9ccd93d5c0297, 0x70bd3d, 0x0, {0x7}}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340)) 5m35.983670198s ago: executing program 32 (id=85): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001040)=@getlink={0x20, 0x12, 0x2fa9ccd93d5c0297, 0x70bd3d, 0x0, {0x7}}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340)) 5m7.493832622s ago: executing program 4 (id=86): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x62, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x3ffd, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x81a}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4005c}, 0x20000000) 5m7.16129218s ago: executing program 4 (id=148): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') pread64(r2, &(0x7f0000000080)=""/195, 0xc3, 0x591f) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xfffffc}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000000)="63ec90c97b265715fe27cd9359a4", 0x0, 0xe6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) setregid(0x0, r3) mount(&(0x7f00000001c0)=@rnullb, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='incremental-fs\x00', 0x4, 0x0) socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) 5m6.913913756s ago: executing program 4 (id=150): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x0, 0x3c5}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) syz_ublk_setup_queues(r3, r8, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e2e, 0x8, 0x2, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x230}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1000, 0x0, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20000, 0x2, 0x20367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x2, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) sendfile(r0, r0, 0x0, 0xe3aa6ea) 5m5.0518171s ago: executing program 4 (id=156): r0 = socket(0x2b, 0x1, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x8000000, 0x2, 0x0, 0x18, 0x4, 0x3}, 0x20) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x1, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x0, 0xfffffffc}, 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) accept$unix(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x6) syz_emit_ethernet(0xae, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000020000026000400"}, {0x2, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5m2.459059771s ago: executing program 4 (id=160): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket(0x1e, 0x4, 0x0) mprotect(&(0x7f00000d7000/0x3000)=nil, 0x3000, 0x1000005) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r0, &(0x7f0000000f00), 0x100) 5m1.6700878s ago: executing program 33 (id=160): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket(0x1e, 0x4, 0x0) mprotect(&(0x7f00000d7000/0x3000)=nil, 0x3000, 0x1000005) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r0, &(0x7f0000000f00), 0x100) 11.573120726s ago: executing program 3 (id=836): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) 11.506726808s ago: executing program 5 (id=837): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, 0x0, 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 9.551508994s ago: executing program 5 (id=839): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8816ec", "de0000006deed7f21d74bc440900", "9884f958", "fc4bd6b33a9b93ca"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)='X', 0x1}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 9.504767485s ago: executing program 3 (id=840): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000}, 0x28) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = dup(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x82b45, 0x1c080, 0x0, 0x46d, 0x0, r0}) socket$inet(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pipe2$9p(&(0x7f00000002c0), 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9.143696693s ago: executing program 1 (id=841): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005040100000000000000000000000000000000000000000000000c0003006272696467653000200012800b0001006272"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000000000000000000000000000a0003007665746830"], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r0, @ANYBLOB="1400018008000100000001000500030003"], 0x2c}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00\r\n'], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9.081992645s ago: executing program 3 (id=842): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) 8.892838639s ago: executing program 1 (id=843): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001040)=@assoc_value={r4}, 0x8) 7.20078332s ago: executing program 5 (id=845): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2, 0x2000000}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) creat(0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd24, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x3}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x64004081}, 0x0) 7.144793951s ago: executing program 1 (id=846): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x0) 6.785407099s ago: executing program 2 (id=847): mkdirat(0xffffffffffffff9c, 0x0, 0x0) truncate(0x0, 0x6) r0 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) 5.321471334s ago: executing program 2 (id=848): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) 5.321301864s ago: executing program 3 (id=849): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8816ec", "de0000006deed7f21d74bc440900", "9884f958", "fc4bd6b33a9b93ca"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)='X', 0x1}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 3.932554696s ago: executing program 2 (id=850): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000}, 0x28) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = dup(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x82b45, 0x1c080, 0x0, 0x46d, 0x0, r0}) socket$inet(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pipe2$9p(&(0x7f00000002c0), 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.78306795s ago: executing program 1 (id=851): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$pokeuser(0x6, r0, 0x1, 0xd02) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x14) 3.568867776s ago: executing program 5 (id=852): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2.490517571s ago: executing program 1 (id=853): socket$nl_xfrm(0x10, 0x3, 0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000040)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x8000) open_tree(0xffffffffffffff9c, 0x0, 0x89901) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000007ff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.318015995s ago: executing program 2 (id=854): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001040)=@assoc_value={r4}, 0x8) 2.246015977s ago: executing program 5 (id=855): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}}, 0x4, 0xea, 0x440, 0x0, 0x10, 0x0, 0x4}, 0x9c) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48044, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) syz_emit_ethernet(0x4ea2a8fe65072ee2, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) 1.339627248s ago: executing program 3 (id=856): r0 = socket(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc) socket(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getpid() r4 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000a, 0x24011, r4, 0x0) 1.232916771s ago: executing program 2 (id=857): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$video(0x0, 0x3, 0x101002) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0xe) 1.224061201s ago: executing program 5 (id=858): bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x7, 0x10c062) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0xc8901, 0x196) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x5a, 0x6010000000000ffd, 0x0, 0x0, 0x19, 0x19, "faf98317e5a1149989fc8dbe43ee6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60b534464c516bdd8a0f3500", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce8, 0x100]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/platform/devices/snd_aloop.0/driver/unbind\x00', 0x1, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000400)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) r4 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0x80000000, 0xfffffffd, 0xffffffff, 0xfffffffd, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x9, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x80000001, 0x1003, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) write(r2, &(0x7f00000002c0)='snd_aloop.0', 0xb) 152.643076ms ago: executing program 2 (id=859): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(0xffffffffffffffff, &(0x7f0000000480)=""/177, 0xb1, 0xa6) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r3 = fsopen(&(0x7f0000000080)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 151.397866ms ago: executing program 3 (id=860): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f000071f000/0x3000)=nil, 0x3000, 0x3000002, 0x13, r2, 0x5080f000) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 0s ago: executing program 1 (id=861): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x8) r5 = openat$cgroup(r4, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000004000)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.175' (ED25519) to the list of known hosts. [ 83.167392][ T5762] cgroup: Unknown subsys name 'net' [ 83.306497][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.046991][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.419944][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.437435][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.445554][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.453711][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.467270][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.474723][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.484722][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.492907][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.500292][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.508495][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.517021][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.524761][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.532441][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.541148][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.583865][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.596543][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.605679][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.615010][ T5086] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.690398][ T5086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.704835][ T5086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.716544][ T5086] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.737230][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.766690][ T5086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.777525][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.251022][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 88.337857][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 88.421478][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 88.544130][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.554799][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.564765][ T5776] bridge_slave_0: entered allmulticast mode [ 88.573289][ T5776] bridge_slave_0: entered promiscuous mode [ 88.593395][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.601263][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.609890][ T5776] bridge_slave_1: entered allmulticast mode [ 88.618115][ T5776] bridge_slave_1: entered promiscuous mode [ 88.677922][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.703321][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.715984][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.725237][ T5774] bridge_slave_0: entered allmulticast mode [ 88.733514][ T5774] bridge_slave_0: entered promiscuous mode [ 88.741127][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 88.755442][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.790005][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.797607][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.804895][ T5773] bridge_slave_0: entered allmulticast mode [ 88.812258][ T5773] bridge_slave_0: entered promiscuous mode [ 88.820957][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.829187][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.836748][ T5774] bridge_slave_1: entered allmulticast mode [ 88.844309][ T5774] bridge_slave_1: entered promiscuous mode [ 88.871772][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.881077][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.888976][ T5773] bridge_slave_1: entered allmulticast mode [ 88.896602][ T5773] bridge_slave_1: entered promiscuous mode [ 88.937622][ T5776] team0: Port device team_slave_0 added [ 88.966847][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.979828][ T5776] team0: Port device team_slave_1 added [ 89.000947][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.041282][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.054373][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.083816][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.091145][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.117339][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.131098][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.138154][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.164127][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.232988][ T5774] team0: Port device team_slave_0 added [ 89.242816][ T5774] team0: Port device team_slave_1 added [ 89.273306][ T5773] team0: Port device team_slave_0 added [ 89.301105][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.308606][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.316709][ T5775] bridge_slave_0: entered allmulticast mode [ 89.323863][ T5775] bridge_slave_0: entered promiscuous mode [ 89.334239][ T5773] team0: Port device team_slave_1 added [ 89.363257][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.370982][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.379358][ T5775] bridge_slave_1: entered allmulticast mode [ 89.386688][ T5775] bridge_slave_1: entered promiscuous mode [ 89.417123][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.424918][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.459788][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.477476][ T5776] hsr_slave_0: entered promiscuous mode [ 89.484255][ T5776] hsr_slave_1: entered promiscuous mode [ 89.519202][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.526404][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.552915][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.565460][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.573675][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.600914][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.623198][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.640186][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.664869][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.669534][ T5781] Bluetooth: hci1: command tx timeout [ 89.674613][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.679211][ T5781] Bluetooth: hci2: command tx timeout [ 89.713896][ T5781] Bluetooth: hci0: command tx timeout [ 89.719637][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.803715][ T5775] team0: Port device team_slave_0 added [ 89.826818][ T5781] Bluetooth: hci3: command tx timeout [ 89.852981][ T5775] team0: Port device team_slave_1 added [ 89.927505][ T5774] hsr_slave_0: entered promiscuous mode [ 89.934642][ T5774] hsr_slave_1: entered promiscuous mode [ 89.943911][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.953557][ T5774] Cannot create hsr debugfs directory [ 89.969787][ T5773] hsr_slave_0: entered promiscuous mode [ 89.980425][ T5773] hsr_slave_1: entered promiscuous mode [ 89.987648][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.995633][ T5773] Cannot create hsr debugfs directory [ 90.015781][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.022960][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.049684][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.062913][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.070693][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.098968][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.254401][ T5775] hsr_slave_0: entered promiscuous mode [ 90.261514][ T5775] hsr_slave_1: entered promiscuous mode [ 90.270984][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.278679][ T5775] Cannot create hsr debugfs directory [ 90.634520][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.663120][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.674646][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.703365][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.775678][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.800053][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.832135][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.858338][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.893531][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.905873][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.930057][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.941680][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.063640][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.078347][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.097628][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.108653][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.143363][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.181153][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.222184][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.229513][ T2961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.242241][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.249423][ T2961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.311855][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.391769][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.420866][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.463150][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.500643][ T126] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.507935][ T126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.561697][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.584371][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.592381][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.617066][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.640889][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.651136][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.713032][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.720293][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.742916][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.746893][ T5781] Bluetooth: hci0: command tx timeout [ 91.750441][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.763099][ T51] Bluetooth: hci1: command tx timeout [ 91.768708][ T5781] Bluetooth: hci2: command tx timeout [ 91.803768][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.810974][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.907141][ T51] Bluetooth: hci3: command tx timeout [ 91.931944][ T5774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.965761][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.121546][ T5776] veth0_vlan: entered promiscuous mode [ 92.158183][ T5776] veth1_vlan: entered promiscuous mode [ 92.254744][ T5776] veth0_macvtap: entered promiscuous mode [ 92.300259][ T5776] veth1_macvtap: entered promiscuous mode [ 92.361010][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.413947][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.441885][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.461536][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.477828][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.487402][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.562224][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.594312][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.703397][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.725432][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.734471][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.805947][ T126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.828649][ T126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.852515][ T5775] veth0_vlan: entered promiscuous mode [ 92.880407][ T5773] veth0_vlan: entered promiscuous mode [ 92.910749][ T5773] veth1_vlan: entered promiscuous mode [ 92.959108][ T5775] veth1_vlan: entered promiscuous mode [ 93.001534][ T5774] veth0_vlan: entered promiscuous mode [ 93.098946][ T5775] veth0_macvtap: entered promiscuous mode [ 93.112460][ T5773] veth0_macvtap: entered promiscuous mode [ 93.122093][ T5774] veth1_vlan: entered promiscuous mode [ 93.135450][ T5773] veth1_macvtap: entered promiscuous mode [ 93.147459][ T5775] veth1_macvtap: entered promiscuous mode [ 93.218328][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.234366][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.247544][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.256649][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.268260][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.279189][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.289829][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.302316][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.334303][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.348088][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.366955][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.394452][ T5774] veth0_macvtap: entered promiscuous mode [ 93.426817][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.445118][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.460487][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.483106][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.508643][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.557959][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.567505][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.580074][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.590912][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.609203][ T5774] veth1_macvtap: entered promiscuous mode [ 93.625316][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.635940][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.646973][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.655739][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.805516][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.817086][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.827967][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.829219][ T51] Bluetooth: hci1: command tx timeout [ 93.838671][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.845191][ T5781] Bluetooth: hci2: command tx timeout [ 93.856322][ T5086] Bluetooth: hci0: command tx timeout [ 93.870220][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.890682][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.904351][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.925710][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.944768][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.955558][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.973287][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.985835][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.998110][ T5086] Bluetooth: hci3: command tx timeout [ 94.011600][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.024175][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.074167][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.084076][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.093538][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.102840][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.129477][ T126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.144112][ T126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.219336][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.246913][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.773783][ T126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.777270][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.800706][ T126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.805813][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.827293][ T5852] syz.1.6[5852]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.852359][ T126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.874018][ T126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.909877][ T5852] loop1: detected capacity change from 0 to 512 [ 94.961431][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.970349][ T5852] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 94.995538][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.005327][ T5852] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 95.082813][ T5852] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.6: invalid indirect mapped block 9 (level 0) [ 95.149899][ T5852] EXT4-fs (loop1): 1 truncate cleaned up [ 95.164235][ T5852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.650831][ T5863] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 96.191777][ T5086] Bluetooth: hci2: command tx timeout [ 96.198387][ T5788] Bluetooth: hci3: command tx timeout [ 96.204311][ T51] Bluetooth: hci0: command tx timeout [ 96.210084][ T5781] Bluetooth: hci1: command tx timeout [ 96.668226][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.807878][ T5867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 97.269514][ T173] cfg80211: failed to load regulatory.db [ 98.733167][ T5884] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.809808][ T5887] loop2: detected capacity change from 0 to 1024 [ 98.851340][ T5888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'. [ 98.887337][ T5887] EXT4-fs: Ignoring removed i_version option [ 98.935464][ T5887] EXT4-fs: Ignoring removed oldalloc option [ 98.994451][ T5893] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 99.038674][ T5887] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 99.120931][ T5887] EXT4-fs (loop2): group descriptors corrupted! [ 99.208006][ T5894] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 99.478699][ T5898] loop1: detected capacity change from 0 to 64 [ 100.226064][ C0] sched: RT throttling activated [ 101.107791][ T5887] loop2: detected capacity change from 0 to 16 [ 101.194565][ T5887] erofs: (device loop2): mounted with root inode @ nid 36. [ 101.382055][ T5887] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 101.428068][ T5887] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -59 in[61, 4035] out[1851] [ 101.460731][ T5887] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 101.524599][ T5922] syz.3.18 uses obsolete (PF_INET,SOCK_PACKET) [ 102.231175][ T5937] loop0: detected capacity change from 0 to 256 [ 102.429153][ T5937] ======================================================= [ 102.429153][ T5937] WARNING: The mand mount option has been deprecated and [ 102.429153][ T5937] and is ignored by this kernel. Remove the mand [ 102.429153][ T5937] option from the mount to silence this warning. [ 102.429153][ T5937] ======================================================= [ 102.948994][ T5937] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.009999][ T5937] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 103.034292][ T5937] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 103.096121][ T5937] exFAT-fs (loop0): failed to load alloc-bitmap [ 103.138008][ T5937] exFAT-fs (loop0): failed to recognize exfat type [ 103.994484][ T5942] ptrace attach of ""[5944] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[5942] [ 104.709402][ T5953] netlink: 550 bytes leftover after parsing attributes in process `syz.3.28'. [ 104.750557][ T5947] netlink: 32 bytes leftover after parsing attributes in process `syz.1.27'. [ 104.892685][ T5955] netlink: 'syz.0.29': attribute type 1 has an invalid length. [ 105.205683][ T5955] veth3: entered allmulticast mode [ 105.298370][ T5963] loop2: detected capacity change from 0 to 256 [ 106.058537][ T5964] veth0_to_bridge: entered promiscuous mode [ 106.214486][ T5964] veth0_to_bridge: entered allmulticast mode [ 106.932666][ T2970] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.713163][ T6006] netlink: 1 bytes leftover after parsing attributes in process `syz.0.43'. [ 111.090382][ T6027] ip_tables: iptables: counters copy to user failed while replacing table [ 112.223736][ T6043] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.912125][ T6051] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 114.734388][ T6065] netlink: 'syz.3.56': attribute type 1 has an invalid length. [ 114.805132][ T6067] loop2: detected capacity change from 0 to 128 [ 114.840725][ T6067] EXT4-fs (loop2): Test dummy encryption mode enabled [ 114.923492][ T6065] netlink: 28 bytes leftover after parsing attributes in process `syz.3.56'. [ 114.940156][ T6067] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.014756][ T6067] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 115.296751][ T5774] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.320657][ T6077] loop3: detected capacity change from 0 to 16 [ 115.788837][ T6077] erofs: (device loop3): mounted with root inode @ nid 36. [ 117.707713][ T6096] netlink: 'syz.2.63': attribute type 1 has an invalid length. [ 117.858988][ T6096] vlan0: entered promiscuous mode [ 117.876383][ T6096] vlan0: entered allmulticast mode [ 117.881578][ T6096] veth0_vlan: entered allmulticast mode [ 117.964456][ T6098] macvlan2: entered promiscuous mode [ 117.971271][ T6098] macvlan2: entered allmulticast mode [ 117.979142][ T6102] jffs2: notice: (6102) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 119.217172][ T6110] loop3: detected capacity change from 0 to 512 [ 119.301704][ T6110] EXT4-fs (loop3): orphan cleanup on readonly fs [ 119.531520][ T6110] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #15: comm syz.3.67: corrupted inode contents [ 119.551745][ T6110] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 119.571012][ T6110] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #15: comm syz.3.67: corrupted inode contents [ 119.586513][ T6110] EXT4-fs error (device loop3): ext4_evict_inode:302: inode #15: comm syz.3.67: mark_inode_dirty error [ 119.677927][ T6110] EXT4-fs (loop3): 1 orphan inode deleted [ 119.804523][ T6110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 120.402048][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.901297][ T6129] loop0: detected capacity change from 0 to 512 [ 121.286766][ T6129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.369013][ T6129] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.387990][ T6137] netlink: 20 bytes leftover after parsing attributes in process `syz.3.73'. [ 121.440404][ T6137] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 121.463223][ T6137] bridge1: entered promiscuous mode [ 121.610495][ T6137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.618238][ T6137] IPv6: NLM_F_CREATE should be set when creating new route [ 121.642008][ T6137] netlink: 20 bytes leftover after parsing attributes in process `syz.3.73'. [ 121.663536][ T6137] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 121.680196][ T6137] bridge2: entered promiscuous mode [ 121.702806][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.72'. [ 121.783995][ T6145] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by " [ 122.483650][ T5775] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 122.625729][ T5775] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 122.652440][ T5775] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 122.665095][ T5775] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 122.675128][ T6149] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 122.687752][ T5775] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 122.727932][ T5775] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 122.746566][ T6149] syzkaller0: entered promiscuous mode [ 122.756227][ T6149] syzkaller0: entered allmulticast mode [ 122.769806][ T5775] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 122.812769][ T6157] loop2: detected capacity change from 0 to 512 [ 122.830582][ T5775] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 122.887140][ T5775] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 122.914463][ T5775] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 122.946456][ T6157] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 123.013095][ T6157] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 123.305205][ T6157] EXT4-fs (loop2): failed to open journal device unknown-block(0,514) -6 [ 123.396696][ T2136] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 123.670734][ T2136] usb 2-1: not running at top speed; connect to a high speed hub [ 123.702047][ T2136] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.719754][ T2136] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 123.754420][ T2136] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 123.776153][ T2136] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 123.811105][ T2136] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 123.825686][ T2136] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.851508][ T2136] usb 2-1: Product: syz [ 123.866559][ T2136] usb 2-1: Manufacturer: syz [ 123.871218][ T2136] usb 2-1: SerialNumber: syz [ 124.497641][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.128155][ T2136] usb 2-1: 0:2 : does not exist [ 125.223549][ T2136] usb 2-1: USB disconnect, device number 2 [ 125.331234][ T5777] udevd[5777]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.573764][ T126] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.684903][ T126] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.879985][ T126] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.151240][ T126] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.177285][ T6184] xt_l2tp: invalid flags combination: 0 [ 126.218701][ T6190] loop3: detected capacity change from 0 to 1024 [ 126.519537][ T6188] Driver unsupported XDP return value 0 on prog (id 19) dev N/A, expect packet loss! [ 126.602633][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 126.618267][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 126.628574][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 126.641741][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 126.660575][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 126.668500][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 126.813456][ T5818] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 127.006234][ T5818] usb 3-1: Using ep0 maxpacket: 32 [ 127.038808][ T5818] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 127.060793][ T5818] usb 3-1: config 0 has no interface number 0 [ 127.094437][ T5818] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 127.111261][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.129296][ T5818] usb 3-1: Product: syz [ 127.134084][ T5818] usb 3-1: Manufacturer: syz [ 127.154573][ T5818] usb 3-1: SerialNumber: syz [ 127.181847][ T5818] usb 3-1: config 0 descriptor?? [ 127.212150][ T5818] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 127.231236][ T2136] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 127.556108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 127.606135][ T2136] usb 4-1: Using ep0 maxpacket: 16 [ 127.653575][ T2136] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 127.667578][ T5818] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 128.123214][ T2136] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.164902][ T2136] usb 4-1: Product: syz [ 128.183444][ T2136] usb 4-1: Manufacturer: syz [ 128.406402][ T2136] usb 4-1: SerialNumber: syz [ 128.412870][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 128.716536][ T51] Bluetooth: hci3: command tx timeout [ 128.814363][ T5818] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 128.865617][ T5818] usb 3-1: USB disconnect, device number 2 [ 128.936778][ T5818] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 129.008253][ T5818] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 129.429728][ T5818] quatech2 3-1:0.51: device disconnected [ 129.545847][ T6196] chnl_net:caif_netlink_parms(): no params data found [ 130.123773][ T2136] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 130.158800][ T2136] usb 4-1: USB disconnect, device number 2 [ 130.806296][ T51] Bluetooth: hci3: command tx timeout [ 131.285506][ T6196] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.330878][ T6196] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.385474][ T6196] bridge_slave_0: entered allmulticast mode [ 131.433407][ T6196] bridge_slave_0: entered promiscuous mode [ 131.469793][ T6260] loop3: detected capacity change from 0 to 512 [ 131.499609][ T6260] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 131.560011][ T6260] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 131.579509][ T6260] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 131.594073][ T6260] EXT4-fs (loop3): group descriptors corrupted! [ 131.748891][ T6196] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.757935][ T6196] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.772539][ T6196] bridge_slave_1: entered allmulticast mode [ 131.794032][ T6196] bridge_slave_1: entered promiscuous mode [ 131.920154][ T6196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.979329][ T6196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.041045][ T126] hsr_slave_0: left promiscuous mode [ 132.063699][ T126] hsr_slave_1: left promiscuous mode [ 132.073364][ T28] audit: type=1326 audit(1787174770.727:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.3.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291e59e0d9 code=0x7ffc0000 [ 132.116573][ T126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.135827][ T126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.146384][ T28] audit: type=1326 audit(1787174770.747:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.3.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f291e59e0d9 code=0x7ffc0000 [ 132.177734][ T6273] sock: sock_set_timeout: `syz.3.104' (pid 6273) tries to set negative timeout [ 132.194291][ T126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.226584][ T126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.246411][ T28] audit: type=1326 audit(1787174770.747:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.3.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291e59e0d9 code=0x7ffc0000 [ 132.272923][ T126] bridge_slave_1: left allmulticast mode [ 132.286179][ T126] bridge_slave_1: left promiscuous mode [ 132.293623][ T126] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.311702][ T28] audit: type=1326 audit(1787174770.747:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.3.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291e59e0d9 code=0x7ffc0000 [ 132.344284][ T28] audit: type=1326 audit(1787174770.747:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.3.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f291e59e0d9 code=0x7ffc0000 [ 132.382933][ T126] bridge_slave_0: left allmulticast mode [ 132.389543][ T126] bridge_slave_0: left promiscuous mode [ 132.400654][ T126] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.427016][ T6277] loop1: detected capacity change from 0 to 1024 [ 132.456819][ T28] audit: type=1326 audit(1787174770.757:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.3.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291e59e0d9 code=0x7ffc0000 [ 132.507225][ T6277] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 132.545758][ T126] veth1_macvtap: left promiscuous mode [ 132.603403][ T28] audit: type=1326 audit(1787174770.757:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.3.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291e59e0d9 code=0x7ffc0000 [ 132.610360][ T6277] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 2: comm syz.1.106: lblock 2 mapped to illegal pblock 2 (length 1) [ 132.642569][ T126] veth0_macvtap: left promiscuous mode [ 132.656385][ T6277] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 132.683426][ T126] veth1_vlan: left promiscuous mode [ 132.696381][ T6277] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 48: comm syz.1.106: lblock 0 mapped to illegal pblock 48 (length 1) [ 132.713263][ T28] audit: type=1326 audit(1787174770.757:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.3.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f291e59e0d9 code=0x7ffc0000 [ 132.727103][ T126] veth0_vlan: left promiscuous mode [ 132.772020][ T6277] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 132.860936][ T6277] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.106: Failed to acquire dquot type 0 [ 132.866519][ T51] Bluetooth: hci3: command tx timeout [ 132.987464][ T6277] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 133.112790][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.130225][ T6277] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.106: mark_inode_dirty error [ 133.145595][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.322910][ T6277] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 133.427573][ T6277] EXT4-fs (loop1): 1 orphan inode deleted [ 133.478462][ T11] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 133.572645][ T6277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.689322][ T11] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:0: Failed to release dquot type 0 [ 133.907037][ T6277] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 133.958021][ T6277] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.754470][ T126] team0 (unregistering): Port device team_slave_1 removed [ 134.805387][ T126] team0 (unregistering): Port device team_slave_0 removed [ 134.889877][ T126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.950670][ T126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.959626][ T51] Bluetooth: hci3: command tx timeout [ 135.351399][ T126] bond0 (unregistering): Released all slaves [ 135.773678][ T6288] syzkaller0: entered promiscuous mode [ 135.785717][ T6288] syzkaller0: entered allmulticast mode [ 135.810436][ T6298] netlink: 'syz.1.110': attribute type 322 has an invalid length. [ 135.993879][ T6308] loop2: detected capacity change from 0 to 512 [ 136.042442][ T6308] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 136.178027][ T6308] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 139.622562][ T6196] team0: Port device team_slave_0 added [ 139.631633][ T6196] team0: Port device team_slave_1 added [ 139.683341][ T6330] netlink: 'syz.2.114': attribute type 4 has an invalid length. [ 139.824747][ T6336] syz.2.114 (6336) used greatest stack depth: 20040 bytes left [ 139.994412][ T6344] syzkaller0: entered promiscuous mode [ 140.003683][ T6344] syzkaller0: entered allmulticast mode [ 140.045981][ T6339] netlink: 84 bytes leftover after parsing attributes in process `syz.1.117'. [ 140.125018][ T6196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.198759][ T6196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.481941][ T6196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.732730][ T6196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.776166][ T6196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.925865][ T6196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.464666][ T6196] hsr_slave_0: entered promiscuous mode [ 141.672478][ T6196] hsr_slave_1: entered promiscuous mode [ 141.831212][ T6196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.100389][ T6196] Cannot create hsr debugfs directory [ 143.796103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 144.706266][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.126'. [ 144.734991][ T6371] ip6gretap0: entered promiscuous mode [ 144.747515][ T6371] macvtap1: entered promiscuous mode [ 144.753043][ T6371] macvtap1: entered allmulticast mode [ 144.760140][ T6371] ip6gretap0: entered allmulticast mode [ 144.780747][ T6374] ip6gretap0: left allmulticast mode [ 144.792470][ T6374] ip6gretap0: left promiscuous mode [ 144.799725][ T6374] macvtap1: left promiscuous mode [ 144.813056][ T6374] macvtap1: left allmulticast mode [ 145.073033][ T6196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 145.130395][ T6196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 145.191653][ T6196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 145.230304][ T6196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 145.652965][ T6196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.743671][ T6196] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.532216][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.540258][ T2961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.589996][ T126] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.597319][ T126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.925045][ T6417] wg1: entered promiscuous mode [ 148.936165][ T6417] wg1: entered allmulticast mode [ 149.058924][ T6420] syzkaller0: entered promiscuous mode [ 149.081146][ T6420] syzkaller0: entered allmulticast mode [ 149.125131][ T6196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.800224][ T6434] UHID_CREATE from different security context by process 116 (syz.3.137), this is not allowed. [ 150.232195][ T6196] veth0_vlan: entered promiscuous mode [ 150.276010][ T6196] veth1_vlan: entered promiscuous mode [ 150.410233][ T6196] veth0_macvtap: entered promiscuous mode [ 150.453425][ T6196] veth1_macvtap: entered promiscuous mode [ 150.515694][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.531980][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.543655][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.598678][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.648675][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.687873][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.720971][ T6196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.776206][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.805020][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.853242][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.873685][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.883869][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.900333][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.942756][ T6196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.320751][ T6196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.359303][ T6196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.396233][ T6196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.421600][ T6196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.713474][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.756003][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.856611][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.892319][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.212490][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.86'. [ 154.744193][ T6508] loop4: detected capacity change from 0 to 512 [ 154.814423][ T6508] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 154.916642][ T6508] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 154.989886][ T6508] EXT4-fs (loop4): 1 truncate cleaned up [ 155.016788][ T6508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.154224][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 155.154244][ T28] audit: type=1800 audit(1787174793.807:23): pid=6508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.150" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 155.661151][ T6525] process 'syz.3.152' launched './file2' with NULL argv: empty string added [ 156.531113][ T6196] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /2/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 156.603465][ T6196] EXT4-fs (loop4): Remounting filesystem read-only [ 156.776280][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 156.996462][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 157.106327][ T23] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 157.246874][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.583309][ T23] pvrusb2: Hardware description: Terratec Grabster AV400 [ 157.672409][ T23] pvrusb2: ********** [ 157.694678][ T23] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 157.762404][ T23] pvrusb2: Important functionality might not be entirely working. [ 157.814791][ T23] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 157.841963][ T23] pvrusb2: ********** [ 158.135578][ T2324] pvrusb2: Invalid write control endpoint [ 158.989501][ T6196] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.295439][ T6532] netlink: 56 bytes leftover after parsing attributes in process `syz.3.154'. [ 159.317103][ T2324] pvrusb2: Invalid write control endpoint [ 159.323077][ T2324] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 159.377139][ T2324] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 159.384779][ T2324] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 159.405340][ T2324] pvrusb2: Device being rendered inoperable [ 159.418390][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.452076][ T2324] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 159.461895][ T2324] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 159.481398][ T5816] usb 4-1: USB disconnect, device number 3 [ 159.523908][ T2324] pvrusb2: Attached sub-driver cx25840 [ 159.533306][ T2324] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 159.559863][ T2324] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 159.689814][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.815789][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.939224][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.016160][ T6580] netlink: 96 bytes leftover after parsing attributes in process `syz.2.165'. [ 162.599196][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 162.616504][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 162.630739][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 162.650491][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 162.667853][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 162.676487][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 163.675250][ T6601] syzkaller0: entered promiscuous mode [ 163.691428][ T6601] syzkaller0: entered allmulticast mode [ 163.788695][ T6609] syz_tun: entered allmulticast mode [ 164.575569][ T6607] syz_tun: left allmulticast mode [ 164.717196][ T5781] Bluetooth: hci3: command tx timeout [ 164.759786][ T6589] chnl_net:caif_netlink_parms(): no params data found [ 165.962841][ T11] hsr_slave_0: left promiscuous mode [ 165.988035][ T11] hsr_slave_1: left promiscuous mode [ 166.022253][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.056986][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.110582][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.226561][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.252660][ T11] bridge_slave_1: left allmulticast mode [ 166.275372][ T11] bridge_slave_1: left promiscuous mode [ 166.297401][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.351755][ T11] bridge_slave_0: left allmulticast mode [ 166.359279][ T11] bridge_slave_0: left promiscuous mode [ 166.379853][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.496430][ T11] veth1_macvtap: left promiscuous mode [ 166.502705][ T11] veth0_macvtap: left promiscuous mode [ 166.550324][ T11] veth1_vlan: left promiscuous mode [ 166.585612][ T11] veth0_vlan: left promiscuous mode [ 166.786114][ T5781] Bluetooth: hci3: command tx timeout [ 167.614787][ T11] team0 (unregistering): Port device team_slave_1 removed [ 167.656518][ T11] team0 (unregistering): Port device team_slave_0 removed [ 167.700238][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.743308][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.209025][ T11] bond0 (unregistering): Released all slaves [ 168.409822][ T6638] bond_slave_0: entered promiscuous mode [ 168.417196][ T6638] bond_slave_1: entered promiscuous mode [ 168.465168][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'. [ 168.503373][ T6639] bond_slave_0: left promiscuous mode [ 168.511719][ T6639] bond_slave_1: left promiscuous mode [ 168.524474][ T6641] netlink: 'syz.1.177': attribute type 12 has an invalid length. [ 168.807254][ T6589] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.823926][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.851370][ T6589] bridge_slave_0: entered allmulticast mode [ 168.866249][ T5781] Bluetooth: hci3: command tx timeout [ 168.874176][ T6589] bridge_slave_0: entered promiscuous mode [ 168.905418][ T6589] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.965246][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.000159][ T6589] bridge_slave_1: entered allmulticast mode [ 169.020695][ T6589] bridge_slave_1: entered promiscuous mode [ 169.144379][ T6589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.165317][ T6589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.273763][ T6589] team0: Port device team_slave_0 added [ 169.853683][ T6589] team0: Port device team_slave_1 added [ 170.205959][ T6589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.215845][ T6589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.283132][ T6589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.337885][ T6589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.345191][ T6589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.613392][ T5781] Bluetooth: hci3: command tx timeout [ 171.666096][ T6589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.922121][ T6589] hsr_slave_0: entered promiscuous mode [ 171.939637][ T6589] hsr_slave_1: entered promiscuous mode [ 171.953059][ T6684] mmap: syz.2.187 (6684) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 171.974408][ T6589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.989453][ T6589] Cannot create hsr debugfs directory [ 173.804296][ T6589] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 173.860977][ T6589] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 173.894783][ T6589] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 173.928539][ T6589] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 175.016759][ T6589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.099315][ T6589] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.201517][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.209293][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.891253][ T6589] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 175.924759][ T6589] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.001623][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.008898][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.803693][ T6589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.203198][ T6589] veth0_vlan: entered promiscuous mode [ 184.317108][ T6589] veth1_vlan: entered promiscuous mode [ 184.506408][ T6589] veth0_macvtap: entered promiscuous mode [ 184.539024][ T6589] veth1_macvtap: entered promiscuous mode [ 184.603254][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.670151][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.702258][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.738028][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.751785][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.771380][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.784590][ T6589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.796747][ T5850] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 184.812521][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.834323][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.846575][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.857262][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.869217][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.882291][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.911429][ T6589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.969910][ T6589] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.991557][ T6885] ceph: No mds server is up or the cluster is laggy [ 185.016103][ T5850] usb 3-1: Using ep0 maxpacket: 8 [ 185.023880][ T5850] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 185.033379][ T6589] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.033667][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.076250][ T6589] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.110716][ T5850] pvrusb2: Hardware description: Terratec Grabster AV400 [ 185.123513][ T6589] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.133395][ T5850] pvrusb2: ********** [ 185.144720][ T5850] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 185.211882][ T5850] pvrusb2: Important functionality might not be entirely working. [ 185.234832][ T5850] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 185.262936][ T5850] pvrusb2: ********** [ 185.344300][ T2324] pvrusb2: Invalid write control endpoint [ 185.416849][ T6894] Cannot find set identified by id 0 to match [ 185.493128][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.529915][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.532591][ T2324] pvrusb2: Invalid write control endpoint [ 185.595531][ T2324] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 185.625255][ T2324] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 185.643585][ T2324] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 185.655687][ T2324] pvrusb2: Device being rendered inoperable [ 185.665743][ T2324] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 185.690308][ T6881] netlink: 56 bytes leftover after parsing attributes in process `syz.2.211'. [ 185.699446][ T2324] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 185.708144][ T6829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.718083][ T2324] pvrusb2: Attached sub-driver cx25840 [ 185.738642][ T2324] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 185.739246][ T6829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.774719][ T9] usb 3-1: USB disconnect, device number 3 [ 185.808396][ T2324] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 186.023961][ T6906] loop5: detected capacity change from 0 to 128 [ 186.040779][ T6905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.221'. [ 186.054382][ T6906] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 186.211968][ T5777] udevd[5777]: incorrect ext4 checksum on /dev/loop5 [ 191.143212][ T6948] netlink: 'syz.1.220': attribute type 1 has an invalid length. [ 191.467553][ T6948] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.601217][ T6954] bond1: (slave veth0_to_bond): making interface the new active one [ 191.684613][ T6954] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 191.823714][ T6957] bond1: entered promiscuous mode [ 191.868173][ T6957] veth0_to_bond: entered promiscuous mode [ 191.921576][ T6957] bond1: entered allmulticast mode [ 191.953856][ T6957] veth0_to_bond: entered allmulticast mode [ 192.138911][ T6958] macvlan2: entered promiscuous mode [ 192.165980][ T6958] macvlan2: entered allmulticast mode [ 192.235861][ T6958] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 192.403454][ T6958] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 194.578190][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.120760][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.733853][ T7013] loop3: detected capacity change from 0 to 512 [ 198.762008][ T7013] EXT4-fs: inline encryption not supported [ 198.811436][ T7013] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 198.998067][ T7013] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.234: bad orphan inode 15 [ 199.113942][ T7013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.609806][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.696454][ T7031] netlink: 'syz.5.236': attribute type 1 has an invalid length. [ 200.887651][ T7031] veth1_to_bridge: entered promiscuous mode [ 200.893679][ T7031] veth1_to_bridge: entered allmulticast mode [ 201.321137][ T126] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.490940][ T7032] macvlan2: entered promiscuous mode [ 201.563149][ T7032] macvlan2: entered allmulticast mode [ 204.826457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 208.783141][ T7087] tipc: Started in network mode [ 208.797753][ T7087] tipc: Node identity 1e257a5f4f92, cluster identity 4711 [ 208.826578][ T7087] tipc: Enabled bearer , priority 0 [ 208.843970][ T7091] syzkaller0: entered promiscuous mode [ 208.854105][ T7091] syzkaller0: entered allmulticast mode [ 208.956661][ T7087] tipc: Resetting bearer [ 208.995846][ T7086] tipc: Resetting bearer [ 209.120796][ T7086] tipc: Disabling bearer [ 209.445722][ T7099] tipc: Started in network mode [ 209.456315][ T7099] tipc: Node identity 927b86310551, cluster identity 4711 [ 209.464461][ T7099] tipc: Enabled bearer , priority 0 [ 209.516758][ T7101] syzkaller0: entered promiscuous mode [ 209.551257][ T7101] syzkaller0: entered allmulticast mode [ 209.662668][ T7099] tipc: Resetting bearer [ 209.701532][ T7098] tipc: Resetting bearer [ 209.839492][ T7098] tipc: Disabling bearer [ 211.468401][ T7132] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 211.774924][ T7135] ip_tables: iptables: counters copy to user failed while replacing table [ 212.133235][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 212.139433][ T5086] Bluetooth: hci2: command 0x0406 tx timeout [ 212.145655][ T5086] Bluetooth: hci1: command 0x0406 tx timeout [ 213.138109][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.257'. [ 213.381900][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806445a800: rx timeout, send abort [ 217.948644][ T7187] loop2: detected capacity change from 0 to 128 [ 218.006112][ T7187] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 218.072398][ T5783] udevd[5783]: incorrect ext4 checksum on /dev/loop2 [ 219.841217][ T7208] netlink: 'syz.2.273': attribute type 1 has an invalid length. [ 221.913008][ T7208] veth3: entered allmulticast mode [ 221.966192][ T7208] bond1: (slave veth3): Enslaving as an active interface with a down link [ 222.062552][ T7220] bond1: (slave veth0_to_bond): making interface the new active one [ 222.094961][ T7220] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 227.619486][ T7282] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 227.638348][ T7283] capability: warning: `syz.2.287' uses deprecated v2 capabilities in a way that may be insecure [ 228.836241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 230.836089][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 231.895640][ T5815] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 232.116337][ T5815] usb 4-1: Using ep0 maxpacket: 8 [ 232.195792][ T5815] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 232.349501][ T5815] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 232.438255][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.531417][ T5815] usb 4-1: Product: syz [ 232.555285][ T5815] usb 4-1: Manufacturer: syz [ 232.570964][ T5815] usb 4-1: SerialNumber: syz [ 232.612464][ T5815] usb 4-1: config 0 descriptor?? [ 232.830953][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.299'. [ 232.894753][ T2136] usb 4-1: USB disconnect, device number 4 [ 233.349089][ T7326] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 233.598602][ T7333] loop2: detected capacity change from 0 to 512 [ 233.655728][ T7333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.546483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 238.295870][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.736174][ T7412] netlink: 'syz.3.312': attribute type 1 has an invalid length. [ 244.891078][ T7412] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.955355][ T7419] bond1: (slave veth0_to_bond): making interface the new active one [ 244.998385][ T7419] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 245.093606][ T7426] loop2: detected capacity change from 0 to 16 [ 245.169609][ T7412] bond1: entered promiscuous mode [ 245.204579][ T7426] erofs: (device loop2): mounted with root inode @ nid 36. [ 245.224978][ T7412] veth0_to_bond: entered promiscuous mode [ 245.287573][ T7412] bond1: entered allmulticast mode [ 245.308887][ T7412] veth0_to_bond: entered allmulticast mode [ 245.435911][ T7419] macvlan0: entered promiscuous mode [ 246.249991][ T7419] macvlan0: entered allmulticast mode [ 246.280811][ T7419] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 246.389465][ T7419] bond1: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 246.790741][ T7449] loop2: detected capacity change from 0 to 8 [ 251.032968][ T7478] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 253.876200][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 254.877622][ T1205] IPVS: starting estimator thread 0... [ 255.743450][ T7510] IPVS: using max 26 ests per chain, 62400 per kthread [ 255.992692][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.001155][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.013290][ T7515] loop5: detected capacity change from 0 to 4096 [ 256.057488][ T7515] EXT4-fs (loop5): filesystem too large to mount safely on this system [ 258.561719][ T7547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.344'. [ 258.778311][ T7552] loop2: detected capacity change from 0 to 2048 [ 258.942591][ T7552] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.650387][ T7553] bond2: entered promiscuous mode [ 259.701457][ T7553] bond2: entered allmulticast mode [ 260.406246][ T7561] syzkaller0: entered promiscuous mode [ 260.411981][ T7561] syzkaller0: entered allmulticast mode [ 260.980005][ T2136] IPVS: starting estimator thread 0... [ 261.194837][ T7577] IPVS: using max 17 ests per chain, 40800 per kthread [ 262.078391][ T7586] atomic_op ffff88801ebba198 conn xmit_atomic 0000000000000000 [ 263.706689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 264.116280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 265.984597][ T7618] loop3: detected capacity change from 0 to 2048 [ 266.085942][ T7618] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 267.768393][ T7637] loop5: detected capacity change from 0 to 512 [ 268.657287][ T7637] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.157499][ T7666] syzkaller0: entered promiscuous mode [ 271.163414][ T7666] syzkaller0: entered allmulticast mode [ 271.237458][ T6589] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.354869][ T5788] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 271.363782][ T5788] Bluetooth: hci3: Injecting HCI hardware error event [ 271.378144][ T51] Bluetooth: hci3: hardware error 0x00 [ 271.795942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 272.949663][ T7680] loop5: detected capacity change from 0 to 2048 [ 274.070526][ T7680] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 274.785778][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 276.490822][ T7696] netlink: 12 bytes leftover after parsing attributes in process `syz.5.375'. [ 276.681100][ T7696] 8021q: adding VLAN 0 to HW filter on device bond1 [ 276.749073][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'. [ 276.835769][ T7701] bridge0: entered promiscuous mode [ 276.854126][ T7701] macvtap1: entered promiscuous mode [ 276.877990][ T7701] macvtap1: entered allmulticast mode [ 276.906848][ T7701] bridge0: entered allmulticast mode [ 276.965893][ T7702] bridge0: left allmulticast mode [ 277.005893][ T7702] bridge0: left promiscuous mode [ 277.062381][ T7702] macvtap1: left promiscuous mode [ 277.096910][ T7702] macvtap1: left allmulticast mode [ 278.015798][ T51] Bluetooth: hci2: unexpected event for opcode 0x2010 [ 281.253869][ T7739] loop5: detected capacity change from 0 to 2048 [ 281.314312][ T7739] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 282.418712][ T7750] team0: Port device vlan2 added [ 286.912326][ T7786] loop3: detected capacity change from 0 to 128 [ 287.007323][ T7786] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 287.049295][ T7786] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 287.330101][ T7797] netlink: 'syz.1.396': attribute type 1 has an invalid length. [ 287.447278][ T7801] netlink: 'syz.5.386': attribute type 1 has an invalid length. [ 287.574727][ T7801] 8021q: adding VLAN 0 to HW filter on device bond3 [ 287.583930][ T7801] bond2: (slave bond3): making interface the new active one [ 287.597898][ T7801] bond2: (slave bond3): Enslaving as an active interface with an up link [ 287.630894][ T7797] veth3: entered allmulticast mode [ 287.640773][ T7797] bond2: (slave veth3): Enslaving as an active interface with a down link [ 287.667435][ T7799] bond1: (slave veth0_to_bond): Releasing active interface [ 287.675012][ T7799] veth0_to_bond: left promiscuous mode [ 287.680946][ T7799] veth0_to_bond: left allmulticast mode [ 287.693749][ T7799] bond2: (slave veth0_to_bond): making interface the new active one [ 287.706045][ T7799] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 287.762264][ T7804] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 287.785612][ T7805] macvlan2: entered promiscuous mode [ 287.791159][ T7805] macvlan2: entered allmulticast mode [ 287.803322][ T7805] bond2: entered promiscuous mode [ 287.813406][ T7805] veth0_to_bond: entered promiscuous mode [ 287.820276][ T7805] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 287.843730][ T7805] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 287.860851][ T7805] bond2: left promiscuous mode [ 287.866088][ T7805] veth0_to_bond: left promiscuous mode [ 287.913849][ T7786] Zero length message leads to an empty skb [ 288.126008][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 288.247796][ T7812] loop3: detected capacity change from 0 to 8 [ 291.982159][ T7842] netlink: 'syz.3.405': attribute type 1 has an invalid length. [ 292.242782][ T7845] veth3: entered allmulticast mode [ 292.272663][ T7845] bond3: (slave veth3): Enslaving as an active interface with a down link [ 292.445599][ T7846] bond1: (slave veth0_to_bond): Releasing active interface [ 292.498286][ T7846] veth0_to_bond: left promiscuous mode [ 292.526463][ T7846] veth0_to_bond: left allmulticast mode [ 292.598608][ T7846] bond3: (slave veth0_to_bond): making interface the new active one [ 292.634699][ T7846] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 292.736467][ T7849] macvlan0: entered promiscuous mode [ 292.769428][ T7849] macvlan0: entered allmulticast mode [ 292.823812][ T7849] bond3: entered promiscuous mode [ 292.854233][ T7849] veth0_to_bond: entered promiscuous mode [ 292.887366][ T7849] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 292.949439][ T7849] bond3: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 294.775807][ T7849] bond3: left promiscuous mode [ 294.792160][ T7849] veth0_to_bond: left promiscuous mode [ 295.928118][ T7872] loop5: detected capacity change from 0 to 8 [ 297.276181][ T28] audit: type=1800 audit(1787174935.938:24): pid=7873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.412" name="bus" dev="ramfs" ino=14009 res=0 errno=0 [ 298.156841][ T7902] IPv6: NLM_F_CREATE should be specified when creating new route [ 298.913487][ T7908] loop2: detected capacity change from 0 to 128 [ 301.323474][ T28] audit: type=1800 audit(1787174939.979:25): pid=7946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.425" name="memory_backed" dev="configfs" ino=13208 res=0 errno=0 [ 301.439105][ T28] audit: type=1800 audit(1787174940.009:26): pid=7946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.425" name="zone_nr_conv" dev="configfs" ino=13209 res=0 errno=0 [ 301.518396][ T28] audit: type=1800 audit(1787174940.019:27): pid=7946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.425" name="power" dev="configfs" ino=13210 res=0 errno=0 [ 301.600688][ T7946] null_blk: disk nullb1 created [ 301.888826][ T7953] 8021q: adding VLAN 0 to HW filter on device bond4 [ 303.786004][ T7955] bond_slave_0: entered promiscuous mode [ 303.791800][ T7955] bond_slave_1: entered promiscuous mode [ 303.876209][ T7955] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 303.899564][ T7955] bond4: (slave macvlan2): Enslaving as a backup interface with an up link [ 307.568265][ T7993] syzkaller0: entered promiscuous mode [ 307.603945][ T7993] syzkaller0: entered allmulticast mode [ 311.485096][ T8026] netlink: 20 bytes leftover after parsing attributes in process `syz.1.443'. [ 313.458444][ T8021] netlink: 184 bytes leftover after parsing attributes in process `syz.5.439'. [ 313.473077][ T8021] bond_slave_0: left promiscuous mode [ 313.480965][ T8021] bond_slave_1: left promiscuous mode [ 313.488937][ T8021] bond0: entered allmulticast mode [ 313.496924][ T8021] bond_slave_0: entered allmulticast mode [ 313.502782][ T8021] bond_slave_1: entered allmulticast mode [ 316.454545][ T8110] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 318.540401][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.553287][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.333788][ T8133] loop2: detected capacity change from 0 to 32768 [ 320.397236][ T8133] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.457 (8133) [ 320.428254][ T8156] syzkaller0: entered promiscuous mode [ 320.449164][ T8156] syzkaller0: entered allmulticast mode [ 320.550762][ T8133] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 320.586961][ T8133] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 320.633092][ T8133] BTRFS info (device loop2): setting nodatasum [ 320.655138][ T8133] BTRFS info (device loop2): force zlib compression, level 3 [ 320.684821][ T8133] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 320.713411][ T8133] BTRFS info (device loop2): use lzo compression, level 0 [ 320.720808][ T8133] BTRFS info (device loop2): turning on flush-on-commit [ 320.743069][ T8133] BTRFS info (device loop2): enabling auto defrag [ 320.781664][ T8133] BTRFS info (device loop2): max_inline at 4096 [ 320.803403][ T8133] BTRFS info (device loop2): using free space tree [ 321.109386][ T8133] BTRFS info (device loop2): enabling ssd optimizations [ 323.149424][ T8133] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 327.286404][ T8221] tipc: Started in network mode [ 327.291370][ T8221] tipc: Node identity f2c60ba977d9, cluster identity 4711 [ 327.313556][ T8221] tipc: Enabled bearer , priority 0 [ 327.333058][ T8221] syzkaller0: entered promiscuous mode [ 327.342750][ T8221] syzkaller0: entered allmulticast mode [ 327.423633][ T8221] tipc: Resetting bearer [ 327.450346][ T8220] tipc: Resetting bearer [ 327.500729][ T8220] tipc: Disabling bearer [ 328.705067][ T8237] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 328.731821][ T8237] CIFS mount error: No usable UNC path provided in device string! [ 328.731821][ T8237] [ 328.742337][ T8237] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 329.642775][ T8238] loop5: detected capacity change from 0 to 2048 [ 329.728248][ T8238] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 330.712117][ T51] Bluetooth: hci0: unexpected event for opcode 0x2010 [ 331.776114][ T8266] 8021q: adding VLAN 0 to HW filter on device bond4 [ 331.992622][ T8266] bond_slave_0: entered promiscuous mode [ 331.998405][ T8266] bond_slave_1: entered promiscuous mode [ 332.008099][ T8266] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 332.018194][ T8266] bond4: (slave macvlan0): Enslaving as a backup interface with an up link [ 332.329602][ T8271] syzkaller0: entered promiscuous mode [ 332.457013][ T8271] syzkaller0: entered allmulticast mode [ 333.160224][ T8278] netlink: 'syz.3.490': attribute type 1 has an invalid length. [ 335.490593][ T8298] loop3: detected capacity change from 0 to 512 [ 335.523777][ T8298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.585819][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.172233][ T8338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.501'. [ 342.591185][ T8362] CIFS mount error: No usable UNC path provided in device string! [ 342.591185][ T8362] [ 342.601979][ T8362] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 349.995898][ T8390] overlayfs: failed to clone upperpath [ 350.782898][ T8396] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 350.801399][ T8396] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 353.042169][ T5816] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 353.231208][ T5816] usb 4-1: Using ep0 maxpacket: 16 [ 353.249956][ T5816] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.285698][ T5816] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.314758][ T5816] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 353.345471][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.376436][ T5816] usb 4-1: Product: syz [ 353.380983][ T5816] usb 4-1: Manufacturer: syz [ 353.399782][ T5816] usb 4-1: SerialNumber: syz [ 353.610224][ T8447] tipc: Enabled bearer , priority 0 [ 353.630107][ T8447] syzkaller0: entered promiscuous mode [ 353.637653][ T8447] syzkaller0: entered allmulticast mode [ 353.650601][ T8449] netlink: 84 bytes leftover after parsing attributes in process `syz.2.537'. [ 353.663511][ T5816] usb 4-1: 0:2 : does not exist [ 353.695167][ T5816] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 353.743624][ T8447] tipc: Resetting bearer [ 353.755673][ T8446] tipc: Resetting bearer [ 353.797877][ T5816] usb 4-1: USB disconnect, device number 5 [ 353.828576][ T8446] tipc: Disabling bearer [ 353.862607][ T8453] netlink: 184 bytes leftover after parsing attributes in process `syz.1.546'. [ 353.888317][ T8385] udevd[8385]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.074618][ T8453] bond0: entered allmulticast mode [ 354.100021][ T8453] bond_slave_0: entered allmulticast mode [ 354.141652][ T8453] bond_slave_1: entered allmulticast mode [ 356.310709][ T8475] syz.3.543 (8475) used greatest stack depth: 19624 bytes left [ 357.623200][ T8497] syzkaller0: entered promiscuous mode [ 357.633410][ T8497] syzkaller0: entered allmulticast mode [ 358.065690][ T8503] tipc: Enabled bearer , priority 0 [ 358.152386][ T8504] netlink: 84 bytes leftover after parsing attributes in process `syz.3.549'. [ 358.246380][ T8507] syzkaller0: entered promiscuous mode [ 358.267584][ T8507] syzkaller0: entered allmulticast mode [ 358.483871][ T8514] Set syz1 is full, maxelem 2 reached [ 358.866494][ T8522] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 359.562302][ T173] tipc: Node number set to 2536146481 [ 363.180933][ T8576] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 363.966230][ T8583] fuse: Bad value for 'fd' [ 365.062677][ T8595] batadv_slave_0: entered promiscuous mode [ 365.086874][ T8594] batadv_slave_0: left promiscuous mode [ 365.334655][ T2136] libceph: connect (1)[c::]:6789 error -101 [ 365.353212][ T2136] libceph: mon0 (1)[c::]:6789 connect error [ 365.379921][ T8598] ceph: No mds server is up or the cluster is laggy [ 365.390372][ T2136] libceph: connect (1)[c::]:6789 error -101 [ 365.398786][ T2136] libceph: mon0 (1)[c::]:6789 connect error [ 366.534749][ T8610] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 367.618382][ T8620] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 369.632806][ T8628] netlink: 184 bytes leftover after parsing attributes in process `syz.3.586'. [ 369.669166][ T8628] bond_slave_0: left promiscuous mode [ 369.700621][ T8628] bond_slave_1: left promiscuous mode [ 369.711242][ T8628] bond0: entered allmulticast mode [ 369.727633][ T8628] bond_slave_0: entered allmulticast mode [ 369.737717][ T8628] bond_slave_1: entered allmulticast mode [ 369.806635][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.588'. [ 370.024196][ T8636] netlink: 4 bytes leftover after parsing attributes in process `syz.5.590'. [ 370.574821][ T8645] ceph: No mds server is up or the cluster is laggy [ 370.583310][ T9] libceph: connect (1)[c::]:6789 error -101 [ 370.589484][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 371.593517][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.5.594'. [ 371.612106][ T8656] ip6gretap0: entered promiscuous mode [ 371.618050][ T8656] macvtap1: entered promiscuous mode [ 371.624109][ T8656] macvtap1: entered allmulticast mode [ 371.631223][ T8656] ip6gretap0: entered allmulticast mode [ 371.641621][ T8654] netlink: 'syz.1.595': attribute type 1 has an invalid length. [ 371.755027][ T8656] ip6gretap0: left allmulticast mode [ 371.761556][ T8656] ip6gretap0: left promiscuous mode [ 371.768726][ T8656] macvtap1: left promiscuous mode [ 371.787673][ T8656] macvtap1: left allmulticast mode [ 372.050176][ T8670] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 372.205521][ T8667] bridge2: entered promiscuous mode [ 372.581165][ T8667] bond3: (slave bridge2): making interface the new active one [ 372.636931][ T8667] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 372.782165][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 372.874189][ T8654] bridge3: entered promiscuous mode [ 372.908013][ T8654] bond3: (slave bridge3): Enslaving as a backup interface with an up link [ 373.050943][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.599'. [ 373.935181][ T8689] overlayfs: failed to clone upperpath [ 375.654993][ T8703] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 378.876147][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.882965][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.911887][ T8757] syzkaller0: entered promiscuous mode [ 378.922475][ T8757] syzkaller0: entered allmulticast mode [ 381.465075][ T8797] netlink: 184 bytes leftover after parsing attributes in process `syz.3.643'. [ 382.098158][ T8812] netlink: 'syz.5.649': attribute type 1 has an invalid length. [ 383.079999][ T5816] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 383.104149][ T8812] bridge1: entered promiscuous mode [ 383.126156][ T8812] bond5: (slave bridge1): making interface the new active one [ 383.206485][ T8812] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 383.275153][ T8818] bridge2: entered promiscuous mode [ 383.314181][ T8818] bond5: (slave bridge2): Enslaving as a backup interface with an up link [ 384.433699][ T8844] loop3: detected capacity change from 0 to 512 [ 384.478565][ T8844] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 384.542229][ T8844] System zones: 1-12 [ 384.565170][ T8844] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.659: corrupted in-inode xattr: e_value size too large [ 384.675361][ T8844] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.659: couldn't read orphan inode 15 (err -117) [ 386.327659][ T8844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.836239][ T8858] dns_resolver: Unsupported server list version (6) [ 387.372747][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.089996][ T8880] Bluetooth: MGMT ver 1.22 [ 389.453645][ T8888] overlayfs: failed to clone upperpath [ 390.569753][ T8903] netlink: 'syz.3.677': attribute type 1 has an invalid length. [ 390.648773][ T8905] syzkaller0: entered promiscuous mode [ 390.658867][ T8905] syzkaller0: entered allmulticast mode [ 390.971906][ T8903] bridge3: entered promiscuous mode [ 390.995606][ T8903] bond5: (slave bridge3): making interface the new active one [ 391.030508][ T8903] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 391.299189][ T8910] bridge4: entered promiscuous mode [ 391.308931][ T8910] bond5: (slave bridge4): Enslaving as a backup interface with an up link [ 393.380690][ T8936] Config c/1 of g1 needs at least one function. [ 393.388785][ T8936] udc dummy_udc.0: failed to start g1: -22 [ 393.396118][ T8936] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 394.162068][ T8936] UDC core: g1: couldn't find an available UDC or it's busy [ 394.584012][ T8953] netlink: 184 bytes leftover after parsing attributes in process `syz.3.690'. [ 395.188231][ T8965] overlayfs: failed to clone upperpath [ 397.990280][ T8984] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 399.657738][ T9012] netlink: 184 bytes leftover after parsing attributes in process `syz.5.710'. [ 400.893803][ T9022] tipc: Enabling of bearer rejected, already enabled [ 403.042388][ T9029] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 404.191191][ T9040] dns_resolver: Unsupported server list version (6) [ 408.071527][ T9065] netlink: 184 bytes leftover after parsing attributes in process `syz.2.725'. [ 408.133470][ T9065] bond0: entered allmulticast mode [ 408.158646][ T9065] bond_slave_0: entered allmulticast mode [ 408.186772][ T9065] bond_slave_1: entered allmulticast mode [ 410.388469][ T5850] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 410.479649][ T9096] netlink: 'syz.2.736': attribute type 1 has an invalid length. [ 410.611754][ T5850] usb 4-1: Using ep0 maxpacket: 16 [ 410.619907][ T5850] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.631638][ T5850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 410.644226][ T5850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 410.654604][ T5850] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 410.687126][ T5850] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.708846][ T5850] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 410.723083][ T5850] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 410.734145][ T5850] usb 4-1: Manufacturer: syz [ 410.925137][ T5850] usb 4-1: config 0 descriptor?? [ 411.552454][ T9096] bridge1: entered promiscuous mode [ 411.564564][ T9096] bond2: (slave bridge1): making interface the new active one [ 411.576111][ T9096] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 411.584094][ T5850] rc_core: IR keymap rc-hauppauge not found [ 411.625118][ T5850] Registered IR keymap rc-empty [ 412.270359][ T5850] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 412.470402][ T9097] bridge2: entered promiscuous mode [ 412.507301][ T5850] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 412.531638][ T9097] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 412.601927][ T5850] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 412.748073][ T5850] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 412.894937][ T5850] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 412.943010][ C0] rc rc0: IR event FIFO is full! [ 412.948312][ C0] rc rc0: IR event FIFO is full! [ 412.953341][ C0] rc rc0: IR event FIFO is full! [ 412.958337][ C0] rc rc0: IR event FIFO is full! [ 412.964252][ C0] rc rc0: IR event FIFO is full! [ 412.969251][ C0] rc rc0: IR event FIFO is full! [ 412.974284][ C0] rc rc0: IR event FIFO is full! [ 412.979724][ C0] rc rc0: IR event FIFO is full! [ 412.984710][ C0] rc rc0: IR event FIFO is full! [ 412.989690][ C0] rc rc0: IR event FIFO is full! [ 412.994687][ C0] rc rc0: IR event FIFO is full! [ 412.999704][ C0] rc rc0: IR event FIFO is full! [ 413.004903][ C0] rc rc0: IR event FIFO is full! [ 413.010323][ C0] rc rc0: IR event FIFO is full! [ 413.015306][ C0] rc rc0: IR event FIFO is full! [ 413.028409][ C0] rc rc0: IR event FIFO is full! [ 413.033806][ C0] rc rc0: IR event FIFO is full! [ 413.040986][ C0] rc rc0: IR event FIFO is full! [ 413.047041][ C0] rc rc0: IR event FIFO is full! [ 413.053977][ C0] rc rc0: IR event FIFO is full! [ 413.061257][ C0] rc rc0: IR event FIFO is full! [ 413.066626][ C0] rc rc0: IR event FIFO is full! [ 413.071628][ C0] rc rc0: IR event FIFO is full! [ 413.076625][ C0] rc rc0: IR event FIFO is full! [ 413.082190][ C0] rc rc0: IR event FIFO is full! [ 413.087565][ C0] rc rc0: IR event FIFO is full! [ 413.092684][ C0] rc rc0: IR event FIFO is full! [ 413.098578][ C0] rc rc0: IR event FIFO is full! [ 413.105601][ C0] rc rc0: IR event FIFO is full! [ 413.111071][ C0] rc rc0: IR event FIFO is full! [ 413.116057][ C0] rc rc0: IR event FIFO is full! [ 413.121167][ C0] rc rc0: IR event FIFO is full! [ 413.126635][ C0] rc rc0: IR event FIFO is full! [ 413.131716][ C0] rc rc0: IR event FIFO is full! [ 413.137101][ C0] rc rc0: IR event FIFO is full! [ 413.142106][ C0] rc rc0: IR event FIFO is full! [ 413.147097][ C0] rc rc0: IR event FIFO is full! [ 413.152092][ C0] rc rc0: IR event FIFO is full! [ 413.157254][ C0] rc rc0: IR event FIFO is full! [ 413.162981][ C0] rc rc0: IR event FIFO is full! [ 413.169905][ C0] rc rc0: IR event FIFO is full! [ 413.174916][ C0] rc rc0: IR event FIFO is full! [ 413.180519][ C0] rc rc0: IR event FIFO is full! [ 413.186201][ C0] rc rc0: IR event FIFO is full! [ 413.198378][ C0] rc rc0: IR event FIFO is full! [ 413.203512][ C0] rc rc0: IR event FIFO is full! [ 413.209742][ C0] rc rc0: IR event FIFO is full! [ 413.215357][ C0] rc rc0: IR event FIFO is full! [ 413.220781][ C0] rc rc0: IR event FIFO is full! [ 413.226004][ C0] rc rc0: IR event FIFO is full! [ 413.231350][ C0] rc rc0: IR event FIFO is full! [ 413.238387][ C0] rc rc0: IR event FIFO is full! [ 413.244148][ C0] rc rc0: IR event FIFO is full! [ 413.249499][ C0] rc rc0: IR event FIFO is full! [ 413.255516][ C0] rc rc0: IR event FIFO is full! [ 413.261050][ C0] rc rc0: IR event FIFO is full! [ 413.266401][ C0] rc rc0: IR event FIFO is full! [ 413.271579][ C0] rc rc0: IR event FIFO is full! [ 413.277115][ C0] rc rc0: IR event FIFO is full! [ 413.282392][ C0] rc rc0: IR event FIFO is full! [ 413.287829][ C0] rc rc0: IR event FIFO is full! [ 413.293266][ C0] rc rc0: IR event FIFO is full! [ 413.298312][ C0] rc rc0: IR event FIFO is full! [ 413.303405][ C0] rc rc0: IR event FIFO is full! [ 413.311191][ C0] rc rc0: IR event FIFO is full! [ 413.318414][ C0] rc rc0: IR event FIFO is full! [ 413.323623][ C0] rc rc0: IR event FIFO is full! [ 413.328879][ C0] rc rc0: IR event FIFO is full! [ 413.334236][ C0] rc rc0: IR event FIFO is full! [ 413.778330][ T9115] MPI: mpi too large (107144 bits) [ 414.528711][ T5850] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 414.567799][ T5850] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 414.619595][ T5850] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 414.669408][ T5850] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 414.728103][ T5850] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 414.779438][ T5850] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 414.820064][ T5850] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.007937][ T5850] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.048022][ T5850] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.860180][ T5850] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 415.870861][ T5850] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 415.885582][ T5850] usb 4-1: USB disconnect, device number 6 [ 417.340155][ T9148] netlink: 184 bytes leftover after parsing attributes in process `syz.1.741'. [ 417.369816][ T9150] netlink: 184 bytes leftover after parsing attributes in process `syz.2.750'. [ 419.425567][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.756'. [ 420.718897][ T9171] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 421.005834][ T9180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.758'. [ 421.314074][ T9180] 8021q: adding VLAN 0 to HW filter on device bond5 [ 421.329690][ T9184] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.337538][ T9184] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.453805][ T9184] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.461153][ T9184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.469813][ T9184] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.477019][ T9184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.929146][ T9184] bond5: (slave bridge0): Enslaving as an active interface with an up link [ 422.107803][ T9189] netlink: 184 bytes leftover after parsing attributes in process `syz.3.761'. [ 422.176967][ T9195] netlink: 184 bytes leftover after parsing attributes in process `syz.1.762'. [ 425.931672][ T9233] netlink: 184 bytes leftover after parsing attributes in process `syz.5.773'. [ 425.943435][ T9234] netlink: 184 bytes leftover after parsing attributes in process `syz.1.774'. [ 429.526109][ T9263] netlink: 'syz.1.781': attribute type 1 has an invalid length. [ 430.064160][ T9263] 8021q: adding VLAN 0 to HW filter on device bond6 [ 430.092942][ T9267] macvlan2: entered promiscuous mode [ 430.099032][ T9267] macvlan2: entered allmulticast mode [ 430.105168][ T9267] bond6: entered allmulticast mode [ 430.110573][ T9267] bond6: entered promiscuous mode [ 430.116683][ T9267] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 430.128373][ T9267] team0: Port device macvlan2 added [ 430.465533][ T9263] bond6: (slave ip6gretap1): making interface the new active one [ 430.486429][ T9263] ip6gretap1: entered promiscuous mode [ 430.498476][ T9263] ip6gretap1: entered allmulticast mode [ 430.516239][ T9263] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 430.546921][ T5788] Bluetooth: hci2: command 0x0406 tx timeout [ 433.166949][ T9297] loop3: detected capacity change from 0 to 16 [ 433.207985][ T9297] erofs: (device loop3): mounted with root inode @ nid 36. [ 433.652177][ T9303] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 434.420967][ T9307] netlink: 184 bytes leftover after parsing attributes in process `syz.2.796'. [ 434.450527][ T9309] syzkaller0: entered promiscuous mode [ 434.468978][ T9309] syzkaller0: entered allmulticast mode [ 434.730846][ T9297] bridge0: entered promiscuous mode [ 434.736489][ T9297] macsec1: entered allmulticast mode [ 434.768019][ T9297] bridge0: entered allmulticast mode [ 434.781130][ T9297] bridge0: port 3(macsec1) entered blocking state [ 434.812452][ T9297] bridge0: port 3(macsec1) entered disabled state [ 434.988184][ T9297] bridge0: left allmulticast mode [ 435.013829][ T9297] bridge0: left promiscuous mode [ 436.767847][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 437.612672][ T9325] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 437.633907][ T9325] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 439.951980][ T9349] netlink: 184 bytes leftover after parsing attributes in process `syz.5.808'. [ 440.321843][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.332758][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.283395][ T9363] netlink: 184 bytes leftover after parsing attributes in process `syz.5.820'. [ 441.645748][ T9368] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 441.746450][ T5850] IPVS: starting estimator thread 0... [ 441.876460][ T9369] IPVS: using max 16 ests per chain, 38400 per kthread [ 444.502148][ T9401] nvme_fcloop: unknown parameter or missing value 'wwp' [ 445.498939][ T9414] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 446.315964][ T9417] netlink: 'syz.3.826': attribute type 12 has an invalid length. [ 446.504653][ T9415] Set syz1 is full, maxelem 6117 reached [ 448.431555][ T9433] syzkaller0: entered promiscuous mode [ 448.437611][ T9433] syzkaller0: entered allmulticast mode [ 448.457011][ T9433] 0: reclassify loop, rule prio 0, protocol 700 [ 453.052371][ T9468] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.842'. [ 455.023242][ T9482] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 455.037594][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.5.845'. [ 457.651821][ T9482] team0: Port device vlan2 removed [ 458.294191][ T9508] o2cb: This node has not been configured. [ 458.300727][ T9508] o2cb: Cluster check failed. Fix errors before retrying. [ 458.308273][ T9508] (syz.1.851,9508,1):user_dlm_register:674 ERROR: status = -22 [ 458.316030][ T9508] (syz.1.851,9508,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 459.533474][ T9520] netlink: 'syz.5.855': attribute type 12 has an invalid length. [ 461.535210][ T9528] ================================================================== [ 461.543359][ T9528] BUG: KASAN: slab-use-after-free in release_card_device+0x196/0x1a0 [ 461.551524][ T9528] Read of size 1 at addr ffff88814c3b88f1 by task syz.5.858/9528 [ 461.559278][ T9528] [ 461.561664][ T9528] CPU: 1 PID: 9528 Comm: syz.5.858 Not tainted syzkaller #0 [ 461.568984][ T9528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 461.579089][ T9528] Call Trace: [ 461.582430][ T9528] [ 461.585415][ T9528] dump_stack_lvl+0x18c/0x250 [ 461.590149][ T9528] ? __lock_acquire+0x7d80/0x7d80 [ 461.595219][ T9528] ? show_regs_print_info+0x20/0x20 [ 461.600466][ T9528] ? load_image+0x420/0x420 [ 461.605008][ T9528] ? __virt_addr_valid+0x10c/0x380 [ 461.610166][ T9528] ? __virt_addr_valid+0x10c/0x380 [ 461.615324][ T9528] ? __virt_addr_valid+0x10c/0x380 [ 461.620478][ T9528] print_report+0xa8/0x210 [ 461.624942][ T9528] ? release_card_device+0x196/0x1a0 [ 461.630274][ T9528] kasan_report+0x117/0x150 [ 461.634824][ T9528] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 461.640850][ T9528] ? release_card_device+0x196/0x1a0 [ 461.646184][ T9528] release_card_device+0x196/0x1a0 [ 461.651371][ T9528] ? snd_power_wait+0x90/0x90 [ 461.656189][ T9528] device_release+0xbc/0x1e0 [ 461.660836][ T9528] kobject_put+0x21b/0x450 [ 461.665313][ T9528] snd_card_file_remove+0x331/0x380 [ 461.670566][ T9528] snd_pcm_release+0x12f/0x150 [ 461.675382][ T9528] ? snd_disconnect_mmap+0x10/0x10 [ 461.680548][ T9528] __fput+0x221/0x940 [ 461.684579][ T9528] task_work_run+0x1d4/0x260 [ 461.689305][ T9528] ? task_work_cancel+0x220/0x220 [ 461.694411][ T9528] ? exit_to_user_mode_loop+0x3b/0x110 [ 461.699930][ T9528] exit_to_user_mode_loop+0xe6/0x110 [ 461.705283][ T9528] exit_to_user_mode_prepare+0xee/0x180 [ 461.710885][ T9528] syscall_exit_to_user_mode+0x1a/0x50 [ 461.716396][ T9528] do_syscall_64+0x61/0xb0 [ 461.720859][ T9528] ? clear_bhb_loop+0x40/0x90 [ 461.725584][ T9528] ? clear_bhb_loop+0x40/0x90 [ 461.730306][ T9528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 461.736259][ T9528] RIP: 0033:0x7f476e39e0d9 [ 461.740726][ T9528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.760382][ T9528] RSP: 002b:00007fff39620318 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 461.768884][ T9528] RAX: 0000000000000000 RBX: 00007f476e627da0 RCX: 00007f476e39e0d9 [ 461.776896][ T9528] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 461.784910][ T9528] RBP: 00007f476e627da0 R08: 0000000000000006 R09: 0000000000000000 [ 461.792933][ T9528] R10: 00007f476e627cb0 R11: 0000000000000246 R12: 00000000000709ef [ 461.801022][ T9528] R13: 00007f476e625fac R14: 000000000007074d R15: 00007fff39620420 [ 461.809147][ T9528] [ 461.812207][ T9528] [ 461.814565][ T9528] Allocated by task 1: [ 461.818688][ T9528] kasan_set_track+0x4e/0x70 [ 461.823342][ T9528] __kasan_kmalloc+0x8f/0xa0 [ 461.828773][ T9528] __kmalloc_node_track_caller+0xb4/0x230 [ 461.834831][ T9528] __devres_alloc_node+0x4c/0x120 [ 461.839993][ T9528] snd_devm_card_new+0x78/0x150 [ 461.844987][ T9528] loopback_probe+0x151/0x1a30 [ 461.849791][ T9528] platform_probe+0x13b/0x1c0 [ 461.854512][ T9528] really_probe+0x247/0xae0 [ 461.859079][ T9528] __driver_probe_device+0x1f5/0x390 [ 461.864414][ T9528] driver_probe_device+0x4f/0x420 [ 461.869476][ T9528] __device_attach_driver+0x2ca/0x510 [ 461.874976][ T9528] bus_for_each_drv+0x252/0x2e0 [ 461.880306][ T9528] __device_attach+0x2c1/0x420 [ 461.885116][ T9528] bus_probe_device+0x180/0x260 [ 461.890014][ T9528] device_add+0x87c/0xc40 [ 461.894414][ T9528] platform_device_add+0x4c3/0x830 [ 461.899584][ T9528] platform_device_register_full+0x472/0x560 [ 461.905632][ T9528] alsa_card_loopback_init+0x156/0x2b0 [ 461.911142][ T9528] do_one_initcall+0x242/0x790 [ 461.915979][ T9528] do_initcall_level+0x13d/0x1f0 [ 461.920952][ T9528] do_initcalls+0x69/0xd0 [ 461.925323][ T9528] kernel_init_freeable+0x3d9/0x560 [ 461.930560][ T9528] kernel_init+0x1d/0x1c0 [ 461.934935][ T9528] ret_from_fork+0x48/0x80 [ 461.939401][ T9528] ret_from_fork_asm+0x11/0x20 [ 461.944248][ T9528] [ 461.946612][ T9528] Freed by task 9529: [ 461.950620][ T9528] kasan_set_track+0x4e/0x70 [ 461.955259][ T9528] kasan_save_free_info+0x28/0x40 [ 461.960416][ T9528] ____kasan_slab_free+0x126/0x1f0 [ 461.965596][ T9528] slab_free_freelist_hook+0x130/0x1a0 [ 461.971096][ T9528] __kmem_cache_free+0xba/0x1f0 [ 461.975992][ T9528] devres_release_all+0x1ad/0x230 [ 461.981060][ T9528] device_release_driver_internal+0x4c0/0x6f0 [ 461.987174][ T9528] unbind_store+0x1a1/0x1d0 [ 461.991723][ T9528] kernfs_fop_write_iter+0x3a4/0x520 [ 461.997057][ T9528] vfs_write+0x474/0x9a0 [ 462.001345][ T9528] ksys_write+0x151/0x260 [ 462.005721][ T9528] do_syscall_64+0x55/0xb0 [ 462.010191][ T9528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 462.016136][ T9528] [ 462.018544][ T9528] The buggy address belongs to the object at ffff88814c3b8000 [ 462.018544][ T9528] which belongs to the cache kmalloc-8k of size 8192 [ 462.032645][ T9528] The buggy address is located 2289 bytes inside of [ 462.032645][ T9528] freed 8192-byte region [ffff88814c3b8000, ffff88814c3ba000) [ 462.046665][ T9528] [ 462.049022][ T9528] The buggy address belongs to the physical page: [ 462.055477][ T9528] page:ffffea000530ee00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14c3b8 [ 462.065872][ T9528] head:ffffea000530ee00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 462.074852][ T9528] flags: 0x57ff00000000840(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 462.082971][ T9528] page_type: 0xffffffff() [ 462.087362][ T9528] raw: 057ff00000000840 ffff888017c42280 dead000000000122 0000000000000000 [ 462.095988][ T9528] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 462.104607][ T9528] page dumped because: kasan: bad access detected [ 462.111109][ T9528] page_owner tracks the page as allocated [ 462.116854][ T9528] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 25284356570, free_ts 0 [ 462.137085][ T9528] post_alloc_hook+0x1c1/0x200 [ 462.141919][ T9528] get_page_from_freelist+0x2181/0x22a0 [ 462.147509][ T9528] __alloc_pages+0x1f0/0x460 [ 462.152143][ T9528] alloc_page_interleave+0x24/0x1e0 [ 462.157385][ T9528] alloc_slab_page+0x5d/0x180 [ 462.162097][ T9528] new_slab+0x87/0x2d0 [ 462.166301][ T9528] ___slab_alloc+0xc5c/0x12f0 [ 462.171463][ T9528] __kmem_cache_alloc_node+0x11f/0x250 [ 462.177135][ T9528] __kmalloc_node_track_caller+0xa4/0x230 [ 462.182998][ T9528] __devres_alloc_node+0x4c/0x120 [ 462.188061][ T9528] snd_devm_card_new+0x78/0x150 [ 462.192965][ T9528] loopback_probe+0x151/0x1a30 [ 462.197767][ T9528] platform_probe+0x13b/0x1c0 [ 462.202519][ T9528] really_probe+0x247/0xae0 [ 462.207057][ T9528] __driver_probe_device+0x1f5/0x390 [ 462.212381][ T9528] driver_probe_device+0x4f/0x420 [ 462.217441][ T9528] page_owner free stack trace missing [ 462.222835][ T9528] [ 462.225254][ T9528] Memory state around the buggy address: [ 462.230906][ T9528] ffff88814c3b8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 462.238996][ T9528] ffff88814c3b8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 462.247072][ T9528] >ffff88814c3b8880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 462.255210][ T9528] ^ [ 462.263105][ T9528] ffff88814c3b8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 462.271268][ T9528] ffff88814c3b8980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 462.279441][ T9528] ================================================================== [ 462.497692][ T9537] syz.2.859: attempt to access beyond end of device [ 462.497692][ T9537] loop5: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 462.990087][ T9537] hfsplus: unable to find HFS+ superblock [ 463.083721][ T9528] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 463.091271][ T9528] CPU: 1 PID: 9528 Comm: syz.5.858 Not tainted syzkaller #0 [ 463.098609][ T9528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 463.108718][ T9528] Call Trace: [ 463.112035][ T9528] [ 463.115006][ T9528] dump_stack_lvl+0x18c/0x250 [ 463.119781][ T9528] ? show_regs_print_info+0x20/0x20 [ 463.125032][ T9528] ? load_image+0x420/0x420 [ 463.129592][ T9528] panic+0x2ca/0x720 [ 463.133546][ T9528] ? bpf_jit_dump+0xd0/0xd0 [ 463.138105][ T9528] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 463.144161][ T9528] ? _raw_spin_unlock+0x40/0x40 [ 463.149065][ T9528] ? print_memory_metadata+0x314/0x400 [ 463.154580][ T9528] ? release_card_device+0x196/0x1a0 [ 463.159920][ T9528] check_panic_on_warn+0x84/0xa0 [ 463.164922][ T9528] ? release_card_device+0x196/0x1a0 [ 463.170264][ T9528] end_report+0x6f/0x130 [ 463.174569][ T9528] kasan_report+0x128/0x150 [ 463.179156][ T9528] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 463.185192][ T9528] ? release_card_device+0x196/0x1a0 [ 463.190537][ T9528] release_card_device+0x196/0x1a0 [ 463.195713][ T9528] ? snd_power_wait+0x90/0x90 [ 463.200442][ T9528] device_release+0xbc/0x1e0 [ 463.205094][ T9528] kobject_put+0x21b/0x450 [ 463.209577][ T9528] snd_card_file_remove+0x331/0x380 [ 463.214833][ T9528] snd_pcm_release+0x12f/0x150 [ 463.219654][ T9528] ? snd_disconnect_mmap+0x10/0x10 [ 463.224822][ T9528] __fput+0x221/0x940 [ 463.228857][ T9528] task_work_run+0x1d4/0x260 [ 463.233502][ T9528] ? task_work_cancel+0x220/0x220 [ 463.238584][ T9528] ? exit_to_user_mode_loop+0x3b/0x110 [ 463.244102][ T9528] exit_to_user_mode_loop+0xe6/0x110 [ 463.249466][ T9528] exit_to_user_mode_prepare+0xee/0x180 [ 463.255068][ T9528] syscall_exit_to_user_mode+0x1a/0x50 [ 463.260581][ T9528] do_syscall_64+0x61/0xb0 [ 463.265047][ T9528] ? clear_bhb_loop+0x40/0x90 [ 463.269775][ T9528] ? clear_bhb_loop+0x40/0x90 [ 463.274597][ T9528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 463.280545][ T9528] RIP: 0033:0x7f476e39e0d9 [ 463.285027][ T9528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.304681][ T9528] RSP: 002b:00007fff39620318 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 463.313235][ T9528] RAX: 0000000000000000 RBX: 00007f476e627da0 RCX: 00007f476e39e0d9 [ 463.321249][ T9528] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 463.329374][ T9528] RBP: 00007f476e627da0 R08: 0000000000000006 R09: 0000000000000000 [ 463.337394][ T9528] R10: 00007f476e627cb0 R11: 0000000000000246 R12: 00000000000709ef [ 463.345409][ T9528] R13: 00007f476e625fac R14: 000000000007074d R15: 00007fff39620420 [ 463.353512][ T9528] [ 463.357132][ T9528] Kernel Offset: disabled [ 463.361495][ T9528] Rebooting in 86400 seconds..