last executing test programs: 14.027299436s ago: executing program 4 (id=885): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x440, 0x40, 0x14}, 0x18) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={&(0x7f00000001c0)={0x10020, 0x3f7, 0x8, 0xfffffffd, 0x8, {0xffff, 0x7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}, 0x1, 0x0, 0x0, 0x4004081}, 0x0) execve(&(0x7f0000019140)='./file0\x00', 0x0, &(0x7f0000000040)={[&(0x7f0000000200)=' ']}) 12.436085366s ago: executing program 4 (id=893): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000580)={0x28, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0xf2, 0x0, 0x0, @str='\xd4T\xe6#{\x00'}, @nested={0xa, 0x19, 0x0, 0x1, [@generic="d8b7976c569b"]}]}, 0x28}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) r2 = syz_clone(0x2280, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r2, 0x13, &(0x7f0000000000)={0x24, 0xfe81, 0xffffffff}) tkill(r2, 0x12) waitid(0x0, 0x0, 0x0, 0x8100000e, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 11.383905882s ago: executing program 4 (id=898): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000001000/0x1000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000002000)={0x0, 0x0}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000280)={"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000f6ff000000000000000000000000000000000000000000000000000000f1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000eb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000666ffdf074c6806d00000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004d910000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5ff00"}) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$uac2(r4, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x26000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.414229256s ago: executing program 4 (id=902): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) 9.384939123s ago: executing program 4 (id=905): syz_open_dev$dvb_demux(0x0, 0x0, 0x41) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0xfffd}, [], {0x4, 0x2}, [], {}, {0x20, 0x6}}, 0x24, 0x1) close(0x3) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000440)) timer_settime(0x0, 0x1, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) unshare(0x64000600) 6.535753705s ago: executing program 1 (id=919): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) mmap$xdp(&(0x7f0000eae000/0x3000)=nil, 0x3000, 0x5000004, 0x13, r1, 0x180000000) mremap(&(0x7f0000eaf000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) sigaltstack(&(0x7f0000001040)={0x0, 0x80000002}, 0x0) sigaltstack(&(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000640)={0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000040000000400", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000ee0e00", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="010000000100"/27], 0x48) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 6.232252162s ago: executing program 2 (id=923): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018e59, &(0x7f0000000080)={[{@nomblk_io_submit}, {@noblock_validity}, {@nogrpid}, {@errors_remount}, {@user_xattr}, {@inlinecrypt}]}, 0x6, 0x622, &(0x7f0000000180)="$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") openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000080)="0f0133360fae4bfd660f3801f266b9800000c00f326635002000000f3066b8f28d00000f23c80f21f86635080010000f23f866b9dc08000066b80b00000066ba000000000f300f20c06635000004000f22c03ed110ba200066b80000c0fe66efbad104b80040ef", 0x67}], 0x1, 0x2d, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x10}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000840)=""/182}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 6.133408075s ago: executing program 0 (id=925): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xd, 0x43}]}, 0x10) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20040014, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000001240)="4fb6b3c65f18ee12bc9643b50723670ed775fd626fd07522a419a1bf640fbb", 0x1f}, {&(0x7f0000000680)="64e4159daa", 0x5}], 0x2) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f00000002c0)={0x0, 0x44, &(0x7f0000000800)={&(0x7f0000000540)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x404c800}, 0x81) write$FUSE_DIRENT(r2, &(0x7f00000001c0)=ANY=[], 0x70) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x67, 0x4, 0x7fff0022}]}) close_range(r3, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.664584797s ago: executing program 0 (id=929): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000200000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 5.616334558s ago: executing program 2 (id=930): setitimer(0x0, &(0x7f0000000580)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 5.365110754s ago: executing program 2 (id=933): syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004074}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x6, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e24, 0x5, @local, 0x4}, 0x1c) r2 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r2, 0x7a9, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 5.287090386s ago: executing program 2 (id=935): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x840, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240408a0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_usb_disconnect(0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 4.74090145s ago: executing program 0 (id=936): write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffff9c, 0x0, 0x2a000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, 0x0, 0x0) 4.310988051s ago: executing program 2 (id=937): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000040)={0x14, r4, 0x30b, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) 3.586875369s ago: executing program 1 (id=939): socket$unix(0x1, 0x1, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) r1 = fanotify_init(0x8, 0x1) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x4) fcntl$setlease(r0, 0x400, 0x0) read$FUSE(r1, &(0x7f0000000b00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2, @tid=r2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) close(0x3) 2.876735027s ago: executing program 2 (id=940): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x4001, 0x3, 0x2a0, 0x0, 0xb, 0x148, 0x0, 0x148, 0x130, 0x240, 0x240, 0x208, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0xe8, 0x130, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x4e24, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e24], [0x1, 0x0, 0x43, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x41, 0x0, 0x0, 0x0, 0xfc]}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0xab, 0x6, 'syz1\x00', {0x4}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'team0\x00', 'netpci0\x00', {}, {}, 0x0, 0x1}, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_ublk_setup_io_uring(0x409f, &(0x7f0000000340)={0x0, 0xa59b, 0x8000, 0x0, 0x61}, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) fcntl$setlease(r4, 0x400, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000000c0)={&(0x7f0000000440)}) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000f0000000401a800160008001e4009001120036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x8000) 2.876566438s ago: executing program 3 (id=941): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet(r1, &(0x7f0000001400)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 2.812307279s ago: executing program 1 (id=942): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.710735531s ago: executing program 0 (id=943): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000001640)=0x8, 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 2.060927288s ago: executing program 3 (id=944): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) epoll_create1(0x80000) ioctl$sock_ifreq(0xffffffffffffffff, 0x8921, 0x0) ptrace(0x10, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 1.898940412s ago: executing program 1 (id=945): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, 0x0, 0x0) connect$can_j1939(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) 1.699642567s ago: executing program 1 (id=946): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c5, &(0x7f0000000480)="$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") syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f0000000140)='./sys\x00', 0x202402, &(0x7f00000000c0)={[{@nombcache}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@debug}, {@orlov}, {@data_ordered}, {@data_writeback, 0x2e}, {@minixdf}], [{@obj_user={'obj_user', 0x3d, 'dioread_nolock'}}], 0x2c}, 0x0, 0x462, &(0x7f0000001340)="$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") userfaultfd(0x80001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 944.932016ms ago: executing program 0 (id=947): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmmsg(r3, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, 0x0}, 0x81}], 0x3, 0x12002, 0x0) 944.722966ms ago: executing program 3 (id=948): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r0 = socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20060004}, 0x40080b4) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073794f310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f50000000000000000020000000900020073797a31000000000800034000000001"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006f1}, 0x0) 706.983002ms ago: executing program 1 (id=949): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x2099, 0x3, 0x20000006, 0x7ffffff9}, 0x10) memfd_create(&(0x7f0000000540)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x80400) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100"], 0x16) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000004c0)=@assoc_value={0x0, 0x5}, 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 697.540302ms ago: executing program 3 (id=950): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x18, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 183.876815ms ago: executing program 4 (id=951): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x20000034) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) 61.042889ms ago: executing program 3 (id=952): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 119.62µs ago: executing program 0 (id=953): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, 0x40004}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 0s ago: executing program 3 (id=954): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) kernel console output (not intermixed with test programs): g ep0 maxpacket: 16 [ 75.391927][ T4509] EXT4-fs (loop3): failed to open journal device unknown-block(11,127) -6 [ 75.483933][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.514683][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.580034][ T1108] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 75.706997][ T1108] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 75.723511][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.047032][ T1108] usb 3-1: config 0 descriptor?? [ 76.597101][ T4543] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 76.693573][ T1108] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 76.741293][ T1108] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 76.936237][ T4499] udc-core: couldn't find an available UDC or it's busy [ 76.992365][ T1108] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0002/input/input5 [ 77.029520][ T4499] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 77.269788][ T1108] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 77.316243][ T1108] usb 3-1: USB disconnect, device number 2 [ 77.566814][ T4553] fido_id[4553]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 78.069365][ T4555] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.076797][ T4555] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.267747][ T4576] process 'syz.2.85' launched './file0' with NULL argv: empty string added [ 78.339221][ T4578] netlink: 20 bytes leftover after parsing attributes in process `syz.3.86'. [ 78.725158][ T4555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.763493][ T4555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.167643][ T4555] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.177291][ T4555] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.187255][ T4555] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.196628][ T4555] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.240769][ T4589] loop2: detected capacity change from 0 to 8192 [ 79.336652][ T4562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'. [ 79.430185][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 79.440181][ T4562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.448411][ T4562] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.459432][ T4562] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.476522][ T4563] netlink: 'syz.4.83': attribute type 4 has an invalid length. [ 79.507360][ T4567] netlink: 'syz.4.83': attribute type 4 has an invalid length. [ 79.529404][ T4591] netlink: 'syz.2.91': attribute type 1 has an invalid length. [ 79.670185][ T4597] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.859741][ T25] audit: type=1326 audit(1785862659.951:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4601 comm="syz.2.95" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87babc6019 code=0x7fc00000 [ 79.909203][ T25] audit: type=1326 audit(1785862659.961:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4601 comm="syz.2.95" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f87babc6019 code=0x7fc00000 [ 79.932946][ C0] vkms_vblank_simulate: vblank timer overrun [ 79.951356][ T25] audit: type=1326 audit(1785862659.961:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4601 comm="syz.2.95" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87babc6019 code=0x7fc00000 [ 79.981974][ T25] audit: type=1326 audit(1785862659.961:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4601 comm="syz.2.95" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87babc6019 code=0x7fc00000 [ 80.007526][ T25] audit: type=1326 audit(1785862659.961:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4601 comm="syz.2.95" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87babc6019 code=0x7fc00000 [ 80.028479][ T4562] syz.1.82 (4562) used greatest stack depth: 21104 bytes left [ 80.031990][ C0] vkms_vblank_simulate: vblank timer overrun [ 80.045784][ T4555] syz.1.82 (4555) used greatest stack depth: 21040 bytes left [ 80.794523][ T25] audit: type=1326 audit(1785862659.961:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4601 comm="syz.2.95" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87babc6019 code=0x7fc00000 [ 80.822498][ T4619] cgroup: Need name or subsystem set [ 80.873625][ T25] audit: type=1326 audit(1785862659.961:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4601 comm="syz.2.95" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87babc6019 code=0x7fc00000 [ 80.967995][ T25] audit: type=1326 audit(1785862659.961:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4601 comm="syz.2.95" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87babc6019 code=0x7fc00000 [ 81.220394][ T25] audit: type=1326 audit(1785862659.961:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4601 comm="syz.2.95" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87babc6019 code=0x7fc00000 [ 81.257521][ T25] audit: type=1326 audit(1785862659.961:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4601 comm="syz.2.95" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87babc6019 code=0x7fc00000 [ 81.709599][ T4636] netlink: 40 bytes leftover after parsing attributes in process `syz.0.109'. [ 81.736545][ T4636] netlink: 40 bytes leftover after parsing attributes in process `syz.0.109'. [ 81.784191][ T4636] netlink: 40 bytes leftover after parsing attributes in process `syz.0.109'. [ 81.821455][ T4636] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 81.864621][ T4644] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 81.876273][ T4641] device macvtap1 entered promiscuous mode [ 81.909372][ T4642] device macvtap2 entered promiscuous mode [ 82.090647][ T4651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.113'. [ 82.208921][ T4619] netlink: 5 bytes leftover after parsing attributes in process `syz.4.101'. [ 82.239409][ T4619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 83.407597][ T1356] cfg80211: failed to load regulatory.db [ 83.792353][ T4670] netlink: 'syz.4.119': attribute type 10 has an invalid length. [ 83.916796][ T4670] team0: Port device netdevsim0 added [ 84.424587][ T4690] sctp: [Deprecated]: syz.4.127 (pid 4690) Use of int in max_burst socket option. [ 84.424587][ T4690] Use struct sctp_assoc_value instead [ 84.469135][ T4692] device syzkaller0 entered promiscuous mode [ 84.539663][ T4698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.130'. [ 84.589691][ T4690] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 84.604464][ T4690] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 85.680470][ T4716] loop2: detected capacity change from 0 to 128 [ 85.745215][ T4716] ======================================================= [ 85.745215][ T4716] WARNING: The mand mount option has been deprecated and [ 85.745215][ T4716] and is ignored by this kernel. Remove the mand [ 85.745215][ T4716] option from the mount to silence this warning. [ 85.745215][ T4716] ======================================================= [ 85.935839][ T4716] hpfs: bad mount options. [ 86.133364][ T4229] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.413464][ T4229] usb 5-1: Using ep0 maxpacket: 16 [ 86.535593][ T4229] usb 5-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 86.554865][ T4229] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.800187][ T4229] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 86.814151][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.853365][ T4229] usb 5-1: Product: syz [ 86.868546][ T4229] usb 5-1: Manufacturer: syz [ 86.879222][ T4229] usb 5-1: SerialNumber: syz [ 87.133391][ T1356] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.214646][ T4229] usb 5-1: 0:2 : does not exist [ 87.299226][ T4229] usb 5-1: USB disconnect, device number 2 [ 87.373389][ T1356] usb 3-1: Using ep0 maxpacket: 32 [ 87.493497][ T1356] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 87.508777][ T1356] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 87.548468][ T1356] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 87.588496][ T1356] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 87.631932][ T1356] usb 3-1: config 0 interface 0 has no altsetting 0 [ 87.744294][ T4554] udevd[4554]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.834279][ T1356] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 88.175484][ T1356] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 88.214883][ T1356] usb 3-1: Product: syz [ 88.219163][ T1356] usb 3-1: Manufacturer: syz [ 88.224321][ T1356] usb 3-1: SerialNumber: syz [ 88.243158][ T1356] usb 3-1: config 0 descriptor?? [ 88.286248][ T1356] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 88.342572][ T4783] netlink: 40 bytes leftover after parsing attributes in process `syz.3.156'. [ 88.342902][ T4784] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 65, id = 0 [ 88.355625][ T1356] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 88.727954][ T4792] Set syz1 is full, maxelem 0 reached [ 88.995974][ T21] usb 3-1: USB disconnect, device number 3 [ 89.021641][ T21] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 89.259026][ T4798] Set syz1 is full, maxelem 6117 reached [ 89.435398][ T4807] netlink: 14 bytes leftover after parsing attributes in process `syz.1.166'. [ 90.211938][ T4813] netlink: 'syz.2.167': attribute type 1 has an invalid length. [ 90.733395][ T4813] netlink: 'syz.2.167': attribute type 4 has an invalid length. [ 90.774562][ T4813] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.167'. [ 90.825031][ T4820] netlink: 'syz.2.167': attribute type 1 has an invalid length. [ 90.888458][ T4820] netlink: 'syz.2.167': attribute type 4 has an invalid length. [ 90.975241][ T4820] netlink: 9491 bytes leftover after parsing attributes in process `syz.2.167'. [ 91.859548][ T4829] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.868130][ T4829] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.096949][ T4844] sctp: [Deprecated]: syz.1.177 (pid 4844) Use of int in max_burst socket option. [ 92.096949][ T4844] Use struct sctp_assoc_value instead [ 92.735656][ T4855] device syzkaller0 entered promiscuous mode [ 92.929927][ T4854] batman_adv: batadv0: Adding interface: dummy0 [ 92.980065][ T4854] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.369481][ T4854] batman_adv: batadv0: Interface activated: dummy0 [ 93.409636][ T4859] batadv0: mtu less than device minimum [ 93.435721][ T4859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 93.448480][ T4859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 93.460873][ T4859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 93.473396][ T4859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 93.485850][ T4859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 93.498220][ T4859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 93.510647][ T4859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 93.943428][ T1356] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 94.323919][ T1356] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.564530][ T1356] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 94.674094][ T1356] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.695306][ T1356] usb 3-1: Product: syz [ 94.704412][ T1356] usb 3-1: Manufacturer: syz [ 94.727337][ T1356] usb 3-1: SerialNumber: syz [ 94.758484][ T1356] usb 3-1: config 0 descriptor?? [ 94.805145][ T1356] ims_pcu 3-1:0.0: Missing CDC union descriptor [ 94.854926][ T1356] ims_pcu: probe of 3-1:0.0 failed with error -22 [ 94.856084][ T4878] netlink: 24 bytes leftover after parsing attributes in process `syz.1.188'. [ 95.160993][ T4880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.188'. [ 95.233881][ T4863] udc-core: couldn't find an available UDC or it's busy [ 95.263656][ T4863] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 95.322215][ T1356] usb 3-1: USB disconnect, device number 4 [ 95.346379][ T4878] syz.1.188 (4878) used greatest stack depth: 21008 bytes left [ 95.366950][ T4887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'. [ 95.700367][ T4897] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 98.254760][ T4229] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 98.427213][ T4927] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.443637][ T4927] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.467563][ T4927] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.587300][ T4927] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.435980][ T4943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.207'. [ 99.632089][ T4229] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.646681][ T4229] usb 3-1: config 0 has no interfaces? [ 99.652389][ T4229] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.180369][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.212183][ T4229] usb 3-1: config 0 descriptor?? [ 100.232765][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.253533][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.270855][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.422633][ T4959] loop4: detected capacity change from 0 to 4096 [ 100.462086][ T4232] usb 3-1: USB disconnect, device number 5 [ 100.674681][ T4965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.213'. [ 100.687033][ T4965] netlink: 'syz.3.213': attribute type 5 has an invalid length. [ 100.695275][ T4965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.213'. [ 100.804049][ T1356] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.959034][ T4965] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 101.083415][ T1356] usb 1-1: Using ep0 maxpacket: 32 [ 101.199040][ T4965] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 101.234173][ T1356] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 101.270412][ T1356] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.493145][ T4965] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 101.541508][ T4965] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 101.568629][ T4972] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.615279][ T4965] device geneve2 entered promiscuous mode [ 101.644548][ T4968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.213'. [ 101.692054][ T4968] netlink: 'syz.3.213': attribute type 15 has an invalid length. [ 101.762463][ T4968] device vxlan0 entered promiscuous mode [ 101.802731][ T4971] net_ratelimit: 12 callbacks suppressed [ 101.802749][ T4971] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 102.319674][ T1356] usb 1-1: config 0 descriptor?? [ 102.508106][ T4984] loop3: detected capacity change from 0 to 512 [ 102.573500][ T1356] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 102.585196][ T1356] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 102.616538][ T1356] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 102.714366][ T4984] EXT4-fs (loop3): inodes count not valid: 40 vs 32 [ 102.850719][ T1356] usb 1-1: media controller created [ 103.261519][ T1356] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.323745][ T1356] az6027: usb out operation failed. (-71) [ 103.403506][ T1356] az6027: usb out operation failed. (-71) [ 103.414813][ T1356] stb0899_attach: Driver disabled by Kconfig [ 103.420817][ T1356] az6027: no front-end attached [ 103.420817][ T1356] [ 103.482392][ T1356] az6027: usb out operation failed. (-71) [ 103.523173][ T1356] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 103.565725][ T1356] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 103.612257][ T1356] dvb-usb: schedule remote query interval to 400 msecs. [ 103.620248][ T5009] Illegal XDP return value 4294967294, expect packet loss! [ 103.635649][ T1356] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 103.662260][ T1356] usb 1-1: USB disconnect, device number 2 [ 103.860967][ T1356] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 104.623499][ T21] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 107.413617][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 107.553399][ T21] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 107.575008][ T21] usb 5-1: can't read configurations, error -71 [ 108.481211][ T5077] loop0: detected capacity change from 0 to 2048 [ 108.600410][ T5077] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.866550][ T5089] lo: Caught tx_queue_len zero misconfig [ 110.317957][ T5106] netlink: 36 bytes leftover after parsing attributes in process `syz.2.260'. [ 110.376956][ T5107] netlink: 68 bytes leftover after parsing attributes in process `syz.2.260'. [ 110.444043][ T5109] netlink: 68 bytes leftover after parsing attributes in process `syz.2.260'. [ 110.503467][ T5115] netlink: 'syz.3.262': attribute type 7 has an invalid length. [ 110.582881][ T5115] netlink: 'syz.3.262': attribute type 7 has an invalid length. [ 110.650496][ T5120] bridge0: port 3(vlan3) entered blocking state [ 110.672678][ T5120] bridge0: port 3(vlan3) entered disabled state [ 110.709200][ T5120] device vlan3 entered promiscuous mode [ 112.066663][ T5140] device syzkaller0 entered promiscuous mode [ 114.189624][ T5154] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 114.568825][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 114.596856][ T5173] batman_adv: batadv0: Interface deactivated: dummy0 [ 114.612136][ T5173] batman_adv: batadv0: Removing interface: dummy0 [ 114.628348][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 114.637564][ T5173] device bridge_slave_0 left promiscuous mode [ 114.658575][ T5173] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.696167][ T5173] device bridge_slave_1 left promiscuous mode [ 114.708572][ T5173] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.724989][ T1344] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 114.760655][ T5173] bond0: (slave bond_slave_0): Releasing backup interface [ 114.793695][ T5173] bond0: (slave bond_slave_1): Releasing backup interface [ 114.801913][ T5182] fuse: Bad value for 'fd' [ 114.823323][ T5173] team0: Port device team_slave_0 removed [ 114.842920][ T5173] team0: Port device team_slave_1 removed [ 114.859526][ T5173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.874232][ T5173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.956607][ T5176] team0: Port device xfrm0 added [ 114.973352][ T1344] usb 4-1: Using ep0 maxpacket: 8 [ 114.980566][ T5178] tipc: Started in network mode [ 114.994712][ T5178] tipc: Node identity 7ecd1f26929d, cluster identity 4711 [ 115.019580][ T5178] tipc: Enabled bearer , priority 0 [ 115.035213][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.093747][ T1344] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 115.102137][ T1344] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.143521][ T1344] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 115.163531][ T1344] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 115.183322][ T1344] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.220455][ T1344] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 115.248990][ T1344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.274050][ T5176] syz.1.283 (5176) used greatest stack depth: 19952 bytes left [ 115.553987][ T1344] usb 4-1: usb_control_msg returned -32 [ 115.560530][ T1344] usbtmc 4-1:16.0: can't read capabilities [ 115.849984][ T5186] crypto_alloc_aead failed rc=-4 [ 116.085602][ T1356] tipc: Node number set to 3964673830 [ 116.133228][ T1344] usb 4-1: USB disconnect, device number 2 [ 116.143676][ T5201] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 117.993493][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 118.186643][ T5227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'. [ 118.576890][ T5246] xt_CONNSECMARK: invalid mode: 66 [ 118.624394][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.686221][ T13] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 118.777915][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.935243][ T13] usb 1-1: config 0 descriptor?? [ 119.492529][ T13] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 119.659215][ T13] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0003/input/input7 [ 119.993159][ T13] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 120.383585][ C0] keytouch 0003:0926:3333.0003: Event data for report 0 was too short (8 vs 4) [ 120.606657][ T5294] binder: 5292:5294 ioctl c0306201 200000001440 returned -14 [ 120.830178][ T13] usb 1-1: USB disconnect, device number 3 [ 122.374609][ T5321] syz.1.321 uses obsolete (PF_INET,SOCK_PACKET) [ 123.125713][ T5351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.332'. [ 125.734142][ T5430] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4201] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5430] [ 126.560670][ T5415] loop0: detected capacity change from 0 to 32768 [ 126.656942][ T5415] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.345 (5415) [ 127.563842][ T5415] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 127.589046][ T5415] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 127.613548][ T5415] BTRFS info (device loop0): use zstd compression, level 3 [ 127.642737][ T5415] BTRFS info (device loop0): use no compression [ 127.653581][ T5415] BTRFS info (device loop0): using free space tree [ 127.660148][ T5415] BTRFS info (device loop0): has skinny extents [ 127.978148][ T5415] BTRFS info (device loop0): enabling ssd optimizations [ 129.033103][ T5496] binder: BC_ACQUIRE_RESULT not supported [ 129.057550][ T5496] binder: 5495:5496 ioctl c0306201 200000000240 returned -22 [ 129.097649][ T5496] loop1: detected capacity change from 0 to 128 [ 131.637033][ T5438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.654403][ T25] kauditd_printk_skb: 58 callbacks suppressed [ 131.654416][ T25] audit: type=1800 audit(1785862711.751:71): pid=5519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.362" name="bus" dev="ramfs" ino=37278 res=0 errno=0 [ 131.722287][ T5438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.769637][ T3078] blk_update_request: I/O error, dev sda, sector 1229110 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 131.781374][ T3078] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2035 starting block 153639) [ 131.793331][ T3078] Buffer I/O error on device sda1, logical block 153600 [ 131.801365][ T3078] blk_update_request: I/O error, dev sda, sector 1237294 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 131.813021][ T3078] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2035 starting block 154662) [ 131.824796][ T3078] Buffer I/O error on device sda1, logical block 154623 [ 131.831822][ T3078] blk_update_request: I/O error, dev sda, sector 1241230 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 0 [ 131.843166][ T3078] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2035 starting block 155174) [ 131.854789][ T3078] Buffer I/O error on device sda1, logical block 155115 [ 131.861749][ T3078] Buffer I/O error on device sda1, logical block 155116 [ 131.868736][ T3078] Buffer I/O error on device sda1, logical block 155117 [ 131.875875][ T3078] Buffer I/O error on device sda1, logical block 155118 [ 131.882847][ T3078] Buffer I/O error on device sda1, logical block 155119 [ 131.889843][ T3078] Buffer I/O error on device sda1, logical block 155120 [ 131.896819][ T3078] Buffer I/O error on device sda1, logical block 155121 [ 131.903798][ T3078] Buffer I/O error on device sda1, logical block 155122 [ 131.912261][ T3078] blk_update_request: I/O error, dev sda, sector 1212726 op 0x1:(WRITE) flags 0x0 phys_seg 4 prio class 0 [ 131.923603][ T3078] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2034 starting block 151592) [ 131.935287][ T3078] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2034 starting block 151622) [ 131.962617][ T150] blk_update_request: I/O error, dev sda, sector 1114446 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 131.974345][ T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139307) [ 131.986233][ T150] blk_update_request: I/O error, dev sda, sector 1114494 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 131.997649][ T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139314) [ 132.010862][ T150] blk_update_request: I/O error, dev sda, sector 1114534 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 132.111066][ T3078] blk_update_request: I/O error, dev sda, sector 1115054 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 132.123462][ T3078] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139382) [ 132.135378][ T3078] blk_update_request: I/O error, dev sda, sector 1115070 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 132.146701][ T3078] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139386) [ 132.158443][ T3078] blk_update_request: I/O error, dev sda, sector 1115222 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 132.169759][ T3078] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139404) [ 132.622278][ T3521] Aborting journal on device sda1-8. [ 132.634593][ T150] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 132.647370][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.653721][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.662168][ T3521] JBD2: Error -5 detected when updating journal superblock for sda1-8. [ 132.683710][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 132.707068][ T1092] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 132.717992][ T4171] EXT4-fs (sda1): I/O error while writing superblock [ 132.724720][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 132.731626][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 132.744783][ T1092] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 132.753019][ T4171] EXT4-fs (sda1): I/O error while writing superblock [ 132.761711][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 132.768885][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 132.780562][ T1092] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 132.789027][ T4171] EXT4-fs (sda1): I/O error while writing superblock [ 132.817692][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 132.835159][ T5534] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.366: Detected aborted journal [ 132.848938][ T5534] EXT4-fs (sda1): Remounting filesystem read-only [ 132.862714][ T5528] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 132.872303][ T5534] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.366: Detected aborted journal [ 132.917614][ T5534] EXT4-fs (sda1): Remounting filesystem read-only [ 132.954950][ T5534] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.366: Detected aborted journal [ 132.965936][ T5534] EXT4-fs (sda1): Remounting filesystem read-only [ 133.058315][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 133.087647][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 133.109489][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 133.154004][ T5534] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.366: Detected aborted journal [ 133.165142][ T5534] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.366: Detected aborted journal [ 133.280820][ T5537] xt_TPROXY: Can be used only with -p tcp or -p udp [ 134.005480][ T5438] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.014978][ T5438] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.024030][ T5438] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.032983][ T5438] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.255690][ T5546] netlink: 48 bytes leftover after parsing attributes in process `syz.0.370'. [ 134.373449][ T5557] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 135.643272][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 135.663272][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 135.673270][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 135.683268][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 135.693270][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 135.703269][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 135.713268][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 135.723277][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 135.733268][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 135.743267][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 135.891760][ T5583] xt_TPROXY: Can be used only with -p tcp or -p udp [ 136.726072][ T5585] binder_alloc: 5584: binder_alloc_buf, no vma [ 136.816966][ T5591] xt_CT: No such helper "syz1" [ 136.887750][ T5589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'. [ 137.695353][ T4171] EXT4-fs error: 121 callbacks suppressed [ 137.695365][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 137.719754][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 137.738652][ T5613] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.392: Detected aborted journal [ 137.777221][ T5611] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.391: Detected aborted journal [ 137.788239][ T5611] EXT4-fs: 116 callbacks suppressed [ 137.788271][ T5611] EXT4-fs (sda1): Remounting filesystem read-only [ 138.024204][ T5611] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.391: Detected aborted journal [ 138.035237][ T5611] EXT4-fs (sda1): Remounting filesystem read-only [ 138.430830][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 138.445476][ T5611] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.391: Detected aborted journal [ 138.456384][ T5611] EXT4-fs (sda1): Remounting filesystem read-only [ 138.463746][ T5613] EXT4-fs (sda1): Remounting filesystem read-only [ 138.472996][ T5613] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.392: Detected aborted journal [ 138.484042][ T5613] EXT4-fs (sda1): Remounting filesystem read-only [ 138.512745][ T5611] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.391: Detected aborted journal [ 138.523742][ T5611] EXT4-fs (sda1): Remounting filesystem read-only [ 138.547442][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 138.566553][ T5613] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.392: Detected aborted journal [ 138.571649][ T5619] EXT4-fs (sda1): Remounting filesystem read-only [ 138.593533][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 138.612745][ T5620] EXT4-fs (sda1): Remounting filesystem read-only [ 139.095880][ T5636] loop1: detected capacity change from 0 to 128 [ 139.128176][ T5636] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 140.448371][ T25] audit: type=1800 audit(1785862720.541:72): pid=5636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.399" name="file1" dev="loop1" ino=94 res=0 errno=0 [ 140.599268][ T5652] loop2: detected capacity change from 0 to 1024 [ 140.671443][ T5652] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 140.686673][ T5652] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 140.712213][ T5654] loop0: detected capacity change from 0 to 2048 [ 140.781218][ T5663] netlink: 277 bytes leftover after parsing attributes in process `syz.1.405'. [ 140.821630][ T5652] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,dioread_nolock,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 140.895856][ T5665] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.954566][ T5669] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 140.965385][ T5669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.982390][ T5669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.003092][ T5669] device bridge_slave_0 left promiscuous mode [ 141.029843][ T5669] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.054368][ T5669] device bridge_slave_1 left promiscuous mode [ 141.060781][ T5669] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.143806][ T5669] bond0: (slave bond_slave_0): Releasing backup interface [ 141.189646][ T5669] bond0: (slave bond_slave_1): Releasing backup interface [ 141.300912][ T5669] team0: Port device team_slave_0 removed [ 141.330779][ T5669] team0: Port device team_slave_1 removed [ 141.343790][ T5669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.351395][ T5669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.390166][ T5669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.434085][ T5669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.479737][ T5671] team0: Mode changed to "roundrobin" [ 141.502289][ T5679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.410'. [ 141.663043][ T5698] device syzkaller0 entered promiscuous mode [ 142.713386][ T5720] EXT4-fs error: 123 callbacks suppressed [ 142.713400][ T5720] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.427: Detected aborted journal [ 142.726029][ T5721] xt_hashlimit: size too large, truncated to 1048576 [ 142.753224][ T5719] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.426: Detected aborted journal [ 142.758438][ T5723] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.428: Detected aborted journal [ 142.760414][ T5720] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.427: Detected aborted journal [ 142.781495][ T5721] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 142.804353][ T5719] EXT4-fs: 105 callbacks suppressed [ 142.804368][ T5719] EXT4-fs (sda1): Remounting filesystem read-only [ 142.804400][ T5723] EXT4-fs (sda1): Remounting filesystem read-only [ 142.828544][ T5720] EXT4-fs (sda1): Remounting filesystem read-only [ 142.852413][ T5725] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.429: Detected aborted journal [ 142.869811][ T5725] EXT4-fs (sda1): Remounting filesystem read-only [ 142.881120][ T5725] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.429: Detected aborted journal [ 142.917221][ T5725] EXT4-fs (sda1): Remounting filesystem read-only [ 142.942322][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 142.957424][ T5723] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.428: Detected aborted journal [ 142.975165][ T5725] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.429: Detected aborted journal [ 142.996450][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 143.005439][ T5720] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.427: Detected aborted journal [ 143.016402][ T5720] EXT4-fs (sda1): Remounting filesystem read-only [ 143.055219][ T5720] EXT4-fs (sda1): Remounting filesystem read-only [ 143.063669][ T5725] EXT4-fs (sda1): Remounting filesystem read-only [ 143.070285][ T5723] EXT4-fs (sda1): Remounting filesystem read-only [ 147.079995][ T5816] ODEBUG: Out of memory. ODEBUG disabled [ 147.749999][ T5819] EXT4-fs error: 97 callbacks suppressed [ 147.750015][ T5819] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.452: Detected aborted journal [ 147.782606][ T5820] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.451: Detected aborted journal [ 147.802441][ T5819] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.452: Detected aborted journal [ 147.819156][ T5820] EXT4-fs: 73 callbacks suppressed [ 147.819175][ T5820] EXT4-fs (sda1): Remounting filesystem read-only [ 147.831354][ T5819] EXT4-fs (sda1): Remounting filesystem read-only [ 147.847325][ T5820] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.451: Detected aborted journal [ 147.865075][ T5820] EXT4-fs (sda1): Remounting filesystem read-only [ 148.048079][ T5820] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.451: Detected aborted journal [ 148.059037][ T5820] EXT4-fs (sda1): Remounting filesystem read-only [ 148.065586][ T5820] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.451: Detected aborted journal [ 148.076774][ T5820] EXT4-fs (sda1): Remounting filesystem read-only [ 148.083855][ T5820] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.451: Detected aborted journal [ 148.095235][ T5820] EXT4-fs (sda1): Remounting filesystem read-only [ 148.102120][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 148.114598][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 148.121130][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 148.132416][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 148.136700][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 148.208493][ T5820] EXT4-fs (sda1): Remounting filesystem read-only [ 148.215243][ T5820] EXT4-fs (sda1): Remounting filesystem read-only [ 148.861687][ T5830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'. [ 151.015237][ T5851] vfio-pci: probe of 0000:00:00.0 failed with error -22 [ 151.096516][ T5857] xt_CONNSECMARK: invalid mode: 0 [ 151.163291][ T5859] loop2: detected capacity change from 0 to 256 [ 152.435590][ T5886] netlink: 'syz.1.472': attribute type 1 has an invalid length. [ 152.491651][ T5886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.596991][ T5886] device bond1 entered promiscuous mode [ 152.635426][ T5892] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 152.674100][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.474'. [ 152.686721][ T5893] device macvlan2 entered promiscuous mode [ 152.697125][ T5893] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 152.751362][ T5900] netlink: 32 bytes leftover after parsing attributes in process `syz.0.474'. [ 152.836426][ T5902] EXT4-fs error: 76 callbacks suppressed [ 152.836518][ T5902] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1267: comm kworker/u4:2: reading directory lblock 0 [ 152.878600][ T5897] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.475: Detected aborted journal [ 153.026297][ T5897] EXT4-fs: 58 callbacks suppressed [ 153.026438][ T5897] EXT4-fs (sda1): Remounting filesystem read-only [ 153.094943][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 153.184835][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 153.208557][ T5895] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.474: Detected aborted journal [ 153.229759][ T5904] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1267: comm kworker/u4:5: reading directory lblock 0 [ 153.247786][ T5895] EXT4-fs (sda1): Remounting filesystem read-only [ 153.255405][ T5895] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.474: Detected aborted journal [ 153.267272][ T5895] EXT4-fs (sda1): Remounting filesystem read-only [ 153.278697][ T5895] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.474: Detected aborted journal [ 153.294699][ T5895] EXT4-fs (sda1): Remounting filesystem read-only [ 153.624271][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 153.928421][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 153.935336][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 153.936316][ T5907] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.476: Detected aborted journal [ 153.953375][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 153.975510][ T5907] EXT4-fs (sda1): Remounting filesystem read-only [ 153.993386][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 154.000153][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 154.748961][ T5929] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 154.780418][ T5917] loop0: detected capacity change from 0 to 8192 [ 155.560497][ T5933] ipt_CLUSTERIP: Please specify destination IP [ 156.821357][ T5969] netlink: 'syz.4.490': attribute type 1 has an invalid length. [ 156.952285][ T5969] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.993003][ T5973] bond1: (slave geneve2): making interface the new active one [ 157.003099][ T5973] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 157.021400][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 157.945339][ T5982] EXT4-fs error: 122 callbacks suppressed [ 157.945376][ T5982] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.493: Detected aborted journal [ 158.253352][ T5982] EXT4-fs: 90 callbacks suppressed [ 158.253369][ T5982] EXT4-fs (sda1): Remounting filesystem read-only [ 158.305347][ T5982] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.493: Detected aborted journal [ 158.308220][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 158.328793][ T5982] EXT4-fs (sda1): Remounting filesystem read-only [ 158.344233][ T5982] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.493: Detected aborted journal [ 158.363327][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 158.369095][ T5982] EXT4-fs (sda1): Remounting filesystem read-only [ 158.377656][ T5982] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.493: Detected aborted journal [ 158.380750][ T6015] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.496: Detected aborted journal [ 158.398934][ T5982] EXT4-fs (sda1): Remounting filesystem read-only [ 158.423579][ T5982] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.493: Detected aborted journal [ 158.425245][ T6015] EXT4-fs (sda1): Remounting filesystem read-only [ 158.436696][ T5982] EXT4-fs (sda1): Remounting filesystem read-only [ 158.459688][ T6015] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.496: Detected aborted journal [ 158.476533][ T5982] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.493: Detected aborted journal [ 158.498471][ T6015] EXT4-fs (sda1): Remounting filesystem read-only [ 158.500667][ T5982] EXT4-fs (sda1): Remounting filesystem read-only [ 158.524119][ T5982] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.493: Detected aborted journal [ 158.528516][ T6016] loop1: detected capacity change from 0 to 2048 [ 158.540622][ T5982] EXT4-fs (sda1): Remounting filesystem read-only [ 158.621610][ T6016] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,block_validity,nobarrier,,errors=continue. Quota mode: writeback. [ 158.641783][ T6016] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.696262][ T5990] loop2: detected capacity change from 0 to 32768 [ 158.991404][ T6021] CIFS: Attempting to mount \\127.0.0.1\share [ 159.864128][ T6021] CIFS: VFS: Error connecting to socket. Aborting operation. [ 159.892378][ T6021] CIFS: VFS: cifs_mount failed w/return code = -4 [ 160.961680][ T5983] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.971483][ T5983] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.980822][ T5983] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.990572][ T5983] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.076283][ T5983] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 161.085371][ T5983] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 161.094988][ T5983] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 161.103820][ T5983] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 162.384556][ T6059] loop2: detected capacity change from 0 to 128 [ 162.420646][ T6059] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 163.170557][ T6080] EXT4-fs error: 107 callbacks suppressed [ 163.170569][ T6080] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.515: Detected aborted journal [ 163.187364][ T6080] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.515: Detected aborted journal [ 163.221061][ T6080] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.515: Detected aborted journal [ 163.232088][ T6080] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.515: Detected aborted journal [ 163.247703][ T6080] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.515: Detected aborted journal [ 163.262764][ T6080] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.515: Detected aborted journal [ 163.273722][ T6080] EXT4-fs: 98 callbacks suppressed [ 163.273736][ T6080] EXT4-fs (sda1): Remounting filesystem read-only [ 163.300313][ T6056] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.507: Detected aborted journal [ 163.315997][ T6056] EXT4-fs (sda1): Remounting filesystem read-only [ 163.322908][ T6056] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.507: Detected aborted journal [ 163.351974][ T6056] EXT4-fs (sda1): Remounting filesystem read-only [ 163.380208][ T6080] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.515: Detected aborted journal [ 163.384302][ T6056] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.507: Detected aborted journal [ 163.391211][ T6080] EXT4-fs (sda1): Remounting filesystem read-only [ 163.401978][ T6056] EXT4-fs (sda1): Remounting filesystem read-only [ 163.439334][ T6080] EXT4-fs (sda1): Remounting filesystem read-only [ 163.442745][ T6056] EXT4-fs (sda1): Remounting filesystem read-only [ 163.452665][ T6060] EXT4-fs (sda1): Remounting filesystem read-only [ 163.453499][ T6056] EXT4-fs (sda1): Remounting filesystem read-only [ 163.459929][ T6078] EXT4-fs (sda1): Remounting filesystem read-only [ 163.472117][ T25] audit: type=1800 audit(1785862743.561:73): pid=6059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.507" name="file1" dev="loop2" ino=94 res=0 errno=0 [ 163.662920][ T6095] netlink: 'syz.3.522': attribute type 1 has an invalid length. [ 163.731114][ T6095] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.768527][ T6096] loop2: detected capacity change from 0 to 4096 [ 163.806229][ T6096] ntfs: (device loop2): parse_options(): The disable_sparse option requires a boolean argument. [ 163.860649][ T6095] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.870151][ T6095] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.883474][ T6095] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.892202][ T6095] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.903781][ T6095] bond1: (slave geneve3): making interface the new active one [ 163.913618][ T6095] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 163.922419][ T6102] netlink: 40 bytes leftover after parsing attributes in process `syz.1.525'. [ 163.952598][ T6102] netlink: 40 bytes leftover after parsing attributes in process `syz.1.525'. [ 163.991397][ T6102] netlink: 40 bytes leftover after parsing attributes in process `syz.1.525'. [ 164.007237][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 164.382552][ T25] audit: type=1326 audit(1785862744.471:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.531" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62da2b1019 code=0x7fc00000 [ 164.427149][ T25] audit: type=1326 audit(1785862744.501:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.531" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f62da2b1019 code=0x7fc00000 [ 164.587461][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.594901][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.924855][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.960173][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.094066][ T25] audit: type=1326 audit(1785862745.191:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.531" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62da2b1019 code=0x7fc00000 [ 165.136991][ T25] audit: type=1326 audit(1785862745.191:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.531" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f62da2b1019 code=0x7fc00000 [ 165.161355][ T25] audit: type=1326 audit(1785862745.191:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.531" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62da2b1019 code=0x7fc00000 [ 165.185860][ T25] audit: type=1326 audit(1785862745.191:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.531" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62da2b1019 code=0x7fc00000 [ 165.252967][ T25] audit: type=1326 audit(1785862745.191:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.531" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62da2b1019 code=0x7fc00000 [ 165.282688][ T25] audit: type=1326 audit(1785862745.191:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.531" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62da2b1019 code=0x7fc00000 [ 165.518130][ T6118] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.528130][ T6118] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.539913][ T6118] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.549176][ T6118] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.567874][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.530'. [ 165.618934][ T6126] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 165.634507][ T6126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.642937][ T6126] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.656792][ T6126] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.673018][ T6128] netlink: 'syz.2.532': attribute type 4 has an invalid length. [ 165.695281][ T6131] netlink: 'syz.2.532': attribute type 4 has an invalid length. [ 165.721765][ T6153] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 165.726111][ T6151] device macvtap1 entered promiscuous mode [ 165.760982][ T6152] device macvtap2 entered promiscuous mode [ 165.802115][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.538'. [ 165.894113][ T6158] sctp: [Deprecated]: syz.2.539 (pid 6158) Use of int in max_burst socket option. [ 165.894113][ T6158] Use struct sctp_assoc_value instead [ 165.991317][ T6158] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 166.002261][ T6158] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 166.420026][ T6177] netlink: 20 bytes leftover after parsing attributes in process `syz.4.547'. [ 166.464321][ T6172] loop0: detected capacity change from 0 to 128 [ 166.495304][ T6172] hpfs: bad mount options. [ 166.892370][ T6202] netlink: 40 bytes leftover after parsing attributes in process `syz.0.564'. [ 166.901433][ T6205] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 65, id = 0 [ 167.043177][ T6213] batman_adv: batadv0: Adding interface: dummy0 [ 167.052470][ T6213] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.084297][ T6213] batman_adv: batadv0: Interface activated: dummy0 [ 167.132346][ T6213] batadv0: mtu less than device minimum [ 167.158634][ T6213] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.171056][ T6213] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.183471][ T6213] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.195812][ T6213] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.208183][ T6213] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.220576][ T6213] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.232307][ T6213] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.244145][ T6213] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 168.391996][ T6235] EXT4-fs error: 262 callbacks suppressed [ 168.392010][ T6235] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.565: Detected aborted journal [ 168.403967][ T6228] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.562: Detected aborted journal [ 168.408816][ T6235] EXT4-fs: 244 callbacks suppressed [ 168.408826][ T6235] EXT4-fs (sda1): Remounting filesystem read-only [ 168.420813][ T6228] EXT4-fs (sda1): Remounting filesystem read-only [ 168.440051][ T6239] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.566: Detected aborted journal [ 168.504469][ T6239] EXT4-fs (sda1): Remounting filesystem read-only [ 168.529084][ T6239] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.566: Detected aborted journal [ 168.542420][ T6241] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.567: Detected aborted journal [ 168.568703][ T6242] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.570: Detected aborted journal [ 168.582359][ T6243] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.569: Detected aborted journal [ 168.585645][ T6241] EXT4-fs (sda1): Remounting filesystem read-only [ 168.593536][ T6239] EXT4-fs (sda1): Remounting filesystem read-only [ 168.606446][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 168.618625][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 168.625450][ T6242] EXT4-fs (sda1): Remounting filesystem read-only [ 168.632024][ T6243] EXT4-fs (sda1): Remounting filesystem read-only [ 168.639834][ T6239] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.566: Detected aborted journal [ 168.639842][ T6241] EXT4-fs (sda1): Remounting filesystem read-only [ 168.652940][ T6241] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.567: Detected aborted journal [ 168.660745][ T6242] EXT4-fs (sda1): Remounting filesystem read-only [ 168.770623][ T6248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.569'. [ 168.779921][ T6248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.569'. [ 168.805219][ T6248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.569'. [ 168.970353][ T6248] __nla_validate_parse: 1 callbacks suppressed [ 168.970391][ T6248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.569'. [ 168.986012][ T6248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.569'. [ 169.047599][ T6248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.569'. [ 169.056785][ T6248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.569'. [ 169.180682][ T6248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.569'. [ 169.189652][ T6248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.569'. [ 169.212589][ T6248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.569'. [ 169.221589][ T6248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.569'. [ 169.243686][ T6248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.569'. [ 169.252605][ T6248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.569'. [ 169.462389][ T6248] tipc: Resetting bearer [ 169.624244][ T6275] sctp: [Deprecated]: syz.2.576 (pid 6275) Use of int in max_burst socket option. [ 169.624244][ T6275] Use struct sctp_assoc_value instead [ 169.734721][ T6279] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 173.085277][ T6322] overlayfs: failed to clone upperpath [ 173.491130][ T6336] EXT4-fs error: 144 callbacks suppressed [ 173.491168][ T6336] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.598: Detected aborted journal [ 173.511276][ T6336] EXT4-fs: 130 callbacks suppressed [ 173.511310][ T6336] EXT4-fs (sda1): Remounting filesystem read-only [ 173.547766][ T6337] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.599: Detected aborted journal [ 173.559730][ T6337] EXT4-fs (sda1): Remounting filesystem read-only [ 173.587732][ T6336] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.598: Detected aborted journal [ 173.599495][ T6336] EXT4-fs (sda1): Remounting filesystem read-only [ 173.612941][ T6336] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.598: Detected aborted journal [ 173.631648][ T6336] EXT4-fs (sda1): Remounting filesystem read-only [ 173.646278][ T6336] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.598: Detected aborted journal [ 173.661762][ T6336] EXT4-fs (sda1): Remounting filesystem read-only [ 173.677541][ T6336] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.598: Detected aborted journal [ 173.720678][ T6336] EXT4-fs (sda1): Remounting filesystem read-only [ 173.734683][ T6337] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.599: Detected aborted journal [ 173.759566][ T6336] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.598: Detected aborted journal [ 173.776772][ T6321] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.591: Detected aborted journal [ 173.780875][ T6336] EXT4-fs (sda1): Remounting filesystem read-only [ 173.787990][ T6321] EXT4-fs (sda1): Remounting filesystem read-only [ 173.790735][ T6342] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.608: Detected aborted journal [ 173.812184][ T6342] EXT4-fs (sda1): Remounting filesystem read-only [ 173.818193][ T6337] EXT4-fs (sda1): Remounting filesystem read-only [ 174.149040][ T6339] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 175.348736][ T6369] __nla_validate_parse: 22 callbacks suppressed [ 175.348754][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.607'. [ 175.364537][ T6369] netlink: 'syz.1.607': attribute type 5 has an invalid length. [ 175.372931][ T6369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.607'. [ 175.389673][ T6369] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 175.407041][ T6369] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 175.425197][ T6369] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 175.443010][ T6369] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 175.453650][ T1344] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 175.470504][ T6369] device geneve3 entered promiscuous mode [ 175.490168][ T6374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.607'. [ 175.501603][ T6374] netlink: 'syz.1.607': attribute type 15 has an invalid length. [ 175.528194][ T6374] device vxlan0 entered promiscuous mode [ 177.027507][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.618'. [ 177.193576][ T1344] usb 3-1: unable to get BOS descriptor or descriptor too short [ 177.279622][ T6409] Cannot find set identified by id 1 to match [ 177.336775][ T1344] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 177.379063][ T1344] usb 3-1: can't read configurations, error -71 [ 178.211186][ T6426] device syzkaller0 entered promiscuous mode [ 178.232563][ T6428] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.262558][ T6428] device bridge_slave_1 left promiscuous mode [ 178.270233][ T6428] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.307170][ T6428] bond0: (slave bond_slave_0): Releasing backup interface [ 178.327997][ T6428] bond0: (slave bond_slave_1): Releasing backup interface [ 178.365519][ T6428] team0: Port device team_slave_0 removed [ 178.391319][ T6428] team0: Port device team_slave_1 removed [ 178.410456][ T6428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.424296][ T6428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.444300][ T6428] device vlan3 left promiscuous mode [ 178.449631][ T6428] device bridge_slave_0 left promiscuous mode [ 178.487643][ T6428] bridge0: port 3(vlan3) entered disabled state [ 178.498329][ T6376] EXT4-fs error: 140 callbacks suppressed [ 178.498346][ T6376] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.610: Detected aborted journal [ 178.501970][ T6434] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.632: Detected aborted journal [ 178.509877][ T6376] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.610: Detected aborted journal [ 178.521164][ T6434] EXT4-fs: 134 callbacks suppressed [ 178.521176][ T6434] EXT4-fs (sda1): Remounting filesystem read-only [ 178.529909][ T6376] EXT4-fs (sda1): Remounting filesystem read-only [ 178.544262][ T6427] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.630: Detected aborted journal [ 178.574329][ T6434] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.632: Detected aborted journal [ 178.590367][ T6434] EXT4-fs (sda1): Remounting filesystem read-only [ 178.597858][ T6434] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.632: Detected aborted journal [ 178.601162][ T6431] team0: Port device xfrm0 added [ 178.614231][ T6434] EXT4-fs (sda1): Remounting filesystem read-only [ 178.633377][ T6427] EXT4-fs (sda1): Remounting filesystem read-only [ 178.650340][ T6440] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.635: Detected aborted journal [ 178.671671][ T6433] tipc: Started in network mode [ 178.676742][ T6433] tipc: Node identity 72116555b885, cluster identity 4711 [ 178.678515][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 178.684258][ T6440] EXT4-fs (sda1): Remounting filesystem read-only [ 178.702941][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 178.703941][ T6427] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.630: Detected aborted journal [ 178.716550][ T6441] EXT4-fs (sda1): Remounting filesystem read-only [ 178.728301][ T6440] EXT4-fs (sda1): Remounting filesystem read-only [ 178.730006][ T6433] tipc: Enabled bearer , priority 0 [ 178.738231][ T6427] EXT4-fs (sda1): Remounting filesystem read-only [ 178.755113][ T6441] EXT4-fs (sda1): Remounting filesystem read-only [ 178.791877][ T6442] netlink: 'syz.4.635': attribute type 7 has an invalid length. [ 178.828561][ T6442] netlink: 'syz.4.635': attribute type 7 has an invalid length. [ 179.793292][ T4176] tipc: Node number set to 3398722901 [ 179.820114][ T6463] loop2: detected capacity change from 0 to 512 [ 179.857969][ T6463] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 179.924019][ T6463] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 179.943442][ T25] kauditd_printk_skb: 62 callbacks suppressed [ 179.943454][ T25] audit: type=1800 audit(1785862760.041:144): pid=6454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.637" name="bus" dev="ramfs" ino=40393 res=0 errno=0 [ 180.052582][ T6463] EXT4-fs (loop2): 1 truncate cleaned up [ 180.060869][ T6463] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 180.777367][ T6463] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.640: Invalid inode table block 0 in block_group 0 [ 180.803386][ T6138] Bluetooth: hci1: command 0x0406 tx timeout [ 180.812817][ T6138] Bluetooth: hci0: command 0x0406 tx timeout [ 180.976794][ T6138] Bluetooth: hci2: command 0x0406 tx timeout [ 180.982979][ T6138] Bluetooth: hci3: command 0x0406 tx timeout [ 181.943769][ T6463] EXT4-fs (loop2): Remounting filesystem read-only [ 183.707049][ T6493] EXT4-fs error: 72 callbacks suppressed [ 183.707063][ T6493] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.651: Detected aborted journal [ 183.736549][ T6493] EXT4-fs: 57 callbacks suppressed [ 183.736566][ T6493] EXT4-fs (sda1): Remounting filesystem read-only [ 183.894075][ T6493] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.651: Detected aborted journal [ 183.901876][ T6495] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.653: Detected aborted journal [ 183.925665][ T6496] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.652: Detected aborted journal [ 183.928826][ T6493] EXT4-fs (sda1): Remounting filesystem read-only [ 183.950634][ T6497] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.650: Detected aborted journal [ 183.963593][ T6496] EXT4-fs (sda1): Remounting filesystem read-only [ 183.970467][ T6495] EXT4-fs (sda1): Remounting filesystem read-only [ 183.973091][ T6497] EXT4-fs (sda1): Remounting filesystem read-only [ 183.997107][ T6496] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.652: Detected aborted journal [ 184.002296][ T6497] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.650: Detected aborted journal [ 184.022393][ T6495] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.653: Detected aborted journal [ 184.044278][ T6496] EXT4-fs (sda1): Remounting filesystem read-only [ 184.059684][ T6497] EXT4-fs (sda1): Remounting filesystem read-only [ 184.063810][ T6495] EXT4-fs (sda1): Remounting filesystem read-only [ 184.072298][ T6501] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.654: Detected aborted journal [ 184.073764][ T6495] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.653: Detected aborted journal [ 184.084075][ T6496] EXT4-fs (sda1): Remounting filesystem read-only [ 184.106641][ T6501] EXT4-fs (sda1): Remounting filesystem read-only [ 184.119081][ T6498] device syzkaller0 entered promiscuous mode [ 187.843723][ T25] audit: type=1800 audit(1785862767.911:145): pid=6523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.658" name="bus" dev="ramfs" ino=40532 res=0 errno=0 [ 187.891573][ T6540] netlink: 'syz.3.666': attribute type 21 has an invalid length. [ 187.953553][ T6540] netlink: 156 bytes leftover after parsing attributes in process `syz.3.666'. [ 189.006524][ T6543] loop0: detected capacity change from 0 to 32768 [ 189.023313][ T6536] EXT4-fs error: 77 callbacks suppressed [ 189.023346][ T6536] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.664: Detected aborted journal [ 189.039963][ T6536] EXT4-fs: 69 callbacks suppressed [ 189.039994][ T6536] EXT4-fs (sda1): Remounting filesystem read-only [ 189.053660][ T6536] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.664: Detected aborted journal [ 189.064729][ T6536] EXT4-fs (sda1): Remounting filesystem read-only [ 189.074732][ T6536] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.664: Detected aborted journal [ 189.085747][ T6536] EXT4-fs (sda1): Remounting filesystem read-only [ 189.915325][ T6544] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.667: Detected aborted journal [ 189.926746][ T6544] EXT4-fs (sda1): Remounting filesystem read-only [ 189.931833][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 189.946997][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 189.958948][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 189.970729][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 189.982825][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0 [ 189.995031][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1480: comm udevd: reading directory lblock 0 [ 190.050630][ T6543] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.668 (6543) [ 190.116938][ T6547] EXT4-fs (sda1): Remounting filesystem read-only [ 190.183499][ T6543] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 190.192321][ T6543] BTRFS info (device loop0): use zlib compression, level 3 [ 190.195870][ T6547] EXT4-fs (sda1): Remounting filesystem read-only [ 190.199717][ T6543] BTRFS info (device loop0): turning on sync discard [ 190.212660][ T6543] BTRFS info (device loop0): using free space tree [ 190.219251][ T6543] BTRFS info (device loop0): has skinny extents [ 190.598971][ T6553] EXT4-fs (sda1): Remounting filesystem read-only [ 190.608145][ T6554] EXT4-fs (sda1): Remounting filesystem read-only [ 190.623031][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 190.636073][ T6553] EXT4-fs (sda1): Remounting filesystem read-only [ 190.682949][ T6563] udevd[6563]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 192.979254][ T6543] BTRFS error (device loop0): open_ctree failed: -12 [ 193.377950][ T4554] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4554) [ 193.626578][ T6599] udevd[6599]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 194.106103][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.128289][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.156818][ T4171] EXT4-fs error: 35 callbacks suppressed [ 194.156836][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 194.201157][ T6598] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.675: Detected aborted journal [ 194.215746][ T6584] netlink: 40 bytes leftover after parsing attributes in process `syz.4.674'. [ 194.243654][ T4171] EXT4-fs: 18 callbacks suppressed [ 194.243670][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 194.256306][ T6598] EXT4-fs (sda1): Remounting filesystem read-only [ 194.290836][ T6603] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.676: Detected aborted journal [ 194.316679][ T6604] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.678: Detected aborted journal [ 194.332043][ T6605] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.677: Detected aborted journal [ 194.349460][ T6604] EXT4-fs (sda1): Remounting filesystem read-only [ 194.350466][ T6606] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.679: Detected aborted journal [ 194.372579][ T6603] EXT4-fs (sda1): Remounting filesystem read-only [ 194.384935][ T6604] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.678: Detected aborted journal [ 194.389769][ T6603] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.676: Detected aborted journal [ 194.418652][ T6606] EXT4-fs (sda1): Remounting filesystem read-only [ 194.433409][ T6605] EXT4-fs (sda1): Remounting filesystem read-only [ 194.446202][ T6606] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.679: Detected aborted journal [ 194.462854][ T6605] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.677: Detected aborted journal [ 194.470018][ T6604] EXT4-fs (sda1): Remounting filesystem read-only [ 194.474370][ T6603] EXT4-fs (sda1): Remounting filesystem read-only [ 194.493575][ T6606] EXT4-fs (sda1): Remounting filesystem read-only [ 194.500116][ T6605] EXT4-fs (sda1): Remounting filesystem read-only [ 195.657053][ T6621] binder: BC_ACQUIRE_RESULT not supported [ 195.662840][ T6621] binder: 6620:6621 ioctl c0306201 200000000240 returned -22 [ 195.673754][ T6621] loop2: detected capacity change from 0 to 128 [ 197.716333][ T6654] netlink: 40 bytes leftover after parsing attributes in process `syz.3.690'. [ 198.774126][ T25] audit: type=1800 audit(1785862778.871:146): pid=6643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.688" name="bus" dev="ramfs" ino=40666 res=0 errno=0 [ 198.812283][ T6678] netlink: 48 bytes leftover after parsing attributes in process `syz.1.709'. [ 199.345531][ T4171] EXT4-fs error: 141 callbacks suppressed [ 199.345549][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 199.387078][ T4171] EXT4-fs: 131 callbacks suppressed [ 199.387093][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 199.418314][ T6683] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.700: Detected aborted journal [ 199.436359][ T6684] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.702: Detected aborted journal [ 199.444475][ T6685] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.703: Detected aborted journal [ 199.457063][ T6684] EXT4-fs (sda1): Remounting filesystem read-only [ 199.464292][ T6683] EXT4-fs (sda1): Remounting filesystem read-only [ 199.471097][ T6685] EXT4-fs (sda1): Remounting filesystem read-only [ 199.486788][ T6684] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.702: Detected aborted journal [ 199.486971][ T6685] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.703: Detected aborted journal [ 199.512124][ T6684] EXT4-fs (sda1): Remounting filesystem read-only [ 199.515343][ T6683] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.700: Detected aborted journal [ 199.532687][ T6683] EXT4-fs (sda1): Remounting filesystem read-only [ 199.678636][ T6679] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.698: Detected aborted journal [ 199.688468][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 199.700225][ T6690] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.704: Detected aborted journal [ 199.711769][ T6685] EXT4-fs (sda1): Remounting filesystem read-only [ 199.712595][ T6683] EXT4-fs (sda1): Remounting filesystem read-only [ 199.758039][ T6683] EXT4-fs (sda1): Remounting filesystem read-only [ 199.764724][ T6683] EXT4-fs (sda1): Remounting filesystem read-only [ 200.937083][ T6707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.710'. [ 201.375137][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 201.446769][ T6719] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 201.482234][ T6719] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 203.951671][ T6749] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 204.789875][ T6756] EXT4-fs error: 103 callbacks suppressed [ 204.790855][ T6756] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.724: Detected aborted journal [ 204.804876][ T6757] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.725: Detected aborted journal [ 204.860111][ T6758] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.726: Detected aborted journal [ 204.905105][ T6757] EXT4-fs: 89 callbacks suppressed [ 204.905120][ T6757] EXT4-fs (sda1): Remounting filesystem read-only [ 204.911747][ T6758] EXT4-fs (sda1): Remounting filesystem read-only [ 204.923411][ T6756] EXT4-fs (sda1): Remounting filesystem read-only [ 204.932649][ T6756] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.724: Detected aborted journal [ 204.940053][ T6757] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.725: Detected aborted journal [ 204.978196][ T6758] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.726: Detected aborted journal [ 205.003471][ T6756] EXT4-fs (sda1): Remounting filesystem read-only [ 205.009700][ T6757] EXT4-fs (sda1): Remounting filesystem read-only [ 205.031295][ T6757] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.725: Detected aborted journal [ 205.063044][ T6757] EXT4-fs (sda1): Remounting filesystem read-only [ 205.069773][ T6757] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.725: Detected aborted journal [ 205.081002][ T6758] EXT4-fs (sda1): Remounting filesystem read-only [ 205.133338][ T6757] EXT4-fs (sda1): Remounting filesystem read-only [ 205.304372][ T6758] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.726: Detected aborted journal [ 205.315359][ T6758] EXT4-fs (sda1): Remounting filesystem read-only [ 205.354065][ T6758] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.726: Detected aborted journal [ 205.365179][ T6758] EXT4-fs (sda1): Remounting filesystem read-only [ 205.423854][ T6766] netlink: 20 bytes leftover after parsing attributes in process `syz.1.725'. [ 206.961245][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.730'. [ 207.073360][ T6781] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 207.534859][ T6785] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 207.738856][ T6785] device bridge_slave_0 left promiscuous mode [ 207.906009][ T6785] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.345161][ T6785] device bridge_slave_1 left promiscuous mode [ 208.354806][ T6785] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.944965][ T6785] bond0: (slave bond_slave_0): Releasing backup interface [ 208.954357][ T6785] bond0: (slave bond_slave_1): Releasing backup interface [ 209.693030][ T6785] team0: Port device team_slave_0 removed [ 209.711957][ T6785] team0: Port device team_slave_1 removed [ 209.721100][ T6785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.732464][ T6785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.742463][ T6785] team0: Port device netdevsim0 removed [ 209.749184][ T6785] bond1: (slave geneve2): Releasing active interface [ 209.759121][ T6791] team0: Port device xfrm0 added [ 209.769050][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.814192][ T6804] EXT4-fs error: 72 callbacks suppressed [ 209.814211][ T6804] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.749: Detected aborted journal [ 209.826869][ T6799] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.735: Detected aborted journal [ 209.842766][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 209.863806][ T6803] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.748: Detected aborted journal [ 209.887062][ T6807] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.736: Detected aborted journal [ 209.910752][ T6808] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.739: Detected aborted journal [ 209.967513][ T6804] EXT4-fs: 69 callbacks suppressed [ 209.967530][ T6804] EXT4-fs (sda1): Remounting filesystem read-only [ 209.979987][ T6807] EXT4-fs (sda1): Remounting filesystem read-only [ 209.995994][ T6809] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.737: Detected aborted journal [ 210.012425][ T6808] EXT4-fs (sda1): Remounting filesystem read-only [ 210.031941][ T6807] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.736: Detected aborted journal [ 210.050240][ T6803] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.748: Detected aborted journal [ 210.054365][ T6809] EXT4-fs (sda1): Remounting filesystem read-only [ 210.061217][ T6803] EXT4-fs (sda1): Remounting filesystem read-only [ 210.067767][ T6807] EXT4-fs (sda1): Remounting filesystem read-only [ 210.081557][ T6807] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.736: Detected aborted journal [ 210.093039][ T6807] EXT4-fs (sda1): Remounting filesystem read-only [ 210.105691][ T6803] EXT4-fs (sda1): Remounting filesystem read-only [ 210.142163][ T6809] EXT4-fs (sda1): Remounting filesystem read-only [ 210.155855][ T6809] EXT4-fs (sda1): Remounting filesystem read-only [ 214.446080][ T6854] cgroup: No subsys list or none specified [ 214.807039][ T6849] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 214.839216][ T6857] EXT4-fs error: 63 callbacks suppressed [ 214.839232][ T6857] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.754: Detected aborted journal [ 214.849986][ T6849] bond1: (slave macvlan2): Enslaving as a backup interface with a down link [ 214.865048][ T6860] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.755: Detected aborted journal [ 214.876512][ T6859] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 214.895409][ T6857] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.754: Detected aborted journal [ 214.908428][ T6860] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.755: Detected aborted journal [ 214.928097][ T6859] bond1: (slave veth0_to_bond): Releasing active interface [ 214.942206][ T6860] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.755: Detected aborted journal [ 214.945274][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 214.954170][ T6860] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.755: Detected aborted journal [ 214.976570][ T6857] EXT4-fs: 58 callbacks suppressed [ 214.976584][ T6857] EXT4-fs (sda1): Remounting filesystem read-only [ 214.980167][ T6866] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.756: Detected aborted journal [ 214.982736][ T6860] EXT4-fs (sda1): Remounting filesystem read-only [ 215.025348][ T6857] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.754: Detected aborted journal [ 215.036754][ T6866] EXT4-fs (sda1): Remounting filesystem read-only [ 215.046836][ T6859] team0: Port device xfrm0 removed [ 215.048745][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 215.066133][ T6857] EXT4-fs (sda1): Remounting filesystem read-only [ 215.103798][ T6857] EXT4-fs (sda1): Remounting filesystem read-only [ 215.105547][ T6860] EXT4-fs (sda1): Remounting filesystem read-only [ 215.121506][ T6866] EXT4-fs (sda1): Remounting filesystem read-only [ 215.133724][ T6857] EXT4-fs (sda1): Remounting filesystem read-only [ 215.142217][ T6869] EXT4-fs (sda1): Remounting filesystem read-only [ 215.148991][ T6866] EXT4-fs (sda1): Remounting filesystem read-only [ 215.192328][ T6859] team0: Mode changed to "roundrobin" [ 215.225989][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.754'. [ 215.248165][ T6859] tipc: Disabling bearer [ 215.561632][ T6880] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 215.574840][ T6880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.760'. [ 216.205912][ T6895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.766'. [ 216.224878][ T6895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'. [ 216.240626][ T6895] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.250257][ T6895] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.259040][ T6895] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.267780][ T6895] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.286801][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.764'. [ 216.309436][ T6895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.766'. [ 216.319180][ T6895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'. [ 216.418273][ T6903] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 217.545073][ T6917] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 217.553815][ T6917] batman_adv: batadv0: Interface deactivated: dummy0 [ 217.560691][ T6917] batman_adv: batadv0: Removing interface: dummy0 [ 217.572956][ T6917] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 218.192623][ T6927] loop2: detected capacity change from 0 to 1764 [ 218.925592][ T6917] device bridge_slave_0 left promiscuous mode [ 218.956840][ T6917] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.084076][ T6917] device bridge_slave_1 left promiscuous mode [ 219.090307][ T6917] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.105480][ T6917] bond0: (slave bond_slave_0): Releasing backup interface [ 219.120347][ T6917] bond0: (slave bond_slave_1): Releasing backup interface [ 219.166424][ T6917] team0: Port device team_slave_0 removed [ 219.190121][ T6917] team0: Port device team_slave_1 removed [ 219.196963][ T6917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.217974][ T6917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.229036][ T6917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.237090][ T6917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.265825][ T6928] team0: Mode changed to "roundrobin" [ 219.302266][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.772'. [ 219.427797][ T6951] netlink: 'syz.2.779': attribute type 4 has an invalid length. [ 219.491305][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.781'. [ 219.508185][ T6953] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 219.520408][ T6955] netlink: 'syz.2.779': attribute type 4 has an invalid length. [ 220.187093][ T6916] EXT4-fs error: 137 callbacks suppressed [ 220.187113][ T6916] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.772: Detected aborted journal [ 220.241885][ T6952] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.781: Detected aborted journal [ 220.258404][ T6916] EXT4-fs: 112 callbacks suppressed [ 220.258420][ T6916] EXT4-fs (sda1): Remounting filesystem read-only [ 220.272287][ T6957] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.782: Detected aborted journal [ 220.288460][ T6959] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.783: Detected aborted journal [ 220.296591][ T6958] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.784: Detected aborted journal [ 220.300164][ T6959] EXT4-fs (sda1): Remounting filesystem read-only [ 220.320994][ T6959] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.783: Detected aborted journal [ 220.332142][ T6959] EXT4-fs (sda1): Remounting filesystem read-only [ 220.339549][ T6959] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.783: Detected aborted journal [ 220.343850][ T3926] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #121: comm crond: reading directory lblock 0 [ 220.350505][ T6959] EXT4-fs (sda1): Remounting filesystem read-only [ 220.367879][ T3926] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm crond: reading directory lblock 0 [ 220.368458][ T6958] EXT4-fs (sda1): Remounting filesystem read-only [ 220.380610][ T6957] EXT4-fs (sda1): Remounting filesystem read-only [ 220.390907][ T6952] EXT4-fs (sda1): Remounting filesystem read-only [ 220.400320][ T6957] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.782: Detected aborted journal [ 220.412112][ T6957] EXT4-fs (sda1): Remounting filesystem read-only [ 220.418980][ T6959] EXT4-fs (sda1): Remounting filesystem read-only [ 220.419153][ T6952] EXT4-fs (sda1): Remounting filesystem read-only [ 220.436146][ T6962] loop2: detected capacity change from 0 to 256 [ 220.522452][ T6964] device syzkaller0 entered promiscuous mode [ 222.018766][ T6996] syzkaller0: Caught tx_queue_len zero misconfig [ 222.038380][ T6986] xt_hashlimit: size too large, truncated to 1048576 [ 222.045493][ T6986] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 222.334378][ T6999] loop1: detected capacity change from 0 to 512 [ 222.765475][ T6999] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 222.783026][ T6999] ext4 filesystem being mounted at /156/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 222.787173][ T7004] team0: Port device xfrm0 removed [ 222.880494][ T7004] bond1: (slave macvlan2): Releasing backup interface [ 222.919650][ T7005] team0: Mode changed to "roundrobin" [ 222.928557][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.796'. [ 222.979666][ T7008] tipc: Disabling bearer [ 223.997826][ T7031] loop1: detected capacity change from 0 to 1024 [ 224.019662][ T7031] EXT4-fs (loop1): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 224.719365][ T7041] binder_alloc: 7040: pid 7040 spamming oneway? 2 buffers allocated for a total size of 5120 [ 225.290506][ T7045] EXT4-fs error: 128 callbacks suppressed [ 225.290523][ T7045] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.819: Detected aborted journal [ 225.307589][ T7045] EXT4-fs: 112 callbacks suppressed [ 225.307605][ T7045] EXT4-fs (sda1): Remounting filesystem read-only [ 225.320556][ T7045] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.819: Detected aborted journal [ 225.331496][ T7045] EXT4-fs (sda1): Remounting filesystem read-only [ 225.338332][ T7045] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.819: Detected aborted journal [ 225.349332][ T7045] EXT4-fs (sda1): Remounting filesystem read-only [ 225.512123][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 225.593077][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 225.601847][ T7051] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.810: Detected aborted journal [ 225.605720][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 225.625737][ T7052] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.811: Detected aborted journal [ 225.627193][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 225.649567][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0 [ 225.663429][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 225.676700][ T7052] EXT4-fs (sda1): Remounting filesystem read-only [ 225.677800][ T7053] EXT4-fs (sda1): Remounting filesystem read-only [ 225.683646][ T7051] EXT4-fs (sda1): Remounting filesystem read-only [ 225.707253][ T7053] EXT4-fs (sda1): Remounting filesystem read-only [ 225.713525][ T7052] EXT4-fs (sda1): Remounting filesystem read-only [ 225.718316][ T7051] EXT4-fs (sda1): Remounting filesystem read-only [ 226.749144][ T6595] Bluetooth: hci0: command 0x0c3a tx timeout [ 226.851831][ T7064] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 228.786454][ T7078] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 229.058120][ T6595] Bluetooth: hci0: command 0x0c1a tx timeout [ 229.081634][ T7083] cgroup: Need name or subsystem set [ 229.626770][ T7098] xt_CT: No such helper "syz1" [ 229.634042][ T7098] net_ratelimit: 13 callbacks suppressed [ 229.634057][ T7098] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 229.784735][ T7100] netlink: 5 bytes leftover after parsing attributes in process `syz.0.831'. [ 229.823086][ T7100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.221161][ T7109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.838'. [ 230.230368][ T7109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.838'. [ 230.239350][ T7109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.838'. [ 230.248303][ T7109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.838'. [ 230.257217][ T7109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.838'. [ 230.266186][ T7109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.838'. [ 230.275092][ T7109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.838'. [ 230.284169][ T7109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.838'. [ 230.293034][ T7109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.838'. [ 230.317430][ T7113] loop0: detected capacity change from 0 to 1764 [ 230.524049][ T7104] EXT4-fs error: 99 callbacks suppressed [ 230.524084][ T7104] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.825: Detected aborted journal [ 230.540877][ T7104] EXT4-fs: 86 callbacks suppressed [ 230.540911][ T7104] EXT4-fs (sda1): Remounting filesystem read-only [ 230.553788][ T7104] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.825: Detected aborted journal [ 230.564952][ T7104] EXT4-fs (sda1): Remounting filesystem read-only [ 230.573179][ T7104] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.825: Detected aborted journal [ 230.584278][ T7104] EXT4-fs (sda1): Remounting filesystem read-only [ 230.591817][ T7104] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.825: Detected aborted journal [ 230.602844][ T7104] EXT4-fs (sda1): Remounting filesystem read-only [ 230.610213][ T7104] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.825: Detected aborted journal [ 230.621351][ T7104] EXT4-fs (sda1): Remounting filesystem read-only [ 230.630160][ T7104] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.825: Detected aborted journal [ 230.641190][ T7104] EXT4-fs (sda1): Remounting filesystem read-only [ 230.649438][ T7104] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.825: Detected aborted journal [ 230.660635][ T7104] EXT4-fs (sda1): Remounting filesystem read-only [ 230.682670][ T7104] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.825: Detected aborted journal [ 230.693722][ T7104] EXT4-fs (sda1): Remounting filesystem read-only [ 230.700558][ T7104] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.825: Detected aborted journal [ 230.711566][ T7104] EXT4-fs (sda1): Remounting filesystem read-only [ 230.718599][ T7104] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.825: Detected aborted journal [ 230.729929][ T7104] EXT4-fs (sda1): Remounting filesystem read-only [ 230.787146][ T7109] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.796158][ T7109] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.805142][ T7109] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.814075][ T7109] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.853833][ T7109] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.862755][ T7109] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.872041][ T7109] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.880966][ T7109] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.999409][ T25] audit: type=1326 audit(1785862811.091:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.2.830" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87babc6019 code=0x7ffc0000 [ 231.092277][ T25] audit: type=1326 audit(1785862811.121:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.2.830" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87babc6019 code=0x7ffc0000 [ 231.124263][ T25] audit: type=1326 audit(1785862811.121:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.2.830" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87babc6019 code=0x7ffc0000 [ 231.151538][ T6592] Bluetooth: hci0: command 0x0c24 tx timeout [ 231.154508][ T25] audit: type=1326 audit(1785862811.121:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.2.830" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87babc6019 code=0x7ffc0000 [ 231.193329][ T25] audit: type=1326 audit(1785862811.121:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.2.830" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f87babc6019 code=0x7ffc0000 [ 231.217372][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.590003][ T7126] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 231.904803][ T25] audit: type=1326 audit(1785862811.121:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.2.830" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87babc6019 code=0x7ffc0000 [ 231.935464][ T25] audit: type=1326 audit(1785862811.121:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.2.830" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f87babc6019 code=0x7ffc0000 [ 231.963979][ T25] audit: type=1326 audit(1785862811.121:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.2.830" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f87babc6019 code=0x7ffc0000 [ 231.987992][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.002036][ T25] audit: type=1326 audit(1785862811.121:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.2.830" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87babc6019 code=0x7ffc0000 [ 232.138231][ T7129] batadv_slave_0: Caught tx_queue_len zero misconfig [ 235.556365][ T7154] EXT4-fs error: 100 callbacks suppressed [ 235.556379][ T7154] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.851: Detected aborted journal [ 235.573065][ T7154] EXT4-fs: 91 callbacks suppressed [ 235.573079][ T7154] EXT4-fs (sda1): Remounting filesystem read-only [ 235.584800][ T7154] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.851: Detected aborted journal [ 235.595798][ T7154] EXT4-fs (sda1): Remounting filesystem read-only [ 235.602333][ T7154] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.851: Detected aborted journal [ 235.613270][ T7154] EXT4-fs (sda1): Remounting filesystem read-only [ 235.619917][ T7160] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.852: Detected aborted journal [ 235.630850][ T7160] EXT4-fs (sda1): Remounting filesystem read-only [ 235.652077][ T7154] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.851: Detected aborted journal [ 235.663061][ T7154] EXT4-fs (sda1): Remounting filesystem read-only [ 235.669649][ T7154] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.851: Detected aborted journal [ 235.670134][ T7160] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.852: Detected aborted journal [ 235.680603][ T7154] EXT4-fs (sda1): Remounting filesystem read-only [ 235.698129][ T7160] EXT4-fs (sda1): Remounting filesystem read-only [ 235.704669][ T7160] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.852: Detected aborted journal [ 235.715600][ T7160] EXT4-fs (sda1): Remounting filesystem read-only [ 235.724435][ T7162] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.840: Detected aborted journal [ 235.734845][ T7155] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.842: Detected aborted journal [ 235.763618][ T7162] EXT4-fs (sda1): Remounting filesystem read-only [ 236.330045][ T7154] EXT4-fs (sda1): Remounting filesystem read-only [ 236.942777][ T7179] overlayfs: bad mount option "redirect_dir=off:/" [ 237.037657][ T7171] team0: Port device xfrm0 removed [ 237.058980][ T7172] __nla_validate_parse: 144 callbacks suppressed [ 237.058999][ T7172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.841'. [ 237.074463][ T7172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.841'. [ 237.118279][ T7172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.841'. [ 237.127225][ T7172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.841'. [ 237.136199][ T7172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.841'. [ 237.145107][ T7172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.841'. [ 237.154006][ T7172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.841'. [ 237.162865][ T7172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.841'. [ 237.171787][ T7172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.841'. [ 237.286522][ T7181] loop1: detected capacity change from 0 to 1764 [ 237.865296][ T7172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.841'. [ 237.899849][ T7174] team0: Mode changed to "roundrobin" [ 238.035824][ T7185] netlink: 'syz.2.859': attribute type 40 has an invalid length. [ 238.616805][ T7193] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 240.713490][ T7209] EXT4-fs error: 79 callbacks suppressed [ 240.713507][ T7209] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.853: Detected aborted journal [ 240.783000][ T7209] EXT4-fs: 73 callbacks suppressed [ 240.783017][ T7209] EXT4-fs (sda1): Remounting filesystem read-only [ 240.813055][ T7209] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.853: Detected aborted journal [ 240.844849][ T7209] EXT4-fs (sda1): Remounting filesystem read-only [ 240.986887][ T7209] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.853: Detected aborted journal [ 240.997827][ T7209] EXT4-fs (sda1): Remounting filesystem read-only [ 241.036554][ T7209] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.853: Detected aborted journal [ 241.047568][ T7209] EXT4-fs (sda1): Remounting filesystem read-only [ 241.054105][ T7209] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.853: Detected aborted journal [ 241.064984][ T7209] EXT4-fs (sda1): Remounting filesystem read-only [ 241.471977][ T7209] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.853: Detected aborted journal [ 241.482946][ T7209] EXT4-fs (sda1): Remounting filesystem read-only [ 241.489838][ T7209] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.853: Detected aborted journal [ 241.500727][ T7209] EXT4-fs (sda1): Remounting filesystem read-only [ 241.611720][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 241.620089][ T7213] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.855: Detected aborted journal [ 241.631420][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 241.648214][ T7214] EXT4-fs (sda1): Remounting filesystem read-only [ 241.659496][ T7209] EXT4-fs (sda1): Remounting filesystem read-only [ 241.663105][ T7216] EXT4-fs (sda1): Remounting filesystem read-only [ 241.849129][ T7224] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.857948][ T7224] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.866735][ T7224] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.875527][ T7224] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.949017][ T7227] loop2: detected capacity change from 0 to 256 [ 242.007040][ T7227] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 242.055990][ T7227] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 242.109623][ T7227] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 243.081485][ T7248] __nla_validate_parse: 167 callbacks suppressed [ 243.081536][ T7248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.867'. [ 243.098163][ T7248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.867'. [ 243.107640][ T7248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.867'. [ 243.116576][ T7248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.867'. [ 243.125467][ T7248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.867'. [ 243.134636][ T7248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.867'. [ 243.143540][ T7248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.867'. [ 243.152396][ T7248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.867'. [ 243.161503][ T7248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.867'. [ 243.170985][ T7248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.867'. [ 243.701363][ T7256] loop1: detected capacity change from 0 to 512 [ 243.720689][ T7254] loop2: detected capacity change from 0 to 2048 [ 243.744376][ T7256] EXT4-fs: Invalid sb specification: sb=0x000000000000000eJdebug,jqfmt=vfsold,nobh,barrier,usrjquota="block_validity,errors=remount-ro,, [ 243.768648][ T7256] EXT4-fs (loop1): Unrecognized mount option "sb=0x000000000000000eJdebug" or missing value [ 245.513753][ T5497] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 245.763556][ T7286] EXT4-fs error: 136 callbacks suppressed [ 245.763593][ T7286] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.885: Detected aborted journal [ 245.780805][ T7286] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.885: Detected aborted journal [ 245.791876][ T7286] EXT4-fs: 124 callbacks suppressed [ 245.791911][ T7286] EXT4-fs (sda1): Remounting filesystem read-only [ 245.804066][ T7286] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.885: Detected aborted journal [ 245.815043][ T7286] EXT4-fs (sda1): Remounting filesystem read-only [ 246.096379][ T7286] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.885: Detected aborted journal [ 246.107342][ T7286] EXT4-fs (sda1): Remounting filesystem read-only [ 246.123361][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 246.135088][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 246.139292][ T7282] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.883: Detected aborted journal [ 246.153934][ T7272] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.879: Detected aborted journal [ 246.157256][ T7292] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.886: Detected aborted journal [ 246.176051][ T7282] EXT4-fs (sda1): Remounting filesystem read-only [ 246.182662][ T7282] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.883: Detected aborted journal [ 246.194663][ T7282] EXT4-fs (sda1): Remounting filesystem read-only [ 246.201158][ T7282] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.883: Detected aborted journal [ 246.201252][ T7272] EXT4-fs (sda1): Remounting filesystem read-only [ 246.212568][ T7282] EXT4-fs (sda1): Remounting filesystem read-only [ 246.218868][ T7292] EXT4-fs (sda1): Remounting filesystem read-only [ 246.221560][ T7292] EXT4-fs (sda1): Remounting filesystem read-only [ 246.433310][ T5497] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 246.451755][ T5497] usb 3-1: config 0 has no interface number 0 [ 246.458293][ T5497] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 246.461125][ T25] audit: type=1326 audit(1785862826.551:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7300 comm="syz.3.890" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f62da2b1019 code=0x0 [ 246.493783][ T5497] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 246.663516][ T5497] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 246.678194][ T5497] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 246.711693][ T5497] usb 3-1: Manufacturer: syz [ 246.724283][ T5497] usb 3-1: SerialNumber: syz [ 246.731689][ T7309] netlink: 'syz.4.893': attribute type 25 has an invalid length. [ 247.557382][ T5497] usb 3-1: config 0 descriptor?? [ 247.833711][ T5497] usbtouchscreen 3-1:0.214: Failed to read FW rev: -71 [ 247.845571][ T7329] loop1: detected capacity change from 0 to 256 [ 247.862692][ T5497] usbtouchscreen: probe of 3-1:0.214 failed with error -71 [ 247.883252][ T5497] usb 3-1: USB disconnect, device number 8 [ 250.948246][ T7366] lo: Caught tx_queue_len zero misconfig [ 250.954067][ T7349] EXT4-fs error: 102 callbacks suppressed [ 250.954081][ T7349] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.905: Detected aborted journal [ 251.393959][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 251.415441][ T7367] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.911: Detected aborted journal [ 251.433635][ T7339] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.900: Detected aborted journal [ 251.454903][ T7349] EXT4-fs: 90 callbacks suppressed [ 251.454917][ T7349] EXT4-fs (sda1): Remounting filesystem read-only [ 251.473124][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 251.485011][ T7367] EXT4-fs (sda1): Remounting filesystem read-only [ 251.500529][ T7339] EXT4-fs (sda1): Remounting filesystem read-only [ 251.510972][ T7367] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.911: Detected aborted journal [ 251.522725][ T7349] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.905: Detected aborted journal [ 251.534059][ T7339] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.900: Detected aborted journal [ 251.546301][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 251.548112][ T7371] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.912: Detected aborted journal [ 251.558303][ T7349] EXT4-fs (sda1): Remounting filesystem read-only [ 251.574678][ T7371] EXT4-fs (sda1): Remounting filesystem read-only [ 251.575654][ T7367] EXT4-fs (sda1): Remounting filesystem read-only [ 251.588597][ T7339] EXT4-fs (sda1): Remounting filesystem read-only [ 251.588617][ T7371] EXT4-fs (sda1): Remounting filesystem read-only [ 251.612317][ T7339] EXT4-fs (sda1): Remounting filesystem read-only [ 251.612466][ T7349] EXT4-fs (sda1): Remounting filesystem read-only [ 251.671393][ T7369] __nla_validate_parse: 137 callbacks suppressed [ 251.671410][ T7369] netlink: 16 bytes leftover after parsing attributes in process `syz.3.911'. [ 251.687958][ T7369] netlink: 16 bytes leftover after parsing attributes in process `syz.3.911'. [ 251.697222][ T7369] netlink: 16 bytes leftover after parsing attributes in process `syz.3.911'. [ 251.706139][ T7369] netlink: 16 bytes leftover after parsing attributes in process `syz.3.911'. [ 251.715029][ T7369] netlink: 16 bytes leftover after parsing attributes in process `syz.3.911'. [ 251.723938][ T7369] netlink: 16 bytes leftover after parsing attributes in process `syz.3.911'. [ 251.732800][ T7369] netlink: 16 bytes leftover after parsing attributes in process `syz.3.911'. [ 251.741676][ T7369] netlink: 16 bytes leftover after parsing attributes in process `syz.3.911'. [ 251.750642][ T7369] netlink: 16 bytes leftover after parsing attributes in process `syz.3.911'. [ 251.759524][ T7369] netlink: 16 bytes leftover after parsing attributes in process `syz.3.911'. [ 251.769708][ T7369] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.778648][ T7369] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.787558][ T7369] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.796475][ T7369] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.609391][ T7386] mmap: syz.2.916 (7386) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 252.669017][ T7394] loop0: detected capacity change from 0 to 256 [ 252.748599][ T7394] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 252.785142][ T7396] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 252.805710][ T7396] bond2: (slave macvlan2): Enslaving as an active interface with a down link [ 252.815005][ T7394] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 252.858508][ T7394] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 252.933272][ T6596] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 252.956793][ T7403] loop2: detected capacity change from 0 to 1024 [ 253.039346][ T7403] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 253.047551][ T7403] EXT4-fs (loop2): inline encryption not supported [ 253.074104][ T7403] EXT4-fs (loop2): orphan cleanup on readonly fs [ 253.086019][ T7403] Quota error (device loop2): v2_read_file_info: Free block number too big (131072 >= 6). [ 253.098224][ T7403] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 253.115141][ T7403] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 253.122830][ T7403] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.923: Freeing blocks not in datazone - block = 0, count = 4096 [ 253.162162][ T7403] EXT4-fs (loop2): Remounting filesystem read-only [ 253.169793][ T7412] batman_adv: batadv0: Adding interface: dummy0 [ 253.176796][ T7412] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.182574][ T7403] EXT4-fs (loop2): 1 orphan inode deleted [ 253.202030][ C0] vkms_vblank_simulate: vblank timer overrun [ 253.202978][ T7412] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 253.276375][ T7403] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,noblock_validity,nogrpid,errors=remount-ro,user_xattr,inlinecrypt,. Quota mode: writeback. [ 253.303488][ T6596] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 253.413749][ T6596] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 253.433063][ T6596] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 253.459155][ T6596] usb 2-1: SerialNumber: syz [ 253.459306][ T7420] bond2: option mode: unable to set because the bond device has slaves [ 253.525261][ T7423] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 253.555111][ T7423] bond2: (slave macvlan3): Enslaving as an active interface with a down link [ 253.609981][ T7420] netlink: 'syz.3.928': attribute type 10 has an invalid length. [ 254.108125][ T7435] tipc: Enabled bearer , priority 0 [ 254.197890][ T6596] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 254.749438][ T6594] usb 2-1: USB disconnect, device number 2 [ 255.449377][ T6594] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 255.533602][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.540976][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.151795][ T7455] EXT4-fs error: 165 callbacks suppressed [ 256.151811][ T7455] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.939: Detected aborted journal [ 256.177690][ T7455] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.939: Detected aborted journal [ 256.190276][ T7455] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.939: Detected aborted journal [ 256.225455][ T3852] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 256.226799][ T7459] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.940: Detected aborted journal [ 256.242989][ T7460] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.941: Detected aborted journal [ 256.271276][ T7459] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.940: Detected aborted journal [ 256.331817][ T7460] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.941: Detected aborted journal [ 256.331961][ T7462] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0 [ 256.362936][ T7459] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.940: Detected aborted journal [ 256.857025][ T7471] EXT4-fs: 146 callbacks suppressed [ 256.857161][ T7471] EXT4-fs (sda1): Remounting filesystem read-only [ 257.129001][ T7471] EXT4-fs (sda1): Remounting filesystem read-only [ 257.245493][ T7473] EXT4-fs (sda1): Remounting filesystem read-only [ 257.264470][ T7474] EXT4-fs (sda1): Remounting filesystem read-only [ 257.286794][ T7473] EXT4-fs (sda1): Remounting filesystem read-only [ 257.310904][ T7474] EXT4-fs (sda1): Remounting filesystem read-only [ 257.333539][ T6596] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 257.368874][ T25] audit: type=1326 audit(1785862837.461:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.3.944" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f62da2b1019 code=0x0 [ 258.038309][ T7485] EXT4-fs (sda1): Remounting filesystem read-only [ 258.084669][ T7486] loop1: detected capacity change from 0 to 256 [ 258.168981][ T7487] EXT4-fs (sda1): Remounting filesystem read-only [ 258.178944][ T7485] EXT4-fs (sda1): Remounting filesystem read-only [ 258.196012][ T7488] EXT4-fs (sda1): Remounting filesystem read-only [ 258.308729][ T7491] __nla_validate_parse: 147 callbacks suppressed [ 258.308748][ T7491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.948'. [ 258.370675][ T6596] usb 3-1: Using ep0 maxpacket: 8 [ 258.416107][ T7490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.948'. [ 259.132399][ T6596] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 259.142509][ T6596] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.166380][ T4199] ================================================================== [ 259.174813][ T4199] BUG: KASAN: use-after-free in l2cap_sock_ready_cb+0xd3/0x140 [ 259.182381][ T4199] Read of size 8 at addr ffff8880231a84c8 by task kworker/u5:6/4199 [ 259.190367][ T4199] [ 259.192785][ T4199] CPU: 0 PID: 4199 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 259.200341][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 259.210413][ T4199] Workqueue: hci0 hci_rx_work [ 259.215143][ T4199] Call Trace: [ 259.218428][ T4199] [ 259.221367][ T4199] dump_stack_lvl+0x188/0x250 [ 259.226059][ T4199] ? show_regs_print_info+0x20/0x20 [ 259.231258][ T4199] ? load_image+0x410/0x410 [ 259.235748][ T4199] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 259.241195][ T4199] ? rcu_lock_release+0x5/0x20 [ 259.245948][ T4199] print_address_description+0x60/0x2d0 [ 259.251480][ T4199] ? l2cap_sock_ready_cb+0xd3/0x140 [ 259.256663][ T4199] kasan_report+0xdf/0x130 [ 259.261067][ T4199] ? l2cap_sock_ready_cb+0xd3/0x140 [ 259.266255][ T4199] l2cap_sock_ready_cb+0xd3/0x140 [ 259.271266][ T4199] l2cap_le_start+0x6a1/0x1840 [ 259.276013][ T4199] ? l2cap_connect_cfm+0x6c1/0x12b0 [ 259.281205][ T4199] ? l2cap_start_connection+0x350/0x350 [ 259.286741][ T4199] ? l2cap_conn_del+0x5c0/0x5c0 [ 259.291589][ T4199] l2cap_connect_cfm+0x744/0x12b0 [ 259.296611][ T4199] ? l2cap_ertm_resend+0xf30/0xf30 [ 259.301713][ T4199] ? l2cap_ertm_resend+0xf30/0xf30 [ 259.306813][ T4199] le_conn_complete_evt+0xd36/0x14d0 [ 259.312179][ T4199] ? cs_le_create_conn+0x5e0/0x5e0 [ 259.317282][ T4199] ? __mutex_trylock_common+0x15c/0x260 [ 259.322818][ T4199] hci_le_meta_evt+0x285/0x3ca0 [ 259.327660][ T4199] ? hci_event_packet+0x363/0x1310 [ 259.332768][ T4199] ? __lock_acquire+0x7b50/0x7b50 [ 259.337788][ T4199] ? hci_remote_host_features_evt+0x240/0x240 [ 259.343842][ T4199] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 259.349465][ T4199] ? mark_lock+0x94/0x320 [ 259.353784][ T4199] ? mutex_unlock+0x10/0x10 [ 259.358274][ T4199] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 259.364268][ T4199] ? lock_chain_count+0x20/0x20 [ 259.369128][ T4199] ? __rwlock_init+0x140/0x140 [ 259.373883][ T4199] hci_event_packet+0xe0b/0x1310 [ 259.378819][ T4199] ? _raw_spin_unlock+0x40/0x40 [ 259.383664][ T4199] ? rcu_lock_release+0x20/0x20 [ 259.388507][ T4199] ? hci_send_to_monitor+0x9c/0x4a0 [ 259.393695][ T4199] hci_rx_work+0x255/0xa10 [ 259.398131][ T4199] process_one_work+0x867/0xff0 [ 259.402986][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 259.408605][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 259.413902][ T4199] ? _raw_spin_lock_irq+0xb7/0xf0 [ 259.418910][ T4199] ? _raw_spin_lock_irqsave+0x100/0x100 [ 259.424440][ T4199] ? wq_worker_running+0x97/0x170 [ 259.429453][ T4199] worker_thread+0xad7/0x12a0 [ 259.434134][ T4199] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 259.440020][ T4199] kthread+0x42e/0x520 [ 259.444072][ T4199] ? rcu_lock_release+0x20/0x20 [ 259.448911][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 259.453485][ T4199] ret_from_fork+0x1f/0x30 [ 259.457903][ T4199] [ 259.460902][ T4199] [ 259.463208][ T4199] Allocated by task 7503: [ 259.467514][ T4199] __kasan_kmalloc+0xaf/0xe0 [ 259.472087][ T4199] sk_prot_alloc+0xe7/0x210 [ 259.476585][ T4199] sk_alloc+0x2f/0x310 [ 259.480641][ T4199] bt_sock_alloc+0x37/0x350 [ 259.485124][ T4199] l2cap_sock_create+0x12b/0x2a0 [ 259.490067][ T4199] bt_sock_create+0x155/0x220 [ 259.494726][ T4199] __sock_create+0x473/0x910 [ 259.499301][ T4199] __sys_socket+0xe2/0x170 [ 259.503705][ T4199] __x64_sys_socket+0x76/0x80 [ 259.508381][ T4199] do_syscall_64+0x4c/0xa0 [ 259.512780][ T4199] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 259.518658][ T4199] [ 259.520964][ T4199] Freed by task 7503: [ 259.524924][ T4199] kasan_set_track+0x4b/0x70 [ 259.529500][ T4199] kasan_set_free_info+0x1f/0x40 [ 259.534423][ T4199] ____kasan_slab_free+0xd5/0x110 [ 259.539445][ T4199] slab_free_freelist_hook+0xec/0x170 [ 259.544799][ T4199] kfree+0xef/0x2a0 [ 259.548587][ T4199] __sk_destruct+0x580/0x840 [ 259.553162][ T4199] l2cap_sock_release+0x169/0x1e0 [ 259.558188][ T4199] sock_close+0xbf/0x210 [ 259.562414][ T4199] __fput+0x212/0x8c0 [ 259.566376][ T4199] task_work_run+0x125/0x1a0 [ 259.570948][ T4199] exit_to_user_mode_loop+0x10f/0x130 [ 259.576390][ T4199] exit_to_user_mode_prepare+0xee/0x180 [ 259.581915][ T4199] syscall_exit_to_user_mode+0x16/0x40 [ 259.587450][ T4199] do_syscall_64+0x58/0xa0 [ 259.591858][ T4199] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 259.597820][ T4199] [ 259.600152][ T4199] Last potentially related work creation: [ 259.605846][ T4199] kasan_save_stack+0x35/0x60 [ 259.610508][ T4199] kasan_record_aux_stack+0xb8/0x100 [ 259.615777][ T4199] kvfree_call_rcu+0x105/0x7f0 [ 259.620527][ T4199] drop_sysctl_table+0x359/0x4e0 [ 259.625447][ T4199] unregister_sysctl_table+0x87/0x130 [ 259.630799][ T4199] inetdev_event+0x6ce/0x1350 [ 259.635458][ T4199] raw_notifier_call_chain+0xcb/0x160 [ 259.640817][ T4199] unregister_netdevice_many+0x109b/0x1a40 [ 259.646693][ T4199] sit_exit_batch_net+0x495/0x4e0 [ 259.651698][ T4199] cleanup_net+0x78e/0xba0 [ 259.656101][ T4199] process_one_work+0x867/0xff0 [ 259.660948][ T4199] worker_thread+0xad7/0x12a0 [ 259.665616][ T4199] kthread+0x42e/0x520 [ 259.669776][ T4199] ret_from_fork+0x1f/0x30 [ 259.674205][ T4199] [ 259.676517][ T4199] The buggy address belongs to the object at ffff8880231a8000 [ 259.676517][ T4199] which belongs to the cache kmalloc-2k of size 2048 [ 259.690559][ T4199] The buggy address is located 1224 bytes inside of [ 259.690559][ T4199] 2048-byte region [ffff8880231a8000, ffff8880231a8800) [ 259.704000][ T4199] The buggy address belongs to the page: [ 259.709629][ T4199] page:ffffea00008c6a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x231a8 [ 259.719765][ T4199] head:ffffea00008c6a00 order:3 compound_mapcount:0 compound_pincount:0 [ 259.728190][ T4199] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 259.736275][ T4199] raw: 00fff00000010200 ffffea0001cfca00 0000000200000002 ffff888016c42000 [ 259.744850][ T4199] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 259.753412][ T4199] page dumped because: kasan: bad access detected [ 259.759814][ T4199] page_owner tracks the page as allocated [ 259.765508][ T4199] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7083, ts 229271632510, free_ts 227901961683 [ 259.786239][ T4199] get_page_from_freelist+0x24f6/0x2670 [ 259.791786][ T4199] __alloc_pages+0x1ee/0x480 [ 259.796383][ T4199] new_slab+0xc0/0x4b0 [ 259.800449][ T4199] ___slab_alloc+0x807/0xdd0 [ 259.805027][ T4199] __kmalloc+0x11d/0x340 [ 259.809260][ T4199] __register_sysctl_table+0xe0/0x1240 [ 259.814709][ T4199] __devinet_sysctl_register+0x2ba/0x380 [ 259.820328][ T4199] devinet_sysctl_register+0x17c/0x1f0 [ 259.825775][ T4199] inetdev_init+0x28c/0x4d0 [ 259.830269][ T4199] inetdev_event+0x26f/0x1350 [ 259.834928][ T4199] raw_notifier_call_chain+0xcb/0x160 [ 259.840287][ T4199] register_netdevice+0x12a8/0x1720 [ 259.845468][ T4199] register_netdev+0x37/0x50 [ 259.850039][ T4199] sit_init_net+0x1f6/0x4c0 [ 259.854526][ T4199] ops_init+0x360/0x5f0 [ 259.858662][ T4199] setup_net+0x39e/0xa10 [ 259.862887][ T4199] page last free stack trace: [ 259.867537][ T4199] free_unref_page_prepare+0x637/0x6c0 [ 259.873099][ T4199] free_unref_page+0x8f/0x2a0 [ 259.877763][ T4199] __unfreeze_partials+0x188/0x1e0 [ 259.882861][ T4199] put_cpu_partial+0x12d/0x190 [ 259.887608][ T4199] qlist_free_all+0x35/0x90 [ 259.892108][ T4199] kasan_quarantine_reduce+0x150/0x160 [ 259.897552][ T4199] __kasan_slab_alloc+0x2f/0xc0 [ 259.902385][ T4199] slab_post_alloc_hook+0x4c/0x380 [ 259.907476][ T4199] kmem_cache_alloc+0x15d/0x280 [ 259.912305][ T4199] ptlock_alloc+0x1c/0x60 [ 259.916616][ T4199] pte_alloc_one+0xc0/0x310 [ 259.921105][ T4199] __pte_alloc+0x21/0x150 [ 259.925415][ T4199] copy_page_range+0x2ab2/0x32c0 [ 259.930332][ T4199] copy_mm+0xc61/0x13d0 [ 259.934470][ T4199] copy_process+0x17fb/0x3ec0 [ 259.939133][ T4199] kernel_clone+0x23f/0x990 [ 259.943617][ T4199] [ 259.945928][ T4199] Memory state around the buggy address: [ 259.951536][ T4199] ffff8880231a8380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 259.959578][ T4199] ffff8880231a8400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 259.967621][ T4199] >ffff8880231a8480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 259.975673][ T4199] ^ [ 259.982065][ T4199] ffff8880231a8500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 259.990111][ T4199] ffff8880231a8580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 259.998149][ T4199] ================================================================== [ 260.006189][ T4199] Disabling lock debugging due to kernel taint Aug 4 17:00:40 syzkaller kern.alert kernel: [ 259.759814][ T4199] page_owner tracks the page as allocated Aug 4 17:00:40 syzkaller kern.alert kernel: [ 259.765508][ T4199] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7083, ts 229271632510, free_ts 227901 Aug 4 17:00:40 syzkaller kern.alert kernel: [ 259.862887][ T4199] page last free stack trace: [ 260.083380][ T6596] usb 3-1: can't set config #252, error -71 [ 260.091635][ T6596] usb 3-1: USB disconnect, device number 9 [ 260.118148][ T7512] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 260.126968][ T7512] bond1: (slave macvlan2): Enslaving as a backup interface with a down link [ 260.131264][ T4199] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 260.142848][ T4199] CPU: 0 PID: 4199 Comm: kworker/u5:6 Tainted: G B syzkaller #0 [ 260.143346][ T7512] netlink: 'syz.0.953': attribute type 10 has an invalid length. [ 260.151783][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.151798][ T4199] Workqueue: hci0 hci_rx_work [ 260.151820][ T4199] Call Trace: [ 260.151828][ T4199] [ 260.151835][ T4199] dump_stack_lvl+0x188/0x250 [ 260.185080][ T4199] ? show_regs_print_info+0x20/0x20 [ 260.190285][ T4199] ? load_image+0x410/0x410 [ 260.194801][ T4199] panic+0x2f8/0x850 [ 260.198702][ T4199] ? bpf_jit_dump+0xd0/0xd0 [ 260.203200][ T4199] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 260.209184][ T4199] ? _raw_spin_unlock+0x40/0x40 [ 260.209207][ T4199] ? l2cap_sock_ready_cb+0xd3/0x140 [ 260.219215][ T4199] check_panic_on_warn+0x80/0xa0 [ 260.224150][ T4199] ? l2cap_sock_ready_cb+0xd3/0x140 [ 260.229350][ T4199] end_report+0x6d/0xf0 [ 260.233506][ T4199] kasan_report+0x102/0x130 [ 260.238024][ T4199] ? l2cap_sock_ready_cb+0xd3/0x140 Aug 4 17:00:40 [ 260.243254][ T4199] l2cap_sock_ready_cb+0xd3/0x140 syzkaller kern.e[ 260.249654][ T4199] l2cap_le_start+0x6a1/0x1840 merg kernel: [ [ 260.255792][ T4199] ? l2cap_connect_cfm+0x6c1/0x12b0 260.131264][ T41[ 260.262361][ T4199] ? l2cap_start_connection+0x350/0x350 99] Kernel panic[ 260.269277][ T4199] ? l2cap_conn_del+0x5c0/0x5c0 - not syncing: [ 260.275526][ T4199] l2cap_connect_cfm+0x744/0x12b0 KASAN: panic_on_[ 260.281926][ T4199] ? l2cap_ertm_resend+0xf30/0xf30 warn set ... [ 260.288665][ T4199] ? l2cap_ertm_resend+0xf30/0xf30 [ 260.294976][ T4199] le_conn_complete_evt+0xd36/0x14d0 [ 260.300270][ T4199] ? cs_le_create_conn+0x5e0/0x5e0 [ 260.305397][ T4199] ? __mutex_trylock_common+0x15c/0x260 [ 260.310945][ T4199] hci_le_meta_evt+0x285/0x3ca0 [ 260.315802][ T4199] ? hci_event_packet+0x363/0x1310 [ 260.320913][ T4199] ? __lock_acquire+0x7b50/0x7b50 [ 260.325963][ T4199] ? hci_remote_host_features_evt+0x240/0x240 [ 260.332059][ T4199] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 260.337689][ T4199] ? mark_lock+0x94/0x320 [ 260.342019][ T4199] ? mutex_unlock+0x10/0x10 [ 260.346522][ T4199] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 260.352503][ T4199] ? lock_chain_count+0x20/0x20 [ 260.357360][ T4199] ? __rwlock_init+0x140/0x140 [ 260.362133][ T4199] hci_event_packet+0xe0b/0x1310 [ 260.367078][ T4199] ? _raw_spin_unlock+0x40/0x40 [ 260.371928][ T4199] ? rcu_lock_release+0x20/0x20 [ 260.376869][ T4199] ? hci_send_to_monitor+0x9c/0x4a0 [ 260.382179][ T4199] hci_rx_work+0x255/0xa10 [ 260.386616][ T4199] process_one_work+0x867/0xff0 [ 260.391483][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 260.397123][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 260.402419][ T4199] ? _raw_spin_lock_irq+0xb7/0xf0 [ 260.407443][ T4199] ? _raw_spin_lock_irqsave+0x100/0x100 [ 260.412991][ T4199] ? wq_worker_running+0x97/0x170 [ 260.418276][ T4199] worker_thread+0xad7/0x12a0 [ 260.422980][ T4199] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 260.428876][ T4199] kthread+0x42e/0x520 [ 260.432968][ T4199] ? rcu_lock_release+0x20/0x20 [ 260.437816][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 260.442421][ T4199] ret_from_fork+0x1f/0x30 [ 260.446849][ T4199] [ 260.450074][ T4199] Kernel Offset: disabled [ 260.454384][ T4199] Rebooting in 86400 seconds..