last executing test programs:

6m34.512767143s ago: executing program 2 (id=3):
sched_setscheduler(0x0, 0x1, 0x0)
r0 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0x7fffffff, 0x1], [{0x0, 0xffffffff, 0x0, 0x1}, {0x2, 0x35}, {0xfff, 0x100000c}, {0xffffffff}, {0x0, 0x4}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8, 0x2010000}, {0x0, 0x82}, {0x1010000, 0x6}, {0x1, 0xffffffff}, {0x3, 0x8}], 0xc})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

6m33.945738287s ago: executing program 2 (id=14):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x7)
open(&(0x7f0000000000)='./file2\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x7f)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8000, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)

6m32.757616471s ago: executing program 2 (id=19):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2, &(0x7f0000000740), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x102)
creat(&(0x7f0000000380)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x17f)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x44800, 0x0)
sendfile(r1, r2, 0x0, 0xfffe82)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139)
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae5c70f20ff8ee09e737ff0edf1139c2eb4b68c660e677df7019051caafa00afaaf755a314a10400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a323ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000522100000001", [0x8, 0x100]})
fallocate(r0, 0x10, 0x3, 0x1b)

6m31.287186183s ago: executing program 2 (id=25):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)

6m28.668179972s ago: executing program 2 (id=36):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x1341d000)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="02000000200000faffffff0002000200000000000200001f0000000002"], 0x24, 0x3)

6m27.823678731s ago: executing program 32 (id=36):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x1341d000)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="02000000200000faffffff0002000200000000000200001f0000000002"], 0x24, 0x3)

5m57.289077324s ago: executing program 3 (id=154):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000b80)={@ptr={0x70742a85, 0x100, 0x0, 0x0, 0x0, 0x21}, @ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/255, 0xff, 0x1, 0x8}, @fda={0x66646185, 0x1, 0x1, 0x20000000008}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0})

5m56.929578113s ago: executing program 3 (id=157):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}], 0x1c)
recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2)
setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)

5m56.399283969s ago: executing program 3 (id=159):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c)
listen(r1, 0x4)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000001c0)="15", 0x1}], 0x1}}], 0x1, 0x20000000)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000002c0), 0x4)

5m55.720937077s ago: executing program 3 (id=163):
chmod(0x0, 0x1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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")
open(&(0x7f0000000140)='./file1\x00', 0x0, 0x21)
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x5c, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
r1 = open(&(0x7f0000000200)='./file1\x00', 0xc07d, 0x11c)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000002c0)={0x0, 0x6, 0x0, 0x91})

5m53.973654899s ago: executing program 3 (id=169):
r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
syz_io_uring_complete(0x0, r0)
prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0)
close_range(r1, 0xffffffffffffffff, 0x200000000000000)
socket$alg(0x26, 0x5, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3cd}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x200, 0x1000000, 0x33f, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3acc, 0x6449, 0x0, 0xfffffffd, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0)

5m51.839071834s ago: executing program 3 (id=175):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', <r2=>0x0})
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

5m50.86996249s ago: executing program 33 (id=175):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', <r2=>0x0})
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

2m13.460273228s ago: executing program 5 (id=925):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300))
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m11.583872898s ago: executing program 5 (id=930):
syz_clone(0x21008691, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast, @random="a5556c3d6c72", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\b\x00', 0x30, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x40000060, {0x2, 0x6, '\x00', 0x3, 0x2c, 0xff, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}}}, 0x0)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2)
eventfd(0x7)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

2m11.100450084s ago: executing program 5 (id=933):
mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000)
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x182)
close(r0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', <r3=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x4044081, 0x0, 0x0)

2m9.666901762s ago: executing program 5 (id=940):
openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044080}, 0x4000000)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$binfmt_aout(r1, &(0x7f0000000ec0)=ANY=[@ANYRESOCT=r0], 0xff2e)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10045, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x2)

2m8.131867236s ago: executing program 5 (id=947):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x8922, 0x0)
setpgid(r0, r0)
setpgid(0x0, r0)
mount$fuse(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0, 0x0)

2m5.169236971s ago: executing program 5 (id=954):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
setfsgid(0xee00)

1m49.605925081s ago: executing program 34 (id=954):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
setfsgid(0xee00)

1m29.755969713s ago: executing program 6 (id=1035):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1m24.969859115s ago: executing program 6 (id=1040):
socket$xdp(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

1m23.455029403s ago: executing program 6 (id=1041):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x34, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0x100b, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x19}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})

1m22.967928849s ago: executing program 6 (id=1042):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000000)=0xffffff7e, 0x4)

1m21.729230854s ago: executing program 6 (id=1044):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000080)={r4, 0x8}, &(0x7f00000000c0)=0x8)

1m20.31446174s ago: executing program 6 (id=1050):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff82}, {0x0, 0x9, 0x78, 0x4, 0x6, 0x0, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r2, 0x1b}, 0x80, &(0x7f0000000f80)=[{&(0x7f00000004c0)='J', 0x1}], 0x1}, 0x20000015)

1m17.525770741s ago: executing program 4 (id=1057):
openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000640)={[{@block_validity}, {@noblock_validity}, {@noblock_validity}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@barrier_val={'barrier', 0x3d, 0x85}}, {@usrquota}, {@grpquota}, {@norecovery}], [{@subj_user={'subj_user', 0x3d, 'upperdir'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'metacopy=on'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}, 0x3, 0x569, &(0x7f0000000940)="$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")
syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0xfea7)

1m15.718935954s ago: executing program 4 (id=1061):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f00000000c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1)

1m15.332231597s ago: executing program 4 (id=1063):
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80d02, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_procfs(0x0, &(0x7f0000000ac0)='net/udp\x00')
pread64(r1, &(0x7f0000000500)=""/15, 0xf, 0x40000000007)

1m13.53932602s ago: executing program 4 (id=1066):
syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@partition={'partition', 0x3d, 0x6}}, {@gid_forget}, {@session={'session', 0x3d, 0xfe8}}, {@noadinicb}, {@anchor}, {@uid_forget}]}, 0xfe, 0xc24, &(0x7f0000001480)="$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")
ftruncate(0xffffffffffffffff, 0x2007ffc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1', 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='100', 0x3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001200)='./cgroup.net/syz1\x00', 0x1ff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301}, 0x1c}}, 0x0)

1m4.893012041s ago: executing program 35 (id=1050):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff82}, {0x0, 0x9, 0x78, 0x4, 0x6, 0x0, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r2, 0x1b}, 0x80, &(0x7f0000000f80)=[{&(0x7f00000004c0)='J', 0x1}], 0x1}, 0x20000015)

1m4.190327291s ago: executing program 4 (id=1072):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)
open(0x0, 0x60840, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)

1m1.856765325s ago: executing program 4 (id=1081):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0)

1m0.781909705s ago: executing program 36 (id=1081):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0)

12.368907992s ago: executing program 1 (id=1179):
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x240000d4)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000010000000000000000000000180100002020692400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000069bf0000850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2}, 0x3c)
syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[], 0x0)

10.904864953s ago: executing program 7 (id=1182):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@private=0xa010102, 0x4e24, 0x2, 0x4e22, 0x419d, 0xa, 0x30, 0x40, 0x5e}, {0x4, 0x7, 0x3, 0xb, 0x0, 0x8000000000000001, 0x3, 0x6}, {0x4, 0x9, 0x9, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast1, 0x4d6, 0x33}, 0x2, @in=@multicast2, 0x3505, 0x1, 0x0, 0x6, 0x7, 0x0, 0x280000}}, 0xe8)
close(r3)

9.362859201s ago: executing program 7 (id=1184):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

8.621426536s ago: executing program 7 (id=1186):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x440, 0x40, 0x14}, 0x18)
sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={&(0x7f00000001c0)={0x10020, 0x3f7, 0x8, 0xfffffffd, 0x8, {0xffff, 0x7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}, 0x1, 0x0, 0x0, 0x4004081}, 0x0)
execve(&(0x7f0000019140)='./file0\x00', 0x0, &(0x7f0000000040)={[&(0x7f0000000200)=' ']})

7.372266363s ago: executing program 7 (id=1187):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x26aba000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x25, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0xfffffffe, @private2, 0x5}}, 0x4000, 0x2}, 0x90)

7.124048589s ago: executing program 0 (id=1188):
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), 0x0, &(0x7f0000000000))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x0, 0x305, 0x70bd26, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0xf0ffff}, 0x24044080)
syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00')
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', <r1=>0x0})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010)

6.605852855s ago: executing program 0 (id=1189):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
socket(0x840000000002, 0x3, 0x100)
socket$netlink(0x10, 0x3, 0x0)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
socket$key(0xf, 0x3, 0x2)
pipe2(&(0x7f0000000580), 0x0)
pipe2(&(0x7f0000000200), 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r1=>0x0)
syz_ublk_setup_queues(r0, r1, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf78, 0x20000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3948, 0xa000, 0x1, 0x2b2}}], 0x1, 0x0, 0x0)

6.541787669s ago: executing program 1 (id=1190):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800)
r1 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x8000595d, 0x1000, 0x20002, 0x1000051, 0x0, r0}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x110a}, 0x1})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff})
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0x80, 0x8)

5.6439318s ago: executing program 0 (id=1191):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r2=>0x0})
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x25dfdbff, {0x0, 0x0, 0x74, r2, {}, {0x10, 0xfff3}, {0x1, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000080))
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, &(0x7f0000000540))
close(0x4)

5.33358775s ago: executing program 1 (id=1192):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080))
mq_open(&(0x7f0000000080)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x840, 0x0, &(0x7f0000000300)={0x7ff, 0x2000000001, 0x4, 0x8000})

4.137672918s ago: executing program 0 (id=1193):
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0)
syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0)
r3 = dup3(r2, r1, 0x80000)
ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0)
pwritev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)="cf", 0x1}], 0x1, 0x4, 0x4)

3.902781187s ago: executing program 1 (id=1194):
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x20000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x0, {0xfffffffffffffffd, 0x7}, 0x1}, 0x1)

3.27139422s ago: executing program 7 (id=1195):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000500000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000003600)={0x0, 0x0, &(0x7f0000002540)="9a835d3f1d04fe8a0942fb56762e2fd9d3a253c8c378500f49b15a812535d8cdeac8b792be1030498a503056150109b49af50c5feb584ea39f381adbdeb4bd6dda60c6c97532176a7a231e708ed9a6bc03bb7e66eefe30e4004c1aae8383aa387bb14e4ac6829017894e465dc682171a8a4e5276e6a5d23b48cf4bc9366fd07f49458cd473b86f6b2ce0ccc39d7db31e5494aaa38cf67201a16187b5f1149e97c541ae49e05a8b6eb30fab2062186312a9db4db12eab1af3120fb9227196b54e8fbe0d9ee48d88a380df05b75c9efadc56da57ad59ead8f3d3e5c208c0d031dfe233f9a0e8512546f090fca9d43ed026d9a8e554e913c2d16264f741abfe265e9f5caf1ca307f50ea6c95bc0622b5442f84df231070a82fd84d8f968332aee3153a22daa18c3afbfb86db03de0069e0c18c353b8f9a2045a8cad5ae660a3b23ca89d4d1ad84455c705ea025f71646f84cd6e876e901d5e151b70116b9c235ec733cdbc0437b1cf8314518d769b67f9ffdc0b9aa7cde33cf4b368d6ccb85c8209922e35205b706080dbc2cc", &(0x7f0000003540), 0x200, r3}, 0x38)

2.396810566s ago: executing program 0 (id=1196):
socket(0x10, 0x803, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
listen(0xffffffffffffffff, 0x3)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x406, r1)
write$cgroup_pid(r2, &(0x7f00000003c0), 0xffffffa0)
openat$panthor(0xffffffffffffff9c, 0x0, 0x2, 0x0)

2.394165109s ago: executing program 1 (id=1197):
userfaultfd(0x80001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0xfffffffe}, 0x10}, 0x24)

1.427333286s ago: executing program 7 (id=1198):
mkdir(&(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff)
symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00')
symlink(&(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00')
mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff)
mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ff)
mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff)
symlink(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00')

217.317342ms ago: executing program 1 (id=1199):
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000940)={0xd, "95bc9233a0ffadb335984bb3280b7840ca36304441bfb8b79ebdfe0534843f462a2e51c23b47519839c74c89785759d861f0cbab603459d543d8937b4693682b"})
write$hidraw(r1, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_control_io$hid(r0, 0x0, 0x0)

0s ago: executing program 0 (id=1200):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x1, 0x0)
io_submit(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x17e)
sched_rr_get_interval(0x0, &(0x7f0000000100))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

: entered promiscuous mode
[  130.467870][ T6017] veth1_macvtap: entered promiscuous mode
[  130.560781][ T6017] batman_adv: batadv0: Interface activated: batadv_slave_0
[  130.649123][ T6017] batman_adv: batadv0: Interface activated: batadv_slave_1
[  130.810999][ T6096] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.925023][ T6096] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.141809][   T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.216559][   T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.192715][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.258814][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.259115][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  132.276964][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  132.427473][ T6051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.477351][ T6051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.734330][ T5762] libceph: connect (1)[c::]:6789 error -101
[  132.758036][ T5762] libceph: mon0 (1)[c::]:6789 connect error
[  132.801418][ T6390] ceph: No mds server is up or the cluster is laggy
[  133.537650][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.6.131'.
[  133.575441][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.6.131'.
[  133.616511][ T5850] IPVS: starting estimator thread 0...
[  133.731445][ T6421] IPVS: using max 23 ests per chain, 55200 per kthread
[  133.997838][ T6425] bridge_slave_0: left allmulticast mode
[  134.028768][ T6425] bridge_slave_0: left promiscuous mode
[  134.048940][ T6425] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.126556][ T6425] bridge_slave_1: left allmulticast mode
[  134.145090][ T6425] bridge_slave_1: left promiscuous mode
[  134.178067][ T6425] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.249215][ T6425] bond0: (slave bond_slave_0): Releasing backup interface
[  134.311940][ T6425] bond0: (slave bond_slave_1): Releasing backup interface
[  134.375890][ T6425] team0: Port device team_slave_0 removed
[  134.423539][ T6425] team0: Port device team_slave_1 removed
[  134.435043][ T6425] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.455178][ T6425] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.479791][ T6425] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.500507][ T6425] batman_adv: batadv0: Removing interface: batadv_slave_1
[  134.530401][ T6425] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  134.632259][ T6428] team0: Mode changed to "broadcast"
[  134.732808][ T6431] bridge1: entered promiscuous mode
[  134.775403][ T6431] bridge1: entered allmulticast mode
[  135.289259][  T140] wlan1: Trigger new scan to find an IBSS to join
[  135.809778][ T6451] loop6: detected capacity change from 0 to 2048
[  135.920170][ T6451] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  137.393331][ T6467] =======================================================
[  137.393331][ T6467] WARNING: The mand mount option has been deprecated and
[  137.393331][ T6467]          and is ignored by this kernel. Remove the mand
[  137.393331][ T6467]          option from the mount to silence this warning.
[  137.393331][ T6467] =======================================================
[  137.478087][ T6464] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  137.487735][ T6464] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  137.507141][ T6469] overlayfs: overlapping lowerdir path
[  137.578117][ T6467] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  137.712399][ T6477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.888974][ T6472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  138.018633][ T6484] loop4: detected capacity change from 0 to 8
[  138.046463][ T6472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  138.133632][ T6484] syz.4.149: attempt to access beyond end of device
[  138.133632][ T6484] loop4: rw=8390656, sector=36028797018963960, nr_sectors = 16 limit=8
[  138.200557][ T6484] SQUASHFS error: Failed to read block 0xfffffffffffffffc: -5
[  138.231137][ T6484] unable to read xattr id index table
[  138.314653][ T6490] xt_hashlimit: size too large, truncated to 1048576
[  138.471776][ T6493] binder: BINDER_SET_CONTEXT_MGR already set
[  138.540027][ T6493] binder: 6492:6493 ioctl 4018620d 200000000040 returned -16
[  138.668565][ T6499] batman_adv: batadv0: Adding interface: dummy0
[  138.692959][ T6499] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  138.768355][ T6499] batman_adv: batadv0: Interface activated: dummy0
[  138.935401][ T6501] batadv0: mtu less than device minimum
[  138.957948][ T6501] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  138.970469][ T6501] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  138.982418][ T6501] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  138.994328][ T6501] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  139.006144][ T6501] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  139.018075][ T6501] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  139.030015][ T6501] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  139.041976][ T6501] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  139.284784][ T6456] wlan1: Trigger new scan to find an IBSS to join
[  139.758054][ T6520] netlink: 44 bytes leftover after parsing attributes in process `syz.0.161'.
[  140.211306][ T6526] loop3: detected capacity change from 0 to 2048
[  140.391518][ T6526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.704873][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.767396][   T30] audit: type=1804 audit(1785782273.945:7): pid=6542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.163" name="/newroot/32/file1/file1" dev="loop3" ino=15 res=1 errno=0
[  140.789478][ T6526] loop3: detected capacity change from 2048 to 0
[  140.958157][ T6524] batman_adv: batadv0: Interface deactivated: dummy0
[  141.576833][ T5621] EXT4-fs error (device loop3): ext4_get_inode_loc:5023: inode #2: block 4: comm syz-executor: unable to read itable block
[  141.672691][ T5621] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[  141.725270][ T5621] EXT4-fs (loop3): I/O error while writing superblock
[  141.782112][ T5621] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: IO failure
[  141.804820][ T5621] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[  141.868052][ T5621] EXT4-fs (loop3): I/O error while writing superblock
[  141.901574][ T5621] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #2: comm syz-executor: mark_inode_dirty error
[  142.010977][ T5621] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[  142.045106][ T5621] EXT4-fs (loop3): I/O error while writing superblock
[  142.174591][ T6538] EXT4-fs error (device loop3): ext4_wait_block_bitmap:582: comm ext4lazyinit: Cannot read block bitmap - block_group = 0, block_bitmap = 2
[  142.279958][ T6538] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[  142.332064][ T6538] EXT4-fs (loop3): I/O error while writing superblock
[  142.360291][ T6050] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:5008: inode #15: block 5: comm kworker/u8:11: unable to read itable block
[  142.427494][ T6050] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[  142.470999][ T6050] EXT4-fs (loop3): I/O error while writing superblock
[  142.507127][ T6050] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:5008: inode #2: block 4: comm kworker/u8:11: unable to read itable block
[  142.621628][ T6456] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.660617][ T6456] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.690983][ T6456] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.708915][ T6050] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[  142.738578][ T6456] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.857897][ T6050] EXT4-fs (loop3): I/O error while writing superblock
[  142.964153][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.025399][ T5621] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[  143.115688][ T5621] EXT4-fs (loop3): I/O error while writing superblock
[  143.212955][ T6535] Buffer I/O error on dev loop3, logical block 64, lost sync page write
[  143.319477][ T6554] loop4: detected capacity change from 0 to 32768
[  143.544921][ T6554] JBD2: Ignoring recovery information on journal
[  143.556358][ T6570] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  143.839113][ T6554] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  144.049150][ T6456] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.076248][   T30] audit: type=1800 audit(1785782277.245:8): pid=6554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.168" name="file1" dev="loop4" ino=17058 res=0 errno=0
[  144.380970][   T30] audit: type=1800 audit(1785782277.555:9): pid=6579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.168" name="file1" dev="loop4" ino=17058 res=0 errno=0
[  144.415389][ T6456] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.604809][ T6456] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.637772][ T5618] OCFS2: ERROR (device loop4): ocfs2_validate_gd_self: Group descriptor #1056 has bad signature 
[  144.664518][ T5618] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  144.688338][ T5618] OCFS2: File system is now read-only.
[  144.700454][ T5618] (syz-executor,5618,0):_ocfs2_free_suballoc_bits:2913 ERROR: status = -30
[  144.725497][ T5618] (syz-executor,5618,0):_ocfs2_free_clusters:3024 ERROR: status = -30
[  144.755913][ T5618] (syz-executor,5618,0):ocfs2_sync_local_to_main:994 ERROR: status = -30
[  144.795973][ T5618] (syz-executor,5618,0):ocfs2_sync_local_to_main:1007 ERROR: status = -30
[  144.827940][ T5618] (syz-executor,5618,0):ocfs2_shutdown_local_alloc:450 ERROR: status = -30
[  144.851261][ T6456] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.928216][ T5618] ocfs2: Unmounting device (7,4) on (node local)
[  145.447670][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  145.463428][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  145.474419][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  145.485522][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  145.495433][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  145.575213][ T6456] bridge_slave_1: left allmulticast mode
[  145.580895][ T6456] bridge_slave_1: left promiscuous mode
[  145.601817][ T6456] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.614121][ T6456] bridge_slave_0: left allmulticast mode
[  145.620075][ T6456] bridge_slave_0: left promiscuous mode
[  145.627296][ T6456] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.769014][ T6613] capability: warning: `syz.4.180' uses deprecated v2 capabilities in a way that may be insecure
[  145.962236][ T5775] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  146.130166][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.6.186'.
[  146.172419][ T5775] usb 2-1: unable to get BOS descriptor or descriptor too short
[  146.181972][ T5775] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 8
[  146.193107][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.6.186'.
[  146.204803][ T5775] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 254, changing to 11
[  146.229180][ T5775] usb 2-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice= 0.40
[  146.248844][ T6456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  146.251455][ T5775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.278527][ T5775] usb 2-1: Product: syz
[  146.285730][ T5775] usb 2-1: Manufacturer: syz
[  146.295957][ T5775] usb 2-1: SerialNumber: syz
[  146.296018][ T6456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  146.317935][ T6611] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  146.338737][ T6456] bond0 (unregistering): Released all slaves
[  146.503088][ T6456] tipc: Left network mode
[  146.644852][ T5775] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  147.120970][ T6456] hsr_slave_0: left promiscuous mode
[  147.173937][ T6456] hsr_slave_1: left promiscuous mode
[  147.179144][ T5775] usb 2-1: USB disconnect, device number 2
[  147.197893][ T6456] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.235531][ T6456] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.284527][ T6456] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.326599][ T6456] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.412797][ T6456] veth1_macvtap: left promiscuous mode
[  147.436584][ T6456] veth0_macvtap: left promiscuous mode
[  147.457914][ T6456] veth1_vlan: left promiscuous mode
[  147.473283][ T6456] veth0_vlan: left promiscuous mode
[  147.614545][   T51] Bluetooth: hci4: command tx timeout
[  147.936230][ T6310] udevd[6310]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  148.454203][ T6654] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  148.460956][ T6654] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  148.521093][ T6654] vhci_hcd vhci_hcd.0: Device attached
[  148.821510][   T29] usb 41-1: new low-speed USB device number 2 using vhci_hcd
[  149.168429][ T6655] vhci_hcd: connection reset by peer
[  149.194999][  T151] vhci_hcd vhci_hcd.4: stop threads
[  149.237427][  T151] vhci_hcd vhci_hcd.4: release socket
[  149.278344][  T151] vhci_hcd vhci_hcd.4: disconnect device
[  149.405306][ T6456] team0 (unregistering): Port device team_slave_1 removed
[  149.497789][ T6456] team0 (unregistering): Port device team_slave_0 removed
[  149.683543][   T51] Bluetooth: hci4: command tx timeout
[  150.187298][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5
[  150.257023][   T30] audit: type=1326 audit(1785782283.425:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.4.196" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4a59e019 code=0x7ffc0000
[  150.322880][ T6676] loop6: detected capacity change from 0 to 16
[  150.373898][   T30] audit: type=1326 audit(1785782283.435:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.4.196" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fbf4a59e019 code=0x7ffc0000
[  150.424810][ T6676] erofs (device loop6): mounted with root inode @ nid 36.
[  151.762956][   T51] Bluetooth: hci4: command tx timeout
[  153.535526][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.207'.
[  153.841488][   T51] Bluetooth: hci4: command tx timeout
[  154.678211][ T6605] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.711542][   T29] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  154.736605][ T6605] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.780535][ T6605] bridge_slave_0: entered allmulticast mode
[  154.827345][ T6605] bridge_slave_0: entered promiscuous mode
[  154.911943][ T6734] netlink: 'syz.5.210': attribute type 1 has an invalid length.
[  155.107022][ T6605] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.140980][ T6605] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.152878][ T6739] netlink: 'syz.5.210': attribute type 10 has an invalid length.
[  155.174467][ T6605] bridge_slave_1: entered allmulticast mode
[  155.180422][ T6739] netlink: 40 bytes leftover after parsing attributes in process `syz.5.210'.
[  155.205051][ T6605] bridge_slave_1: entered promiscuous mode
[  155.445478][ T6734] 8021q: adding VLAN 0 to HW filter on device bond1
[  155.697172][ T6735] bond1: (slave veth3): Enslaving as an active interface with a down link
[  155.844407][ T6736] bond1: (slave dummy0): making interface the new active one
[  155.913310][ T6736] dummy0: entered promiscuous mode
[  155.933511][ T6736] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  155.993363][ T6739] bond1: (slave dummy0): Releasing active interface
[  156.248104][ T6605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  156.313361][ T6605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  156.567234][ T6605] team0: Port device team_slave_0 added
[  156.638018][ T6605] team0: Port device team_slave_1 added
[  156.840458][ T6605] batman_adv: batadv0: Adding interface: batadv_slave_0
[  156.896465][ T6605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  157.002349][ T6605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.037707][ T6605] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.046969][ T6775] Illegal XDP return value 4294967294 on prog  (id 27) dev syz_tun, expect packet loss!
[  157.083505][ T6605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  157.179112][ T6605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.672960][ T6605] hsr_slave_0: entered promiscuous mode
[  157.697859][ T6605] hsr_slave_1: entered promiscuous mode
[  159.116430][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.223'.
[  159.515539][ T6803] team0: Port device team_slave_0 removed
[  159.879918][ T6605] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  159.954728][ T6605] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  159.982522][ T6605] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  160.036335][ T6605] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  160.054464][ T6605] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  160.106116][ T6605] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  160.157606][ T6605] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  160.239681][ T6605] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  160.804490][ T6605] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.961712][ T6605] 8021q: adding VLAN 0 to HW filter on device team0
[  161.051327][  T151] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.058485][  T151] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.156939][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.164113][ T6007] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.258269][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6
[  161.657784][ T6847] ohci-platform serial8250: error -ENXIO: IRQ index 0 not found
[  163.883239][ T6902] loop4: detected capacity change from 0 to 1024
[  163.913408][ T6902] EXT4-fs: inline encryption not supported
[  164.007968][ T6605] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.010665][ T6902] EXT4-fs (loop4): orphan cleanup on readonly fs
[  164.168979][ T5279] 8021q: adding VLAN 0 to HW filter on device eth7
[  164.264551][ T6902] EXT4-fs (loop4): 1 truncate cleaned up
[  164.307362][ T6902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  164.594403][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.607156][ T6913] loop5: detected capacity change from 0 to 256
[  165.038403][ T6921] netlink: 'syz.1.246': attribute type 1 has an invalid length.
[  165.216583][ T6921] 8021q: adding VLAN 0 to HW filter on device bond1
[  165.243855][ T6929] loop5: detected capacity change from 0 to 1024
[  165.253527][ T6929] EXT4-fs: Ignoring removed bh option
[  165.275091][ T6929] EXT4-fs: Ignoring removed bh option
[  165.297294][ T6929] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  165.371940][ T6926] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  165.373538][ T6929] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.417150][ T6927] macvlan2: entered promiscuous mode
[  165.425930][ T6927] macvlan2: entered allmulticast mode
[  165.432967][ T6927] bond1: entered promiscuous mode
[  165.438126][ T6927] veth0_to_bond: entered promiscuous mode
[  165.446017][ T6927] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  165.486799][ T6927] bond1: left promiscuous mode
[  165.500296][ T6927] veth0_to_bond: left promiscuous mode
[  165.579472][ T6935] EXT4-fs error (device loop5): ext4_find_dest_de:2049: inode #12: block 7: comm syz.5.247: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  165.630325][ T6935] EXT4-fs (loop5): Remounting filesystem read-only
[  165.699265][ T6929] overlayfs: failed to set uuid (/file0, err=-30); falling back to uuid=null.
[  165.740233][ T6929] overlayfs: failed to verify upper root origin
[  165.759981][ T6605] veth0_vlan: entered promiscuous mode
[  165.830705][ T6605] veth1_vlan: entered promiscuous mode
[  165.968495][ T6605] veth0_macvtap: entered promiscuous mode
[  166.000249][ T5616] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.025543][ T6605] veth1_macvtap: entered promiscuous mode
[  166.077885][   T24] libceph: connect (1)[c::]:6789 error -101
[  166.092504][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  166.161159][ T6942] ceph: No mds server is up or the cluster is laggy
[  166.193497][ T6605] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.258553][ T6605] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.391997][  T151] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.421744][  T151] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.584676][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.701463][ T6051] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.885102][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.943832][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.127309][ T6096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.165570][ T6096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.285055][ T5279] 8021q: adding VLAN 0 to HW filter on device eth8
[  167.912577][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'.
[  168.461264][ T6982] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.177'.
[  168.517183][ T6982] netlink: 24 bytes leftover after parsing attributes in process `syz.7.177'.
[  168.724907][ T6983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  168.784806][ T6988] loop5: detected capacity change from 0 to 136
[  168.886649][ T6983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  168.939471][ T6988] Attempt to read inode for relocated directory
[  169.050793][ T6989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  169.575122][ T6996] netlink: 'syz.7.262': attribute type 1 has an invalid length.
[  169.651220][ T7001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.263'.
[  169.958926][ T7005] loop1: detected capacity change from 0 to 2048
[  170.288147][ T7005] UDF-fs: error (device loop1): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1377)
[  172.573786][ T7044] loop6: detected capacity change from 0 to 16
[  172.713117][ T7044] erofs (device loop6): mounted with root inode @ nid 36.
[  173.454431][ T7044] syz.6.274: attempt to access beyond end of device
[  173.454431][ T7044] loop6: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  173.539176][ T7044] syz.6.274: attempt to access beyond end of device
[  173.539176][ T7044] loop6: rw=524288, sector=16, nr_sectors = 40 limit=16
[  173.592958][ T7044] erofs (device loop6): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192
[  173.645119][ T7044] erofs (device loop6): read error -117 @ 1 of nid 89
[  173.686636][ T7044] syz.6.274 (7044) used greatest stack depth: 19976 bytes left
[  173.696062][   T30] audit: type=1800 audit(1785782306.855:12): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.274" name="file2" dev="loop6" ino=89 res=0 errno=0
[  173.758159][   T30] audit: type=1800 audit(1785782306.875:13): pid=7049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.274" name="file2" dev="loop6" ino=89 res=0 errno=0
[  174.324217][ T7069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.014825][ T7074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.151535][ T7069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.222069][ T7056] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.288843][ T7056] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  175.732843][ T7076] loop6: detected capacity change from 0 to 256
[  175.745846][   T58] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.784246][   T58] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.825679][ T7078] batman_adv: batadv0: Adding interface: dummy0
[  175.872849][ T7078] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  175.911523][ T7078] batman_adv: batadv0: Interface activated: dummy0
[  176.064274][ T7080] net_ratelimit: 11 callbacks suppressed
[  176.064300][ T7080] batadv0: mtu less than device minimum
[  176.155137][ T7080] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  176.167155][ T7080] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  176.179070][ T7080] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  176.191038][ T7080] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  176.202950][ T7080] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  176.214836][ T7080] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  176.226744][ T7080] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  176.238656][ T7080] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  176.250584][ T7080] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  176.305039][ T6007] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  176.355633][ T6007] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  180.271172][ T7123] netlink: 'syz.0.308': attribute type 1 has an invalid length.
[  180.362170][ T5850] IPVS: starting estimator thread 0...
[  180.478796][ T7123] 8021q: adding VLAN 0 to HW filter on device bond1
[  180.489205][ T7131] IPVS: using max 22 ests per chain, 52800 per kthread
[  180.556573][ T7139] netlink: 'syz.0.308': attribute type 10 has an invalid length.
[  180.635885][ T7139] netlink: 40 bytes leftover after parsing attributes in process `syz.0.308'.
[  180.886016][ T7132] bond1: (slave veth3): Enslaving as an active interface with a down link
[  181.094663][ T7135] bond1: (slave dummy0): making interface the new active one
[  181.173815][ T7135] dummy0: entered promiscuous mode
[  181.206264][ T7135] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  181.323474][ T7139] bond1: (slave dummy0): Releasing active interface
[  181.774584][ T7155] batman_adv: batadv0: Adding interface: dummy0
[  181.824396][ T7155] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  181.978768][ T7155] batman_adv: batadv0: Interface activated: dummy0
[  182.053719][ T7158] net_ratelimit: 10 callbacks suppressed
[  182.053740][ T7158] batadv0: mtu less than device minimum
[  182.120292][ T7158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  182.132000][ T7158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  182.143577][ T7158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  182.155098][ T7158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  182.166607][ T7158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  182.178099][ T7158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  182.189598][ T7158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  182.201061][ T7158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  182.212559][ T7158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  183.523474][ T7183] loop0: detected capacity change from 0 to 2048
[  183.551649][ T5850] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  183.732065][ T5850] usb 6-1: Using ep0 maxpacket: 16
[  183.767798][ T5850] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  183.818243][ T5850] usb 6-1: config 0 has no interfaces?
[  183.864378][ T5850] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  183.885097][ T7183] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1377)
[  183.910359][ T5850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  183.948248][ T5850] usb 6-1: SerialNumber: syz
[  183.986288][ T5850] usb 6-1: config 0 descriptor??
[  185.187732][ T7201] netlink: 52 bytes leftover after parsing attributes in process `syz.6.312'.
[  185.223935][ T7201] netlink: 76 bytes leftover after parsing attributes in process `syz.6.312'.
[  185.269175][ T7201] netlink: 52 bytes leftover after parsing attributes in process `syz.6.312'.
[  185.948202][ T7224] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  185.998569][ T7228] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  186.328162][ T5742] usb 6-1: USB disconnect, device number 2
[  187.084376][ T7255] batman_adv: batadv0: Adding interface: dummy0
[  187.106398][ T7251] loop6: detected capacity change from 0 to 1024
[  187.113682][ T7255] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  187.252773][ T7251] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.277295][ T7255] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  187.895351][ T7274] netlink: 'syz.4.331': attribute type 1 has an invalid length.
[  188.146189][ T6017] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.210922][ T7274] 8021q: adding VLAN 0 to HW filter on device bond1
[  188.290811][ T7277] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  188.378341][ T7287] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  188.419925][ T7287] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  188.468070][ T7281] macvlan2: entered promiscuous mode
[  188.505299][ T7281] macvlan2: entered allmulticast mode
[  188.546774][ T7281] bond1: entered promiscuous mode
[  188.587928][ T7281] veth0_to_bond: entered promiscuous mode
[  188.624437][ T7281] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  188.724169][ T7281] bond1: left promiscuous mode
[  188.737468][ T7287] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3)
[  188.778645][ T7281] veth0_to_bond: left promiscuous mode
[  188.812974][ T7287] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3)
[  188.861980][ T7287] overlayfs: d_ino too big (63, ino=9223372036854776153, xinobits=3)
[  188.893197][ T7287] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3)
[  188.947504][ T7287] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3)
[  188.991010][ T7287] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3)
[  189.031717][ T7287] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3)
[  189.075346][ T7287] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3)
[  189.137194][ T7287] overlayfs: d_ino too big (dev, ino=4611686018427387923, xinobits=3)
[  189.216229][ T7287] overlayfs: d_ino too big (kernel, ino=4611686018427387911, xinobits=3)
[  189.256317][ T7306] loop0: detected capacity change from 0 to 128
[  191.591078][ T7341] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.598979][ T7341] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.909198][ T7341] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.966046][ T7341] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  193.165423][ T7367] netlink: 'syz.0.354': attribute type 1 has an invalid length.
[  193.259185][ T7373] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  193.290712][ T7373] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  193.568857][ T7367] 8021q: adding VLAN 0 to HW filter on device bond2
[  193.684459][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  193.693690][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  193.747268][ T7371] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  193.782091][ T6458] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  193.818577][ T6458] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.897470][ T7376] macvlan2: entered promiscuous mode
[  193.932610][ T7376] macvlan2: entered allmulticast mode
[  193.970581][ T7376] bond2: entered promiscuous mode
[  194.009135][ T7376] veth0_to_bond: entered promiscuous mode
[  194.035739][ T7376] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  194.078094][ T7376] bond2: left promiscuous mode
[  194.094269][ T7376] veth0_to_bond: left promiscuous mode
[  194.211951][ T6096] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  194.242450][ T6096] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.283173][ T6096] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  194.327847][ T6096] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.351947][ T6096] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  194.369790][ T6096] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.736934][ T7426] evm: overlay not supported
[  198.300090][ T7433] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.307746][ T7433] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.403188][ T7433] batman_adv: batadv0: Interface deactivated: dummy0
[  198.724313][ T7433] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  198.786502][ T7433] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.291805][   T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.372479][ T6096] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.394029][ T6096] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.408842][ T6096] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.487199][ T7469] binder: 7468:7469 unknown command 0
[  201.504083][ T7469] binder: 7468:7469 ioctl c0306201 200000004a40 returned -22
[  203.490158][ T7488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.392'.
[  203.625399][ T7493] netlink: 'syz.0.392': attribute type 10 has an invalid length.
[  203.699676][ T7490] dummy0: left promiscuous mode
[  203.716737][ T7493] netlink: 40 bytes leftover after parsing attributes in process `syz.0.392'.
[  203.769559][ T7490] bridge2: port 1(dummy0) entered blocking state
[  203.827522][ T7490] bridge2: port 1(dummy0) entered disabled state
[  203.882895][ T7490] dummy0: entered allmulticast mode
[  204.124367][ T7490] dummy0: entered promiscuous mode
[  205.374981][   T10] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  205.411717][ T7493] bridge2: port 1(dummy0) entered blocking state
[  205.418870][ T7493] bridge2: port 1(dummy0) entered forwarding state
[  205.521554][ T7493] dummy0: left allmulticast mode
[  205.548564][ T7493] bridge2: port 1(dummy0) entered disabled state
[  205.713332][ T7497] vlan0: entered promiscuous mode
[  205.740636][ T7497] hsr0: entered promiscuous mode
[  205.762995][ T7497] vlan0: entered allmulticast mode
[  205.798913][ T7497] hsr0: entered allmulticast mode
[  205.844491][ T7497] hsr_slave_0: entered allmulticast mode
[  205.852017][ T7497] hsr_slave_1: entered allmulticast mode
[  205.985247][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  206.012214][   T10] usb 5-1: unable to read config index 0 descriptor/start: -71
[  206.040025][   T10] usb 5-1: can't read configurations, error -71
[  206.601105][ T7516] loop5: detected capacity change from 0 to 128
[  209.512925][ T7553] sch_tbf: burst 1023 is lower than device lo mtu (65550) !
[  211.143255][ T5850] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  211.202775][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  211.202803][ T5636] Bluetooth: hci1: command 0x0406 tx timeout
[  211.202832][ T4933] Bluetooth: hci0: command 0x0406 tx timeout
[  211.209419][ T5636] Bluetooth: hci3: command 0x0406 tx timeout
[  211.323733][ T5850] usb 6-1: Using ep0 maxpacket: 32
[  211.364644][ T5850] usb 6-1: unable to get BOS descriptor or descriptor too short
[  211.409920][ T5850] usb 6-1: config 14 has an invalid interface number: 57 but max is 1
[  211.622949][ T5850] usb 6-1: config 14 has an invalid interface number: 228 but max is 1
[  212.428163][ T5850] usb 6-1: config 14 has no interface number 0
[  212.527061][ T5850] usb 6-1: config 14 has no interface number 1
[  212.680181][ T5850] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  212.924985][ T5850] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  213.036343][ T5850] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  213.104237][ T5850] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  213.133584][ T5850] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  213.162738][ T5850] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  213.180368][ T5850] usb 6-1: config 14 interface 57 has no altsetting 0
[  213.189801][ T5850] usb 6-1: config 14 interface 228 has no altsetting 0
[  213.205885][ T5850] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  213.222114][ T5850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.254482][ T5850] usb 6-1: Product: syz
[  213.275327][ T5850] usb 6-1: Manufacturer: syz
[  213.307443][ T5850] usb 6-1: SerialNumber: syz
[  213.741317][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  213.901323][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  214.571315][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  214.661321][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  214.691318][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  215.354267][ T5850] usb 6-1: can't set config #14, error -71
[  215.424966][ T5850] usb 6-1: USB disconnect, device number 3
[  215.605155][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'.
[  215.623727][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'.
[  215.854159][ T7621] loop1: detected capacity change from 0 to 128
[  215.867572][ T7618] loop7: detected capacity change from 0 to 1024
[  216.005577][ T7618] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  219.297249][ T6605] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.680238][ T7677] loop7: detected capacity change from 0 to 128
[  219.705367][ T7677] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  219.812405][ T7677] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  222.492065][ T7703] mmap: syz.5.458 (7703) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  223.064345][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.463'.
[  223.132158][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.463'.
[  223.198308][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.463'.
[  226.021191][   T30] audit: type=1804 audit(1785782359.195:14): pid=7758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.474" name="bus" dev="ramfs" ino=16327 res=1 errno=0
[  226.101125][   T30] audit: type=1804 audit(1785782359.195:15): pid=7758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.474" name="bus" dev="ramfs" ino=16327 res=1 errno=0
[  226.280814][   T30] audit: type=1326 audit(1785782359.455:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.1.476" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3539e019 code=0x7fc00000
[  226.348400][   T30] audit: type=1326 audit(1785782359.455:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.1.476" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b3539e019 code=0x7fc00000
[  226.988223][   T30] audit: type=1326 audit(1785782360.165:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.1.476" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3539e019 code=0x7fc00000
[  229.681589][ T7374] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  230.032190][ T7374] usb 8-1: Using ep0 maxpacket: 8
[  230.043385][ T7374] usb 8-1: unable to get BOS descriptor or descriptor too short
[  230.054711][ T7374] usb 8-1: too many configurations: 141, using maximum allowed: 8
[  230.089752][ T7374] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  230.128511][ T7374] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  230.173603][ T7374] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  230.194066][ T7374] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  230.319726][ T7374] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  230.350290][ T7374] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  230.407028][ T7374] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  230.441636][ T7374] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  230.494098][ T7374] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  230.530798][ T7374] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  230.603582][ T7374] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  230.647963][ T7374] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  230.711999][ T7374] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  230.741240][ T7374] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  230.792330][ T7374] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  230.824112][ T7374] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  230.879220][ T7374] usb 8-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40
[  230.894487][ T7374] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.938939][ T7374] usb 8-1: Product: syz
[  230.959707][ T7374] usb 8-1: Manufacturer: syz
[  230.984492][ T7374] usb 8-1: SerialNumber: syz
[  231.512755][ T7374] usb 8-1: USB disconnect, device number 2
[  231.601468][ T5634] Bluetooth: hci5: command 0x0406 tx timeout
[  232.308421][ T7827] netlink: 'syz.5.498': attribute type 4 has an invalid length.
[  232.925755][ T7840] loop6: detected capacity change from 0 to 128
[  234.800283][ T7872] loop1: detected capacity change from 0 to 512
[  234.830724][ T7872] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  234.877454][ T7872] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  234.945651][ T7872] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #11: comm syz.1.514: invalid indirect mapped block 9 (level 0)
[  235.043710][ T7872] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  235.049022][ T7872] EXT4-fs (loop1): 1 truncate cleaned up
[  235.058316][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  235.058415][    C0] EXT4-fs (loop1): initial error at time 1785782368: ext4_free_branches:1020: inode 11
[  235.058470][    C0] EXT4-fs (loop1): last error at time 1785782368: ext4_free_branches:1020: inode 11
[  235.099299][   T30] audit: type=1326 audit(1785782368.265:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.4.515" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf4a59e019 code=0x0
[  235.192155][ T7872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  235.262622][   T30] audit: type=1326 audit(1785782368.365:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.4.515" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4a59e019 code=0x7ffc0000
[  235.415175][   T30] audit: type=1326 audit(1785782368.385:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.4.515" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4a59e019 code=0x7ffc0000
[  235.444487][ T7872] netlink: 'syz.1.514': attribute type 16 has an invalid length.
[  235.493122][ T7872] netlink: 'syz.1.514': attribute type 17 has an invalid length.
[  235.556903][   T30] audit: type=1326 audit(1785782368.365:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.4.515" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf4a55e84e code=0x7ffc0000
[  235.595976][ T7872] net_ratelimit: 10 callbacks suppressed
[  235.596001][ T7872] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  235.704972][   T30] audit: type=1326 audit(1785782368.385:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.4.515" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf4a55e84e code=0x7ffc0000
[  235.833380][   T30] audit: type=1326 audit(1785782368.385:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.4.515" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf4a55e84e code=0x7ffc0000
[  235.947242][   T30] audit: type=1326 audit(1785782368.395:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.4.515" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf4a55e84e code=0x7ffc0000
[  235.984974][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.011854][   T30] audit: type=1326 audit(1785782368.395:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.4.515" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf4a55e84e code=0x7ffc0000
[  236.126352][   T30] audit: type=1326 audit(1785782368.395:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.4.515" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf4a55e84e code=0x7ffc0000
[  236.169671][ T7895] binder: 7894:7895 ioctl 4018620d 0 returned -22
[  236.266704][   T30] audit: type=1326 audit(1785782368.395:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.4.515" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf4a55e84e code=0x7ffc0000
[  236.668972][ T7905] bridge0: port 3(netdevsim0) entered blocking state
[  237.389939][ T7905] bridge0: port 3(netdevsim0) entered disabled state
[  237.527002][ T7905] netdevsim netdevsim7 netdevsim0: entered allmulticast mode
[  237.644007][ T7905] netdevsim netdevsim7 netdevsim0: entered promiscuous mode
[  237.677746][ T7915] process 'syz.1.523' launched './file0' with NULL argv: empty string added
[  237.699452][ T7905] bridge0: port 3(netdevsim0) entered blocking state
[  237.707010][ T7905] bridge0: port 3(netdevsim0) entered forwarding state
[  238.200822][ T7925] netlink: 'syz.4.526': attribute type 11 has an invalid length.
[  239.595792][ T7938] sd 0:0:1:0: PR command failed: 1026
[  239.639763][ T7938] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  239.670941][ T7938] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  239.696405][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.534'.
[  240.177648][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.534'.
[  240.669130][   T30] kauditd_printk_skb: 51 callbacks suppressed
[  240.669155][   T30] audit: type=1326 audit(1785782373.845:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.6.533" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac3779e019 code=0x0
[  240.800125][   T30] audit: type=1326 audit(1785782373.955:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.6.533" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3779e019 code=0x7ffc0000
[  240.924935][   T30] audit: type=1326 audit(1785782373.955:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.6.533" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3779e019 code=0x7ffc0000
[  241.169078][   T30] audit: type=1326 audit(1785782373.965:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.6.533" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fac3775e84e code=0x7ffc0000
[  241.962912][   T30] audit: type=1326 audit(1785782373.965:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.6.533" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fac3775e84e code=0x7ffc0000
[  241.990437][   T30] audit: type=1326 audit(1785782373.975:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.6.533" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fac3775e84e code=0x7ffc0000
[  242.018598][   T30] audit: type=1326 audit(1785782373.985:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.6.533" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fac3775e84e code=0x7ffc0000
[  242.046507][   T30] audit: type=1326 audit(1785782373.985:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.6.533" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fac3775e84e code=0x7ffc0000
[  242.073139][   T30] audit: type=1326 audit(1785782373.985:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.6.533" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fac3775e84e code=0x7ffc0000
[  242.526270][   T30] audit: type=1326 audit(1785782373.995:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.6.533" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fac3775e84e code=0x7ffc0000
[  243.030702][ T7983] loop4: detected capacity change from 0 to 8
[  243.067803][ T7983] Major/Minor mismatch, trying to mount newer 256.0 filesystem
[  243.097482][ T7983] Please update your kernel
[  245.126513][ T8019] tipc: Started in network mode
[  245.148725][ T8019] tipc: Node identity 4, cluster identity 4711
[  245.164701][ T8019] tipc: Node number set to 4
[  245.301444][ T5782] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  245.331736][ T8015] loop5: detected capacity change from 0 to 8192
[  245.355951][ T8015] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  245.483093][ T5782] usb 5-1: Using ep0 maxpacket: 16
[  245.512297][ T5782] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  245.544360][ T5782] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  245.583762][ T8029] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  245.606435][ T5782] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  245.632981][ T5782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.661996][ T5782] usb 5-1: Product: syz
[  245.678243][ T5782] usb 5-1: Manufacturer: syz
[  245.688348][ T5782] usb 5-1: SerialNumber: syz
[  245.716590][ T5782] usb 5-1: config 0 descriptor??
[  245.745079][ T5782] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  245.792685][ T5782] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  246.111693][ T8038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.565'.
[  246.145679][ T8043] loop7: detected capacity change from 0 to 128
[  246.155056][ T8040] bond2: (slave ip6gretap1): making interface the new active one
[  246.165768][ T8040] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  246.316832][ T8045] batman_adv: batadv0: Removing interface: dummy0
[  246.332149][ T8038] netlink: 'syz.1.565': attribute type 10 has an invalid length.
[  246.356935][ T8045] bridge1: port 1(dummy0) entered blocking state
[  246.368400][ T8038] netlink: 40 bytes leftover after parsing attributes in process `syz.1.565'.
[  246.370628][ T8045] bridge1: port 1(dummy0) entered disabled state
[  246.384443][ T5782] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  246.418499][ T5782] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  246.461567][ T8045] dummy0: entered allmulticast mode
[  246.501535][ T8045] dummy0: entered promiscuous mode
[  246.537051][ T8038] bridge1: port 1(dummy0) entered blocking state
[  246.543569][ T8038] bridge1: port 1(dummy0) entered forwarding state
[  246.591313][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  246.639859][ T8038] dummy0: left allmulticast mode
[  246.688126][ T8038] bridge1: port 1(dummy0) entered disabled state
[  247.119036][ T5782] em28xx 5-1:0.0: Unknown AC97 audio processor detected!
[  247.862444][ T5782] em28xx 5-1:0.0: couldn't setup AC97 register 2
[  247.904824][ T5782] em28xx 5-1:0.0: couldn't setup AC97 register 4
[  247.932228][ T5782] em28xx 5-1:0.0: couldn't setup AC97 register 6
[  247.951603][ T5782] em28xx 5-1:0.0: couldn't setup AC97 register 54
[  247.962572][ T5782] em28xx 5-1:0.0: couldn't setup AC97 register 56
[  248.062611][ T5782] usb 5-1: USB disconnect, device number 5
[  248.509809][ T8067] netlink: 'syz.6.561': attribute type 1 has an invalid length.
[  249.262366][ T8071] netlink: 'syz.6.561': attribute type 10 has an invalid length.
[  249.321631][ T8071] netlink: 40 bytes leftover after parsing attributes in process `syz.6.561'.
[  249.333605][ T8069] syz.1.560 (8069) used greatest stack depth: 19336 bytes left
[  249.567880][ T8067] 8021q: adding VLAN 0 to HW filter on device bond1
[  249.619432][ T8070] batman_adv: batadv0: Removing interface: dummy0
[  249.672411][  T140] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  249.699844][ T8070] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  249.754335][ T8071] dummy0: entered promiscuous mode
[  249.775258][  T140] bond1: (slave dummy0): link status up again after 0 ms
[  249.788207][ T8071] bond1: (slave dummy0): Removing an active aggregator
[  249.808110][  T132] bond1: (slave dummy0): link status up again after 0 ms
[  249.845135][  T132] bond1: Warning: Found an uninitialized port
[  249.854254][ T8071] bond1: (slave dummy0): Releasing backup interface
[  249.896464][ T8079] syz_tun: entered allmulticast mode
[  249.926610][ T8081] tipc: Started in network mode
[  249.937364][ T8081] tipc: Node identity 1000001, cluster identity 4369
[  249.972016][ T8081] tipc: Node number set to 16777217
[  250.000766][ T8087] syz_tun: left allmulticast mode
[  250.038367][ T8093] tipc: New replicast peer: 127.0.0.1
[  250.078657][ T8093] tipc: Enabled bearer <udp:syz0>, priority 10
[  254.376539][ T8138] loop4: detected capacity change from 0 to 128
[  254.917949][ T8152] binder: 8150:8152 ioctl c0306201 200000004a40 returned -22
[  255.134650][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  255.156498][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  257.761789][ T8183] netlink: 48 bytes leftover after parsing attributes in process `syz.7.590'.
[  260.493121][ T8206] loop4: detected capacity change from 0 to 512
[  260.537017][ T8206] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  260.613460][ T8206] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #11: comm syz.4.598: invalid indirect mapped block 9 (level 0)
[  260.684349][ T8206] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  260.691312][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  260.708275][    C0] EXT4-fs (loop4): initial error at time 1785782393: ext4_free_branches:1020: inode 11
[  260.718019][    C0] EXT4-fs (loop4): last error at time 1785782393: ext4_free_branches:1020: inode 11
[  260.766955][ T8206] EXT4-fs (loop4): 1 truncate cleaned up
[  260.879074][ T8206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  261.023178][ T8206] netlink: 'syz.4.598': attribute type 16 has an invalid length.
[  261.034919][ T8206] netlink: 'syz.4.598': attribute type 17 has an invalid length.
[  261.074413][ T8206] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  261.396170][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.366618][ T8257] loop4: detected capacity change from 0 to 1024
[  268.463020][ T8257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  268.926654][ T8271] netlink: 16399 bytes leftover after parsing attributes in process `syz.5.620'.
[  269.604491][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  269.604511][   T30] audit: type=1804 audit(1785782402.785:101): pid=8276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.622" name="bus" dev="ramfs" ino=19125 res=1 errno=0
[  269.720631][   T30] audit: type=1804 audit(1785782402.875:102): pid=8276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.622" name="bus" dev="ramfs" ino=19125 res=1 errno=0
[  271.172406][ T8288] loop7: detected capacity change from 0 to 128
[  271.469551][ T8288] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  272.286123][ T8288] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  272.475116][ T8288] EXT4-fs (loop7): shut down requested (1)
[  272.519361][ T8288] fscrypt (loop7, inode 12): Error -5 getting encryption context
[  272.566008][ T8288] fscrypt (loop7, inode 12): Error -5 getting encryption context
[  272.668461][ T8302] Bluetooth: (null): Invalid header checksum
[  272.798626][ T6605] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  272.962526][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.041497][ T5625] Bluetooth: hci4: command 0x0406 tx timeout
[  274.643288][ T8310] loop7: detected capacity change from 0 to 8192
[  275.483686][ T8310] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  278.278017][ T8348] event trace: Could not enable event p
[  278.365576][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.7.646'.
[  281.144078][ T8374] lo: entered allmulticast mode
[  281.170049][ T8374] lo: left allmulticast mode
[  281.186076][ T8375] loop4: detected capacity change from 0 to 2048
[  281.256296][ T8375] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c029, mo2=0003]
[  281.345321][ T8375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  281.499833][ T8386] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.650: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  281.526931][ T8386] EXT4-fs (loop4): Remounting filesystem read-only
[  281.569129][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.590403][ T8387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.651'.
[  282.160837][ T8392] loop4: detected capacity change from 0 to 8192
[  282.193613][ T8392] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  282.880032][ T8404] netlink: 'syz.7.658': attribute type 1 has an invalid length.
[  283.061614][ T8409] netlink: 'syz.7.658': attribute type 10 has an invalid length.
[  283.091190][ T8409] netlink: 40 bytes leftover after parsing attributes in process `syz.7.658'.
[  283.158045][ T8404] 8021q: adding VLAN 0 to HW filter on device bond1
[  283.208306][ T8407] batman_adv: batadv0: Interface deactivated: dummy0
[  283.250874][ T8407] batman_adv: batadv0: Removing interface: dummy0
[  283.314532][ T8412] loop1: detected capacity change from 0 to 256
[  283.371725][ T8407] bond1: (slave dummy0): Enslaving as a backup interface with an up link
[  283.372645][   T36] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  283.425392][ T8409] dummy0: entered promiscuous mode
[  283.434675][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.662'.
[  283.511092][ T8409] bond1: (slave dummy0): Removing an active aggregator
[  283.573538][ T8409] bond1: (slave dummy0): Releasing backup interface
[  289.293518][ T8466] netlink: 'syz.4.679': attribute type 1 has an invalid length.
[  289.415965][ T8469] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000
[  289.527092][ T8477] netlink: 'syz.4.679': attribute type 10 has an invalid length.
[  289.574789][ T8477] netlink: 40 bytes leftover after parsing attributes in process `syz.4.679'.
[  289.701553][ T8466] 8021q: adding VLAN 0 to HW filter on device bond2
[  289.879977][ T8475] bond2: (slave dummy0): Enslaving as a backup interface with an up link
[  289.951732][   T13] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  289.974828][ T8477] dummy0: entered promiscuous mode
[  290.220087][   T13] bond2: (slave dummy0): link status up again after 0 ms
[  290.231917][ T8477] bond2: (slave dummy0): Removing an active aggregator
[  290.240157][ T8477] bond2: (slave dummy0): Releasing backup interface
[  291.891915][ T8486] loop5: detected capacity change from 0 to 1024
[  292.301514][ T8486] hfsplus: failed to load extents file
[  292.652687][ T8503] syz_tun: entered allmulticast mode
[  294.846128][ T8520] loop4: detected capacity change from 0 to 128
[  294.883269][ T8520] FAT-fs (loop4): data area starts beyond volume (33 > 0)
[  294.927373][ T8520] FAT-fs (loop4): Can't find a valid FAT filesystem
[  295.046313][ T8525] netlink: 12 bytes leftover after parsing attributes in process `syz.7.703'.
[  295.196754][ T8529] dummy0: left promiscuous mode
[  295.222803][ T8529] bridge1: port 1(dummy0) entered blocking state
[  295.259674][ T8529] bridge1: port 1(dummy0) entered disabled state
[  295.300477][ T8529] dummy0: entered allmulticast mode
[  295.342492][ T8525] netlink: 'syz.7.703': attribute type 10 has an invalid length.
[  295.384239][ T8529] dummy0: entered promiscuous mode
[  295.413566][ T8525] netlink: 40 bytes leftover after parsing attributes in process `syz.7.703'.
[  295.466319][ T8525] bridge1: port 1(dummy0) entered blocking state
[  295.472928][ T8525] bridge1: port 1(dummy0) entered forwarding state
[  295.532458][ T8525] dummy0: left allmulticast mode
[  295.563196][ T8525] bridge1: port 1(dummy0) entered disabled state
[  295.791829][ T5742] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  296.123792][ T5742] usb 1-1: Using ep0 maxpacket: 16
[  296.388000][ T5742] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  296.431324][ T5742] usb 1-1: config 0 interface 0 has no altsetting 0
[  296.450910][ T5742] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  296.477117][ T5742] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.511799][ T5742] usb 1-1: config 0 descriptor??
[  297.466460][ T8536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  297.840575][ T8536] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  298.171985][ T5742] mcp2221 0003:04D8:00DD.0001: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  299.107868][ T5742] usb 1-1: USB disconnect, device number 3
[  299.139672][ T8558] loop5: detected capacity change from 0 to 1024
[  299.251917][ T8560] bridge0: port 1(syz_tun) entered blocking state
[  299.281219][ T8560] bridge0: port 1(syz_tun) entered disabled state
[  299.303826][ T8558] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  299.370002][ T8560] syz_tun: entered promiscuous mode
[  299.550681][ T8568] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  299.574351][ T8568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.728'.
[  300.703408][ T5616] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.380753][ T8590] netlink: 12 bytes leftover after parsing attributes in process `syz.5.720'.
[  301.446737][ T8590] dummy0: left promiscuous mode
[  301.456404][ T8590] batman_adv: batadv0: Removing interface: dummy0
[  301.473653][ T8590] bridge2: port 1(dummy0) entered blocking state
[  301.495276][ T8590] bridge2: port 1(dummy0) entered disabled state
[  301.518167][ T8595] netlink: 'syz.5.720': attribute type 10 has an invalid length.
[  301.519445][ T8590] dummy0: entered allmulticast mode
[  301.570174][ T8595] netlink: 40 bytes leftover after parsing attributes in process `syz.5.720'.
[  301.639796][ T8590] dummy0: entered promiscuous mode
[  301.699591][ T8595] bridge2: port 1(dummy0) entered blocking state
[  301.706142][ T8595] bridge2: port 1(dummy0) entered forwarding state
[  301.806012][ T8595] dummy0: left allmulticast mode
[  301.845639][ T8595] bridge2: port 1(dummy0) entered disabled state
[  302.119588][ T8600] ieee802154 phy0 wpan0: encryption failed: -22
[  302.759832][ T8594] loop6: detected capacity change from 0 to 32768
[  302.876297][ T8594] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.722 (8594)
[  303.750129][ T8594] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  303.822281][ T8594] BTRFS info (device loop6): using sha256 checksum algorithm
[  304.349046][ T8594] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  304.366191][ T8594] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  305.209395][ T8594] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  305.235783][ T8594] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  305.264689][ T8594] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  305.280907][ T8594] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  305.567311][ T8594] BTRFS error (device loop6): open_ctree failed: -12
[  307.527520][ T8663] netlink: 'syz.0.741': attribute type 10 has an invalid length.
[  307.587754][  T132] bond0: (slave bond_slave_0): interface is now down
[  307.638627][  T132] bond0: (slave bond_slave_1): interface is now down
[  307.760024][  T132] bond0: now running without any active interface!
[  309.702426][ T7374] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  309.901385][ T7374] usb 1-1: Using ep0 maxpacket: 32
[  309.929875][ T7374] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  309.970597][ T7374] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  310.022362][ T7374] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  310.083560][ T7374] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  310.160931][ T7374] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  310.233526][ T7374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.263176][ T7374] usb 1-1: Product: syz
[  310.272664][ T7374] usb 1-1: Manufacturer: syz
[  310.977049][ T7374] usb 1-1: SerialNumber: syz
[  311.089354][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  311.261779][ T7374] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input6
[  311.316436][ T8714] sch_tbf: burst 1520 is lower than device lo mtu (65550) !
[  311.381578][ T7374] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  311.402281][ T7374]  (id 0x00)
[  311.571679][ T7374] rc_core: IR keymap rc-imon-pad not found
[  311.582504][ T7374] Registered IR keymap rc-empty
[  311.596036][ T7374] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  311.646912][ T7374] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  311.732256][ T7374] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0
[  311.846200][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.7.761'.
[  312.080364][ T7374] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input7
[  312.893385][ T7374] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:4> initialized
[  312.916555][ T7374] usb 1-1: USB disconnect, device number 4
[  314.322895][ T8746] loop5: detected capacity change from 0 to 128
[  314.377690][ T8753] sch_tbf: burst 1520 is lower than device lo mtu (65550) !
[  314.428693][ T8746] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  314.443890][ T8746] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  314.640259][ T5616] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  316.566127][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  316.576710][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  316.613940][ T8785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.778'.
[  316.708346][ T8787] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000
[  316.748280][ T8785] dummy0: left promiscuous mode
[  316.777142][ T8785] bridge3: port 1(dummy0) entered blocking state
[  316.816920][ T8793] netlink: 'syz.0.778': attribute type 10 has an invalid length.
[  316.845413][ T8785] bridge3: port 1(dummy0) entered disabled state
[  316.874487][ T8785] dummy0: entered allmulticast mode
[  316.905769][ T8793] netlink: 40 bytes leftover after parsing attributes in process `syz.0.778'.
[  317.332200][ T8785] dummy0: entered promiscuous mode
[  317.822246][ T8793] bridge3: port 1(dummy0) entered blocking state
[  317.828748][ T8793] bridge3: port 1(dummy0) entered forwarding state
[  318.675946][ T8793] dummy0: left allmulticast mode
[  318.701367][ T8793] bridge3: port 1(dummy0) entered disabled state
[  318.834130][ T8801] loop5: detected capacity change from 0 to 4096
[  319.126797][ T8823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.791'.
[  320.682745][ T8839] loop0: detected capacity change from 0 to 1764
[  321.121052][ T8839] iso9660: Corrupted directory entry in block 14 of inode 1920
[  321.177031][ T8848] binder: 8847:8848 unknown command 0
[  321.182775][ T8848] binder: 8847:8848 ioctl c0306201 2000000004c0 returned -22
[  321.561354][ T7360] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  322.722222][ T7360] usb 2-1: Using ep0 maxpacket: 16
[  322.750413][ T7360] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[  322.800865][ T7360] usb 2-1: config 0 has no interface number 0
[  323.002893][ T7360] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  323.013780][ T7360] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  323.031531][ T7360] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  323.045112][ T7360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.064867][ T7360] usb 2-1: Product: syz
[  324.073271][ T7360] usb 2-1: Manufacturer: syz
[  324.162533][ T7360] usb 2-1: SerialNumber: syz
[  325.141100][ T7360] usb 2-1: config 0 descriptor??
[  325.155735][ T7360] usb 2-1: can't set config #0, error -71
[  325.195738][ T7360] usb 2-1: USB disconnect, device number 3
[  325.331832][ T8885] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000
[  325.964212][ T8892] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[8894] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[8892]
[  327.275968][ T5742] IPVS: starting estimator thread 0...
[  327.359355][ T8914] IPVS: fo: FWM 3 0x00000003 - no destination available
[  327.441475][ T5742] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  327.847690][ T8916] IPVS: using max 23 ests per chain, 55200 per kthread
[  328.439501][ T5742] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  328.496203][ T8925] netlink: 44 bytes leftover after parsing attributes in process `syz.1.823'.
[  328.497953][ T5742] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  328.588632][ T5742] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  328.636085][ T5742] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.676216][ T5742] usb 8-1: Product: syz
[  328.686537][ T5742] usb 8-1: Manufacturer: syz
[  328.699015][ T5742] usb 8-1: SerialNumber: syz
[  328.735980][ T5742] usb 8-1: config 0 descriptor??
[  328.758956][ T8912] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  328.780184][ T8912] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  328.898560][ T5782] vfio-pci 0000:00:05.0: vgaarb: deactivate vga console
[  329.006233][ T5782] vfio-pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  329.013622][ T5782] vfio-pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  329.032372][ T8934] vfio-pci 0000:00:05.0: probe with driver vfio-pci failed with error -22
[  329.092466][ T8912] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  329.092664][ T8912] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  329.497474][ T5742] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  329.791034][ T8948] netlink: 4 bytes leftover after parsing attributes in process `syz.5.832'.
[  330.454308][ T5742] dm9601 8-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  330.614696][ T5742] dm9601 8-1:0.0 eth9: register 'dm9601' at usb-dummy_hcd.7-1, Davicom DM96xx USB 10/100 Ethernet, a2:ab:c7:46:33:d5
[  330.641113][ T5742] usb 8-1: USB disconnect, device number 3
[  330.659159][ T5742] dm9601 8-1:0.0 eth9: unregister 'dm9601' usb-dummy_hcd.7-1, Davicom DM96xx USB 10/100 Ethernet
[  332.242031][ T8967] loop6: detected capacity change from 0 to 128
[  332.787869][ T8967] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  332.856597][ T8967] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  334.527925][ T6017] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  337.668452][ T9037] loop5: detected capacity change from 0 to 256
[  337.897267][ T9043] loop0: detected capacity change from 0 to 2048
[  338.004565][ T9043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  338.196810][ T9043] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  338.280035][   T30] audit: type=1804 audit(1785782471.455:103): pid=9037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.858" name="/newroot/144/file0/bus" dev="loop5" ino=1048621 res=1 errno=0
[  338.280559][ T9056] warning: `syz.7.862' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  338.328508][ T9043] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28
[  338.425469][ T9043] EXT4-fs (loop0): This should not happen!! Data will be lost
[  338.425469][ T9043] 
[  338.476773][ T9043] EXT4-fs (loop0): Total free blocks count 0
[  338.503221][ T9043] EXT4-fs (loop0): Free/Dirty block details
[  338.524277][ T9043] EXT4-fs (loop0): free_blocks=4096
[  338.549750][ T9043] EXT4-fs (loop0): dirty_blocks=32
[  338.572882][ T9043] EXT4-fs (loop0): Block reservation details
[  338.611895][ T9043] EXT4-fs (loop0): i_reserved_data_blocks=2
[  338.714991][ T9058] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28
[  339.077444][ T5617] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #16: comm syz-executor: data will be lost
[  339.384984][ T9071] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  339.442679][ T9071] block device autoloading is deprecated and will be removed.
[  339.485281][ T9066] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  339.583600][ T9066] block device autoloading is deprecated and will be removed.
[  340.901309][    T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!!
[  343.990957][ T9126] xt_TPROXY: Can be used only with -p tcp or -p udp
[  345.655147][ T9133] ieee802154 phy0 wpan0: encryption failed: -22
[  346.159285][ T9144] tipc: Failed to remove unknown binding: 66,0,0/0:1345809354/1345809356
[  346.199791][ T9144] tipc: Failed to remove unknown binding: 66,0,0/0:1345809354/1345809355
[  346.250804][ T9144] tipc: Failed to remove unknown binding: 66,0,0/0:1345809354/1345809356
[  346.305404][ T9144] tipc: Failed to remove unknown binding: 66,0,0/0:1345809354/1345809355
[  346.316818][ T9152] loop6: detected capacity change from 0 to 128
[  346.393961][ T9152] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  346.495508][ T9152] ext4 filesystem being mounted at /137/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  348.171120][ T9164] loop1: detected capacity change from 0 to 512
[  348.344480][ T9164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  348.451485][ T9164] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  348.596447][ T9176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.890'.
[  349.145804][ T9152] fscrypt (loop6, inode 12): Unsupported encryption flags (0x10)
[  349.150631][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.248067][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.893'.
[  352.812487][ T6017] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  356.796740][ T9251] input: syz0 as /devices/virtual/input/input8
[  357.181727][ T9259] SQUASHFS error: Failed to read block 0x0: -5
[  357.211090][ T9259] unable to read squashfs_super_block
[  357.325860][ T9262] netlink: 'syz.5.912': attribute type 11 has an invalid length.
[  357.723239][ T9263] 8021q: adding VLAN 0 to HW filter on device bond0
[  357.847579][ T9263] 8021q: adding VLAN 0 to HW filter on device team0
[  357.854630][ T9272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.914'.
[  357.857406][ T9266] ieee802154 phy0 wpan0: encryption failed: -22
[  358.110585][ T9263] 8021q: adding VLAN 0 to HW filter on device batadv0
[  359.287923][ T9263] batman_adv: batadv0: Interface activated: batadv_slave_0
[  359.325406][ T9263] batman_adv: batadv0: Interface activated: batadv_slave_1
[  359.454218][ T9263] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  359.531522][ T9263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  359.618784][ T9263] veth1_vlan: left promiscuous mode
[  359.646941][ T9263] veth0_vlan: left promiscuous mode
[  359.681206][ T9263] veth0_vlan: entered promiscuous mode
[  359.718716][ T9263] veth1_vlan: entered promiscuous mode
[  359.787265][ T9263] veth1_macvtap: left promiscuous mode
[  359.824630][ T9263] veth0_macvtap: left promiscuous mode
[  359.851071][ T9263] veth0_macvtap: entered promiscuous mode
[  359.885199][ T9263] veth1_macvtap: entered promiscuous mode
[  360.130133][ T9263] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  360.953268][ T9263] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  360.985485][ T9263] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  361.019593][ T9263] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  361.098144][ T9263] 8021q: adding VLAN 0 to HW filter on device bond1
[  361.193739][ T9263] 8021q: adding VLAN 0 to HW filter on device bond2
[  361.313065][  T132] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  361.349785][  T132] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  361.457105][ T6458] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.464421][ T6458] bridge0: port 1(bridge_slave_0) entered listening state
[  361.763293][ T6458] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.770513][ T6458] bridge0: port 2(bridge_slave_1) entered listening state
[  363.881767][  T132] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  363.909561][  T132] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  363.937834][  T132] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  364.058236][  T132] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  364.095900][ T9298] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.918'.
[  364.309011][ T6456] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  364.357090][ T6456] bond1: (slave veth3): making interface the new active one
[  364.497029][ T6456] bond1: active interface up!
[  364.528955][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.7.931'.
[  364.601592][   T58] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  364.621037][   T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  364.665140][ T9331] netlink: 12 bytes leftover after parsing attributes in process `syz.7.931'.
[  364.691862][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.7.931'.
[  365.750020][ T9344] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  365.974864][ T9350] netlink: 'syz.7.937': attribute type 10 has an invalid length.
[  366.001044][ T9350] bridge0: port 3(netdevsim0) entered disabled state
[  366.008244][ T9350] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.015731][ T9350] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.073388][ T9355] netlink: 168 bytes leftover after parsing attributes in process `syz.7.937'.
[  366.105939][ T9350] bridge0: port 3(netdevsim0) entered blocking state
[  366.112944][ T9350] bridge0: port 3(netdevsim0) entered forwarding state
[  366.123978][ T9350] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.131400][ T9350] bridge0: port 2(bridge_slave_1) entered forwarding state
[  366.138962][ T9350] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.146240][ T9350] bridge0: port 1(bridge_slave_0) entered forwarding state
[  366.944499][ T9362] loop1: detected capacity change from 0 to 512
[  367.005354][ T9362] EXT4-fs: Ignoring removed nomblk_io_submit option
[  367.092192][ T9350] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  367.290963][ T9362] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  368.240496][ T9362] EXT4-fs (loop1): 1 truncate cleaned up
[  368.288843][ T9379] mac80211_hwsim hwsim13 syzkaller0: entered promiscuous mode
[  368.336889][ T9379] mac80211_hwsim hwsim13 syzkaller0: entered allmulticast mode
[  368.375509][ T9362] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  369.782028][ T9400] binder: 9397:9400 ioctl c0306201 200000000080 returned -14
[  370.600759][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  371.067669][ T9414] Config c/1 of g1 needs at least one function.
[  371.127625][ T9414] udc dummy_udc.0: failed to start g1: -22
[  371.140747][ T9414] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[  371.192967][ T9414] UDC core: g1: couldn't find an available UDC or it's busy
[  371.359284][ T9422] loop7: detected capacity change from 0 to 256
[  371.404996][   T30] audit: type=1804 audit(1785782504.585:104): pid=9422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.959" name="/newroot/120/file0/bus" dev="loop7" ino=1048623 res=1 errno=0
[  371.821662][ T9435] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  372.167087][ T9438] loop4: detected capacity change from 0 to 1024
[  372.196379][ T9438] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  372.390016][ T9438] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.964: lblock 2 mapped to illegal pblock 2 (length 1)
[  372.457055][ T9438] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  372.470378][ T9438] Quota error (device loop4): qtree_write_dquot: dquota write failed
[  372.471262][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  372.493935][    C0] EXT4-fs (loop4): initial error at time 1785782505: ext4_map_blocks:791: inode 3: block 2
[  372.503988][    C0] EXT4-fs (loop4): last error at time 1785782505: ext4_map_blocks:791: inode 3: block 2
[  372.548559][ T9438] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 48: comm syz.4.964: lblock 0 mapped to illegal pblock 48 (length 1)
[  372.573431][ T9438] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  372.575666][ T9438] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  372.674983][ T9438] EXT4-fs error (device loop4): ext4_acquire_dquot:7039: comm syz.4.964: Failed to acquire dquot type 0
[  372.742668][ T9438] loop4: lost filesystem error report for type 5 error -117
[  372.835498][ T9438] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  372.958982][ T9438] loop4: lost filesystem error report for type 5 error -117
[  372.986324][ T9438] EXT4-fs error (device loop4): ext4_evict_inode:267: inode #11: comm syz.4.964: mark_inode_dirty error
[  373.011501][ T9438] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  373.012745][ T9438] EXT4-fs warning (device loop4): ext4_evict_inode:269: couldn't mark inode dirty (err -117)
[  373.286688][ T9451] netlink: 'syz.1.966': attribute type 2 has an invalid length.
[  373.986314][ T9438] EXT4-fs (loop4): 1 orphan inode deleted
[  374.028638][ T9438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  374.144165][  T140] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  374.412707][  T140] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  374.529599][  T140] EXT4-fs error (device loop4): ext4_release_dquot:7075: comm kworker/u8:6: Failed to release dquot type 0
[  374.851834][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.911953][   T13] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  374.930328][   T13] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  374.935177][   T13] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  374.954409][   T13] EXT4-fs error (device loop4): ext4_release_dquot:7075: comm kworker/u8:1: Failed to release dquot type 0
[  374.967213][   T13] loop4: lost filesystem error report for type 5 error -117
[  374.972077][ T5618] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0
[  374.993568][ T5618] loop4: lost filesystem error report for type 5 error -117
[  374.996507][ T5618] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  375.015413][ T5618] loop4: lost filesystem error report for type 5 error -117
[  375.015714][ T5618] EXT4-fs error (device loop4): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error
[  375.035571][ T5618] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  375.529693][ T9471] lo: entered allmulticast mode
[  375.771571][ T9477] loop4: detected capacity change from 0 to 512
[  375.806635][ T9477] EXT4-fs: Ignoring removed bh option
[  375.851857][ T5742] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  375.879624][ T9476] syzkaller0: entered promiscuous mode
[  375.900712][ T9477] EXT4-fs error (device loop4): ext4_iget_extra_inode:5179: inode #15: comm syz.4.976: corrupted in-inode xattr: e_value size too large
[  375.901438][ T9476] syzkaller0: entered allmulticast mode
[  375.947317][ T9477] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  375.952347][    C1] EXT4-fs (loop4): initial error at time 1785782509: ext4_iget_extra_inode:5179: inode 15
[  375.971645][    C1] EXT4-fs (loop4): last error at time 1785782509: ext4_iget_extra_inode:5179: inode 15
[  376.010696][ T9477] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.976: couldn't read orphan inode 15 (err -117)
[  376.039571][ T5742] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  376.065364][ T5742] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  376.098094][ T9477] loop4: lost filesystem error report for type 5 error -117
[  376.105633][ T9477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  376.110827][ T5742] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  376.179289][ T5742] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  376.207343][ T5742] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.246148][ T5742] usb 8-1: config 0 descriptor??
[  377.984225][ T5742] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  378.005600][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  378.058378][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.963730][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  378.979432][ T5742] usb 8-1: USB disconnect, device number 4
[  378.994679][ T9491] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.990'.
[  379.714831][ T9501] fido_id[9501]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  379.771982][ T9506] loop4: detected capacity change from 0 to 256
[  380.115849][ T9514] netlink: 'syz.6.983': attribute type 2 has an invalid length.
[  381.205044][ T9522] binder: BINDER_SET_CONTEXT_MGR already set
[  381.213950][ T9522] binder: 9521:9522 ioctl 4018620d 200000004a80 returned -16
[  386.221046][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.995'.
[  386.343135][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.995'.
[  386.460329][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.995'.
[  390.662748][ T9568] loop6: detected capacity change from 0 to 512
[  390.694969][ T9552] 8021q: adding VLAN 0 to HW filter on device bond2
[  390.720498][ T9568] EXT4-fs: Ignoring removed nomblk_io_submit option
[  390.768027][ T9568] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  390.837656][ T9559] 8021q: adding VLAN 0 to HW filter on device bond0
[  390.889295][ T5634] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  390.903414][ T5634] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  390.916911][ T5634] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  390.917534][ T9568] EXT4-fs (loop6): 1 truncate cleaned up
[  390.938614][ T5634] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  391.002036][ T5634] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  391.114957][ T9559] bond2: (slave bond0): making interface the new active one
[  391.190010][ T9559] bond2: (slave bond0): Enslaving as an active interface with an up link
[  392.084082][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  392.093906][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[  392.196033][ T9568] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  393.214135][   T10] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  393.272213][ T5625] Bluetooth: hci6: command tx timeout
[  393.751597][   T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  393.844928][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  393.938337][   T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  394.012895][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.023204][ T6017] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.072818][   T10] usb 1-1: config 0 descriptor??
[  394.640722][   T10] ath6kl: Failed to submit usb control message: -71
[  394.691382][   T10] ath6kl: unable to send the bmi data to the device: -71
[  394.711745][   T10] ath6kl: Unable to send get target info: -71
[  395.627905][ T5625] Bluetooth: hci6: command tx timeout
[  395.691446][   T10] ath6kl: Failed to init ath6kl core: -71
[  395.732452][   T10] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  396.122810][   T10] usb 1-1: USB disconnect, device number 5
[  397.529509][ T9630] loop4: detected capacity change from 0 to 2048
[  397.571019][ T9630] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  397.681569][ T5625] Bluetooth: hci6: command tx timeout
[  399.192258][ T9638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1016'.
[  399.295158][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1016'.
[  399.353955][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1016'.
[  399.851678][ T5625] Bluetooth: hci6: command tx timeout
[  400.495791][ T9638] 8021q: adding VLAN 0 to HW filter on device bond3
[  400.576136][ T9650] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  400.614562][ T9643] 8021q: adding VLAN 0 to HW filter on device bond0
[  400.656757][ T9643] bond3: (slave bond0): making interface the new active one
[  400.675485][ T9643] bond3: (slave bond0): Enslaving as an active interface with an up link
[  400.706129][ T9650] IPVS: persistence engine module ip_vs_pe_‘‚ not found
[  400.818336][ T9653] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0
[  401.269405][ T9664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1033'.
[  402.912418][ T9683] loop0: detected capacity change from 0 to 2048
[  403.043496][ T9683] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  404.154727][ T9569] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.162212][ T9569] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.169757][ T9569] bridge_slave_0: entered allmulticast mode
[  404.179533][ T9569] bridge_slave_0: entered promiscuous mode
[  404.445428][ T9569] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.453813][ T9569] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.463233][ T9569] bridge_slave_1: entered allmulticast mode
[  404.474165][ T9569] bridge_slave_1: entered promiscuous mode
[  405.323565][ T9569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  405.426284][ T9569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  405.715677][ T9569] team0: Port device team_slave_0 added
[  405.754492][ T9569] team0: Port device team_slave_1 added
[  405.914482][ T9569] batman_adv: batadv0: Adding interface: batadv_slave_0
[  405.937507][ T9569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  406.168708][ T9569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  406.183671][ T9569] batman_adv: batadv0: Adding interface: batadv_slave_1
[  406.190670][ T9569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  406.217599][ T9569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  406.249493][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1035'.
[  407.081851][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1035'.
[  407.279791][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1035'.
[  408.347481][ T9710] 8021q: adding VLAN 0 to HW filter on device bond2
[  410.334778][ T9712] 8021q: adding VLAN 0 to HW filter on device bond0
[  410.476391][ T9712] bond2: (slave bond0): Enslaving as an active interface with a down link
[  410.631746][ T9569] hsr_slave_0: entered promiscuous mode
[  410.657795][ T9569] hsr_slave_1: entered promiscuous mode
[  410.701987][ T9569] debugfs: 'hsr0' already exists in 'hsr'
[  410.727405][ T9569] Cannot create hsr debugfs directory
[  412.441606][ T9740] binder: 9739:9740 ioctl c0306201 2000000004c0 returned -14
[  415.614085][ T9569] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  416.561027][ T9569] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  416.660482][ T9569] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  416.770636][ T9569] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  416.991886][ T9780] syzkaller0: entered promiscuous mode
[  417.006754][ T9780] syzkaller0: entered allmulticast mode
[  417.024947][ T9569] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  417.073520][ T9569] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  417.111359][ T5850] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  417.275617][ T5850] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  417.304499][ T5850] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  417.343030][ T5850] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  417.385358][ T5850] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.463779][ T5850] usb 8-1: config 0 descriptor??
[  417.507447][ T5850] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[  419.859547][ T5850] usb 8-1: USB disconnect, device number 5
[  422.162815][    C1] bridge0: port 1(bridge_slave_0) entered forwarding state
[  422.170210][    C1] bridge0: topology change detected, propagating
[  422.177229][    C1] bridge0: port 2(bridge_slave_1) entered forwarding state
[  422.184553][    C1] bridge0: topology change detected, propagating
[  422.287627][ T9827] loop4: detected capacity change from 0 to 2048
[  422.296930][ T9827] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=2362, location=2362
[  422.331557][ T9827] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  422.385177][ T9827] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  422.440498][ T9827] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  430.895563][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  430.929476][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  430.939394][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  430.950250][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  430.974903][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  431.143921][ T9569] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  431.185827][ T9569] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  431.456875][ T5618] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh
[  431.488650][ T5618] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh
[  431.915319][ T5629] kernel write not supported for file [eventfd] (pid: 5629 comm: kworker/1:5)
[  433.041486][ T5625] Bluetooth: hci1: command tx timeout
[  433.487019][ T9881] comedi comedi3: pcl818: I/O base address not correctly aligned
[  433.785333][ T9759] syz_tun (unregistering): left allmulticast mode
[  433.798546][ T9759] syz_tun (unregistering): left promiscuous mode
[  433.805541][ T9759] bridge0: port 1(syz_tun) entered disabled state
[  435.061675][ T5634] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  435.085570][ T5634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  435.099651][ T5634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  435.136463][ T5634] Bluetooth: hci1: command tx timeout
[  435.144290][ T5634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  435.158426][ T5634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  436.154809][ T9569] 8021q: adding VLAN 0 to HW filter on device bond0
[  436.751307][ T9913] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  436.780842][ T9913] CIFS: Attempting to mount //127.0.0.1/share
[  437.358850][ T5625] Bluetooth: hci1: command tx timeout
[  437.368554][ T9913] CIFS: VFS: Error connecting to socket. Aborting operation.
[  437.376521][ T9913] CIFS: VFS: cifs_mount failed w/return code = -4
[  437.441550][ T5625] Bluetooth: hci2: command tx timeout
[  437.524012][ T9569] 8021q: adding VLAN 0 to HW filter on device team0
[  437.697143][  T132] bridge0: port 1(bridge_slave_0) entered blocking state
[  437.704420][  T132] bridge0: port 1(bridge_slave_0) entered forwarding state
[  439.113000][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.120303][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  439.443617][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  439.461655][ T5625] Bluetooth: hci1: command tx timeout
[  439.471281][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  439.521677][ T5625] Bluetooth: hci2: command tx timeout
[  441.603677][ T5625] Bluetooth: hci2: command tx timeout
[  442.108125][   T36] bridge_slave_1: left allmulticast mode
[  442.151148][   T36] bridge_slave_1: left promiscuous mode
[  442.183014][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  442.297999][   T36] bridge_slave_0: left allmulticast mode
[  442.318133][   T36] bridge_slave_0: left promiscuous mode
[  442.333047][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  443.451032][   T36] bond3 (unregistering): (slave bond0): Releasing active interface
[  443.712921][ T5625] Bluetooth: hci2: command tx timeout
[  443.922843][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  443.981974][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  444.023551][   T36] bond0 (unregistering): Released all slaves
[  444.094656][   T36] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface
[  444.163005][   T36] bond1 (unregistering): Released all slaves
[  444.194787][   T36] bond2 (unregistering): Released all slaves
[  444.253014][   T36] bond3 (unregistering): Released all slaves
[  444.493338][ T5279] 8021q: adding VLAN 0 to HW filter on device eth9
[  444.519087][ T9979] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  444.551590][ T9979] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  444.751879][ T9979] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  444.766929][ T9979] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  444.873005][ T9979] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  444.879383][ T9979] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  444.895542][ T9844] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.932223][ T9844] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.966141][ T9844] bridge_slave_0: entered allmulticast mode
[  444.997567][ T9979] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  445.006494][ T9844] bridge_slave_0: entered promiscuous mode
[  445.010253][ T9979] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  445.057359][ T9844] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.102776][ T9844] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.312492][ T9844] bridge_slave_1: entered allmulticast mode
[  445.375307][ T9844] bridge_slave_1: entered promiscuous mode
[  445.408000][ T9979] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  445.448737][T10000] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5619] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[10000]
[  446.188152][ T9979] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  446.202656][ T9979] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  446.354150][ T9979] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  446.452952][ T9979] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  446.471501][ T9979] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  446.573084][ T5625] Bluetooth: hci0: command 0x0406 tx timeout
[  446.603227][ T9979] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  447.035686][ T5625] Bluetooth: hci3: command 0x0406 tx timeout
[  447.042144][ T5625] Bluetooth: hci4: command 0x0406 tx timeout
[  447.065204][ T5625] Bluetooth: hci6: command 0x0c1a tx timeout
[  447.332543][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  447.350403][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  447.366964][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  447.411136][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  447.431858][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  447.683233][ T9844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  447.745610][ T9844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  448.242423][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout
[  448.481610][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout
[  448.631019][ T9844] team0: Port device team_slave_0 added
[  448.643222][ T5625] Bluetooth: hci0: command 0x0406 tx timeout
[  449.234384][ T5625] Bluetooth: hci4: command 0x0406 tx timeout
[  449.247231][ T5625] Bluetooth: hci3: command 0x0406 tx timeout
[  449.716503][ T5634] Bluetooth: hci5: command tx timeout
[  450.367612][ T5634] Bluetooth: hci1: command 0x0c1a tx timeout
[  450.492958][ T9844] team0: Port device team_slave_1 added
[  450.562865][ T5634] Bluetooth: hci2: command 0x0c1a tx timeout
[  451.028791][   T36] hsr_slave_0: left promiscuous mode
[  451.062211][   T36] hsr_slave_1: left promiscuous mode
[  451.801422][ T5634] Bluetooth: hci5: command tx timeout
[  452.392614][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  452.401352][ T5634] Bluetooth: hci1: command 0x0c1a tx timeout
[  452.641434][ T5634] Bluetooth: hci2: command 0x0c1a tx timeout
[  452.651876][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  453.842613][ T5634] Bluetooth: hci5: command tx timeout
[  455.244434][   T36] team0 (unregistering): Port device team_slave_1 removed
[  456.001650][ T5634] Bluetooth: hci5: command tx timeout
[  457.345405][ T9892] bridge0: port 1(bridge_slave_0) entered blocking state
[  457.381406][ T9892] bridge0: port 1(bridge_slave_0) entered disabled state
[  457.414704][ T9892] bridge_slave_0: entered allmulticast mode
[  457.441142][ T9892] bridge_slave_0: entered promiscuous mode
[  457.547228][ T5279] 8021q: adding VLAN 0 to HW filter on device eth10
[  457.575051][ T9892] bridge0: port 2(bridge_slave_1) entered blocking state
[  457.611919][ T9892] bridge0: port 2(bridge_slave_1) entered disabled state
[  457.654018][ T9892] bridge_slave_1: entered allmulticast mode
[  457.701477][ T9892] bridge_slave_1: entered promiscuous mode
[  457.774425][ T9844] batman_adv: batadv0: Adding interface: batadv_slave_0
[  457.788477][ T9844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  458.017355][ T9844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  459.413883][ T9892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  459.472461][ T9844] batman_adv: batadv0: Adding interface: batadv_slave_1
[  459.509332][ T9844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  459.559585][ T9844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  459.681789][ T9892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  459.934518][ T9892] team0: Port device team_slave_0 added
[  460.044944][ T9892] team0: Port device team_slave_1 added
[  460.325460][ T9844] hsr_slave_0: entered promiscuous mode
[  460.383501][ T9844] hsr_slave_1: entered promiscuous mode
[  460.408197][ T9844] debugfs: 'hsr0' already exists in 'hsr'
[  460.440070][ T9844] Cannot create hsr debugfs directory
[  461.680395][   T36] IPVS: stop unused estimator thread 0...
[  461.701463][ T9892] batman_adv: batadv0: Adding interface: batadv_slave_0
[  461.721388][ T9892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  461.822858][ T9892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  462.071908][ T9892] batman_adv: batadv0: Adding interface: batadv_slave_1
[  462.104274][ T9892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  462.191841][ T9892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  468.757556][ T9892] hsr_slave_0: entered promiscuous mode
[  468.785572][ T9892] hsr_slave_1: entered promiscuous mode
[  468.814092][ T9892] debugfs: 'hsr0' already exists in 'hsr'
[  468.833226][ T9892] Cannot create hsr debugfs directory
[  468.858024][ T5279] 8021q: adding VLAN 0 to HW filter on device eth11
[  469.085300][T10212] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  469.114295][T10212] batman_adv: batadv0: Adding interface: gretap1
[  469.131695][T10212] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  469.173647][T10212] batman_adv: batadv0: Interface activated: gretap1
[  471.793049][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1151'.
[  471.866272][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1151'.
[  471.890518][T10229] syzkaller0: entered promiscuous mode
[  471.902099][ T7344] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  471.921591][T10229] syzkaller0: entered allmulticast mode
[  472.092891][ T7344] usb 1-1: Dual-Role OTG device on HNP port
[  472.141309][ T7344] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02
[  472.164342][ T7344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.248564][ T7344] gspca_main: spca501-2.14.0 probing 0000:0000
[  472.287857][ T7344] gspca_spca501: reg write: error -32
[  472.316300][ T7344] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  472.340433][ T7344] spca501 1-1:1.0: probe with driver spca501 failed with error -22
[  474.858239][ T9844] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  474.898338][T10271] loop1: detected capacity change from 0 to 4096
[  474.910315][ T9844] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  474.954829][ T9844] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  475.029028][ T9844] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  475.146384][ T9844] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  475.217435][ T9844] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  475.690445][ T5279] 8021q: adding VLAN 0 to HW filter on device eth12
[  475.723428][ T9844] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  475.749431][ T9844] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  477.132516][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1160'.
[  477.891696][T10005] bridge0: port 1(bridge_slave_0) entered blocking state
[  477.923953][T10005] bridge0: port 1(bridge_slave_0) entered disabled state
[  478.053978][T10005] bridge_slave_0: entered allmulticast mode
[  478.686728][T10005] bridge_slave_0: entered promiscuous mode
[  479.176326][T10313] xt_CT: You must specify a L4 protocol and not use inversions on it
[  479.315928][   T36] bridge_slave_1: left allmulticast mode
[  479.339545][   T36] bridge_slave_1: left promiscuous mode
[  479.365812][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.445334][   T36] bridge_slave_0: left allmulticast mode
[  479.458997][   T36] bridge_slave_0: left promiscuous mode
[  479.466766][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.581015][T10353] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  482.452684][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  482.648014][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  482.710165][   T36] bond0 (unregistering): Released all slaves
[  482.742455][T10360] loop1: detected capacity change from 0 to 128
[  482.860163][T10005] bridge0: port 2(bridge_slave_1) entered blocking state
[  482.876935][T10005] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.887177][T10360] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  482.900109][T10005] bridge_slave_1: entered allmulticast mode
[  482.924678][T10005] bridge_slave_1: entered promiscuous mode
[  482.932282][T10360] hpfs: filesystem error: improperly stopped
[  482.938493][T10360] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  482.956365][T10360] hpfs: You really don't want any checks? You are crazy...
[  482.956686][ T5279] 8021q: adding VLAN 0 to HW filter on device eth13
[  482.966901][T10360] hpfs: Code page index out of array
[  482.972667][T10364] loop7: detected capacity change from 0 to 2048
[  482.984108][T10360] hpfs: code page support is disabled
[  482.995866][T10360] hpfs: hpfs_map_4sectors(): unaligned read
[  483.002802][T10360] hpfs: hpfs_map_4sectors(): unaligned read
[  483.010469][T10360] hpfs: filesystem error: unable to find root dir
[  483.046535][T10364] Alternate GPT is invalid, using primary GPT.
[  483.061140][T10364]  loop7: p2 p3 p7
[  483.118152][T10362] bond3 (unregistering): Released all slaves
[  483.373340][ T4984] Alternate GPT is invalid, using primary GPT.
[  483.383403][ T4984]  loop7: p2 p3 p7
[  483.563211][T10250] udevd[10250]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory
[  483.592643][ T9846] udevd[9846]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory
[  483.607488][ T9874] udevd[9874]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory
[  483.719976][T10378] loop0: detected capacity change from 0 to 512
[  483.748585][T10378] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  483.814248][T10378] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  483.825361][T10378] System zones: 1-12
[  483.929265][T10378] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2859: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  483.944301][T10378] EXT4-fs (loop0): 1 truncate cleaned up
[  483.955173][T10378] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  484.072091][   T36] hsr_slave_0: left promiscuous mode
[  484.232226][   T36] hsr_slave_1: left promiscuous mode
[  484.346820][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  484.546138][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  484.864896][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  486.821214][    T0] NOHZ tick-stop error: local softirq work is pending, handler #14a!!!
[  486.841199][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  486.861197][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  486.938940][T10398] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD
[  488.334198][   T36] team0 (unregistering): Port device team_slave_1 removed
[  488.402399][   T36] team0 (unregistering): Port device team_slave_0 removed
[  488.933721][T10005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  488.963468][T10005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  489.157042][T10005] team0: Port device team_slave_0 added
[  489.201057][T10005] team0: Port device team_slave_1 added
[  489.406452][T10005] batman_adv: batadv0: Adding interface: batadv_slave_0
[  489.413791][T10005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  489.454592][T10005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  489.520782][T10005] batman_adv: batadv0: Adding interface: batadv_slave_1
[  489.540730][T10005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  489.612396][T10005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  490.070355][T10428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1191'.
[  490.874402][T10005] hsr_slave_0: entered promiscuous mode
[  491.116035][T10005] hsr_slave_1: entered promiscuous mode
[  491.287678][T10005] debugfs: 'hsr0' already exists in 'hsr'
[  491.327506][T10005] Cannot create hsr debugfs directory
[  491.668434][ T9892] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  491.775180][ T9892] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  491.802018][T10444] vivid-007: =================  START STATUS  =================
[  491.877595][T10444] vivid-007: Enable Output Cropping: true
[  491.894762][ T9892] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  491.999803][T10444] vivid-007: Enable Output Composing: true
[  492.018473][T10444] vivid-007: Enable Output Scaler: true
[  492.038591][T10444] vivid-007: Tx RGB Quantization Range: Automatic
[  492.113937][T10444] vivid-007: Transmit Mode: HDMI
[  492.168430][T10444] vivid-007: Hotplug Present: 0x00000000
[  492.177565][ T9892] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  492.220497][T10444] vivid-007: RxSense Present: 0x00000000
[  492.252460][ T5625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  492.266926][ T5625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  492.275221][ T5625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  492.283901][ T5625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  492.292021][ T5625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  492.299592][T10444] vivid-007: EDID Present: 0x00000000
[  492.553680][ T9892] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  492.574861][T10444] vivid-007: ==================  END STATUS  ==================
[  492.836656][ T9892] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  494.065267][ T9892] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  494.340537][ T9892] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  494.401369][ T5625] Bluetooth: hci6: command tx timeout
[  495.621912][T10472] 
[  495.624287][T10472] ======================================================
[  495.631370][T10472] WARNING: possible circular locking dependency detected
[  495.638398][T10472] syzkaller #0 Tainted: G             L     
[  495.644382][T10472] ------------------------------------------------------
[  495.651401][T10472] syz.7.1198/10472 is trying to acquire lock:
[  495.657470][T10472] ffffffff901d3c28 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x650
[  495.668903][T10472] 
[  495.668903][T10472] but task is already holding lock:
[  495.676268][T10472] ffff88802b9e2c00 (&sb->s_type->i_mutex_key#35){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0
[  495.686867][T10472] 
[  495.686867][T10472] which lock already depends on the new lock.
[  495.686867][T10472] 
[  495.697291][T10472] 
[  495.697291][T10472] the existing dependency chain (in reverse order) is:
[  495.706343][T10472] 
[  495.706343][T10472] -> #2 (&sb->s_type->i_mutex_key#35){++++}-{4:4}:
[  495.715096][T10472]        lock_acquire+0x1b9/0x370
[  495.720206][T10472]        down_write+0x8b/0x1f0
[  495.725142][T10472]        configfs_depend_item_unlocked+0xf3/0x6a0
[  495.731576][T10472]        usbg_make_tpg+0x261/0x620
[  495.736785][T10472]        target_fabric_make_tpg+0xab/0x8c0
[  495.742814][T10472]        configfs_mkdir+0x51e/0xb70
[  495.748035][T10472]        vfs_mkdir+0x361/0x850
[  495.752831][T10472]        filename_mkdirat+0x48b/0x5e0
[  495.758230][T10472]        __x64_sys_mkdir+0x6b/0x90
[  495.763374][T10472]        do_syscall_64+0x115/0x870
[  495.768567][T10472]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.775014][T10472] 
[  495.775014][T10472] -> #1 (&opts->dep_lock){+.+.}-{4:4}:
[  495.782693][T10472]        lock_acquire+0x1b9/0x370
[  495.787740][T10472]        __mutex_lock+0x1a4/0x1bd0
[  495.792881][T10472]        tcm_set_name+0x29/0xb0
[  495.797748][T10472]        function_make+0x21c/0x3f0
[  495.803000][T10472]        configfs_mkdir+0x51e/0xb70
[  495.808213][T10472]        vfs_mkdir+0x361/0x850
[  495.812991][T10472]        filename_mkdirat+0x48b/0x5e0
[  495.818397][T10472]        __x64_sys_mkdir+0x6b/0x90
[  495.823545][T10472]        do_syscall_64+0x115/0x870
[  495.828691][T10472]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.835130][T10472] 
[  495.835130][T10472] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}:
[  495.843424][T10472]        check_prev_add+0xeb/0xe60
[  495.848556][T10472]        __lock_acquire+0x136c/0x1a40
[  495.853956][T10472]        lock_acquire+0x1b9/0x370
[  495.859004][T10472]        __mutex_lock+0x1a4/0x1bd0
[  495.864151][T10472]        uvcg_streaming_header_allow_link+0x7c/0x650
[  495.870874][T10472]        configfs_symlink+0x540/0x11f0
[  495.876368][T10472]        vfs_symlink+0x178/0x4d0
[  495.881337][T10472]        filename_symlinkat+0x2a6/0x560
[  495.886924][T10472]        __x64_sys_symlink+0x79/0xb0
[  495.892245][T10472]        do_syscall_64+0x115/0x870
[  495.897391][T10472]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.903835][T10472] 
[  495.903835][T10472] other info that might help us debug this:
[  495.903835][T10472] 
[  495.914418][T10472] Chain exists of:
[  495.914418][T10472]   gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#35
[  495.914418][T10472] 
[  495.929178][T10472]  Possible unsafe locking scenario:
[  495.929178][T10472] 
[  495.936635][T10472]        CPU0                    CPU1
[  495.942011][T10472]        ----                    ----
[  495.947400][T10472]   lock(&sb->s_type->i_mutex_key#35);
[  495.952898][T10472]                                lock(&opts->dep_lock);
[  495.959858][T10472]                                lock(&sb->s_type->i_mutex_key#35);
[  495.967879][T10472]   lock(gadget_subsys.su_mutex);
[  495.972924][T10472] 
[  495.972924][T10472]  *** DEADLOCK ***
[  495.972924][T10472] 
[  495.981075][T10472] 2 locks held by syz.7.1198/10472:
[  495.986282][T10472]  #0: ffff88801dbfe450 (sb_writers#29){.+.+}-{0:0}, at: filename_create+0x10d/0x400
[  495.995878][T10472]  #1: ffff88802b9e2c00 (&sb->s_type->i_mutex_key#35){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0
[  496.006853][T10472] 
[  496.006853][T10472] stack backtrace:
[  496.012768][T10472] CPU: 0 UID: 0 PID: 10472 Comm: syz.7.1198 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  496.012829][T10472] Tainted: [L]=SOFTLOCKUP
[  496.012842][T10472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  496.012864][T10472] Call Trace:
[  496.012977][T10472]  <TASK>
[  496.012991][T10472]  dump_stack_lvl+0x100/0x190
[  496.013053][T10472]  print_circular_bug.cold+0x178/0x1c7
[  496.013119][T10472]  check_noncircular+0x146/0x160
[  496.013164][T10472]  check_prev_add+0xeb/0xe60
[  496.013201][T10472]  ? try_to_unlazy+0x296/0x910
[  496.013249][T10472]  __lock_acquire+0x136c/0x1a40
[  496.013294][T10472]  ? __kasan_slab_free+0x5f/0x80
[  496.013347][T10472]  lock_acquire+0x1b9/0x370
[  496.013387][T10472]  ? uvcg_streaming_header_allow_link+0x7c/0x650
[  496.013445][T10472]  ? __pfx___might_resched+0x10/0x10
[  496.013490][T10472]  __mutex_lock+0x1a4/0x1bd0
[  496.013545][T10472]  ? uvcg_streaming_header_allow_link+0x7c/0x650
[  496.013598][T10472]  ? uvcg_streaming_header_allow_link+0x7c/0x650
[  496.013651][T10472]  ? srso_alias_return_thunk+0x5/0xfbef5
[  496.013698][T10472]  ? __lock_acquire+0x49f/0x1a40
[  496.013741][T10472]  ? __pfx___mutex_lock+0x10/0x10
[  496.013796][T10472]  ? make_vfsuid+0xec/0x140
[  496.013890][T10472]  ? __pfx___might_resched+0x10/0x10
[  496.013929][T10472]  ? srso_alias_return_thunk+0x5/0xfbef5
[  496.013978][T10472]  ? make_vfsgid+0xf1/0x140
[  496.014026][T10472]  ? uvcg_streaming_header_allow_link+0x7c/0x650
[  496.014078][T10472]  ? srso_alias_return_thunk+0x5/0xfbef5
[  496.014128][T10472]  uvcg_streaming_header_allow_link+0x7c/0x650
[  496.014181][T10472]  ? srso_alias_return_thunk+0x5/0xfbef5
[  496.014225][T10472]  ? inode_permission+0x374/0x620
[  496.014266][T10472]  ? mntput_no_expire+0xe7/0x220
[  496.014366][T10472]  configfs_symlink+0x540/0x11f0
[  496.014413][T10472]  ? srso_alias_return_thunk+0x5/0xfbef5
[  496.014460][T10472]  ? srso_alias_return_thunk+0x5/0xfbef5
[  496.014503][T10472]  ? security_inode_permission+0xbf/0x250
[  496.014598][T10472]  ? __pfx_configfs_symlink+0x10/0x10
[  496.014642][T10472]  ? srso_alias_return_thunk+0x5/0xfbef5
[  496.014689][T10472]  vfs_symlink+0x178/0x4d0
[  496.014734][T10472]  ? srso_alias_return_thunk+0x5/0xfbef5
[  496.014781][T10472]  filename_symlinkat+0x2a6/0x560
[  496.014845][T10472]  ? __pfx_filename_symlinkat+0x10/0x10
[  496.014909][T10472]  ? strncpy_from_user+0x19d/0x2d0
[  496.015029][T10472]  ? srso_alias_return_thunk+0x5/0xfbef5
[  496.015072][T10472]  ? do_getname+0x191/0x390
[  496.015109][T10472]  __x64_sys_symlink+0x79/0xb0
[  496.015174][T10472]  do_syscall_64+0x115/0x870
[  496.015228][T10472]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  496.015265][T10472] RIP: 0033:0x7f3884d9e019
[  496.015295][T10472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  496.015340][T10472] RSP: 002b:00007f3885bac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[  496.015402][T10472] RAX: ffffffffffffffda RBX: 00007f3885025fa0 RCX: 00007f3884d9e019
[  496.015427][T10472] RDX: 0000000000000000 RSI: 0000200000001100 RDI: 0000200000001000
[  496.015455][T10472] RBP: 00007f3884e3500c R08: 0000000000000000 R09: 0000000000000000
[  496.015478][T10472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  496.015500][T10472] R13: 00007f3885026038 R14: 00007f3885025fa0 R15: 00007ffcd8ab9bf8
[  496.015537][T10472]  </TASK>
[  496.343006][ T3098] usb 2-1: new high-speed USB device number 4 using dummy_hcd
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  496.477627][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  496.485374][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  496.494980][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  496.504511][ T3098] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  496.548138][ T3098] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  496.562167][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  496.589028][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  496.698438][ T3098] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  496.789036][ T3098] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.281320][ T5625] Bluetooth: hci6: command tx timeout
[  497.320245][ T3098] usb 2-1: config 0 descriptor??
[  497.653348][   T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.305278][ T3098] usb 2-1: can't set config #0, error -71
[  498.340130][ T3098] usb 2-1: USB disconnect, device number 4
[  498.364577][   T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.772625][   T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.997638][   T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.330371][   T36] bridge_slave_1: left allmulticast mode
[  499.336180][   T36] bridge_slave_1: left promiscuous mode
[  499.342062][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  499.402124][   T36] bridge_slave_0: left allmulticast mode
[  499.407825][   T36] bridge_slave_0: left promiscuous mode
[  499.413738][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  500.044315][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  500.131778][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  500.172946][   T36] bond0 (unregistering): Released all slaves
[  500.211776][   T36] bond1 (unregistering): (slave veth3): Releasing active interface
[  500.273329][   T36] bond1 (unregistering): Released all slaves
[  500.311705][   T36] bond2 (unregistering): (slave veth0_to_bond): Releasing backup interface
[  500.324404][   T36] bond2 (unregistering): Released all slaves
[  500.383150][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4
[  500.842157][   T36] hsr_slave_0: left promiscuous mode
[  500.871844][   T36] hsr_slave_1: left promiscuous mode
[  500.877916][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  500.889772][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  500.897412][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  500.904112][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  500.932021][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  500.939469][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  500.981533][   T36] veth1_macvtap: left promiscuous mode
[  500.987043][   T36] veth0_macvtap: left promiscuous mode
[  500.992694][   T36] veth1_vlan: left promiscuous mode
[  500.997969][   T36] veth0_vlan: left promiscuous mode
[  501.341878][   T36] team0 (unregistering): Port device team_slave_1 removed
[  501.375114][   T36] team0 (unregistering): Port device team_slave_0 removed
[  501.494451][ T5279] 8021q: adding VLAN 0 to HW filter on device eth14
[  502.232643][   T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  502.246214][   T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.452742][   T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  502.467917][   T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.625083][   T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  502.636098][   T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.852618][   T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  502.864468][   T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.167601][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3