last executing test programs: 14m33.021715546s ago: executing program 32 (id=58): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x28, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x9, 0x2, 0x0, 0x1, [@generic="a5be464c11"]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc044}, 0xc050) 14m10.196113353s ago: executing program 33 (id=139): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) unshare(0x22020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x1, 0x7fff0001}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x7, 0x2, r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r3, 0x7, 0x2, r2}) 13m36.000140739s ago: executing program 34 (id=305): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_setup(0xea, &(0x7f00000000c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') r2 = fanotify_init(0x22, 0x1000) fanotify_mark(r2, 0x1, 0x8000039, r1, 0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x8, r1, 0x0}]) 13m34.183824909s ago: executing program 35 (id=313): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xc}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}]}, 0x50}}, 0x481d5) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 12m27.935154984s ago: executing program 36 (id=571): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000080), 0x262, r1, 0x4}, 0x38) 12m5.443071076s ago: executing program 37 (id=643): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x4b72, &(0x7f0000000000)={0x4, 0x80, 0x0, 0x210, 0xe, "0260930000efa4890000000000001000f16200"}) 11m53.601613262s ago: executing program 38 (id=700): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.kill\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) symlink(0x0, &(0x7f0000000000)='./file0\x00') preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$hidraw(&(0x7f0000000140), 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11m41.916109753s ago: executing program 39 (id=760): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @multicast, @val={@val={0x88a8, 0x1}, {0x8100, 0x4, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x67, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @private=0xa010100}, {0xa000, 0x86dd, 0xc, 0x0, @opaque="f842651e"}}}}}}, 0xfead) 11m39.280226156s ago: executing program 40 (id=770): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36513001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e455fe2bb24ef66970746c7f1f2a5c4c3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f00000009c0)=""/185, 0xb9}, {&(0x7f0000000a80)=""/96, 0x60}, {&(0x7f0000000240)=""/37, 0x25}, {&(0x7f0000005180)=""/4091, 0xffb}, {&(0x7f00000000c0)=""/236, 0xec}, {&(0x7f0000000c00)=""/97, 0x61}, {&(0x7f0000001d00)=""/131, 0x83}, {&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/175, 0xaf}], 0xa}, 0x40010020) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10182) 11m29.448280886s ago: executing program 41 (id=794): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000d1de95"], &(0x7f0000000180)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='initcall_level\x00', r0}, 0x18) 11m26.545312782s ago: executing program 42 (id=802): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) fallocate(r0, 0x3, 0x1, 0x8000c62) 11m9.014341223s ago: executing program 43 (id=840): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) epoll_create1(0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023892) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd00011100"], 0xfdef) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x75}) read$usbmon(r4, 0x0, 0x2f) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) sendto$inet(r0, &(0x7f0000000580)="e1", 0xfffffffffffffef1, 0x40000, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f00000000c0)="7d86ea4d4ad1ba392f180696c15076b4c2d478e0b14239811704b3fc3c3f89252d90a981adfd33", &(0x7f0000000040)=@tcp=r6}, 0x20) 11m8.239948869s ago: executing program 44 (id=845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 10m36.518183218s ago: executing program 8 (id=912): r0 = syz_io_uring_setup(0x512d, &(0x7f0000000540)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) 10m36.030011475s ago: executing program 8 (id=915): r0 = semget$private(0x0, 0x5, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semctl$IPC_RMID(r0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, 0x0, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e26, @remote}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x883) recvmmsg(r5, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 10m33.64019359s ago: executing program 8 (id=917): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, 0x0) 10m30.286561843s ago: executing program 8 (id=926): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x204818, &(0x7f0000000480)=ANY=[], 0x1, 0x54e, &(0x7f00000008c0)="$eJzs3V1v01gawPHHfYEoK1WrZYVQVeBQdqUileAkEBSxN17nJD2Q2JHtoPYKVTRFFSmsKCtte8Nyw8xIMx+CuZwPMd8IzUeYke2kLzSJgb5O9f9FcE7sY5/npJYfuY2PBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiOXWbLtoSdN4nWU1mlsL/Nbe2/7WhxbInQPFmH5FrPif5HJyLV107e97q6/G/83LXPpuTnJxkZOdv1z966MrUxOD7ccE/FV+/sY9bW3vvFzt9bpvjiuQc+j65dHrGtozoW9aTkMrE/qqWqnY95bqoaqbpg5Xwki3lBtoJ/IDteDeUcVqtax0YcXveI2a09SDhQ/vlmy7oh4X2toJQt+797gQukum2TReI2kTr47bPIwPxCcmUpF2Wkqtb/S65awBxI2KX9KolNWoZJdKxWKpVKw8qD54aNtThxbYn5FDLY7voMWf0zGevYGjmejnf2mKEU86sixq6MuVmgTiS2vE+r5B/v/nPT223/35f5Dlr+2tnpUk/99I390Ylf9HxHJ6ry3Zlh15KavSk5505c0J9jVz5qM9/GqIFk+MhOKLkZY4yRLVX6KkKhWpiC3PZEnqEoqSuhhpipZQViSUSHRyRLkSiBZHIvElECUL4sodUVKUqlSlLEq0FGRFfOmIJw2piZPsZV02ks+9LMoaFeNuo+LIYeQHx11XSmNGS/7H0R3r+Rs4it8H+R8AAAAAAFxYVvLb9/j6f1quJ7W6aWr7rMMCAAAAAADHKPnL/1xcTMe162Jx/Q8AAAAAwEVjJffYWSKSl5tpbV2s5HYpfgkAAAAAAMAFkfz9/0ZcJHOg3BRrd7oUrv8BAAAAALggvs+cYz9sX7Z+/U2CYNp6317+h7WZzM3rbE6m201+vseoPmvN9HeSFJW0mJpy9ZyVSxvtToL5qV+sZ8Vh7QXg7Abw/68J4MqU/Ci30ja31tJybbAm7SVfN01dcP3mo6I4zsxEpJej/77a+J8kw//Ba81YOdnodQvPX/fWkljex3t5v9mfQPHQPIpjYnmbzLeQ3HMxdMTTyY0Y/X7zlqxv9Lr2/vFPpJtPHOzx3cyYPj/IfNpqvj/jbf7g+HNxn8XCqNH3oygeceQf5Hba5vbC7bQYEkUpK4rS/iiGfxZHj6KcFUX5iFEAwFlZz8hClhzKu99wlvu27C5fmd0/yELaZmE2ObFOzQ45o9tZZ3R7fHabzIril0PPQBqVY+N+f/osq36MN/g4MquGzZIVf4STbzf/I1e3tnfubmyuvui+6L4qlcoV+75tPyjJdDKMfkHuAQAMsf8ZO9bQ/J/5FB7rfsZV9d92v1JQkOfyWnqyJovJ3QbJNw6G7jW/72sIixlXrfkkTaZPeFkcc1V3KbnLYbDf0ti2B2Mon8JPAgCA0zOfkYe/JP8vZlx3H8zl46+O8/ue1gYAAE6GDj5Z+eg7KwhM+1mxWi060ZJWge8+UYGpNbQyXqQDd8nxGlq1Az/yXb8ZV56amg5V2Gm3/SBSdT9QbT80y8n0gar/6PdQtxwvMm7Ybmon1Mr1vchxI1UzofuvduffTRMu6SDZOGxr19SN60TG91TodwJXF5QKtVZ7DU1Ne5Gpm7jqqXZgWk6QU0/9ZqelVU2HbmDakZ/ucNCX8ep+0Ep2e+msP2wAAM6Jre2dl6u9XvfNCVaGdpw79aECAIC+jCwNAAAAAAAAAAAAAAAAAAAAAADOgdO4/4/KBa8MpoI+L/FQOYZK5qnj3YmfnACcqD8CAAD//x6LT3Q=") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f000000d300)={0x2020}, 0x2020) 10m29.994728074s ago: executing program 8 (id=927): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000c40), 0x2, 0x4a7, &(0x7f0000001140)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f"], 0x48) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') 10m27.957937362s ago: executing program 7 (id=935): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1d) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000084}, 0x4800) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x10, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x1fd, {0x0, 0xa}, {0x1}, @const={0x0, {0x1, 0x8, 0x4, 0x881}}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) 10m25.969902946s ago: executing program 7 (id=942): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001840)='./file2\x00', 0x10000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1008a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1517, &(0x7f0000001240)="$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") chdir(&(0x7f0000000040)='./file0\x00') mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90) 10m25.900235506s ago: executing program 8 (id=945): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0xfff3}, {0x0, 0x1}, {0x10, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x5, 0x1, 0x0, 0x0, {{0xeb, 0x1, 0x4}, {0x7, 0x8, 0x6, 0x2, 0x7, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) 10m25.220096999s ago: executing program 45 (id=944): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000240)) unshare(0x400) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x50d942, 0x8db7ba406fe7897f) fchmod(r2, 0x6) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000003c0)) semop(0x0, &(0x7f0000000200)=[{0x1, 0x8001, 0x3000}, {0x1, 0x80, 0x800}], 0x2) semop(0x0, &(0x7f00000001c0)=[{0x1, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) 10m25.165836998s ago: executing program 46 (id=945): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0xfff3}, {0x0, 0x1}, {0x10, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x5, 0x1, 0x0, 0x0, {{0xeb, 0x1, 0x4}, {0x7, 0x8, 0x6, 0x2, 0x7, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) 10m25.150371578s ago: executing program 7 (id=950): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r3}, &(0x7f0000000a80), 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x48c0) 10m24.900436634s ago: executing program 7 (id=953): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x2200402, &(0x7f0000000580), 0x1, 0x4e8, &(0x7f00000005c0)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x18, r0, 0xfffffffffffffffd, 0x1ff) 10m24.3378369s ago: executing program 7 (id=954): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xb, @empty, 0x5}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x0, 0x0, 0x7fff, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0) 10m22.413931684s ago: executing program 7 (id=960): syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f00000000c0), 0x0, 0x25c, &(0x7f0000000700)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000d000000095"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x27, 0xe40, 0x0, &(0x7f0000000740)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x3ad9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 10m22.014152236s ago: executing program 47 (id=960): syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f00000000c0), 0x0, 0x25c, &(0x7f0000000700)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000d000000095"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x27, 0xe40, 0x0, &(0x7f0000000740)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x3ad9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m55.818497613s ago: executing program 5 (id=1204): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20000002) pread64(0xffffffffffffffff, 0x0, 0x0, 0x7f) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x297}]}) 8m55.250066037s ago: executing program 5 (id=1207): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x20, 0x1, 0x5, 0x6, 0x11000, 0x6, {0x1, 0x0, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x1, 0x7fff, 0x7, 0x4000, 0xe, r3, 0x0, 0x4}}, {0x0, 0x1}}}, 0xa0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x4, 0x2}}, 0x28) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) setxattr$trusted_overlay_redirect(&(0x7f0000000400)='./file0\x00', &(0x7f0000000500), 0x0, 0x0, 0x0) 8m54.916375203s ago: executing program 5 (id=1209): io_setup(0x1, &(0x7f00000004c0)=0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000809, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000000340)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0xfffd, r1, &(0x7f00000000c0)='k', 0x1, 0x4000000000400a00}]) 8m54.492500738s ago: executing program 5 (id=1212): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2491c5, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x842cc0, 0x0) 8m54.187038007s ago: executing program 5 (id=1216): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x2204080, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f646f74732c73686f77657865632c6e6f646f74732c6e66733d6e6f7374616c655f726f2c0030a66d3a1127e03fc4ec7721f7c77d616ce2d9a9b0ef6cf77d486df06aac6920f6f13474bc77836cb851c86e0cc5dc8611db21e0dafe4caa2c5b34"], 0x1, 0x2a6, &(0x7f0000000340)="$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") open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00r'], 0x692280) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x801) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x121) open_by_handle_at(r1, &(0x7f0000000000)=ANY=[], 0x2080) 8m53.542091101s ago: executing program 9 (id=1219): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00f7a98a6f3da4519f4b38d9450092aac2c7cefa"], 0x1, 0x1cf, &(0x7f00000002c0)="$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") socket$packet(0x11, 0x3, 0x300) 8m52.504880105s ago: executing program 9 (id=1222): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_io_uring_setup(0x1cc6, &(0x7f0000000240)={0x0, 0x136f, 0x1, 0x3, 0x1be}, 0x0, &(0x7f0000000180)) setrlimit(0x2, &(0x7f0000000040)={0x0, 0x80100000001cdb}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, 0x0, 0x2) 8m52.354107611s ago: executing program 5 (id=1223): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r2 = syz_open_pts(r1, 0x141601) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) syz_clone3(&(0x7f0000000380)={0x1181700, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x4, 0x9, 0x5, 0x4, 0x1, "a48154ff69d49a9e9bf4ac08c729b0795f6e6f"}) close_range(r0, 0xffffffffffffffff, 0x0) 8m51.500564791s ago: executing program 48 (id=1223): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r2 = syz_open_pts(r1, 0x141601) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) syz_clone3(&(0x7f0000000380)={0x1181700, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x4, 0x9, 0x5, 0x4, 0x1, "a48154ff69d49a9e9bf4ac08c729b0795f6e6f"}) close_range(r0, 0xffffffffffffffff, 0x0) 8m49.964940001s ago: executing program 9 (id=1230): socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) socket$igmp6(0xa, 0x3, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000380)=[{0x84, 0x77, 0x0, 0x0, @tick=0xfffffffc, {0x3}, {0x7}, @raw32={[0x2, 0x0, 0x800]}}, {0x2, 0x0, 0x5, 0x83, @tick, {0xfc}, {}, @control={0x7, 0x8, 0x3}}, {0x6, 0x3, 0x9, 0x3, @tick=0x2, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0x7, 0x7fff}}, {0x8, 0xd0, 0x5, 0xb, @tick=0x80000001, {0x3, 0x9}, {0x2, 0x2}, @note={0xf9, 0x7, 0xb, 0x3, 0x10}}], 0x70) 8m49.165821088s ago: executing program 9 (id=1233): syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nocompress}, {@map_normal}]}, 0x3, 0x54c, &(0x7f0000000540)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000e00), 0x0, 0x4048095) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) statfs(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)=""/99) 8m48.817927854s ago: executing program 9 (id=1235): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 8m45.564707539s ago: executing program 9 (id=1244): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 8m45.071148791s ago: executing program 49 (id=1244): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2m2.266085314s ago: executing program 6 (id=2724): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x9, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x6, 0x2}]}, @typedef={0x7, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0, 0x30, 0x2e, 0x5f, 0x30, 0x61, 0x5f]}}, 0x0, 0x41}, 0x28) 2m2.16968485s ago: executing program 6 (id=2725): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x7b52e4aff0f1e2e5, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2m2.069489355s ago: executing program 6 (id=2726): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt(r0, 0x306, 0xdc99, 0x0, 0x0) 2m1.91591618s ago: executing program 6 (id=2728): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80c40a, &(0x7f0000000180)={[{@noblock_validity}, {@nombcache}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@nodiscard}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@noload}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000a00)='./file1\x00', 0x8000, &(0x7f0000001380)=ANY=[@ANYRESOCT, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="a92fe8de136908e852768595aa546296821087e5b1bbc32156ada61f7c8a700880fe17c721514fd66f6d073702603f43f39d10ed62b784f0ea603a459b42f61a2174a30374bec0296612104179832730d5741398231d9ffd1e9995a06bb5ada99b9f2d4a71c580fe19a6dea2485a8ef6042e0d96839465522c03ac9b1e3e4be07bd09a1568add843860228063e6e4a59adc27ad98e26260605e1df1bd5e5dcc1735af362ce57237d4455a267daeea0b2368f8c69ed577f4849d608dcd60b0dabe1d6dada51feb6b1751dfa136da4ab1a73a25bcfba9ba846676558290f27b2a256c2257003da000000", @ANYRES16=r0, @ANYRESHEX, @ANYRES16=0x0, @ANYRES64, @ANYRESHEX, @ANYRES32=r1, @ANYRESOCT, @ANYRESOCT], 0x10, 0x1d0, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0a00, 0x4) 2m0.678630928s ago: executing program 6 (id=2740): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) syz_usb_connect(0x7, 0x2d, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000c113"], 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) ptrace$getenv(0x4201, r3, 0x7359e736, &(0x7f0000000240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) msgctl$MSG_INFO(0x0, 0xc, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x0, 0x0, "11000200", "06130020", "030200", '\n\x00', ["50d5c2a7c5ae5cace40000b6", "c08e00", "0c436d743c97c443084000", "000000000000005f1c00"]}) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m59.57815396s ago: executing program 6 (id=2746): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={@remote, @private1={0xfc, 0x1, '\x00', 0xfd}, @private0, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014, r2}) 1m59.310779557s ago: executing program 50 (id=2746): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={@remote, @private1={0xfc, 0x1, '\x00', 0xfd}, @private0, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014, r2}) 11.174365554s ago: executing program 2 (id=3546): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000300)="1c0000001a005f0214f9f407000904001f00000200", 0x15) 10.985592949s ago: executing program 2 (id=3547): sendmsg$alg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="3fdabc440871fd8fb123d4e122029faec2abaef038cfc7ec11d4fe95f404874059d6d0793b4d34a6f21df8b860aec548b048cf01d773be8729a2a5b62c5dbed3af5298b4156d3da92e11e510498cda9c9ecd1386f44b927419a5fa6e37e78aca5672fbb07e9442c56aee752266775ef0eaf86fa9d1", 0x75}], 0x1, 0x0, 0x0, 0x4000}, 0xd7e2314ec0cd51ff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c8080000", @ANYBLOB="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"], 0x8c8}, 0x1, 0x0, 0x0, 0x4800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x100f811a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000440)={0x1, 0x3, 0x1000, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0}) 10.603755225s ago: executing program 2 (id=3549): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xec}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0x2}, 0x18) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0", 0x19}, {&(0x7f0000000640)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab42e94653cbd9e52fba37c5a31d095500e91d02256f101e82447e34733220cdaaabc947f5b815080b5214c94a06fe96450ea42f48006c032b24d9e8d722841b7c7244b1d2cc012fcda1f7472fdbabb673ef862e349359fad715b3f5cef6ef951abab80a4a0f5f8574395c5820fa25d07a119e23b39a87cb3b763fbfb0491121eec3e05eacbe7835e79e74881d1179013622a2a6421d51c974e6abd48a9882c8fcadbcee369346a9ad948fd5dd8f87496a30a9d888cdbcee8f3592dd69165358c4cd474639fc13300317b7fed115fb9818b20d177a39157101dbd8e23bc9ed32efed96c410a103d35336fb4ee4000bfb3d32b0181ff3d726a7dc6432a336a42b50b2c6877cb63b410d746b35fc721e5992ba47c3a2bc2d3679abe0794d226b7b0c333c3000fee7adaafb6efd57382eb2a86d71acaae52a154477a5b66757a886f4ad5446607520c17fb81ede0473cd897a34c7c9f41b660260699fb02c4f643a320812a36a2fdb8552682757bbe1bc4c5acf96541539dff8ff3a68049d4e5aa0327697c3654aa155b156ed826e0589d5de6bf83cb2406ba077125aa8bfc32c7cd22baa6d933bb1978905acc", 0x29b}, {&(0x7f0000000300)="2e0fd87d8d84b93c7803a87df5acd511ee50b0a0d0d9e3fc8345949042d5449c61a2b530aeea469c70772df880777d6e1744da498487c553359a7dce5cad9e69bd2bd62e1a81d61f05700503d4aa5debf98ffa041d397d5dc8cbf9dc290e08158912b52a9101557ee5d819059fd760d75380c0d07990283b882e5e5d8e", 0x7d}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000400)="ffbcf4974a4a645c6d8cd8ef2dde80a53f40daf5ec8c7b36eb6b4d4d5286a436a562f1656469c511aaadc7389df3d15187940450e3b35c63d66f24df397537c747612c3e38daf2f2336c6de65eb8048c4860fc269b96a50098a9485f692d75ecdfa39b03f216a5d5043db8b86a74ca", 0x6f}, {&(0x7f0000000d00)="7e93ddb16d6dded2586d9a83d6d79a26d8e5f8c7fc7279fe5fe209663600f76ffd8db76b41b6d87176d3d81c389026c02d2d9636e7267b8a8c6174215780c2df56dad99f5b9154655f610732b786f822c05cb9c9", 0x54}], 0x2}}], 0x2, 0x40408e0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 9.422174584s ago: executing program 2 (id=3560): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="19000000040000000800000024"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 9.187571992s ago: executing program 2 (id=3561): syz_init_net_socket$llc(0x1a, 0x802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.970097868s ago: executing program 2 (id=3562): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x40) open_tree(r4, 0x0, 0x8100) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20004014}, 0x0) 7.053918158s ago: executing program 0 (id=3573): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}]}, 0x2c}}, 0x0) 6.797922174s ago: executing program 0 (id=3577): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000001cc0)=[{{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000480)=[{&(0x7f00000001c0)="ab31f85d1ebbd61ac7a04f12d48afd2593347d7995", 0x15}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f00000005c0)="8c665524e43dc0894227b6695984f5983f6c1698b256d93082c7ff01f72d3aa2ddded2523759b066e98fcda46ccc8e63ab550e87dbf3b2c4960c4b6d55b5cf9412ed5c086e7b6ab3263456d665033a630b319c6d7d14c011b553d165e997d187fd9d12a3d2060a55d38c40fab168d76e66be9e06e7d38703436eaafb83c4cb0e8c590af7b920a766beb6f999da6e429e80ed1031faa71aae669716c651b6d51ff73581035d6a34d602dc812f385e1c44ce8df025a3a64cbf922755552e5c439e82fcc4b2579a56b7ee0f0d2b9c389d471a8ca6b8313a1cac093c392bb7b4", 0xde}, {&(0x7f0000000280)="069e60931e2a6cf707f49e61851db091b95bc591c90fa66a3a7d249349d7df8d4422ca4685e8545173fbbf0233", 0x2d}, {&(0x7f0000000340)="55f5fdad02e5be6d69ac6c0a6f2af304e8dd89172dcf3d8c570bbb08d6e3c2d33d8fa1b5cbbb91c4a93f4377349ba514c67792df8e6011fb39f82f8287", 0x3d}, {&(0x7f0000001700)="8ef3ae9c950d2e7e9db32abc195ab4787dd366f035e1b1fef6c4e1ea9631e7bc95284eb3b34f68c0cf6a98dc2f18d81a9c6a483aaeb629aa759b4b942cebd0b6f10a044cf7ffa3ba08b513492cc9e7b6b4b5dfd8a522df426193b63ba9ed2976a6e55e14b1d7a6284808f53267405838532caa830056e21978db613ac6d864771cc0c10f7c003add1aae56f86b507150", 0x90}, {&(0x7f00000017c0)="32fb663ae6862a634891949000cfde01cbf2e7a269807f9a87eaa084640b070fa86c5ae72e7fa081b9831f463b89395d082191311fbc36b6d4e8cb3838efd2f8c6d6b2d94d27d2bfbee1ee76f1f0359faca142d652c4639807e78dc30a2cb20c97043fac79a0cb55d6eded5f7c8e1ce8b37e6da9f993511fcd6d6629bde5b3d7eb5c1e505634060dafb2b19a208e1685bdca656378fef7bb0f25390fc58fe75fa8631a39f78e73d6646b93c32e2923463ced724d35f6e2f00164c0fdbd13f97980b6aa26d811de1a178490d518522232f499b7d83214c77d", 0xd8}, {&(0x7f0000000440)="eac7894ab7651f07aa336943b95d09d6a717d65a137e0b039a51c3735f2506d464be82147ae2b6e3bef1d6b489c53b0ad0", 0x31}], 0x8, &(0x7f00000018c0)=[@rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, r3, r3]}}, @rights={{0x20, 0x1, 0x1, [r4, r3, r2, r4, r1]}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @rights={{0x18, 0x1, 0x1, [r3, r2, r3]}}, @cred={{0x18, 0x1, 0x2, {r0, 0xee01}}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @cred={{0x18}}], 0xfc, 0x10000}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x20, 0x2c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\xd8'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x86, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "9d42a08597d3b2f44ac89b1b52cc6728d6697d4cebc8f2f062c6f91f224aaacc", "99bd3410936eefeb3ea898dafab974aa", {"96deedc95f5d10a12027128db2e9bdf6", "f838a300b01b0e19ecdf00b20600"}}}}}}}, 0x0) syz_emit_ethernet(0x30, &(0x7f0000000300)={@random="e90c630faca2", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x22, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xe, 0x0, @opaque="cbe66f1099d3"}}}}}, 0x0) 5.559266641s ago: executing program 0 (id=3582): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@restrict={0x8, 0x0, 0x0, 0xb, 0x2}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x2, 0xa}]}, {0x0, [0x30, 0x0, 0x30, 0x61, 0x5f, 0x5f]}}, 0x0, 0x3c, 0x0, 0x1, 0x401, 0x10000}, 0x28) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) capget(&(0x7f0000000240)={0x20080522}, &(0x7f0000000400)={0x9a, 0x2, 0x720000, 0x7, 0x5, 0x6}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000002d00)={0x30, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_IE={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61780, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) dup(0xffffffffffffffff) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) 5.378078012s ago: executing program 4 (id=3584): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x7, &(0x7f00000000c0)="ee102d68f97c4665", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0x3}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r0, &(0x7f00000004c0)="b0", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x1000, @loopback, 0xffffffff}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendto$inet6(r0, &(0x7f0000000580)="9b", 0x29fff, 0x0, 0x0, 0x0) 4.477454167s ago: executing program 0 (id=3586): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000280)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) 3.823826307s ago: executing program 4 (id=3587): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x18}}}}}, 0x36) 3.702172291s ago: executing program 0 (id=3588): socket$kcm(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) rt_sigaction(0x16, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) 3.677245644s ago: executing program 1 (id=3589): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001f000000bca300000000000024030000c0feffff620af0fff8ffffff71a4f2ff000000000f03000000000000e5000500000000002604fdffff02000014010000033800001d13f8ff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b"], 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000", @ANYRES32=r1, @ANYBLOB="080026009015000008005700"], 0x2c}}, 0x0) 3.432841994s ago: executing program 1 (id=3590): name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 3.266119866s ago: executing program 4 (id=3591): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x0, 0x0}) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x2c, 0xa7f084dd5657bbbf, 0x14}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 3.225082546s ago: executing program 1 (id=3592): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000001cc0)=[{{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000480)=[{&(0x7f00000001c0)="ab31f85d1ebbd61ac7a04f12d48afd2593347d7995", 0x15}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f00000005c0)="8c665524e43dc0894227b6695984f5983f6c1698b256d93082c7ff01f72d3aa2ddded2523759b066e98fcda46ccc8e63ab550e87dbf3b2c4960c4b6d55b5cf9412ed5c086e7b6ab3263456d665033a630b319c6d7d14c011b553d165e997d187fd9d12a3d2060a55d38c40fab168d76e66be9e06e7d38703436eaafb83c4cb0e8c590af7b920a766beb6f999da6e429e80ed1031faa71aae669716c651b6d51ff73581035d6a34d602dc812f385e1c44ce8df025a3a64cbf922755552e5c439e82fcc4b2579a56b7ee0f0d2b9c389d471a8ca6b8313a1cac093c392bb7b4", 0xde}, {&(0x7f0000000280)="069e60931e2a6cf707f49e61851db091b95bc591c90fa66a3a7d249349d7df8d4422ca4685e8545173fbbf0233", 0x2d}, {&(0x7f0000000340)="55f5fdad02e5be6d69ac6c0a6f2af304e8dd89172dcf3d8c570bbb08d6e3c2d33d8fa1b5cbbb91c4a93f4377349ba514c67792df8e6011fb39f82f8287", 0x3d}, {&(0x7f0000001700)="8ef3ae9c950d2e7e9db32abc195ab4787dd366f035e1b1fef6c4e1ea9631e7bc95284eb3b34f68c0cf6a98dc2f18d81a9c6a483aaeb629aa759b4b942cebd0b6f10a044cf7ffa3ba08b513492cc9e7b6b4b5dfd8a522df426193b63ba9ed2976a6e55e14b1d7a6284808f53267405838532caa830056e21978db613ac6d864771cc0c10f7c003add1aae56f86b507150", 0x90}, {&(0x7f00000017c0)="32fb663ae6862a634891949000cfde01cbf2e7a269807f9a87eaa084640b070fa86c5ae72e7fa081b9831f463b89395d082191311fbc36b6d4e8cb3838efd2f8c6d6b2d94d27d2bfbee1ee76f1f0359faca142d652c4639807e78dc30a2cb20c97043fac79a0cb55d6eded5f7c8e1ce8b37e6da9f993511fcd6d6629bde5b3d7eb5c1e505634060dafb2b19a208e1685bdca656378fef7bb0f25390fc58fe75fa8631a39f78e73d6646b93c32e2923463ced724d35f6e2f00164c0fdbd13f97980b6aa26d811de1a178490d518522232f499b7d83214c77d", 0xd8}, {&(0x7f0000000440)="eac7894ab7651f07aa336943b95d09d6a717d65a137e0b039a51c3735f2506d464be82147ae2b6e3bef1d6b489c53b0ad0", 0x31}], 0x8, &(0x7f00000018c0)=[@rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, r3, r3]}}, @rights={{0x20, 0x1, 0x1, [r4, r3, r2, r4, r1]}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @rights={{0x18, 0x1, 0x1, [r3, r2, r3]}}, @cred={{0x18, 0x1, 0x2, {r0, 0xee01}}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @cred={{0x18}}], 0xfc, 0x10000}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x20, 0x2c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\xd8'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x86, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "9d42a08597d3b2f44ac89b1b52cc6728d6697d4cebc8f2f062c6f91f224aaacc", "99bd3410936eefeb3ea898dafab974aa", {"96deedc95f5d10a12027128db2e9bdf6", "f838a300b01b0e19ecdf00b20600"}}}}}}}, 0x0) syz_emit_ethernet(0x30, &(0x7f0000000300)={@random="e90c630faca2", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x22, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xe, 0x0, @opaque="cbe66f1099d3"}}}}}, 0x0) 3.086086992s ago: executing program 4 (id=3593): syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x0, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000ff0f00000500000000000000", @ANYRESOCT=r0, @ANYRESDEC=0x0, @ANYRES16, @ANYRES32, @ANYBLOB="00000000000000000000000000000000a52b66fe9af9320000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='fib6_table_lookup\x00', r5}, 0x18) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x1840020, &(0x7f00000001c0)=ANY=[], 0x1, 0x2fc, &(0x7f00000006c0)="$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") r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.598357804s ago: executing program 3 (id=3595): mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 2.118252442s ago: executing program 3 (id=3596): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000100)}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r1, 0x2, 0x2, &(0x7f00000001c0)=[{}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 1.807472422s ago: executing program 4 (id=3597): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x7, &(0x7f00000000c0)="ee102d68f97c4665", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0x3}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r0, &(0x7f00000004c0)="b0", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x1000, @loopback, 0xffffffff}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendto$inet6(r0, &(0x7f0000000580)="9b", 0x29fff, 0x0, 0x0, 0x0) 1.654875911s ago: executing program 1 (id=3598): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000280)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) 1.536281955s ago: executing program 1 (id=3599): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0x101}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x48, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 1.43850803s ago: executing program 3 (id=3600): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000", @ANYRES32=r1, @ANYBLOB="080026009015000008005700"], 0x2c}}, 0x0) 1.313469725s ago: executing program 3 (id=3601): syz_init_net_socket$llc(0x1a, 0x802, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.296782437s ago: executing program 1 (id=3602): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r4 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$revoke(0x3, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2}, 0x94) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) 1.20203823s ago: executing program 3 (id=3603): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x0, 0x0}) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x2c, 0xa7f084dd5657bbbf, 0x14}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.171409133s ago: executing program 0 (id=3604): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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") stat(&(0x7f0000000040)='./file3\x00', 0x0) 1.07875959s ago: executing program 3 (id=3605): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r1, 0xc008aec1, &(0x7f0000000240)={"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"}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)=ANY=[]) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x400, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}, 0x1c) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 4 (id=3606): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) openat$tun(0xffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10160) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0xc, @dev={0xfe, 0x80, '\x00', 0x23}, 0x1}, @in={0x2, 0x4e21, @broadcast}]}, &(0x7f0000000080)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96}, 0x28) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) kernel console output (not intermixed with test programs): ch: netlink: Flow actions may not be safe on all matching packets. [ 768.894596][T15450] 9pnet_virtio: no channels available for device syz [ 769.201931][T15460] 9pnet_virtio: no channels available for device syz [ 770.280100][T15498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2224'. [ 770.310824][T15498] openvswitch: netlink: Flow actions attr not present in new flow. [ 770.535965][T15504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 770.749895][T14677] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 772.268773][T15548] netlink: 'syz.4.2237': attribute type 1 has an invalid length. [ 773.579996][T15566] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2242'. [ 773.705382][T15566] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2242'. [ 774.248509][T15581] loop6: detected capacity change from 0 to 128 [ 774.265944][T15581] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 774.277320][T15581] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 775.070402][T14677] Bluetooth: unknown link type 83 [ 775.075823][T14677] Bluetooth: hci3: connection err: -111 [ 775.094272][T15604] overlayfs: missing 'lowerdir' [ 775.624735][T14677] Bluetooth: hci3: ACL packet too small [ 775.938744][T15628] loop6: detected capacity change from 0 to 128 [ 775.977063][T15628] FAT-fs (loop6): bogus logical sector size 767 [ 776.003770][T15628] FAT-fs (loop6): Can't find a valid FAT filesystem [ 776.196415][T15640] netlink: 'syz.2.2258': attribute type 1 has an invalid length. [ 776.770216][T15646] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 778.337416][T15661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2272'. [ 778.367714][T15661] openvswitch: netlink: Flow actions attr not present in new flow. [ 778.614150][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 779.392748][ T10] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 779.402456][ T10] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 779.413194][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 779.432939][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 779.498751][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.545764][ T10] usb 2-1: config 0 descriptor?? [ 779.569902][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 780.114557][T15691] 9pnet_virtio: no channels available for device syz [ 780.218832][T15696] overlayfs: failed to clone upperpath [ 780.376549][T15704] xt_ipcomp: unknown flags 1D [ 780.778008][T14677] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 781.289315][ T5943] usb 2-1: USB disconnect, device number 12 [ 781.473545][T15732] ubi: mtd0 is already attached to ubi31 [ 781.507861][T15733] netlink: 'syz.2.2284': attribute type 1 has an invalid length. [ 782.482923][T15746] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2292'. [ 785.260829][T15803] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2308'. [ 786.465026][T15813] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2310'. [ 786.644881][T15821] bridge_slave_0: left allmulticast mode [ 786.721188][T15821] bridge_slave_0: left promiscuous mode [ 786.749160][T15821] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.881287][T15821] bridge_slave_1: left allmulticast mode [ 786.887182][T15821] bridge_slave_1: left promiscuous mode [ 786.917579][T15821] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.102243][T15821] bond0: (slave bond_slave_0): Releasing backup interface [ 787.156747][T15821] bond0: (slave bond_slave_1): Releasing backup interface [ 787.230174][T15821] team0: Port device team_slave_0 removed [ 787.360982][T15821] team0: Port device team_slave_1 removed [ 787.449435][T15821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.545290][T15821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 787.570136][T15821] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 787.629904][T15824] team0: Mode changed to "roundrobin" [ 787.636617][T15826] vlan0: entered promiscuous mode [ 790.464331][T15900] loop2: detected capacity change from 0 to 7 [ 790.525884][T15900] Dev loop2: unable to read RDB block 7 [ 790.536190][T15900] loop2: unable to read partition table [ 790.543221][T15897] lo speed is unknown, defaulting to 1000 [ 790.553106][T15900] loop2: partition table beyond EOD, truncated [ 790.559439][T15900] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 790.797274][T15904] loop6: detected capacity change from 0 to 8 [ 791.460988][T15907] binder: 15906:15907 ioctl c0306201 2000000003c0 returned -14 [ 792.857392][T15911] loop2: detected capacity change from 0 to 128 [ 792.864676][T15911] FAT-fs (loop2): bogus logical sector size 767 [ 792.871013][T15911] FAT-fs (loop2): Can't find a valid FAT filesystem [ 793.492687][T15922] comedi comedi0: Cannot bond this driver to itself! [ 793.568184][T15924] 9pnet_virtio: no channels available for device syz [ 794.093320][T15942] tipc: Enabling of bearer rejected, failed to enable media [ 795.132895][T15959] loop6: detected capacity change from 0 to 128 [ 795.146157][T15959] FAT-fs (loop6): bogus logical sector size 767 [ 795.153223][T15959] FAT-fs (loop6): Can't find a valid FAT filesystem [ 796.695615][T15987] loop0: detected capacity change from 0 to 8 [ 797.074383][T15994] netlink: 'syz.4.2350': attribute type 25 has an invalid length. [ 798.276813][T16024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2357'. [ 798.492095][T16034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2362'. [ 798.494331][T16032] netlink: 'syz.4.2361': attribute type 10 has an invalid length. [ 798.522797][T16032] mac80211_hwsim hwsim47 wlan1: entered promiscuous mode [ 798.530471][T16032] mac80211_hwsim hwsim47 wlan1: entered allmulticast mode [ 798.558881][T16032] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 798.972326][T16060] syzkaller1: entered promiscuous mode [ 798.978271][T16060] syzkaller1: entered allmulticast mode [ 799.878701][T14677] Bluetooth: hci4: unexpected event for opcode 0x2024 [ 800.495511][T16092] loop2: detected capacity change from 0 to 7 [ 800.600524][T16092] Dev loop2: unable to read RDB block 7 [ 800.609831][T16092] loop2: unable to read partition table [ 800.640964][T16092] loop2: partition table beyond EOD, truncated [ 800.747432][T14677] Bluetooth: hci3: command 0x0406 tx timeout [ 801.160183][T16092] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 802.051775][T16126] netlink: 1748 bytes leftover after parsing attributes in process `syz.2.2386'. [ 802.217726][ T5908] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 802.374399][ T5908] usb 7-1: device descriptor read/64, error -71 [ 802.427149][T16133] lo speed is unknown, defaulting to 1000 [ 802.771831][T16144] loop2: detected capacity change from 0 to 512 [ 802.804153][T16144] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 802.873192][T16144] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.2390: bad orphan inode 15 [ 802.888062][T16144] ext4_test_bit(bit=14, block=18) = 1 [ 802.894368][T16144] is_bad_inode(inode)=0 [ 802.898530][T16144] NEXT_ORPHAN(inode)=1023 [ 802.903014][T16144] max_ino=32 [ 802.906212][T16144] i_nlink=0 [ 802.911032][T16144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 802.936991][T16144] ext2 filesystem being mounted at /326/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 803.148692][ T5908] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 803.360710][ T5908] usb 7-1: device descriptor read/64, error -71 [ 803.387437][ T8841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 803.478809][ T5908] usb usb7-port1: attempt power cycle [ 803.832248][T16160] loop1: detected capacity change from 0 to 8 [ 804.654942][ T5908] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 804.708075][ T5908] usb 7-1: device descriptor read/8, error -71 [ 805.252473][ T5908] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 805.508879][ T5908] usb 7-1: device not accepting address 10, error -71 [ 805.541331][ T5908] usb usb7-port1: unable to enumerate USB device [ 805.931960][T16183] loop0: detected capacity change from 0 to 128 [ 805.940144][T16183] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 805.965316][T16183] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 806.051523][T16187] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=983953270 (1967906540 ns) > initial count (914717820 ns). Using initial count to start timer. [ 807.112187][ T5908] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 807.272474][ T5908] usb 1-1: device descriptor read/64, error -71 [ 807.460264][T16222] tipc: Enabled bearer , priority 0 [ 807.483408][T16222] syzkaller0: entered promiscuous mode [ 807.502264][T16222] syzkaller0: entered allmulticast mode [ 807.550178][ T5908] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 807.578258][T16222] tipc: Resetting bearer [ 807.592582][T16221] tipc: Resetting bearer [ 807.640308][T16221] tipc: Disabling bearer [ 807.674030][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 807.674044][ T30] audit: type=1326 audit(1761342874.423:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16179 comm="syz.4.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f578efc9 code=0x7ffc0000 [ 807.710560][ T5908] usb 1-1: device descriptor read/64, error -71 [ 807.738222][ T30] audit: type=1326 audit(1761342874.423:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16179 comm="syz.4.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f578efc9 code=0x7ffc0000 [ 807.817338][ T30] audit: type=1326 audit(1761342874.461:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16179 comm="syz.4.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb3f5785e67 code=0x7ffc0000 [ 807.849974][ T5908] usb usb1-port1: attempt power cycle [ 807.879557][ T30] audit: type=1326 audit(1761342874.461:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16179 comm="syz.4.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb3f572b099 code=0x7ffc0000 [ 807.972542][ T30] audit: type=1326 audit(1761342874.461:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16179 comm="syz.4.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb3f5785e67 code=0x7ffc0000 [ 808.036229][ T30] audit: type=1326 audit(1761342874.461:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16179 comm="syz.4.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb3f572b099 code=0x7ffc0000 [ 808.155983][ T30] audit: type=1326 audit(1761342874.461:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16179 comm="syz.4.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb3f5785e67 code=0x7ffc0000 [ 808.196263][T16239] loop6: detected capacity change from 0 to 8 [ 808.373385][ T30] audit: type=1326 audit(1761342874.461:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16179 comm="syz.4.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb3f572b099 code=0x7ffc0000 [ 808.409494][ T30] audit: type=1326 audit(1761342874.461:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16179 comm="syz.4.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb3f5785e67 code=0x7ffc0000 [ 808.438873][T16247] Falling back ldisc for ptm0. [ 808.490598][ T30] audit: type=1326 audit(1761342874.461:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16179 comm="syz.4.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb3f572b099 code=0x7ffc0000 [ 808.522643][ T5908] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 808.572236][ T5908] usb 1-1: device descriptor read/8, error -71 [ 808.789882][T16259] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2428'. [ 808.831268][T16259] openvswitch: netlink: Flow key attr not present in new flow. [ 808.844907][ T5908] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 808.886540][ T5908] usb 1-1: device descriptor read/8, error -71 [ 809.014608][ T5908] usb usb1-port1: unable to enumerate USB device [ 809.159533][T16271] netlink: 1748 bytes leftover after parsing attributes in process `syz.2.2433'. [ 809.178355][T16273] loop6: detected capacity change from 0 to 128 [ 809.701669][T16290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2442'. [ 809.710881][T16290] openvswitch: netlink: Flow actions attr not present in new flow. [ 810.303261][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.868986][T16297] syz.1.2446 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 810.880395][T16297] CPU: 1 UID: 0 PID: 16297 Comm: syz.1.2446 Not tainted syzkaller #0 PREEMPT(full) [ 810.880419][T16297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 810.880436][T16297] Call Trace: [ 810.880443][T16297] [ 810.880451][T16297] dump_stack_lvl+0x189/0x250 [ 810.880493][T16297] ? __pfx_dump_stack_lvl+0x10/0x10 [ 810.880521][T16297] ? __pfx__printk+0x10/0x10 [ 810.880553][T16297] dump_header+0xd3/0x480 [ 810.880579][T16297] oom_kill_process+0x263/0x800 [ 810.880605][T16297] out_of_memory+0xf09/0x12a0 [ 810.880638][T16297] ? __pfx_out_of_memory+0x10/0x10 [ 810.880670][T16297] mem_cgroup_out_of_memory+0x145/0x240 [ 810.880693][T16297] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 810.880725][T16297] ? _raw_spin_unlock+0x28/0x50 [ 810.880749][T16297] ? memcg1_oom_prepare+0x37f/0x450 [ 810.880778][T16297] try_charge_memcg+0xdf0/0x1280 [ 810.880822][T16297] ? __pfx_try_charge_memcg+0x10/0x10 [ 810.880867][T16297] charge_memcg+0x9f/0x180 [ 810.880896][T16297] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 810.880923][T16297] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 810.880955][T16297] __read_swap_cache_async+0x212/0x480 [ 810.880993][T16297] swap_cluster_readahead+0x336/0x630 [ 810.881027][T16297] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 810.881054][T16297] ? css_rstat_updated+0x23a/0x4f0 [ 810.881084][T16297] ? __pfx_css_rstat_updated+0x10/0x10 [ 810.881117][T16297] ? get_vma_policy+0x27c/0x3c0 [ 810.881143][T16297] swapin_readahead+0x17d/0xb50 [ 810.881183][T16297] ? __pfx_swapin_readahead+0x10/0x10 [ 810.881214][T16297] ? swap_table_get+0x1e/0x260 [ 810.881240][T16297] ? swap_table_get+0x1e/0x260 [ 810.881264][T16297] ? swap_table_get+0x1e/0x260 [ 810.881291][T16297] ? swap_table_get+0x216/0x260 [ 810.881319][T16297] ? swap_cache_get_folio+0x51c/0x530 [ 810.881353][T16297] do_swap_page+0x43b/0x5b20 [ 810.881387][T16297] ? __lock_acquire+0xab9/0xd20 [ 810.881418][T16297] ? ___pte_offset_map+0x29/0x240 [ 810.881436][T16297] ? do_swap_page+0x184/0x5b20 [ 810.881464][T16297] ? __pfx_do_swap_page+0x10/0x10 [ 810.881494][T16297] ? __pfx_default_wake_function+0x10/0x10 [ 810.881517][T16297] ? ___pte_offset_map+0x1ae/0x240 [ 810.881538][T16297] ? pte_offset_map_rw_nolock+0xea/0x160 [ 810.881560][T16297] __handle_mm_fault+0xe50/0x5440 [ 810.881593][T16297] ? lock_vma_under_rcu+0x1a3/0x450 [ 810.881613][T16297] ? __pfx___handle_mm_fault+0x10/0x10 [ 810.881645][T16297] ? lock_vma_under_rcu+0x3d2/0x450 [ 810.881669][T16297] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 810.881696][T16297] handle_mm_fault+0x40a/0x8e0 [ 810.881725][T16297] do_user_addr_fault+0xa7c/0x1380 [ 810.881753][T16297] ? rcu_is_watching+0x15/0xb0 [ 810.881778][T16297] ? trace_page_fault_user+0x84/0x1e0 [ 810.881802][T16297] exc_page_fault+0x82/0x100 [ 810.881832][T16297] asm_exc_page_fault+0x26/0x30 [ 810.881855][T16297] RIP: 0033:0x7f904fa658ec [ 810.881876][T16297] Code: 66 0f 1f 44 00 00 69 3d c6 fd ea 00 e8 03 00 00 48 8d 1d c7 06 38 00 e8 42 96 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 810.881892][T16297] RSP: 002b:00007ffec19dee10 EFLAGS: 00010283 [ 810.881909][T16297] RAX: 0000000000000000 RBX: 00007f904fde7080 RCX: 0000000000000000 [ 810.881921][T16297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555788d5808 [ 810.881933][T16297] RBP: 00007f904fde7da0 R08: 0000000000000000 R09: 3fffffffffffffff [ 810.881945][T16297] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000c59ec [ 810.881956][T16297] R13: 00007ffec19def00 R14: ffffffffffffffff R15: 00007ffec19def20 [ 810.881989][T16297] [ 810.882000][T16297] memory: usage 307200kB, limit 307200kB, failcnt 2308 [ 811.236618][T16297] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 811.244588][T16297] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0 [ 811.251900][T16297] Memory cgroup stats for /syz1: [ 811.252364][T16297] cache 16384 [ 811.260610][T16297] rss 0 [ 811.263367][T16297] rss_huge 0 [ 811.266555][T16297] shmem 0 [ 811.269540][T16297] mapped_file 24576 [ 811.274071][T16297] dirty 16384 [ 811.277358][T16297] writeback 0 [ 811.280680][T16297] workingset_refault_anon 411 [ 811.285344][T16297] workingset_refault_file 127 [ 811.290015][T16297] swap 208896 [ 811.293318][T16297] swapcached 8192 [ 811.296944][T16297] pgpgin 613682 [ 811.300391][T16297] pgpgout 614182 [ 811.303962][T16297] pgfault 306226 [ 811.307499][T16297] pgmajfault 75 [ 811.310948][T16297] inactive_anon 8192 [ 811.314874][T16297] active_anon 0 [ 811.318323][T16297] inactive_file 36864 [ 811.322297][T16297] active_file 0 [ 811.325797][T16297] unevictable 0 [ 811.329250][T16297] hierarchical_memory_limit 314572800 [ 811.334665][T16297] hierarchical_memsw_limit 9223372036854771712 [ 811.340806][T16297] total_cache 16384 [ 811.344661][T16297] total_rss 0 [ 811.347939][T16297] total_rss_huge 0 [ 811.351668][T16297] total_shmem 0 [ 811.355174][T16297] total_mapped_file 24576 [ 811.359493][T16297] total_dirty 16384 [ 811.363291][T16297] total_writeback 0 [ 811.367124][T16297] total_workingset_refault_anon 411 [ 811.372314][T16297] total_workingset_refault_file 127 [ 811.377547][T16297] total_swap 208896 [ 811.382098][T16297] total_swapcached 8192 [ 811.386250][T16297] total_pgpgin 613682 [ 811.390659][T16297] total_pgpgout 614182 [ 811.394718][T16297] total_pgfault 306226 [ 811.398843][T16297] total_pgmajfault 75 [ 811.402822][T16297] total_inactive_anon 8192 [ 811.407225][T16297] total_active_anon 0 [ 811.462073][T16297] total_inactive_file 36864 [ 811.514075][T16297] total_active_file 0 [ 811.526553][T16302] netlink: 1748 bytes leftover after parsing attributes in process `syz.0.2447'. [ 811.577993][T16297] total_unevictable 0 [ 811.592341][T16297] anon_cost 0 [ 811.595643][T16297] file_cost 0 [ 811.598916][T16297] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2446,pid=16297,uid=0 [ 811.676553][T16297] Memory cgroup out of memory: Killed process 16297 (syz.1.2446) total-vm:102028kB, anon-rss:1148kB, file-rss:23216kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 812.138908][T16322] loop1: detected capacity change from 0 to 128 [ 812.447473][T16328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2456'. [ 812.456637][T16328] openvswitch: netlink: Flow actions attr not present in new flow. [ 812.815539][T16337] xt_hashlimit: size too large, truncated to 1048576 [ 812.829192][T16338] netlink: 1748 bytes leftover after parsing attributes in process `syz.4.2459'. [ 813.017825][T16344] openvswitch: netlink: Flow key attr not present in new flow. [ 813.082024][ T1212] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 813.116654][T16345] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 813.304048][ T1212] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 813.328523][T14161] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 813.357931][T14161] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 813.370104][ T1212] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 813.385360][ T1212] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 813.438672][ T1212] usb 1-1: config 0 interface 0 has no altsetting 0 [ 813.463932][ T1212] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 813.504485][ T1212] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 813.557601][ T1212] usb 1-1: config 0 interface 0 has no altsetting 0 [ 813.591460][ T1212] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 813.634581][T16356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2467'. [ 813.650024][ T1212] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 813.725840][ T1212] usb 1-1: config 0 interface 0 has no altsetting 0 [ 813.752863][ T1212] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 813.804303][ T1212] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 813.861032][T16361] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2468'. [ 813.864989][ T30] kauditd_printk_skb: 236 callbacks suppressed [ 813.865008][ T30] audit: type=1326 audit(1761342880.215:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.2.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f0d8efc9 code=0x7ffc0000 [ 813.873211][T16361] openvswitch: netlink: Flow actions attr not present in new flow. [ 813.893848][ T1212] usb 1-1: config 0 interface 0 has no altsetting 0 [ 813.930322][ T30] audit: type=1326 audit(1761342880.215:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.2.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f0d8efc9 code=0x7ffc0000 [ 813.981807][ T30] audit: type=1326 audit(1761342880.225:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.2.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd6f0d8efc9 code=0x7ffc0000 [ 814.016733][ T1212] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 814.131878][ T1212] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 814.190710][ T1212] usb 1-1: config 0 interface 0 has no altsetting 0 [ 814.250027][ T30] audit: type=1326 audit(1761342880.225:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.2.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f0d8efc9 code=0x7ffc0000 [ 814.407595][ T1212] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 814.686202][ T1212] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 814.706274][ T30] audit: type=1326 audit(1761342880.225:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.2.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fd6f0d8efc9 code=0x7ffc0000 [ 814.753193][ T1212] usb 1-1: config 0 interface 0 has no altsetting 0 [ 814.774846][ T30] audit: type=1326 audit(1761342880.225:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.2.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f0d8efc9 code=0x7ffc0000 [ 814.806844][ T1212] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 814.815745][ T1212] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 814.877582][ T1212] usb 1-1: config 0 interface 0 has no altsetting 0 [ 814.902890][ T30] audit: type=1326 audit(1761342880.271:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.2.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6f0d8efc9 code=0x7ffc0000 [ 814.925637][ T1212] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 814.930568][ T30] audit: type=1326 audit(1761342880.271:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.2.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f0d8efc9 code=0x7ffc0000 [ 815.016694][ T1212] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 815.073224][ T30] audit: type=1326 audit(1761342880.271:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.2.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f0d8efc9 code=0x7ffc0000 [ 815.103927][ T30] audit: type=1326 audit(1761342880.271:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.2.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd6f0d8efc9 code=0x7ffc0000 [ 815.130184][ T1212] usb 1-1: config 0 interface 0 has no altsetting 0 [ 815.149288][ T1212] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 815.158362][ T1212] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 815.204618][ T1212] usb 1-1: Product: syz [ 815.219727][ T1212] usb 1-1: Manufacturer: syz [ 815.253191][ T1212] usb 1-1: SerialNumber: syz [ 815.307691][ T1212] usb 1-1: config 0 descriptor?? [ 815.328872][ T1212] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 816.519178][T15147] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 816.636633][ C0] usb 1-1: yurex_control_callback - control failed: -2 [ 816.675185][T14161] usb 1-1: USB disconnect, device number 16 [ 816.694793][T14161] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 816.701393][T15147] usb 3-1: Using ep0 maxpacket: 16 [ 816.722639][T15147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.736700][T15147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.773514][T15147] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 816.804306][T15147] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 816.813923][T15147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.830759][ T8231] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 816.851624][T15147] usb 3-1: config 0 descriptor?? [ 817.003333][ T8231] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 817.022242][ T8231] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.055093][ T8231] usb 7-1: Product: syz [ 817.059299][ T8231] usb 7-1: Manufacturer: syz [ 817.066046][ T8231] usb 7-1: SerialNumber: syz [ 817.594820][T15147] usbhid 3-1:0.0: can't add hid device: -71 [ 817.611673][T15147] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 817.627814][T15147] usb 3-1: USB disconnect, device number 10 [ 817.862152][ T5840] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 817.886912][T16413] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2487'. [ 818.053932][T16420] IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_0, syncid = 2, id = 0 [ 818.064807][T16419] IPVS: stopping master sync thread 16420 ... [ 818.392412][T16429] netlink: 'syz.2.2493': attribute type 10 has an invalid length. [ 818.418676][T16429] mac80211_hwsim hwsim31 wlan1: entered promiscuous mode [ 818.426583][T16429] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode [ 818.434817][T16429] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 818.487662][ T5901] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 818.670064][ T5901] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 818.691188][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.700429][ T5901] usb 1-1: Product: syz [ 818.704719][ T5901] usb 1-1: Manufacturer: syz [ 818.710339][ T5901] usb 1-1: SerialNumber: syz [ 818.921416][ T1212] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 818.950134][ T5901] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 818.974156][ T5901] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 818.984766][ T5901] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 819.000647][ T5901] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 819.086520][ T1212] usb 2-1: Using ep0 maxpacket: 16 [ 819.094223][ T1212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.105806][ T1212] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 819.115034][ T1212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.129391][ T1212] usb 2-1: config 0 descriptor?? [ 819.129832][ T8231] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 819.240178][T15147] usb 1-1: USB disconnect, device number 17 [ 819.363986][T16443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.376348][T16443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.391467][ T1212] usbhid 2-1:0.0: can't add hid device: -71 [ 819.400273][ T1212] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 819.412063][ T1212] usb 2-1: USB disconnect, device number 13 [ 819.918839][T16461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2506'. [ 820.020190][T16464] tipc: Enabled bearer , priority 0 [ 820.063858][T16464] syzkaller0: entered promiscuous mode [ 820.069713][ T1212] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 820.077507][T16464] syzkaller0: entered allmulticast mode [ 820.084259][T16464] tipc: Resetting bearer [ 820.093934][T16463] tipc: Resetting bearer [ 820.251836][ T1212] usb 3-1: Using ep0 maxpacket: 16 [ 820.260028][ T1212] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 820.269100][ T1212] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 820.279259][ T1212] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 820.290619][ T1212] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 820.299705][ T1212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.308405][ T1212] usb 3-1: Product: syz [ 820.314749][ T1212] usb 3-1: Manufacturer: syz [ 820.319388][ T1212] usb 3-1: SerialNumber: syz [ 820.445656][ T8231] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -EPROTO [ 820.458263][ T8231] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 820.473769][ T8231] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 820.484377][ T8231] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 820.499969][ T8231] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 820.521726][ T8231] usb 7-1: USB disconnect, device number 11 [ 820.555745][T16457] usb usb8: usbfs: process 16457 (syz.2.2504) did not claim interface 0 before use [ 820.587674][ T1212] usb 3-1: 0:2 : does not exist [ 820.640225][ T1212] usb 3-1: USB disconnect, device number 11 [ 821.262627][ T1212] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 821.362930][T16483] netlink: zone id is out of range [ 821.370010][T16483] netlink: zone id is out of range [ 821.375235][T16483] netlink: del zone limit has 8 unknown bytes [ 821.455722][ T1212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.466921][ T1212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.483035][ T1212] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 821.492168][ T1212] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 821.500344][ T1212] usb 2-1: Manufacturer: syz [ 821.508496][ T1212] usb 2-1: config 0 descriptor?? [ 822.081001][ T1212] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 822.095489][ T1212] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 822.111706][ T1212] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 822.134936][ T1212] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 822.155655][ T1212] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 822.163183][ T1212] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 822.184572][ T1212] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 822.196984][ T1212] pyra 0003:1E7D:2CF6.000A: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 822.334349][T16492] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2518'. [ 822.363488][T16485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 822.683681][T16463] tipc: Disabling bearer [ 822.704562][ T5908] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 822.913038][ T5908] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.939954][ T5908] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 822.948949][ T5908] usb 7-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=51.27 [ 823.002619][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.049403][ T5908] usb 7-1: config 0 descriptor?? [ 823.075662][ T5908] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 823.593034][ T5908] usb 7-1: USB disconnect, device number 12 [ 823.808265][ T1212] pyra 0003:1E7D:2CF6.000A: couldn't init struct pyra_device [ 823.824255][ T1212] pyra 0003:1E7D:2CF6.000A: couldn't install mouse [ 823.860129][ T1212] pyra 0003:1E7D:2CF6.000A: probe with driver pyra failed with error -71 [ 823.887691][ T1212] usb 2-1: USB disconnect, device number 14 [ 824.033872][T16523] fido_id[16523]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 824.281968][T16535] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2529'. [ 824.550209][ T5840] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 824.746798][T16552] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2537'. [ 824.788245][T16552] openvswitch: netlink: Flow actions attr not present in new flow. [ 824.964730][T16560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 825.248395][T15147] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 825.408341][ T1212] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 825.514338][T16579] loop6: detected capacity change from 0 to 8 [ 825.529314][T15147] usb 3-1: unable to get BOS descriptor or descriptor too short [ 825.667991][T15147] usb 3-1: not running at top speed; connect to a high speed hub [ 825.684512][T15147] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 825.689019][ T1212] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 825.709832][T15147] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 825.722550][ T1212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.743216][T15147] usb 3-1: string descriptor 0 read error: -22 [ 825.745406][ T1212] usb 1-1: Product: syz [ 825.754172][ T1212] usb 1-1: Manufacturer: syz [ 825.756479][T15147] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 825.772674][ T1212] usb 1-1: SerialNumber: syz [ 825.777486][T15147] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.822484][T15147] usb 3-1: 0:2 : does not exist [ 826.006862][ T5908] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 826.052472][T16586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2551'. [ 826.061835][T16586] openvswitch: netlink: Flow actions attr not present in new flow. [ 826.200661][ T5908] usb 7-1: Using ep0 maxpacket: 8 [ 826.214456][ T5908] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 826.242798][ T5908] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 826.257090][ T5908] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 826.268647][ T5908] usb 7-1: Product: syz [ 826.272926][ T5908] usb 7-1: Manufacturer: syz [ 826.277838][ T5908] usb 7-1: SerialNumber: syz [ 826.508947][ T5908] usb 7-1: Handspring Visor / Palm OS: No valid connect info available [ 826.517882][ T5908] usb 7-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 826.526418][ T5908] usb 7-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 826.534575][ T5908] usb 7-1: Handspring Visor / Palm OS: Number of ports: 2 [ 826.728815][ T5908] visor 7-1:1.0: Handspring Visor / Palm OS converter detected [ 826.746089][ T5908] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 826.760183][ T5908] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 826.946713][ T5908] usb 7-1: USB disconnect, device number 13 [ 826.972339][ T5908] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 827.003575][ T5908] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 827.018694][ T5908] visor 7-1:1.0: device disconnected [ 827.545444][ T1212] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 827.587352][T15147] usb 3-1: Warning! Unlikely big volume range (=20196), cval->res is probably wrong. [ 827.603195][T15147] usb 3-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/20196/1 [ 827.619142][T15147] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 827.633972][T15147] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 827.679168][T15147] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 827.706821][T15147] usb 3-1: USB disconnect, device number 12 [ 827.780130][T16609] bond0: (slave wlan1): Releasing backup interface [ 827.789239][T16609] mac80211_hwsim hwsim47 wlan1 (unregistering): left promiscuous mode [ 827.801600][T16609] mac80211_hwsim hwsim47 wlan1 (unregistering): left allmulticast mode [ 827.947991][T16614] lo speed is unknown, defaulting to 1000 [ 828.262316][T16625] netlink: 'syz.2.2566': attribute type 10 has an invalid length. [ 828.638600][T16636] afs: Unknown parameter 'audit' [ 828.657479][T15482] Bluetooth: hci5: command 0x1003 tx timeout [ 828.666319][ T5840] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 828.675103][ T5901] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 828.828731][ T5840] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 828.830962][T16640] lo speed is unknown, defaulting to 1000 [ 828.839497][ T5840] Bluetooth: hci4: Injecting HCI hardware error event [ 828.854048][T15482] Bluetooth: hci4: hardware error 0x00 [ 828.873258][ T5901] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 828.883584][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 828.895835][ T5901] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 828.909798][ T5901] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 828.919570][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.927887][ T5901] usb 3-1: Product: syz [ 828.932314][ T5901] usb 3-1: Manufacturer: syz [ 828.937383][ T5901] usb 3-1: SerialNumber: syz [ 828.946558][ T5901] usb 3-1: config 0 descriptor?? [ 828.953143][T16631] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 828.960920][T16631] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 828.971046][ T5901] usb 3-1: ucan: probing device on interface #0 [ 829.028349][T16647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2575'. [ 829.121724][ T1212] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 829.134930][ T1212] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 829.144943][ T1212] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 829.157391][ T1212] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 829.177250][ T1212] usb 1-1: USB disconnect, device number 18 [ 829.187220][ T5901] usb 3-1: ucan: device protocol version 524288 is not supported [ 829.198622][ T5901] usb 3-1: ucan: probe failed; try to update the device firmware [ 829.428321][T16651] netlink: 'syz.4.2577': attribute type 10 has an invalid length. [ 829.453410][T16651] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.463163][T16651] team0: entered promiscuous mode [ 829.468219][T16651] team_slave_0: entered promiscuous mode [ 829.476253][T16651] team_slave_1: entered promiscuous mode [ 829.482489][T16651] team0: entered allmulticast mode [ 829.487720][T16651] team_slave_0: entered allmulticast mode [ 829.500375][T16651] team_slave_1: entered allmulticast mode [ 829.507898][T16651] bond0: (slave team0): Enslaving as an active interface with an up link [ 829.529951][T16655] netlink: 'syz.6.2579': attribute type 10 has an invalid length. [ 829.555227][T16655] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 829.617097][T16659] netlink: 'syz.6.2581': attribute type 1 has an invalid length. [ 829.625164][T16659] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2581'. [ 831.051737][T15482] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 831.221735][T16693] evm: overlay not supported [ 831.649278][T15147] usb 3-1: USB disconnect, device number 13 [ 831.838632][T16717] netlink: 1748 bytes leftover after parsing attributes in process `syz.4.2602'. [ 832.077238][ T5840] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 832.077296][T15482] Bluetooth: hci5: command 0x1003 tx timeout [ 832.130615][ T1212] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 832.280366][T15147] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 832.328093][ T1212] usb 2-1: config 0 interface 0 has no altsetting 0 [ 832.338065][ T1212] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 832.347970][ T1212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.366293][ T1212] usb 2-1: config 0 descriptor?? [ 832.463941][T15147] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 832.472165][T15147] usb 1-1: config 0 has no interface number 0 [ 832.478571][T15147] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 832.490470][T15147] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 832.499809][T15147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.513929][T15147] usb 1-1: config 0 descriptor?? [ 832.549553][T15147] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input21 [ 832.723450][ T1212] usbhid 2-1:0.0: can't add hid device: -71 [ 832.734606][ T1212] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 832.749134][ T1212] usb 2-1: USB disconnect, device number 15 [ 832.778135][ T5901] usb 1-1: USB disconnect, device number 19 [ 835.840583][T15482] Bluetooth: hci5: command 0x1003 tx timeout [ 835.850728][ T5840] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 836.843658][ T1212] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 836.976553][T16819] loop2: detected capacity change from 0 to 128 [ 837.055514][ T1212] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 837.072912][ T1212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.100528][ T1212] usb 1-1: Product: syz [ 837.105329][ T1212] usb 1-1: Manufacturer: syz [ 837.109942][ T1212] usb 1-1: SerialNumber: syz [ 837.178798][ T1212] usb 1-1: config 0 descriptor?? [ 837.769503][T16827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2649'. [ 837.800869][ T1212] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 837.831139][T16823] lo speed is unknown, defaulting to 1000 [ 838.103577][T16836] overlayfs: failed to clone upperpath [ 838.279459][T14161] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 838.340729][T14161] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 838.612639][T16841] fido_id[16841]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 838.745961][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 838.936404][T16851] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2658'. [ 838.961685][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.983656][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.017081][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 839.061828][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 839.074950][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.088500][ T10] usb 3-1: config 0 descriptor?? [ 839.188263][T16861] loop6: detected capacity change from 0 to 128 [ 839.464212][ T1212] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 839.483850][ T1212] usb 1-1: USB disconnect, device number 20 [ 840.060273][ T10] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 840.079641][ T10] usb 3-1: USB disconnect, device number 14 [ 840.234173][T16869] fido_id[16869]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 840.297445][T16871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 840.730516][T16894] loop2: detected capacity change from 0 to 7 [ 840.753904][T16894] Dev loop2: unable to read RDB block 7 [ 840.760525][T16894] loop2: unable to read partition table [ 840.767306][T16894] loop2: partition table beyond EOD, truncated [ 840.773655][T16894] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 841.007702][ T5202] Dev loop2: unable to read RDB block 7 [ 841.043963][ T5202] loop2: unable to read partition table [ 841.061673][ T5202] loop2: partition table beyond EOD, truncated [ 841.872833][T16913] loop0: detected capacity change from 0 to 128 [ 843.170477][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 843.353946][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.365126][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.375569][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 843.416960][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 843.427903][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.449492][ T10] usb 2-1: config 0 descriptor?? [ 843.474484][T16939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2684'. [ 843.897501][ T10] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 844.413916][T16978] netlink: 'syz.4.2690': attribute type 10 has an invalid length. [ 844.618306][ T8231] usb 2-1: USB disconnect, device number 16 [ 844.982511][T16991] loop0: detected capacity change from 0 to 1024 [ 845.008129][T16991] EXT4-fs: Ignoring removed mblk_io_submit option [ 845.048103][T16993] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2698'. [ 845.067894][T16991] EXT4-fs: Ignoring removed oldalloc option [ 845.092581][T16991] EXT4-fs: Ignoring removed nomblk_io_submit option [ 845.153393][T16991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 845.352104][ T9665] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.374270][T17003] loop1: detected capacity change from 0 to 256 [ 845.401400][T17003] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 845.425990][T17003] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 845.532196][T17003] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 845.552699][T17005] loop6: detected capacity change from 0 to 2048 [ 845.574066][T17003] exFAT-fs (loop1): failed to load alloc-bitmap [ 845.580274][T17005] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 845.600942][T17003] exFAT-fs (loop1): failed to recognize exfat type [ 845.996105][T17025] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2709'. [ 846.599018][T17055] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2723'. [ 847.002810][T17065] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.060726][T17067] loop6: detected capacity change from 0 to 512 [ 847.068091][T17067] EXT4-fs: inline encryption not supported [ 847.113612][T17067] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 847.139850][T17067] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2728: invalid indirect mapped block 2683928664 (level 1) [ 847.210844][T17067] EXT4-fs (loop6): 1 truncate cleaned up [ 847.228131][T17067] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 847.381935][T17052] orangefs_mount: mount request failed with -4 [ 848.001574][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 848.001594][ T30] audit: type=1800 audit(1761342912.151:953): pid=17067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2728" name="file0" dev="loop6" ino=13 res=0 errno=0 [ 848.041585][T17085] cgroup: Unknown subsys name 'cpuset' [ 848.102379][T17067] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2728: Invalid block bitmap block 3 in block_group 0 [ 848.131194][T17067] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 848.168404][T17067] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2728: invalid indirect mapped block 2683928664 (level 1) [ 848.232702][T11115] EXT4-fs error (device loop6): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 848.318090][T17093] loop0: detected capacity change from 0 to 512 [ 848.342655][T11115] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 848.354930][T17093] EXT4-fs: Ignoring removed nomblk_io_submit option [ 848.373066][T17097] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2741'. [ 848.380596][T17093] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 848.396762][T11115] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 848.422029][T17093] EXT4-fs (loop0): 1 truncate cleaned up [ 848.438298][T17093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 848.582056][ T9665] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.190317][T11115] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.314536][ T6077] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.458010][ T6077] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.596694][ T6077] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.919142][T17125] loop2: detected capacity change from 0 to 8 [ 849.954998][ T6077] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.015635][T15482] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 850.028236][T15482] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 850.039414][T15482] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 850.048516][T15482] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 850.058686][T15482] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 850.461664][T17126] lo speed is unknown, defaulting to 1000 [ 850.835914][ T6077] bridge_slave_1: left allmulticast mode [ 850.869373][ T6077] bridge_slave_1: left promiscuous mode [ 850.889986][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.925604][ T6077] bridge_slave_0: left allmulticast mode [ 850.953357][ T6077] bridge_slave_0: left promiscuous mode [ 850.978493][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.111311][ T1212] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 851.350257][ T1212] usb 3-1: Using ep0 maxpacket: 32 [ 851.461000][ T1212] usb 3-1: config 40 has an invalid descriptor of length 0, skipping remainder of the config [ 851.481865][ T1212] usb 3-1: config 40 has 0 interfaces, different from the descriptor's value: 1 [ 851.544247][ T1212] usb 3-1: New USB device found, idVendor=19d2, idProduct=1266, bcdDevice=cd.c2 [ 851.553694][ T1212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.574690][ T1212] usb 3-1: Product: syz [ 851.578881][ T1212] usb 3-1: Manufacturer: syz [ 851.619701][ T1212] usb 3-1: SerialNumber: syz [ 851.794218][T17145] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2760'. [ 852.256977][ T5840] Bluetooth: hci4: command tx timeout [ 852.781154][ T6077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 852.804664][ T6077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 852.830258][ T6077] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 852.935505][ T6077] bond0 (unregistering): Released all slaves [ 852.955456][T17160] binder: BINDER_SET_CONTEXT_MGR already set [ 852.971885][T17160] binder: 17158:17160 ioctl 4018620d 200000000040 returned -16 [ 853.134116][ T1212] usb 3-1: USB disconnect, device number 15 [ 853.218193][ T6077] tipc: Left network mode [ 853.420722][T17179] netlink: 'syz.0.2768': attribute type 10 has an invalid length. [ 853.634695][T17179] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 853.991628][ T6077] hsr_slave_0: left promiscuous mode [ 853.996521][T17197] loop1: detected capacity change from 0 to 512 [ 854.015040][T17197] EXT4-fs: Ignoring removed orlov option [ 854.025860][T17193] loop2: detected capacity change from 0 to 128 [ 854.056765][T17197] EXT4-fs (loop1): Test dummy encryption mode enabled [ 854.101713][ T6077] hsr_slave_1: left promiscuous mode [ 854.118248][ T6077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 854.141222][T17197] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 854.185253][ T6077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 854.222157][ T6077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 854.265117][ T6077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 854.299534][ T9671] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 854.312957][ T6284] bio_check_eod: 241 callbacks suppressed [ 854.312972][ T6284] kworker/u8:11: attempt to access beyond end of device [ 854.312972][ T6284] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 854.346045][ T6077] veth1_macvtap: left promiscuous mode [ 854.362429][ T6077] veth0_macvtap: left promiscuous mode [ 854.373511][ T6284] kworker/u8:11: attempt to access beyond end of device [ 854.373511][ T6284] loop2: rw=1, sector=161, nr_sectors = 8 limit=128 [ 854.379052][ T6077] veth1_vlan: left promiscuous mode [ 854.419848][ T6077] veth0_vlan: left promiscuous mode [ 854.423481][ T6284] kworker/u8:11: attempt to access beyond end of device [ 854.423481][ T6284] loop2: rw=1, sector=177, nr_sectors = 8 limit=128 [ 854.478197][ T5840] Bluetooth: hci4: command tx timeout [ 854.483893][ T6284] kworker/u8:11: attempt to access beyond end of device [ 854.483893][ T6284] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 854.507519][ T6284] kworker/u8:11: attempt to access beyond end of device [ 854.507519][ T6284] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 854.525030][ T6284] kworker/u8:11: attempt to access beyond end of device [ 854.525030][ T6284] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 854.538739][ T6284] kworker/u8:11: attempt to access beyond end of device [ 854.538739][ T6284] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 854.553581][ T6284] kworker/u8:11: attempt to access beyond end of device [ 854.553581][ T6284] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 855.168274][ T6284] kworker/u8:11: attempt to access beyond end of device [ 855.168274][ T6284] loop2: rw=1, sector=273, nr_sectors = 8 limit=128 [ 855.182245][ T6284] kworker/u8:11: attempt to access beyond end of device [ 855.182245][ T6284] loop2: rw=1, sector=289, nr_sectors = 8 limit=128 [ 855.954960][T17236] input: syz1 as /devices/virtual/input/input24 [ 856.060915][ T10] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 856.235411][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 856.245881][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.260905][ T10] usb 3-1: config 0 descriptor?? [ 856.679315][ T1212] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 856.700834][ T5840] Bluetooth: hci4: command tx timeout [ 856.712469][ T10] wacom 0003:056A:0063.000E: unknown main item tag 0x0 [ 856.719353][ T10] wacom 0003:056A:0063.000E: unknown main item tag 0x0 [ 856.732643][ T10] wacom 0003:056A:0063.000E: unknown main item tag 0x0 [ 856.739650][ T10] wacom 0003:056A:0063.000E: unknown main item tag 0x0 [ 856.747282][ T10] wacom 0003:056A:0063.000E: unknown main item tag 0x0 [ 856.755099][ T10] wacom 0003:056A:0063.000E: unknown main item tag 0x0 [ 856.762024][ T10] wacom 0003:056A:0063.000E: unknown main item tag 0x0 [ 856.842609][ T1212] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 856.855799][ T1212] usb 1-1: config 1 has no interface number 0 [ 856.862893][ T1212] usb 1-1: config 1 interface 105 has no altsetting 0 [ 856.874679][ T1212] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 856.884365][ T1212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.892440][ T1212] usb 1-1: Product: syz [ 856.930511][ T10] usb 3-1: USB disconnect, device number 16 [ 856.943851][ T1212] usb 1-1: Manufacturer: syz [ 856.961997][ T1212] usb 1-1: SerialNumber: syz [ 856.965811][T17126] chnl_net:caif_netlink_parms(): no params data found [ 857.283225][T17126] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.296839][T17126] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.306811][T17126] bridge_slave_0: entered allmulticast mode [ 857.314445][T17126] bridge_slave_0: entered promiscuous mode [ 857.323071][T17126] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.330301][T17126] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.353597][T17126] bridge_slave_1: entered allmulticast mode [ 857.365233][T17126] bridge_slave_1: entered promiscuous mode [ 857.466895][T17126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 857.506032][T17126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.673513][T17126] team0: Port device team_slave_0 added [ 857.697357][T17126] team0: Port device team_slave_1 added [ 857.807408][T17126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.817721][T17126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.847273][T17126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.882932][ T1212] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 857.895189][ T1212] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 857.898212][T17126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.940919][T17126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.014598][T17126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.042388][T17288] binder: BINDER_SET_CONTEXT_MGR already set [ 858.055198][T17288] binder: 17287:17288 ioctl 4018620d 200000000040 returned -16 [ 858.336984][ T1212] aqc111 1-1:1.105 eth21: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, aa:f4:fb:2f:c2:d0 [ 858.355699][ T1212] usb 1-1: USB disconnect, device number 21 [ 858.375428][ T1212] aqc111 1-1:1.105 eth21: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 858.539982][ T1212] aqc111 1-1:1.105 eth21 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 858.550504][ T1212] aqc111 1-1:1.105 eth21 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 858.560189][ T1212] aqc111 1-1:1.105 eth21 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 858.587789][T17126] hsr_slave_0: entered promiscuous mode [ 858.596551][T17126] hsr_slave_1: entered promiscuous mode [ 858.603451][T17126] debugfs: 'hsr0' already exists in 'hsr' [ 858.609305][T17126] Cannot create hsr debugfs directory [ 858.924040][ T5840] Bluetooth: hci4: command tx timeout [ 859.103824][T17320] netlink: 1748 bytes leftover after parsing attributes in process `syz.1.2806'. [ 859.381575][T17328] loop2: detected capacity change from 0 to 2048 [ 859.393364][T17330] loop1: detected capacity change from 0 to 128 [ 859.412721][T17328] udf: Unknown parameter 'uidƒŒ¯n?Œ' [ 859.449530][T17330] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 859.475290][T17330] ext4 filesystem being mounted at /390/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 860.486712][ T9671] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 860.730299][ T5840] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 861.097203][T17126] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 861.307824][T17126] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 861.321800][T17126] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 861.336411][T17126] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 861.844535][T17126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.942190][T17126] 8021q: adding VLAN 0 to HW filter on device team0 [ 862.047243][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.054475][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 862.095230][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.102456][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 862.648581][T17126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 862.948188][T17424] random: crng reseeded on system resumption [ 863.308316][T17126] veth0_vlan: entered promiscuous mode [ 863.381018][T17126] veth1_vlan: entered promiscuous mode [ 863.558633][T17126] veth0_macvtap: entered promiscuous mode [ 863.593845][T17126] veth1_macvtap: entered promiscuous mode [ 863.661846][T17126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 863.719098][T17126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 863.753680][ T6284] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.773579][ T6284] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.799078][ T6284] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.819471][ T6284] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.049983][ T6195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.064895][ T6195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.132166][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.147163][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.292410][T17493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2847'. [ 865.297750][T17492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2846'. [ 865.624406][T17511] netlink: 'syz.1.2853': attribute type 3 has an invalid length. [ 866.707470][T17531] loop1: detected capacity change from 0 to 128 [ 866.714812][T17531] FAT-fs (loop1): bogus logical sector size 767 [ 866.721084][T17531] FAT-fs (loop1): Can't find a valid FAT filesystem [ 867.285581][T17544] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2862'. [ 867.379531][T17545] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2862'. [ 867.423112][T17548] netlink: 1748 bytes leftover after parsing attributes in process `syz.2.2863'. [ 867.808161][T17561] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2867'. [ 867.838861][T17562] loop2: detected capacity change from 0 to 7 [ 867.869848][T17562] Dev loop2: unable to read RDB block 7 [ 867.875423][T17562] loop2: unable to read partition table [ 867.925045][T17562] loop2: partition table beyond EOD, truncated [ 867.934811][T17562] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 868.038544][ T5202] Dev loop2: unable to read RDB block 7 [ 868.047544][ T5202] loop2: unable to read partition table [ 868.060814][ T5202] loop2: partition table beyond EOD, truncated [ 868.076020][T17568] loop0: detected capacity change from 0 to 1024 [ 868.162983][T17568] hfsplus: xattr searching failed [ 868.185221][T17568] hfsplus: xattr searching failed [ 868.199748][T17568] hfsplus: xattr searching failed [ 869.475619][T17615] loop1: detected capacity change from 0 to 2048 [ 869.555082][T17615] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 869.596448][T17623] loop2: detected capacity change from 0 to 7 [ 869.604998][T17623] Dev loop2: unable to read RDB block 7 [ 869.612763][T17623] loop2: unable to read partition table [ 869.621817][T17623] loop2: partition table beyond EOD, truncated [ 869.627993][T17623] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 869.637790][T17615] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 869.660100][T17615] UDF-fs: Scanning with blocksize 512 failed [ 869.745451][T17615] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 870.355249][T17637] loop0: detected capacity change from 0 to 512 [ 870.482906][T17637] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.2890: corrupted in-inode xattr: invalid ea_ino [ 870.723180][T17637] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2890: couldn't read orphan inode 15 (err -117) [ 870.777702][T17637] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 870.944465][ T9665] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 871.263947][T17669] netlink: 1748 bytes leftover after parsing attributes in process `syz.4.2896'. [ 871.395970][ T5901] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 871.638133][ T5901] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 871.652649][ T5901] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 871.680484][ T5901] usb 1-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 871.749754][ T5901] usb 1-1: config 220 has no interface number 2 [ 871.756084][ T5901] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 871.793713][T17691] netlink: 'syz.4.2897': attribute type 10 has an invalid length. [ 871.836743][ T5901] usb 1-1: config 220 interface 0 has no altsetting 0 [ 871.874103][ T5901] usb 1-1: config 220 interface 76 has no altsetting 0 [ 871.905348][ T5901] usb 1-1: config 220 interface 1 has no altsetting 0 [ 871.943372][ T5901] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 871.968106][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.010683][ T5901] usb 1-1: Product: syz [ 872.015660][T17699] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2902'. [ 872.024205][ T5901] usb 1-1: Manufacturer: syz [ 872.045954][ T5901] usb 1-1: SerialNumber: syz [ 872.065436][T17699] netlink: 'syz.1.2902': attribute type 1 has an invalid length. [ 872.119750][T17702] loop3: detected capacity change from 0 to 1024 [ 872.178608][T17702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 872.209548][T17702] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 872.446641][T17126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 872.446662][ T5901] usb 1-1: selecting invalid altsetting 0 [ 872.502139][ T5901] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 872.539683][ T5901] uvcvideo 1-1:220.0: No valid video chain found. [ 872.588240][ T5901] usb 1-1: selecting invalid altsetting 0 [ 872.594179][ T5901] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 872.619837][ T5901] usb 1-1: USB disconnect, device number 22 [ 872.695906][T17716] loop3: detected capacity change from 0 to 256 [ 872.752151][T17716] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001) [ 872.787690][T17716] exFAT-fs (loop3): Filesystem has been set read-only [ 872.818677][T17716] exFAT-fs (loop3): failed to count the number of clusters in root [ 872.839396][T17716] exFAT-fs (loop3): failed to recognize exfat type [ 873.899768][T17743] kvm: pic: non byte write [ 873.955791][T17749] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2913'. [ 874.133435][ T30] audit: type=1326 audit(1761342936.600:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17751 comm="syz.4.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f578efc9 code=0x7ffc0000 [ 874.226752][ T30] audit: type=1326 audit(1761342936.600:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17751 comm="syz.4.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f578efc9 code=0x7ffc0000 [ 875.222630][T17763] block nbd0: shutting down sockets [ 875.248841][ T30] audit: type=1326 audit(1761342936.600:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17751 comm="syz.4.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fb3f578efc9 code=0x7ffc0000 [ 875.343075][ T30] audit: type=1326 audit(1761342936.600:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17751 comm="syz.4.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f578efc9 code=0x7ffc0000 [ 875.530219][ T30] audit: type=1326 audit(1761342936.600:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17751 comm="syz.4.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f578efc9 code=0x7ffc0000 [ 875.624819][ T30] audit: type=1326 audit(1761342936.610:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17751 comm="syz.4.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fb3f578efc9 code=0x7ffc0000 [ 875.687058][ T30] audit: type=1326 audit(1761342936.610:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17751 comm="syz.4.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f578efc9 code=0x7ffc0000 [ 875.709858][ T30] audit: type=1326 audit(1761342936.610:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17751 comm="syz.4.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f578efc9 code=0x7ffc0000 [ 875.733754][ T30] audit: type=1326 audit(1761342936.610:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17751 comm="syz.4.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3f578efc9 code=0x7ffc0000 [ 875.952236][T17777] loop1: detected capacity change from 0 to 4096 [ 875.963100][T17777] ext4: Unknown parameter 'hash' [ 876.032936][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.048886][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 876.376919][ T30] audit: type=1326 audit(1761342936.610:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17751 comm="syz.4.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f578efc9 code=0x7ffc0000 [ 876.461213][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 876.475600][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 876.521594][ T10] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 876.554126][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.575781][ T10] usb 3-1: Product: syz [ 876.580246][ T10] usb 3-1: Manufacturer: syz [ 876.584853][ T10] usb 3-1: SerialNumber: syz [ 876.602738][ T10] usb 3-1: config 0 descriptor?? [ 876.623269][T17767] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 876.658284][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 876.836641][T17788] loop3: detected capacity change from 0 to 8 [ 877.007293][ T10] usb 3-1: USB disconnect, device number 17 [ 877.081814][T17797] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2927'. [ 877.102162][T13601] udevd[13601]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 877.610885][T17815] netlink: 1748 bytes leftover after parsing attributes in process `syz.0.2932'. [ 878.409769][T17835] loop2: detected capacity change from 0 to 512 [ 878.606174][T17835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 878.910135][T17835] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.2940: iget: bad i_size value: 15393162788874 [ 878.971231][T17854] loop0: detected capacity change from 0 to 1024 [ 879.078385][ T8841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 879.095268][T17854] hfsplus: bad catalog entry type [ 879.542799][ T6284] hfsplus: b-tree write err: -5, ino 4 [ 879.608778][T17867] openvswitch: netlink: Flow actions attr not present in new flow. [ 880.141474][T17881] block nbd3: shutting down sockets [ 880.637798][T17885] lo speed is unknown, defaulting to 1000 [ 880.722838][T17897] loop0: detected capacity change from 0 to 736 [ 881.684336][T17906] loop3: detected capacity change from 0 to 128 [ 881.691778][T17906] FAT-fs (loop3): bogus logical sector size 767 [ 881.698117][T17906] FAT-fs (loop3): Can't find a valid FAT filesystem [ 885.670872][T17977] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2975'. [ 886.385427][T17979] loop1: detected capacity change from 0 to 128 [ 886.427672][T17979] FAT-fs (loop1): bogus logical sector size 767 [ 886.434848][T17979] FAT-fs (loop1): Can't find a valid FAT filesystem [ 889.500432][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 889.500447][ T30] audit: type=1326 audit(1761342950.991:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18036 comm="syz.3.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1238efc9 code=0x7ffc0000 [ 889.621801][T18044] netlink: 'syz.2.2994': attribute type 10 has an invalid length. [ 889.638326][ T30] audit: type=1326 audit(1761342951.020:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18036 comm="syz.3.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1238efc9 code=0x7ffc0000 [ 889.751411][ T30] audit: type=1326 audit(1761342951.029:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18036 comm="syz.3.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1238efc9 code=0x7ffc0000 [ 889.848239][ T30] audit: type=1326 audit(1761342951.029:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18036 comm="syz.3.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1238efc9 code=0x7ffc0000 [ 889.926474][ T30] audit: type=1326 audit(1761342951.029:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18036 comm="syz.3.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7e1238efc9 code=0x7ffc0000 [ 889.980179][ T30] audit: type=1326 audit(1761342951.029:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18036 comm="syz.3.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1238efc9 code=0x7ffc0000 [ 890.064818][ T30] audit: type=1326 audit(1761342951.029:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18036 comm="syz.3.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1238efc9 code=0x7ffc0000 [ 890.172384][T18057] loop3: detected capacity change from 0 to 512 [ 890.174472][ T30] audit: type=1326 audit(1761342951.029:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18036 comm="syz.3.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1238efc9 code=0x7ffc0000 [ 890.311919][ T30] audit: type=1326 audit(1761342951.029:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18036 comm="syz.3.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1238efc9 code=0x7ffc0000 [ 890.315476][T18057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 890.369367][T18057] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 890.440279][ T30] audit: type=1326 audit(1761342951.029:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18036 comm="syz.3.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f7e1238efc9 code=0x7ffc0000 [ 890.531815][T18068] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2999'. [ 890.548155][T18068] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2999'. [ 890.588963][T18068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2999'. [ 891.048224][T17126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 891.876049][T18087] loop3: detected capacity change from 0 to 128 [ 891.883386][T18087] FAT-fs (loop3): bogus logical sector size 767 [ 891.889682][T18087] FAT-fs (loop3): Can't find a valid FAT filesystem [ 892.835293][T18106] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 892.964041][T18108] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 892.967361][T18114] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3013'. [ 893.318052][T18122] bond0: (slave wlan1): Releasing backup interface [ 893.347588][T18122] mac80211_hwsim hwsim31 wlan1 (unregistering): left promiscuous mode [ 893.368427][T18122] mac80211_hwsim hwsim31 wlan1 (unregistering): left allmulticast mode [ 894.380312][T18163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3031'. [ 894.394424][T11143] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 894.430269][T18165] netlink: 'syz.2.3032': attribute type 27 has an invalid length. [ 894.575780][T11143] usb 1-1: Using ep0 maxpacket: 8 [ 894.583414][T11143] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 894.592795][T11143] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 894.617101][T11143] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 894.657696][T11143] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 894.678909][T11143] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 894.705071][T11143] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 894.725532][T11143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.052252][T11143] usb 1-1: usb_control_msg returned -32 [ 895.058713][T11143] usbtmc 1-1:16.0: can't read capabilities [ 895.486690][T18192] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 895.516744][T18151] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90 [ 895.856420][T18204] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3042'. [ 896.063606][T18211] block nbd3: shutting down sockets [ 897.367410][T14161] usb 1-1: USB disconnect, device number 23 [ 898.128310][T18266] loop1: detected capacity change from 0 to 512 [ 898.140062][T18266] EXT4-fs: inline encryption not supported [ 898.165884][T18266] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 898.195000][T18266] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 898.256134][T18266] EXT4-fs (loop1): 1 truncate cleaned up [ 898.283832][T18266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 898.362334][ T9671] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.980044][T14161] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 899.150212][T14161] usb 3-1: Using ep0 maxpacket: 8 [ 899.167782][T14161] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 899.214836][T14161] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 899.267812][T14161] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 899.305361][T14161] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 899.345947][T14161] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 899.401176][T14161] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 899.411104][T14161] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.652581][T18303] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3069'. [ 899.675233][T14161] usb 3-1: usb_control_msg returned -32 [ 899.695344][T14161] usbtmc 3-1:16.0: can't read capabilities [ 900.174592][T18315] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 900.689051][T18322] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3075'. [ 900.775834][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 900.775856][ T30] audit: type=1326 audit(1761342961.546:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18324 comm="syz.4.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f578efc9 code=0x7ffc0000 [ 900.907600][ T30] audit: type=1326 audit(1761342961.546:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18324 comm="syz.4.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f578efc9 code=0x7ffc0000 [ 901.021786][ T30] audit: type=1326 audit(1761342961.546:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18324 comm="syz.4.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3f578efc9 code=0x7ffc0000 [ 901.095346][ T30] audit: type=1326 audit(1761342961.574:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18324 comm="syz.4.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f578efc9 code=0x7ffc0000 [ 901.164055][ T30] audit: type=1326 audit(1761342961.574:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18324 comm="syz.4.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3f578efc9 code=0x7ffc0000 [ 901.227279][T18333] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3079'. [ 901.475562][ T30] audit: type=1326 audit(1761342961.574:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18323 comm="syz.3.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1238efc9 code=0x7ffc0000 [ 901.528739][ T30] audit: type=1326 audit(1761342961.574:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18323 comm="syz.3.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1238efc9 code=0x7ffc0000 [ 901.554609][T18337] loop2: detected capacity change from 0 to 7 [ 901.587086][T18337] Dev loop2: unable to read RDB block 7 [ 901.592748][T18337] loop2: unable to read partition table [ 901.598702][T18337] loop2: partition table beyond EOD, truncated [ 901.604920][T18337] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 901.696912][ T30] audit: type=1326 audit(1761342961.574:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18323 comm="syz.3.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e1238efc9 code=0x7ffc0000 [ 901.954722][ T30] audit: type=1326 audit(1761342961.574:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18323 comm="syz.3.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1238efc9 code=0x7ffc0000 [ 901.982796][ T5954] usb 3-1: USB disconnect, device number 18 [ 902.039992][ T30] audit: type=1326 audit(1761342961.574:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18323 comm="syz.3.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1238efc9 code=0x7ffc0000 [ 902.574072][T18356] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3087'. [ 903.441264][T18374] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3094'. [ 903.669776][T18376] netlink: 566 bytes leftover after parsing attributes in process `syz.2.3095'. [ 903.893000][T18395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3099'. [ 903.936971][T18397] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3100'. [ 903.996884][T18400] loop2: detected capacity change from 0 to 7 [ 904.025131][T14227] Dev loop2: unable to read RDB block 7 [ 904.030762][T14227] loop2: unable to read partition table [ 904.036984][T14227] loop2: partition table beyond EOD, truncated [ 904.069014][T18400] Dev loop2: unable to read RDB block 7 [ 904.114683][T18400] loop2: unable to read partition table [ 904.146311][T18400] loop2: partition table beyond EOD, truncated [ 904.181746][T18400] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 904.353671][ T5202] Dev loop2: unable to read RDB block 7 [ 904.369123][T18411] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 904.382726][ T5202] loop2: unable to read partition table [ 904.397850][ T5202] loop2: partition table beyond EOD, truncated [ 904.912292][T18419] xt_connbytes: Forcing CT accounting to be enabled [ 904.919166][T18419] set match dimension is over the limit! [ 904.957664][T18421] loop3: detected capacity change from 0 to 512 [ 905.169350][T18416] lo speed is unknown, defaulting to 1000 [ 905.506787][ T5901] hid-generic 0003:0003:0000.000F: unknown main item tag 0x0 [ 905.541230][ T5901] hid-generic 0003:0003:0000.000F: unknown main item tag 0x0 [ 905.562692][ T5901] hid-generic 0003:0003:0000.000F: unknown main item tag 0x0 [ 905.573667][ T5901] hid-generic 0003:0003:0000.000F: unknown main item tag 0x0 [ 905.582274][ T5901] hid-generic 0003:0003:0000.000F: unknown main item tag 0x0 [ 905.647732][ T5901] hid-generic 0003:0003:0000.000F: unknown main item tag 0x0 [ 905.680966][ T5901] hid-generic 0003:0003:0000.000F: unknown main item tag 0x0 [ 905.704895][ T5901] hid-generic 0003:0003:0000.000F: unknown main item tag 0x0 [ 905.715605][ T5901] hid-generic 0003:0003:0000.000F: unknown main item tag 0x0 [ 905.723586][ T5901] hid-generic 0003:0003:0000.000F: unknown main item tag 0x0 [ 905.746249][ T5901] hid-generic 0003:0003:0000.000F: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 906.134750][T18436] fido_id[18436]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 907.272624][ T5954] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 907.335645][T18477] geneve2: entered promiscuous mode [ 907.395773][T18477] geneve2: entered allmulticast mode [ 907.488236][ T5954] usb 3-1: Using ep0 maxpacket: 8 [ 907.505548][ T5954] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 907.538281][ T5954] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 907.580627][ T5954] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 907.625232][ T5954] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 907.635187][ T5954] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 907.736744][ T5954] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 907.768356][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.073932][ T5954] usb 3-1: usb_control_msg returned -32 [ 908.112981][ T5954] usbtmc 3-1:16.0: can't read capabilities [ 908.501731][T18517] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 909.286976][T18531] loop0: detected capacity change from 0 to 512 [ 909.349202][T18531] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 909.419418][T18531] ext4 filesystem being mounted at /389/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 909.704528][ T9665] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.000888][T18549] netlink: 1748 bytes leftover after parsing attributes in process `syz.0.3136'. [ 910.249606][ T5913] usb 3-1: USB disconnect, device number 19 [ 910.595643][T18570] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.3143'. [ 910.899338][T18576] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 910.921409][T18576] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:b098:ecff:fe8d:6f32 error=-28 [ 911.913153][T18587] loop0: detected capacity change from 0 to 128 [ 911.920418][T18587] FAT-fs (loop0): bogus logical sector size 767 [ 911.926751][T18587] FAT-fs (loop0): Can't find a valid FAT filesystem [ 912.372290][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 912.372307][ T30] audit: type=1326 audit(1761342972.391:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18590 comm="syz.2.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f0d8efc9 code=0x7ffc0000 [ 912.412802][ T30] audit: type=1326 audit(1761342972.391:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18590 comm="syz.2.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f0d8efc9 code=0x7ffc0000 [ 912.460158][ T30] audit: type=1326 audit(1761342972.466:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18590 comm="syz.2.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6f0d8efc9 code=0x7ffc0000 [ 912.541517][ T30] audit: type=1326 audit(1761342972.466:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18590 comm="syz.2.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f0d8efc9 code=0x7ffc0000 [ 912.626108][ T30] audit: type=1326 audit(1761342972.466:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18590 comm="syz.2.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f0d8efc9 code=0x7ffc0000 [ 912.679637][ T30] audit: type=1326 audit(1761342972.578:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18590 comm="syz.2.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6f0d8efc9 code=0x7ffc0000 [ 912.757994][ T30] audit: type=1326 audit(1761342972.578:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18590 comm="syz.2.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f0d8efc9 code=0x7ffc0000 [ 912.863929][ T30] audit: type=1326 audit(1761342972.578:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18590 comm="syz.2.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f0d8efc9 code=0x7ffc0000 [ 912.928991][ T30] audit: type=1326 audit(1761342972.578:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18590 comm="syz.2.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fd6f0d8efc9 code=0x7ffc0000 [ 912.957012][ T30] audit: type=1326 audit(1761342972.578:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18590 comm="syz.2.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f0d8efc9 code=0x7ffc0000 [ 913.021210][T18576] infiniband syz!: set down [ 913.052529][T18576] infiniband syz!: added team_slave_0 [ 913.124325][T18612] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3160'. [ 913.176601][T18576] RDS/IB: syz!: added [ 913.204744][T18576] smc: adding ib device syz! with port count 1 [ 913.230159][T18576] smc: ib device syz! port 1 has no pnetid [ 913.637054][T18621] comedi comedi0: Minor 47 could not be opened [ 914.417564][T18623] loop1: detected capacity change from 0 to 128 [ 914.427690][T18623] FAT-fs (loop1): bogus logical sector size 767 [ 914.437026][T18623] FAT-fs (loop1): Can't find a valid FAT filesystem [ 915.509586][T18655] netlink: 1748 bytes leftover after parsing attributes in process `syz.2.3171'. [ 915.692057][T18659] loop3: detected capacity change from 0 to 512 [ 915.726212][T18659] EXT4-fs: old and new quota format mixing [ 915.780756][T18659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3173'. [ 915.803591][T18659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 915.811003][T18659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 915.845117][T18659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 915.854452][T18659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 916.617452][T18675] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.3180'. [ 917.080207][T18685] loop1: detected capacity change from 0 to 2048 [ 917.173109][T14227] Alternate GPT is invalid, using primary GPT. [ 917.183750][T14227] loop1: p2 p3 p7 [ 917.248102][T18685] Alternate GPT is invalid, using primary GPT. [ 917.278817][T18685] loop1: p2 p3 p7 [ 917.347457][T18692] netlink: 1748 bytes leftover after parsing attributes in process `syz.3.3184'. [ 917.622920][T18697] loop0: detected capacity change from 0 to 512 [ 917.663735][T18697] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 917.689820][T18697] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 917.727826][T18697] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 917.766047][T14227] udevd[14227]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 917.777809][T14374] udevd[14374]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 917.780217][T18697] System zones: 0-2, 18-18, 34-35 [ 917.800467][T14239] udevd[14239]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 917.830601][T18697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 917.909775][T18697] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 917.938637][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 917.938653][ T30] audit: type=1326 audit(1761342977.593:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18702 comm="syz.1.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904fb8efc9 code=0x7ffc0000 [ 917.986813][T18697] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 918.011436][T18697] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 918.029582][ T30] audit: type=1326 audit(1761342977.593:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18702 comm="syz.1.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904fb8efc9 code=0x7ffc0000 [ 918.083584][ T30] audit: type=1326 audit(1761342977.593:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18702 comm="syz.1.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f904fb8efc9 code=0x7ffc0000 [ 918.086030][T18697] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3186: bg 0: block 353: padding at end of block bitmap is not set [ 918.179777][ T30] audit: type=1326 audit(1761342977.593:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18702 comm="syz.1.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904fb8efc9 code=0x7ffc0000 [ 918.236110][ T30] audit: type=1326 audit(1761342977.593:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18702 comm="syz.1.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f904fb8efc9 code=0x7ffc0000 [ 918.262039][ T30] audit: type=1326 audit(1761342977.631:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18702 comm="syz.1.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904fb8efc9 code=0x7ffc0000 [ 918.263804][ T9665] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 918.344611][ T30] audit: type=1326 audit(1761342977.631:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18702 comm="syz.1.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f904fb8efc9 code=0x7ffc0000 [ 918.446761][ T30] audit: type=1326 audit(1761342977.631:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18702 comm="syz.1.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904fb8efc9 code=0x7ffc0000 [ 918.489213][T18712] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.3191'. [ 918.489540][T18711] loop1: detected capacity change from 0 to 128 [ 918.508627][ T30] audit: type=1326 audit(1761342977.631:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18702 comm="syz.1.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904fb8efc9 code=0x7ffc0000 [ 918.555176][T18699] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 918.560238][ T30] audit: type=1326 audit(1761342977.631:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18702 comm="syz.1.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f904fb8efc9 code=0x7ffc0000 [ 918.565954][T18699] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 918.608053][T18699] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 918.665372][T18699] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 918.719626][T18699] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 919.556853][T18751] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.3206'. [ 919.969162][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 920.102501][T18769] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3213'. [ 920.738616][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 920.824227][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 921.442840][T18813] loop2: detected capacity change from 0 to 2048 [ 921.541073][T18813] Alternate GPT is invalid, using primary GPT. [ 921.572397][T18813] loop2: p1 p2 p3 [ 921.593684][T18813] loop2: partition table partially beyond EOD, truncated [ 921.766263][T18813] lo speed is unknown, defaulting to 1000 [ 922.134896][T18826] loop3: detected capacity change from 0 to 512 [ 922.782751][T18852] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 923.047056][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 924.175222][T18877] netlink: 'syz.0.3255': attribute type 10 has an invalid length. [ 924.635188][T18885] loop3: detected capacity change from 0 to 1024 [ 924.710179][T18885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 924.950033][T17126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 925.007436][T18895] tipc: New replicast peer: 255.255.255.83 [ 925.014565][T18895] tipc: Enabled bearer , priority 10 [ 925.270025][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 925.416985][T18914] tipc: New replicast peer: 255.255.255.255 [ 925.456483][T18914] tipc: Enabled bearer , priority 10 [ 925.990101][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 925.990118][ T30] audit: type=1326 audit(1761342985.135:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.1.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904fb8efc9 code=0x7ffc0000 [ 926.106344][ T30] audit: type=1326 audit(1761342985.135:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.1.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904fb8efc9 code=0x7ffc0000 [ 926.199915][ T30] audit: type=1326 audit(1761342985.135:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.1.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f904fb8efc9 code=0x7ffc0000 [ 926.308935][ T30] audit: type=1326 audit(1761342985.163:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.1.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904fb8efc9 code=0x7ffc0000 [ 926.308992][ T30] audit: type=1326 audit(1761342985.163:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.1.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904fb8efc9 code=0x7ffc0000 [ 926.309042][ T30] audit: type=1326 audit(1761342985.163:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.1.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f904fb8efc9 code=0x7ffc0000 [ 926.309090][ T30] audit: type=1326 audit(1761342985.163:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.1.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904fb8efc9 code=0x7ffc0000 [ 926.309138][ T30] audit: type=1326 audit(1761342985.163:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.1.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904fb8efc9 code=0x7ffc0000 [ 926.309187][ T30] audit: type=1326 audit(1761342985.163:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.1.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f904fb8efc9 code=0x7ffc0000 [ 926.309238][ T30] audit: type=1326 audit(1761342985.228:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.1.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904fb8efc9 code=0x7ffc0000 [ 926.440881][T18942] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 926.452290][T18963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3290'. [ 926.453014][T18963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3290'. [ 927.255091][T18989] loop3: detected capacity change from 0 to 1764 [ 928.353926][T18996] netlink: 'syz.1.3294': attribute type 1 has an invalid length. [ 928.724537][T19000] syzkaller0: entered promiscuous mode [ 928.730449][T19000] syzkaller0: entered allmulticast mode [ 928.873158][T19008] netlink: 'syz.4.3304': attribute type 10 has an invalid length. [ 931.530429][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 931.530447][ T30] audit: type=1326 audit(1761342990.309:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19057 comm="syz.0.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ccf8efc9 code=0x7ffc0000 [ 931.757238][ T30] audit: type=1326 audit(1761342990.309:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19057 comm="syz.0.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ccf8efc9 code=0x7ffc0000 [ 932.057410][T19064] lo speed is unknown, defaulting to 1000 [ 932.466677][ T30] audit: type=1326 audit(1761342990.319:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19057 comm="syz.0.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8ccf8efc9 code=0x7ffc0000 [ 932.546903][ T30] audit: type=1326 audit(1761342990.319:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19057 comm="syz.0.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ccf8efc9 code=0x7ffc0000 [ 932.656289][ T30] audit: type=1326 audit(1761342990.328:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19057 comm="syz.0.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fc8ccf8efc9 code=0x7ffc0000 [ 932.693874][ T30] audit: type=1326 audit(1761342990.328:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19057 comm="syz.0.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ccf8efc9 code=0x7ffc0000 [ 932.805726][ T30] audit: type=1326 audit(1761342990.328:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19057 comm="syz.0.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc8ccf8efc9 code=0x7ffc0000 [ 932.833724][ T30] audit: type=1326 audit(1761342990.328:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19057 comm="syz.0.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ccf8efc9 code=0x7ffc0000 [ 932.873298][ T30] audit: type=1326 audit(1761342990.328:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19057 comm="syz.0.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc8ccf8efc9 code=0x7ffc0000 [ 932.922255][ T30] audit: type=1326 audit(1761342990.328:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19057 comm="syz.0.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ccf8efc9 code=0x7ffc0000 [ 933.604467][T19093] unsupported nla_type 52263 [ 934.140021][T19111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3345'. [ 934.227654][T19116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3346'. [ 934.251093][T19118] set match dimension is over the limit! [ 934.261291][T19116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3346'. [ 934.262088][T19111] team0: Port device team_slave_1 removed [ 934.304384][T19116] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3346'. [ 934.320035][T19116] netlink: 'syz.1.3346': attribute type 9 has an invalid length. [ 934.329345][T19116] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3346'. [ 934.339196][T19116] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3346'. [ 934.437348][T19114] lo speed is unknown, defaulting to 1000 [ 934.837605][T19125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3350'. [ 935.498146][T19129] loop3: detected capacity change from 0 to 128 [ 935.505367][T19129] FAT-fs (loop3): bogus logical sector size 767 [ 935.511715][T19129] FAT-fs (loop3): Can't find a valid FAT filesystem [ 936.059783][T19125] bridge0: entered promiscuous mode [ 936.078245][T19125] macvtap1: entered promiscuous mode [ 936.083812][T19125] macvtap1: entered allmulticast mode [ 936.118872][T19125] bridge0: entered allmulticast mode [ 936.216840][T19132] bridge0: left allmulticast mode [ 936.222083][T19132] bridge0: left promiscuous mode [ 936.423845][T19147] IPv6: Can't replace route, no match found [ 936.655205][T19153] loop1: detected capacity change from 0 to 128 [ 936.736323][T19153] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 936.817860][T19153] ext4 filesystem being mounted at /505/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 936.947434][T19164] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.3353'. [ 937.021370][T19167] loop0: detected capacity change from 0 to 2048 [ 937.086924][T19167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 937.137605][ T9671] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 937.153055][T19167] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 937.872043][T19186] lo speed is unknown, defaulting to 1000 [ 938.230729][T19195] bond0: (slave wlan1): Releasing backup interface [ 938.643655][T19210] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.3374'. [ 938.683214][T19213] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3375'. [ 938.809980][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 938.809997][ T30] audit: type=1326 audit(1761342997.121:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19217 comm="syz.3.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1238efc9 code=0x7ffc0000 [ 938.850143][ T30] audit: type=1326 audit(1761342997.121:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19217 comm="syz.3.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1238efc9 code=0x7ffc0000 [ 938.933570][ T30] audit: type=1326 audit(1761342997.158:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19217 comm="syz.3.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e1238efc9 code=0x7ffc0000 [ 939.039654][ T30] audit: type=1326 audit(1761342997.158:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19217 comm="syz.3.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1238efc9 code=0x7ffc0000 [ 939.083660][ T30] audit: type=1326 audit(1761342997.158:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19217 comm="syz.3.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1238efc9 code=0x7ffc0000 [ 939.138830][ T30] audit: type=1326 audit(1761342997.158:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19217 comm="syz.3.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f7e1238efc9 code=0x7ffc0000 [ 939.191288][ T30] audit: type=1326 audit(1761342997.158:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19217 comm="syz.3.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1238efc9 code=0x7ffc0000 [ 939.258834][ T30] audit: type=1326 audit(1761342997.158:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19217 comm="syz.3.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f7e1238efc9 code=0x7ffc0000 [ 939.322427][ T30] audit: type=1326 audit(1761342997.158:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19217 comm="syz.3.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1238efc9 code=0x7ffc0000 [ 939.406094][T19239] netlink: 'syz.0.3383': attribute type 10 has an invalid length. [ 939.430663][ T30] audit: type=1326 audit(1761342997.158:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19217 comm="syz.3.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7e1238efc9 code=0x7ffc0000 [ 940.020335][T19252] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3389'. [ 941.611281][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 942.066170][T19342] comedi comedi0: Minor 47 could not be opened [ 943.502386][T19362] block nbd1: shutting down sockets [ 945.463074][T19378] syz!: rxe_newlink: already configured on team_slave_0 [ 946.708453][T19402] loop2: detected capacity change from 0 to 7 [ 946.717274][T19402] Dev loop2: unable to read RDB block 7 [ 946.749656][T19402] loop2: unable to read partition table [ 946.759959][T19402] loop2: partition table beyond EOD, truncated [ 946.777084][T19402] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 946.884885][ T30] kauditd_printk_skb: 190 callbacks suppressed [ 946.884902][ T30] audit: type=1326 audit(1761343004.684:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19404 comm="syz.2.3439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f0d8efc9 code=0x7ffc0000 [ 946.962932][ T30] audit: type=1326 audit(1761343004.684:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19404 comm="syz.2.3439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fd6f0d8efc9 code=0x7ffc0000 [ 947.069632][ T30] audit: type=1326 audit(1761343004.684:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19404 comm="syz.2.3439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f0d8efc9 code=0x7ffc0000 [ 947.659751][T19418] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3444'. [ 948.062126][T19421] loop2: detected capacity change from 0 to 4096 [ 948.098999][T19421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 948.704759][ T8841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.960773][T19472] x_tables: duplicate underflow at hook 3 [ 949.972413][T19476] netlink: 'syz.2.3451': attribute type 1 has an invalid length. [ 950.218645][T19491] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3467'. [ 950.443700][ T30] audit: type=1326 audit(1761343008.016:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19509 comm="syz.4.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb3f5785e67 code=0x7ffc0000 [ 950.590823][ T30] audit: type=1326 audit(1761343008.016:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19509 comm="syz.4.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb3f572b099 code=0x7ffc0000 [ 950.704112][ T30] audit: type=1326 audit(1761343008.016:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19509 comm="syz.4.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb3f5785e67 code=0x7ffc0000 [ 950.759376][ T30] audit: type=1326 audit(1761343008.016:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19509 comm="syz.4.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb3f572b099 code=0x7ffc0000 [ 950.843341][ T30] audit: type=1326 audit(1761343008.016:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19509 comm="syz.4.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f578efc9 code=0x7ffc0000 [ 950.898979][ T30] audit: type=1326 audit(1761343008.016:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19509 comm="syz.4.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f578efc9 code=0x7ffc0000 [ 950.955788][T19544] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.3482'. [ 950.965923][ T30] audit: type=1326 audit(1761343008.016:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19509 comm="syz.4.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb3f578efc9 code=0x7ffc0000 [ 951.193269][T19555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3485'. [ 952.775253][T19589] netlink: 'syz.1.3488': attribute type 1 has an invalid length. [ 952.807839][T19588] netlink: 26 bytes leftover after parsing attributes in process `syz.3.3497'. [ 953.176474][T19600] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3501'. [ 953.216442][T19600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3501'. [ 953.422572][T19602] lo speed is unknown, defaulting to 1000 [ 954.429244][T19634] netlink: 26 bytes leftover after parsing attributes in process `syz.3.3511'. [ 954.537649][T19638] netlink: 'syz.4.3513': attribute type 30 has an invalid length. [ 955.045461][T19652] netlink: 'syz.1.3519': attribute type 6 has an invalid length. [ 955.297300][T19664] netlink: 26 bytes leftover after parsing attributes in process `syz.1.3525'. [ 955.677889][T19678] netlink: 'syz.3.3515': attribute type 1 has an invalid length. [ 956.041693][T19687] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3531'. [ 956.509638][T19702] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3537'. [ 956.649804][T19704] comedi comedi0: Minor 47 could not be opened [ 957.411857][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 957.411874][ T30] audit: type=1326 audit(1761343014.530:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19710 comm="syz.3.3541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1238efc9 code=0x7ffc0000 [ 957.553193][ T30] audit: type=1326 audit(1761343014.530:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19710 comm="syz.3.3541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e1238efc9 code=0x7ffc0000 [ 957.635585][T19713] ALSA: seq fatal error: cannot create timer (-19) [ 957.678751][ T30] audit: type=1326 audit(1761343014.530:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19710 comm="syz.3.3541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1238efc9 code=0x7ffc0000 [ 957.759019][T19716] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 957.765578][T19716] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 957.784166][ T30] audit: type=1326 audit(1761343014.830:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19715 comm="syz.0.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ccf8efc9 code=0x7ffc0000 [ 957.817348][T19716] vhci_hcd vhci_hcd.0: Device attached [ 957.855919][T19725] vhci_hcd vhci_hcd.0: port 0 already used [ 957.863992][ T30] audit: type=1326 audit(1761343014.830:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19715 comm="syz.0.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ccf8efc9 code=0x7ffc0000 [ 957.920529][T19721] vhci_hcd: connection closed [ 957.960259][T19506] vhci_hcd vhci_hcd.0: stop threads [ 957.986970][ T30] audit: type=1326 audit(1761343014.830:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19715 comm="syz.0.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc8ccf8efc9 code=0x7ffc0000 [ 958.063431][T19506] vhci_hcd vhci_hcd.0: release socket [ 958.081590][T19506] vhci_hcd vhci_hcd.0: disconnect device [ 958.115250][ T30] audit: type=1326 audit(1761343014.830:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19715 comm="syz.0.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ccf8efc9 code=0x7ffc0000 [ 958.138158][ T5954] usb 34-1: enqueue for inactive port 0 [ 958.240160][ T30] audit: type=1326 audit(1761343014.830:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19715 comm="syz.0.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fc8ccf8efc9 code=0x7ffc0000 [ 958.269221][T19720] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3544'. [ 958.296219][T19720] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3544'. [ 958.372159][ T30] audit: type=1326 audit(1761343014.830:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19715 comm="syz.0.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ccf8efc9 code=0x7ffc0000 [ 958.438945][ T30] audit: type=1326 audit(1761343014.830:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19715 comm="syz.0.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc8ccf8efc9 code=0x7ffc0000 [ 958.674121][ T5954] usb usb34-port1: attempt power cycle [ 959.381979][ T5954] usb usb34-port1: unable to enumerate USB device [ 959.551632][T19771] comedi comedi0: Minor 47 could not be opened [ 960.523079][T19782] binder: BINDER_SET_CONTEXT_MGR already set [ 960.529210][T19782] binder: 19781:19782 ioctl 4018620d 200000004a80 returned -16 [ 960.537594][T19782] binder: 19781:19782 ioctl c0306201 0 returned -14 [ 960.786925][T19784] atomic_op ffff88803329a198 conn xmit_atomic 0000000000000000 [ 961.572963][T19798] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.3570' sets config #0 [ 961.605856][T19798] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.3570' sets config #1 [ 961.898778][T19804] tipc: Bearer : already 2 bearers with priority 10 [ 961.953240][T19804] tipc: Bearer : trying with adjusted priority [ 961.984709][T19804] tipc: Enabled bearer , priority 9 [ 961.989975][T19808] binder: 19807:19808 ioctl c0306201 0 returned -14 [ 962.970661][T19826] netlink: 'syz.0.3577': attribute type 1 has an invalid length. [ 963.413657][T19834] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3581'. [ 964.772324][T19856] random: crng reseeded on system resumption [ 965.115940][T19859] binder: BINDER_SET_CONTEXT_MGR already set [ 965.121988][T19859] binder: 19858:19859 ioctl 4018620d 200000004a80 returned -16 [ 966.005699][T19879] netlink: 'syz.4.3593': attribute type 3 has an invalid length. [ 966.031194][T19879] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3593'. [ 966.070954][T19881] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3594'. [ 966.560200][T19884] netlink: 'syz.1.3592': attribute type 1 has an invalid length. [ 966.621884][T19885] 9pnet_fd: Insufficient options for proto=fd [ 967.732565][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 967.732583][ T30] audit: type=1326 audit(1761343024.190:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19911 comm="syz.1.3602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904fb8efc9 code=0x7ffc0000 [ 967.768186][ T30] audit: type=1326 audit(1761343024.218:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19911 comm="syz.1.3602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f904fb8efc9 code=0x7ffc0000 [ 967.813264][T19915] loop0: detected capacity change from 0 to 512 [ 967.862064][ T30] audit: type=1326 audit(1761343024.218:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19911 comm="syz.1.3602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904fb8efc9 code=0x7ffc0000 [ 968.254884][T19915] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 968.457574][T19915] EXT4-fs (loop0): orphan cleanup on readonly fs [ 968.788974][T19915] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 968.804843][ T30] audit: type=1326 audit(1761343024.236:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19911 comm="syz.1.3602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f904fb8efc9 code=0x7ffc0000 [ 968.864455][T19915] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 968.934273][ T30] audit: type=1326 audit(1761343024.236:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19911 comm="syz.1.3602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904fb8efc9 code=0x7ffc0000 [ 968.989368][T19915] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 968.997409][ T30] audit: type=1326 audit(1761343024.236:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19911 comm="syz.1.3602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f904fb8efc9 code=0x7ffc0000 [ 969.014155][T19915] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3604: bg 0: block 40: padding at end of block bitmap is not set [ 969.259530][T19915] ------------[ cut here ]------------ [ 969.265736][T19915] WARNING: kernel/trace/blktrace.c:368 at __blk_add_trace+0x79c/0x8d0, CPU#1: syz.0.3604/19915 [ 969.276199][T19915] Modules linked in: [ 969.280535][T19915] CPU: 1 UID: 0 PID: 19915 Comm: syz.0.3604 Not tainted syzkaller #0 PREEMPT(full) [ 969.290215][T19915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 969.292239][ T30] audit: type=1326 audit(1761343024.236:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19911 comm="syz.1.3602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904fb8efc9 code=0x7ffc0000 [ 969.300487][T19915] RIP: 0010:__blk_add_trace+0x79c/0x8d0 [ 969.328591][T19915] Code: ff 4d 85 e4 75 4f e8 83 0e f8 ff e9 fb fd ff ff e8 79 0e f8 ff e9 ec fd ff ff e8 6f 0e f8 ff e9 d8 fd ff ff e8 65 0e f8 ff 90 <0f> 0b 90 e9 ca fd ff ff e8 57 0e f8 ff 48 8b 7c 24 30 e8 cd 51 00 [ 969.348601][T19915] RSP: 0018:ffffc900041eea80 EFLAGS: 00010287 [ 969.354701][T19915] RAX: ffffffff81c81b4b RBX: 0000000000000001 RCX: 0000000000080000 [ 969.363208][T19915] RDX: ffffc900108bb000 RSI: 0000000000028f16 RDI: 0000000000028f17 [ 969.371474][T19915] RBP: ffffc900041eeb88 R08: ffff888026bb5ac0 R09: 0000000000000009 [ 969.379808][T19915] R10: 0000000000000011 R11: 0000000000000002 R12: 000000008000ffff [ 969.387804][T19915] R13: ffff88807bda2400 R14: 00000000801a0001 R15: 0000000000000001 [ 969.395854][T19915] FS: 00007fc8cde746c0(0000) GS:ffff888126022000(0000) knlGS:0000000000000000 [ 969.404860][T19915] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 969.411501][T19915] CR2: 00007f7e1328ad58 CR3: 000000007d116000 CR4: 00000000003526f0 [ 969.419493][T19915] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000420 [ 969.427524][T19915] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 969.435555][T19915] Call Trace: [ 969.438850][T19915] [ 969.441848][T19915] ? __pfx___blk_add_trace+0x10/0x10 [ 969.447161][T19915] ? blk_add_trace_bio+0x2e/0x2f0 [ 969.452233][T19915] blk_add_trace_bio+0x2ab/0x2f0 [ 969.457293][T19915] submit_bio_noacct_nocheck+0x9e2/0xa50 [ 969.462957][T19915] ? bio_associate_blkg+0x6d/0x230 [ 969.468164][T19915] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 969.474383][T19915] ? submit_bio_noacct+0xfb1/0x1b80 [ 969.479659][T19915] ext4_commit_super+0x2d2/0x430 [ 969.484666][T19915] ext4_handle_error+0x672/0x960 [ 969.489637][T19915] __ext4_error+0x26a/0x380 [ 969.494190][T19915] ? __lock_acquire+0xab9/0xd20 [ 969.499146][T19915] ? __pfx___ext4_error+0x10/0x10 [ 969.504209][T19915] ? ext4_validate_block_bitmap+0x182/0x6c0 [ 969.510181][T19915] ext4_validate_block_bitmap+0x64e/0x6c0 [ 969.515939][T19915] ext4_mb_init_cache+0x55e/0x1490 [ 969.521118][T19915] ? __pfx_workingset_update_node+0x10/0x10 [ 969.527063][T19915] ? __pfx_ext4_mb_init_cache+0x10/0x10 [ 969.532664][T19915] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 969.538466][T19915] ext4_mb_init_group+0x3a5/0x6b0 [ 969.543539][T19915] ext4_mb_load_buddy_gfp+0xca0/0xec0 [ 969.549062][T19915] ext4_free_blocks+0xb49/0x1bf0 [ 969.554048][T19915] ? __pfx_ext4_free_blocks+0x10/0x10 [ 969.559518][T19915] ext4_ext_remove_space+0x1f87/0x42f0 [ 969.565052][T19915] ? ext4_es_remove_extent+0x218/0x420 [ 969.570575][T19915] ? __pfx_ext4_ext_remove_space+0x10/0x10 [ 969.576403][T19915] ? ext4_es_remove_extent+0x263/0x420 [ 969.581930][T19915] ext4_ext_truncate+0x17e/0x300 [ 969.586898][T19915] ext4_truncate+0xb4f/0x12e0 [ 969.591645][T19915] ? __pfx_ext4_truncate+0x10/0x10 [ 969.596780][T19915] ? down_write+0x162/0x1f0 [ 969.601300][T19915] ? __pfx_down_write+0x10/0x10 [ 969.606234][T19915] ext4_process_orphan+0x1cb/0x300 [ 969.611391][T19915] ext4_orphan_cleanup+0xc20/0x1460 [ 969.616699][T19915] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 969.622361][T19915] ? ext4_register_li_request+0x259/0x720 [ 969.628160][T19915] ? errseq_check_and_advance+0x66/0x120 [ 969.633844][T19915] ext4_fill_super+0x5920/0x61e0 [ 969.639584][T19915] ? __pfx_ext4_fill_super+0x10/0x10 [ 969.645213][T19915] ? snprintf+0xda/0x120 [ 969.649491][T19915] ? __pfx_snprintf+0x10/0x10 [ 969.654201][T19915] ? set_blocksize+0x21e/0x500 [ 969.659151][T19915] ? sb_set_blocksize+0x104/0x180 [ 969.664287][T19915] ? setup_bdev_super+0x4c1/0x5b0 [ 969.669470][T19915] get_tree_bdev_flags+0x40e/0x4d0 [ 969.674677][T19915] ? __pfx_ext4_fill_super+0x10/0x10 [ 969.680079][T19915] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 969.685812][T19915] vfs_get_tree+0x92/0x2b0 [ 969.690369][T19915] do_new_mount+0x302/0xa10 [ 969.694939][T19915] ? apparmor_capable+0x137/0x1b0 [ 969.700079][T19915] ? __pfx_do_new_mount+0x10/0x10 [ 969.705147][T19915] ? ns_capable+0x8a/0xf0 [ 969.709645][T19915] ? kmem_cache_free+0x19b/0x690 [ 969.714945][T19915] __se_sys_mount+0x313/0x410 [ 969.719780][T19915] ? __pfx___se_sys_mount+0x10/0x10 [ 969.725067][T19915] ? do_syscall_64+0xbe/0xfa0 [ 969.729831][T19915] ? __x64_sys_mount+0x20/0xc0 [ 969.735308][T19915] do_syscall_64+0xfa/0xfa0 [ 969.739948][T19915] ? lockdep_hardirqs_on+0x9c/0x150 [ 969.745250][T19915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.751386][T19915] ? clear_bhb_loop+0x60/0xb0 [ 969.756190][T19915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.762175][T19915] RIP: 0033:0x7fc8ccf9076a [ 969.766707][T19915] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 969.786448][T19915] RSP: 002b:00007fc8cde73e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 969.794483][ T30] audit: type=1326 audit(1761343024.236:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19911 comm="syz.1.3602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904fb8efc9 code=0x7ffc0000 [ 969.794982][T19915] RAX: ffffffffffffffda RBX: 00007fc8cde73ef0 RCX: 00007fc8ccf9076a [ 969.824174][ T30] audit: type=1326 audit(1761343024.236:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19911 comm="syz.1.3602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f904fb8efc9 code=0x7ffc0000 [ 969.825355][T19915] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 00007fc8cde73eb0 [ 969.856644][T19915] RBP: 0000200000000080 R08: 00007fc8cde73ef0 R09: 0000000000000000 [ 969.864727][T19915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 969.874033][T19915] R13: 00007fc8cde73eb0 R14: 00000000000004f2 R15: 0000200000000040 [ 969.882200][T19915] [ 969.885277][T19915] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 969.892575][T19915] CPU: 1 UID: 0 PID: 19915 Comm: syz.0.3604 Not tainted syzkaller #0 PREEMPT(full) [ 969.901959][T19915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 969.912025][T19915] Call Trace: [ 969.915313][T19915] [ 969.918249][T19915] dump_stack_lvl+0x99/0x250 [ 969.922867][T19915] ? __asan_memcpy+0x40/0x70 [ 969.927466][T19915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 969.932678][T19915] ? __pfx__printk+0x10/0x10 [ 969.937283][T19915] vpanic+0x237/0x6d0 [ 969.941303][T19915] ? __pfx_vpanic+0x10/0x10 [ 969.945823][T19915] ? is_bpf_text_address+0x292/0x2b0 [ 969.951123][T19915] ? is_bpf_text_address+0x26/0x2b0 [ 969.956338][T19915] panic+0xb9/0xc0 [ 969.960073][T19915] ? __pfx_panic+0x10/0x10 [ 969.964523][T19915] __warn+0x334/0x4c0 [ 969.968554][T19915] ? __blk_add_trace+0x79c/0x8d0 [ 969.973543][T19915] ? __blk_add_trace+0x79c/0x8d0 [ 969.978518][T19915] report_bug+0x2be/0x4f0 [ 969.982869][T19915] ? __blk_add_trace+0x79c/0x8d0 [ 969.987812][T19915] ? __blk_add_trace+0x79c/0x8d0 [ 969.992753][T19915] ? __blk_add_trace+0x79e/0x8d0 [ 969.997696][T19915] handle_bug+0x84/0x160 [ 970.001950][T19915] exc_invalid_op+0x1a/0x50 [ 970.006462][T19915] asm_exc_invalid_op+0x1a/0x20 [ 970.011320][T19915] RIP: 0010:__blk_add_trace+0x79c/0x8d0 [ 970.016875][T19915] Code: ff 4d 85 e4 75 4f e8 83 0e f8 ff e9 fb fd ff ff e8 79 0e f8 ff e9 ec fd ff ff e8 6f 0e f8 ff e9 d8 fd ff ff e8 65 0e f8 ff 90 <0f> 0b 90 e9 ca fd ff ff e8 57 0e f8 ff 48 8b 7c 24 30 e8 cd 51 00 [ 970.036500][T19915] RSP: 0018:ffffc900041eea80 EFLAGS: 00010287 [ 970.042579][T19915] RAX: ffffffff81c81b4b RBX: 0000000000000001 RCX: 0000000000080000 [ 970.050682][T19915] RDX: ffffc900108bb000 RSI: 0000000000028f16 RDI: 0000000000028f17 [ 970.058675][T19915] RBP: ffffc900041eeb88 R08: ffff888026bb5ac0 R09: 0000000000000009 [ 970.066658][T19915] R10: 0000000000000011 R11: 0000000000000002 R12: 000000008000ffff [ 970.074634][T19915] R13: ffff88807bda2400 R14: 00000000801a0001 R15: 0000000000000001 [ 970.082623][T19915] ? __blk_add_trace+0x79b/0x8d0 [ 970.087587][T19915] ? __pfx___blk_add_trace+0x10/0x10 [ 970.092879][T19915] ? blk_add_trace_bio+0x2e/0x2f0 [ 970.097933][T19915] blk_add_trace_bio+0x2ab/0x2f0 [ 970.102894][T19915] submit_bio_noacct_nocheck+0x9e2/0xa50 [ 970.108545][T19915] ? bio_associate_blkg+0x6d/0x230 [ 970.113676][T19915] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 970.119843][T19915] ? submit_bio_noacct+0xfb1/0x1b80 [ 970.125064][T19915] ext4_commit_super+0x2d2/0x430 [ 970.130007][T19915] ext4_handle_error+0x672/0x960 [ 970.134957][T19915] __ext4_error+0x26a/0x380 [ 970.139475][T19915] ? __lock_acquire+0xab9/0xd20 [ 970.144339][T19915] ? __pfx___ext4_error+0x10/0x10 [ 970.149371][T19915] ? ext4_validate_block_bitmap+0x182/0x6c0 [ 970.155297][T19915] ext4_validate_block_bitmap+0x64e/0x6c0 [ 970.161029][T19915] ext4_mb_init_cache+0x55e/0x1490 [ 970.166143][T19915] ? __pfx_workingset_update_node+0x10/0x10 [ 970.172072][T19915] ? __pfx_ext4_mb_init_cache+0x10/0x10 [ 970.177641][T19915] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 970.183394][T19915] ext4_mb_init_group+0x3a5/0x6b0 [ 970.188440][T19915] ext4_mb_load_buddy_gfp+0xca0/0xec0 [ 970.193857][T19915] ext4_free_blocks+0xb49/0x1bf0 [ 970.198826][T19915] ? __pfx_ext4_free_blocks+0x10/0x10 [ 970.204217][T19915] ext4_ext_remove_space+0x1f87/0x42f0 [ 970.209741][T19915] ? ext4_es_remove_extent+0x218/0x420 [ 970.215211][T19915] ? __pfx_ext4_ext_remove_space+0x10/0x10 [ 970.221024][T19915] ? ext4_es_remove_extent+0x263/0x420 [ 970.226498][T19915] ext4_ext_truncate+0x17e/0x300 [ 970.231448][T19915] ext4_truncate+0xb4f/0x12e0 [ 970.236159][T19915] ? __pfx_ext4_truncate+0x10/0x10 [ 970.241288][T19915] ? down_write+0x162/0x1f0 [ 970.245794][T19915] ? __pfx_down_write+0x10/0x10 [ 970.250655][T19915] ext4_process_orphan+0x1cb/0x300 [ 970.255781][T19915] ext4_orphan_cleanup+0xc20/0x1460 [ 970.260995][T19915] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 970.266635][T19915] ? ext4_register_li_request+0x259/0x720 [ 970.272363][T19915] ? errseq_check_and_advance+0x66/0x120 [ 970.278011][T19915] ext4_fill_super+0x5920/0x61e0 [ 970.282986][T19915] ? __pfx_ext4_fill_super+0x10/0x10 [ 970.288275][T19915] ? snprintf+0xda/0x120 [ 970.292530][T19915] ? __pfx_snprintf+0x10/0x10 [ 970.297211][T19915] ? set_blocksize+0x21e/0x500 [ 970.301988][T19915] ? sb_set_blocksize+0x104/0x180 [ 970.307023][T19915] ? setup_bdev_super+0x4c1/0x5b0 [ 970.312066][T19915] get_tree_bdev_flags+0x40e/0x4d0 [ 970.317187][T19915] ? __pfx_ext4_fill_super+0x10/0x10 [ 970.322481][T19915] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 970.328138][T19915] vfs_get_tree+0x92/0x2b0 [ 970.332574][T19915] do_new_mount+0x302/0xa10 [ 970.337095][T19915] ? apparmor_capable+0x137/0x1b0 [ 970.342142][T19915] ? __pfx_do_new_mount+0x10/0x10 [ 970.347180][T19915] ? ns_capable+0x8a/0xf0 [ 970.351515][T19915] ? kmem_cache_free+0x19b/0x690 [ 970.356466][T19915] __se_sys_mount+0x313/0x410 [ 970.361157][T19915] ? __pfx___se_sys_mount+0x10/0x10 [ 970.366368][T19915] ? do_syscall_64+0xbe/0xfa0 [ 970.371055][T19915] ? __x64_sys_mount+0x20/0xc0 [ 970.375834][T19915] do_syscall_64+0xfa/0xfa0 [ 970.380345][T19915] ? lockdep_hardirqs_on+0x9c/0x150 [ 970.385553][T19915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.391621][T19915] ? clear_bhb_loop+0x60/0xb0 [ 970.396303][T19915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.402201][T19915] RIP: 0033:0x7fc8ccf9076a [ 970.406627][T19915] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 970.426231][T19915] RSP: 002b:00007fc8cde73e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 970.434654][T19915] RAX: ffffffffffffffda RBX: 00007fc8cde73ef0 RCX: 00007fc8ccf9076a [ 970.442630][T19915] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 00007fc8cde73eb0 [ 970.450600][T19915] RBP: 0000200000000080 R08: 00007fc8cde73ef0 R09: 0000000000000000 [ 970.458573][T19915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 970.466555][T19915] R13: 00007fc8cde73eb0 R14: 00000000000004f2 R15: 0000200000000040 [ 970.474541][T19915] [ 970.477928][T19915] Kernel Offset: disabled [ 970.482261][T19915] Rebooting in 86400 seconds..