last executing test programs: 30m53.560688738s ago: executing program 32 (id=501): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)=""/4115, 0x1013}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f0000000000)=""/24, 0x18}, {&(0x7f00000000c0)=""/50, 0x32}], 0x4}, 0x20) 30m47.878522125s ago: executing program 33 (id=530): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x5) r1 = socket(0x28, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002540)=@newtaction={0x14, 0x30, 0x1, 0x70bd29, 0x25dfdc02}, 0x14}, 0x1, 0x0, 0x0, 0x400c885}, 0x40004) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x24008094) 19m56.394861373s ago: executing program 34 (id=4795): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001fc0)={0x38, 0x1403, 0x1, 0x70bd2b, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x38}}, 0x0) 14m39.205465279s ago: executing program 35 (id=6948): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x15, &(0x7f0000000400)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2d3ef5b9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 13m30.728750304s ago: executing program 36 (id=7231): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES8=r0, @ANYBLOB="010329bd7000fcdbdf2524"], 0x20}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r2 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'macvlan1\x00', 0x3}, 0x18) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 12m9.073564929s ago: executing program 37 (id=7626): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf090000000000005509010000000000950000000000000085100000f5ffffffbf91000000000000b7020000010000009700000084000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12m5.22593706s ago: executing program 38 (id=7640): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000780)}, 0x2000c040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() r2 = getpid() sched_setattr(r2, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$dsp(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000200)=0x8) pwritev(r5, &(0x7f00000002c0)=[{&(0x7f0000000040)="00214717a7070000000003060000000000000000a8a6761d5874f72cf86d73d32f46381d8fee86d9ca0e6a9c4db5a4", 0x2f}], 0x1, 0xe, 0x200004) prctl$PR_MCE_KILL(0x29, 0x1, 0x2) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000180)={0x1d, r7, 0x0, {0x0, 0x0, 0x1}, 0xfe}, 0x18) sendmsg$can_j1939(r6, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) 12m2.40095721s ago: executing program 39 (id=7652): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="9110520000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@hopopts={{0x18, 0x29, 0x36, {0x87}}}, @flowinfo={{0x14, 0x29, 0xb, 0x80000001}}], 0x30}, 0x40c0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'netpci0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) unshare(0x2000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x5, 0x2de07c, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000240)={0x18, r4}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c74657200000000000000200000000000000000000000000000000000000400"/78], 0x68) 9m11.509748323s ago: executing program 40 (id=8321): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000080)={0x0, 0x2, 0xffe, 0x4000006}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) 8m52.596031327s ago: executing program 5 (id=8394): close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x43, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr(r0, 0x0, 0x0, 0x0, 0x1) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) 8m52.344741994s ago: executing program 5 (id=8397): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f000053e000/0x1000)=nil, 0x1000, 0x1000002, 0x11012, r4, 0x0) munmap(&(0x7f000053c000/0x4000)=nil, 0x4000) syz_usb_connect(0x3, 0x38, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0xef, 0x89, 0xd6, 0x8, 0x2dc8, 0xe745, 0x8914, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0x80, 0x2, 0x0, 0x1, [{{0x9, 0x4, 0x28, 0x8, 0x2, 0xff, 0x47, 0xd0, 0x48, [], [{{0x9, 0x5, 0x4, 0x0, 0x40, 0x0, 0x3, 0x3, [@generic={0x2, 0x7}]}}, {{0x9, 0x5, 0x2, 0x1, 0x200, 0x9, 0x7, 0x9c}}]}}]}}]}}, 0x0) 8m50.436402423s ago: executing program 5 (id=8401): r0 = gettid() listen(0xffffffffffffffff, 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) write(r3, &(0x7f0000000340)="657f", 0x2) 8m49.855211209s ago: executing program 41 (id=8401): r0 = gettid() listen(0xffffffffffffffff, 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) write(r3, &(0x7f0000000340)="657f", 0x2) 5m15.617498025s ago: executing program 4 (id=8957): add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000280)={0x0, "422d74fb20e032ed6057656356fab561bd4228c99fc3c582aefe7b8b5cd257dcf094d2fa570b23c695fa9bddbf5671019834cf3c3fb5d3a612dbc8bfdbf09057", 0x40015}, 0x48, 0xfffffffffffffffe) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2002f00, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m13.09994566s ago: executing program 4 (id=8959): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x209d, 0x9, 0x2008, 0x7ffffff9}, 0x10) shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) fsopen(0x0, 0x0) r1 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) openat2$dir(0xffffffffffffff9c, &(0x7f0000001680)='.\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0x58) write(r0, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) recvmmsg$unix(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000060, 0x0) 5m9.155988593s ago: executing program 4 (id=8966): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10) write(r0, &(0x7f00000008c0)="240000001e005f0214f6ffffffff00f807101039c100dacf19c3590000001372e5820000", 0x24) 5m8.705534424s ago: executing program 4 (id=8968): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109540, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x81, 0x4, 0x9, 0xf, 0x5, 0x3, 0x0, 0xfffff0ba, 0x6}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x7fffe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x0, 0xc}, 0xb, 0x0, 0x32, 0x5, 0x9, 0x7, 0x9, 0x10, 0x1, 0x1, {0xffff1c72, 0x23, 0x100007, 0x4, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000314000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7d", 0x4}], 0x2}, 0x4005) 5m6.964298681s ago: executing program 4 (id=8973): r0 = openat$urandom(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003b00), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') read$FUSE(r3, &(0x7f0000000a00)={0x2020}, 0x2020) 5m5.756664533s ago: executing program 4 (id=8974): r0 = fanotify_init(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fanotify_mark(r0, 0x41, 0x8000038, r1, 0x0) 4m50.159830783s ago: executing program 42 (id=8974): r0 = fanotify_init(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fanotify_mark(r0, 0x41, 0x8000038, r1, 0x0) 4m34.248527146s ago: executing program 3 (id=9044): r0 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x28040) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r9 = socket(0x10, 0x3, 0x0) close(r8) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m24.31912573s ago: executing program 3 (id=9060): mount$bpf(0x0, 0x0, 0x0, 0x958028, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = io_uring_setup(0x1f1c, &(0x7f00000005c0)={0x0, 0x17db, 0x8, 0x3, 0x283}) creat(&(0x7f0000000000)='./file0\x00', 0x86) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x20341, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040)) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1818408, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) close_range(r2, 0xffffffffffffffff, 0x0) 4m22.259591605s ago: executing program 3 (id=9063): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) creat(&(0x7f0000000040)='./file0\x00', 0x12c) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 4m18.073835534s ago: executing program 3 (id=9072): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x7fa962bfffff, 0x13012, r3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r8, 0x4c80, 0x7000000) r9 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r9, 0xb) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) read$FUSE(0xffffffffffffffff, &(0x7f0000003180)={0x2020}, 0x2020) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 4m9.135147003s ago: executing program 3 (id=9080): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) open(0x0, 0x82000, 0x86) gettid() prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000380)) 3m52.138349547s ago: executing program 43 (id=9080): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) open(0x0, 0x82000, 0x86) gettid() prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000380)) 3m30.623678705s ago: executing program 8 (id=9157): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000009c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@nojournal_checksum}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsold}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, 'minixdf'}}], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$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") 3m28.532221385s ago: executing program 8 (id=9159): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e1e}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x186, 0x904) epoll_create1(0x0) close(0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="28000000270001002cbc19d4e4000000180031800600ff002600000008004e00", @ANYRES32=0x0, @ANYBLOB="47d75f6d"], 0x28}], 0x1, 0x0, 0x0, 0x4}, 0x4000040) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000100c0)={0xffffffffffffffff, 0x0, {0x0, 0x300, 0x0, 0x1ff, 0x8000000000004, 0x0, 0x12, 0x7, 0xc, "86ea7402ff412d3980fd92fdf1e38d7cdf160a67c178446f9717a3ed442c40e0d1b0aa298953b089db0669f4a0135863b2a82613306b6a47367ab363000000f2", "04d827b4240b671c86cb26f22967432dc007dfdc83ad376253f8816d0aed0f36f322096bd47c399083c02cbb13c0f3e2daf1c5643d3e45082f4324e9d1ce8c4b", "4ef707ede1538d3e891ddfc38dcc9f905fa112e159ba6d107af20b0d4cc13ffa", [0x7f, 0x5]}}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000001280)=0x10001) 3m27.526353502s ago: executing program 8 (id=9160): ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000780)={'binder0\x00'}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="130000000800000008"], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000001080)='syzkaller\x00'}, 0x83) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32=r5], 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000040)=0x4000000, &(0x7f0000000080)=r5}, 0x20) r6 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r6, &(0x7f0000019c80)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) setresgid(0xee00, 0xee01, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}, 0x10) creat(0x0, 0x0) 3m26.680812222s ago: executing program 8 (id=9164): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 3m25.240785785s ago: executing program 8 (id=9168): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000003b80)={0x2020}, 0x2020) 3m22.720065444s ago: executing program 8 (id=9172): r0 = socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$random(0xffffffffffffff9c, 0x0, 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3e}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) 3m5.695850354s ago: executing program 44 (id=9172): r0 = socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$random(0xffffffffffffff9c, 0x0, 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3e}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) 2m26.223286766s ago: executing program 2 (id=9275): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x800092, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x46, 0x2d1, &(0x7f0000000740)="$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") 2m17.697538532s ago: executing program 0 (id=9287): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, &(0x7f0000000340)={0x0, 0x0, 0x1000}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x401, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000080)={&(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x282, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0xe09e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x573, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000140)={@hyper, 0x3ff}) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f00000026c0)=""/4096, 0x17f, 0x1000, 0x1, 0x663}, 0x28) close_range(r2, r3, 0x2) r4 = socket$inet6(0xa, 0x3, 0x7) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc"], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003b00)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r6], 0x3c}}, 0x12) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) r8 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000001c0), &(0x7f0000000240)=0x4) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x3, @empty, 0x4}, 0x1c) 2m17.664402232s ago: executing program 2 (id=9288): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000240)) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$eJzs3M9rHGUYB/DHTdrUxPxQa7WC9MVe9DIkOXhRkCApSBeUthFaQZiajS4Zd0NmCayI0ZNXL/4BXsWjN0G86SUe/Bu85eLRgzrSnbY2djVotRPD53PZh33nC8+7s7zwLvvO/gsfv7O5UWYb+SBaD7wYra2IyV9SpGjFLR/Es89/8+1Tl69eu7jSbq9eSunCypWl51JKc+e+ev29z5/+ejDz2hdzX07F3sIb+z8u/7B3Zu/s/q9X3u6WqVumXn+Q8nS93x/k14tOWu+Wm1lKrxadvOykbq/sbB8Y3yj6W1vDlPfWZ6e3tjtlmfLeMG12hmnQT4PtYcrfyru9lGVZmp0O7sXaZz9VVRVRVSfiZFRVVT0Y09GKh2I25mI+FuLheCQejdPxWJyJx+OJODu6qum+AQAAAAAAAAAAAAAAAAAA4HgZd/5/5q7z/59EjDv/f67h5gEAAAAAAAAAAAAAAAAAAOCYuHz12sWVdnv1UkqnIoqPdtZ21urXenxlI7pRRCcWYz5+jtHp/1pdn4z26mIaWYgPi92b+d2dtYmD+aXR4wTuyl94ub26VOfTwfxUTN+ZX475OD0+v/yH/PlR/lQ8c/6OfBbz8f2b0Y8i1uNG9vf8+0spvfRK+3b+u7167usN3hcAAAD4N2XptrH79yz7s/E6f9jvAzf214tj9/eT8eRks3Mnohy+u5kXRWe78eJWR/U7uxFxRBr7x0UrIo5AG39RnDj0mpkGGvt0JuIe4hMHvkhH4nP+PxaHrRwT/+m6xP1x86ZPNd0HAAAAAAAAAAAAf8/9+Dth03MEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Dd24FgAAAAAQJi/dRodGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBXAQAA//+siMjP") fanotify_mark(0xffffffffffffffff, 0x161, 0x40000867, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b1b, &(0x7f0000000040)) 2m15.808063726s ago: executing program 1 (id=9291): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x38}}, 0x24044864) 2m15.232267912s ago: executing program 1 (id=9292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x7, 0xffffffff, 0x4}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404c8c1}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044060}, 0x4010) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 2m14.612177665s ago: executing program 0 (id=9293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m14.611783931s ago: executing program 1 (id=9294): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x3c, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2m14.350304302s ago: executing program 2 (id=9295): mount$bpf(0x0, 0x0, 0x0, 0x958028, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x86) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x20341, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x12) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1818408, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m14.317818245s ago: executing program 1 (id=9296): shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) fsopen(0x0, 0x0) r0 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) openat2$dir(0xffffffffffffff9c, &(0x7f0000001680)='.\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r5, 0xfffffffffffffffd, 0x58) 2m12.211285493s ago: executing program 1 (id=9297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) setuid(0x0) syz_open_dev$loop(0x0, 0x100013, 0xa4a82) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0x72, 0x220000, 0x0, 0x8000008, 0x81, 0x2, 0x1, 0x0, 0x7cce8c743ee810df, 0xa5}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000000c0)={0x800080, 0x80, 0x8, 0x5, 0x0, 0x55a}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x3, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) 2m10.976320008s ago: executing program 0 (id=9298): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 2m10.839253121s ago: executing program 2 (id=9299): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x541b, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=@delneigh={0x80, 0x1d, 0x200, 0x70bd2c, 0x25dfdbff, {0x1c, 0x0, 0x0, r2, 0x10, 0xf1}, [@NDA_NH_ID={0x8, 0xd, 0x80000000}, @NDA_CACHEINFO={0x14, 0x3, {0xffffff7a, 0x2, 0xfffffffe, 0x3}}, @NDA_LINK_NETNSID={0x8, 0xa, 0xffff8001}, @NDA_PORT={0x6, 0x6, 0x4e24}, @NDA_DST_MAC={0xa, 0x1, @random="e89138a33756"}, @NDA_DST_IPV6={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @NDA_MASTER={0x8, 0x9, 0x80000000}, @NDA_VLAN={0x6, 0x5, 0x3}, @NDA_PORT={0x6, 0x6, 0x4e21}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102384, 0x18ff0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002800)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x238, 0x0, 0xffffffff, 0x2e0, 0x238, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e22}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @multicast1, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'team_slave_0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xffffff00, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x0, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) 2m10.475630192s ago: executing program 0 (id=9300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x702, 0xe40, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file3\x00') execveat$binfmt(0xffffffffffffffff, r0, 0x0, &(0x7f0000000780)={[], 0xf000}, 0x800) unshare(0x26020480) 2m8.936172955s ago: executing program 0 (id=9301): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) openat$tun(0xffffffffffffff9c, 0x0, 0x141040, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000400)={0x2020}, 0x2020) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000000001fe00000000000000920100000000feffff7f000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc0300"], 0x140}}, 0x844) keyctl$setperm(0x5, 0x0, 0x35060714) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002740)=ANY=[@ANYBLOB="280000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 2m7.461170737s ago: executing program 0 (id=9302): close(0x3) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000000c0)=@chain={'key_or_keyring:', r3}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) 2m2.108167944s ago: executing program 1 (id=9308): shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) fsopen(0x0, 0x0) r0 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) openat2$dir(0xffffffffffffff9c, &(0x7f0000001680)='.\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r5, 0xfffffffffffffffd, 0x58) 2m1.423730979s ago: executing program 2 (id=9310): mount$bpf(0x0, 0x0, 0x0, 0x958028, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x86) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x20341, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x12) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1818408, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m59.713913889s ago: executing program 2 (id=9314): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000280)="ebefcc425ece9888c2d2bf388d4341bf0ae3485b5725e23c983c0b9f81eb96751a0dbd4f0da7a484d83af59031bb564127e32705829d3125c352bb641c27845ff9e67f90dc233df2e0ab8f673cd64a83dc2d1cec5960b506d42c4154b9cfa04ee5f88fdcceb4286769a03538039d890aba4174e5ecf45392455125fd5c328494841ce060b05614d7e95a144fef4615899d", 0x91}, {&(0x7f0000000340)="4c530ca5c45afd57bbe5b34713178a1de79896460771d51c8b955dc99e29ba9548ab0d7199ef271db5a1b0e270676e4c771ee3be", 0x34}, {&(0x7f0000000440)="d0210b6b8db3ff3daa65563080162272f2c9c2f069a1983e85dc3a9c294500f1474732e9be25acfe90421dd20a412c952fb082904f8d3d3886554e18753839b22409f37be6ccfb3f29dd27bd4a8ea45d0a8b2d25421ed631ef2932cadbdff331ff13256ab72f64a0f506271bb0f89a294d", 0x71}, {&(0x7f00000004c0)="6b90986d274f3a4c88fdc19c10544e6dd35da336bab9d10f96f768e0f06e357b571f7cdc963560c82ad6fa4e3bd616", 0x2f}, {0x0}, {&(0x7f00000006c0)="b2e4981526267b3259005cdf6c4ccb54705a82f1075ed62d688c183ac9262d6a123bb17eb4fec7bec846da9e27140dc5acebe553221acf4391b6a14ec22337c5e10a3e16f4b5158e166ff344e5999eda147b59f3f0acaac5124a025ff67ddbb2", 0x60}, {&(0x7f0000000500)="a48ff2c77a7f7426e8e9c91ff9bd17e872cf8e04948373a89edb229cb8ae", 0x1e}], 0x7}, 0x2000c040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = gettid() r4 = getpid() sched_setattr(r4, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r6, &(0x7f00000002c0)=[{&(0x7f0000000040)="00214717a7070000000003060000000000000000a8a6761d5874f72cf86d73d32f46381d8fee86d9ca0e6a9c4db5a40fef56", 0x54}], 0x1, 0xe, 0x200004) prctl$PR_MCE_KILL(0x29, 0x1, 0x2) r7 = syz_open_procfs(r3, &(0x7f00000005c0)='maps\x00') lseek(r7, 0x1000000, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000180)={0x1d, r9, 0x0, {0x0, 0x0, 0x1}, 0xfe}, 0x18) sendmsg$can_j1939(r8, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x15, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) 1m52.059618046s ago: executing program 45 (id=9302): close(0x3) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000000c0)=@chain={'key_or_keyring:', r3}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) 1m46.901775726s ago: executing program 46 (id=9308): shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) fsopen(0x0, 0x0) r0 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) openat2$dir(0xffffffffffffff9c, &(0x7f0000001680)='.\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r5, 0xfffffffffffffffd, 0x58) 1m44.534505051s ago: executing program 47 (id=9314): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000280)="ebefcc425ece9888c2d2bf388d4341bf0ae3485b5725e23c983c0b9f81eb96751a0dbd4f0da7a484d83af59031bb564127e32705829d3125c352bb641c27845ff9e67f90dc233df2e0ab8f673cd64a83dc2d1cec5960b506d42c4154b9cfa04ee5f88fdcceb4286769a03538039d890aba4174e5ecf45392455125fd5c328494841ce060b05614d7e95a144fef4615899d", 0x91}, {&(0x7f0000000340)="4c530ca5c45afd57bbe5b34713178a1de79896460771d51c8b955dc99e29ba9548ab0d7199ef271db5a1b0e270676e4c771ee3be", 0x34}, {&(0x7f0000000440)="d0210b6b8db3ff3daa65563080162272f2c9c2f069a1983e85dc3a9c294500f1474732e9be25acfe90421dd20a412c952fb082904f8d3d3886554e18753839b22409f37be6ccfb3f29dd27bd4a8ea45d0a8b2d25421ed631ef2932cadbdff331ff13256ab72f64a0f506271bb0f89a294d", 0x71}, {&(0x7f00000004c0)="6b90986d274f3a4c88fdc19c10544e6dd35da336bab9d10f96f768e0f06e357b571f7cdc963560c82ad6fa4e3bd616", 0x2f}, {0x0}, {&(0x7f00000006c0)="b2e4981526267b3259005cdf6c4ccb54705a82f1075ed62d688c183ac9262d6a123bb17eb4fec7bec846da9e27140dc5acebe553221acf4391b6a14ec22337c5e10a3e16f4b5158e166ff344e5999eda147b59f3f0acaac5124a025ff67ddbb2", 0x60}, {&(0x7f0000000500)="a48ff2c77a7f7426e8e9c91ff9bd17e872cf8e04948373a89edb229cb8ae", 0x1e}], 0x7}, 0x2000c040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = gettid() r4 = getpid() sched_setattr(r4, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r6, &(0x7f00000002c0)=[{&(0x7f0000000040)="00214717a7070000000003060000000000000000a8a6761d5874f72cf86d73d32f46381d8fee86d9ca0e6a9c4db5a40fef56", 0x54}], 0x1, 0xe, 0x200004) prctl$PR_MCE_KILL(0x29, 0x1, 0x2) r7 = syz_open_procfs(r3, &(0x7f00000005c0)='maps\x00') lseek(r7, 0x1000000, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000180)={0x1d, r9, 0x0, {0x0, 0x0, 0x1}, 0xfe}, 0x18) sendmsg$can_j1939(r8, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x15, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) 56.736096076s ago: executing program 7 (id=9397): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x38, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x38}}, 0x0) socket$inet(0x2, 0x2, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(r2, 0x3, &(0x7f0000000040)={0xdd, 0xf19c}, &(0x7f0000000080)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_wakeup_irq', 0x80240, 0x31840384d1ba4a81) unshare(0xc000400) finit_module(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r7, r7) 53.46551236s ago: executing program 7 (id=9398): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) 52.85755286s ago: executing program 7 (id=9399): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000012340)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x10010) getxattr(0x0, &(0x7f0000000200)=@known='trusted.overlay.upper\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000000c0)={0x0, 0x0, 0x8000}) 51.850219096s ago: executing program 7 (id=9402): syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000000c0)={0x6, {{0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10001}}}, 0x88) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf335263bd9bffbcc2542ded71038259ca171ce1a311ef07ec3ad71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x9]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) write$binfmt_format(r1, &(0x7f0000000000)='1\x00', 0x2400) 50.252102791s ago: executing program 7 (id=9405): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x1022002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000ac0)=""/102392, 0x18ff8) futex_waitv(&(0x7f0000000c00), 0x0, 0x0, 0xfffffffffffffffe, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1b) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x80, @private0, 0x2}, 0x1c) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x67, &(0x7f0000000bc0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x31, 0x3a, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @multicast1}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8f041a", 0x0, 0x2b, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], 'b'}}}}}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 47.330609373s ago: executing program 7 (id=9409): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x8001}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 46.18379373s ago: executing program 48 (id=9409): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x8001}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 12.713538194s ago: executing program 9 (id=9451): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0, 0x0, 0xf2c6dd75e6431700}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000a000000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfdb0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x27) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 10.749839025s ago: executing program 9 (id=9452): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) syz_emit_ethernet(0x60, &(0x7f0000000300)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x2a, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4, "914d7796669d89b54b8a69f29dee33c9753251f273128f0e56baa26290c1b0eed7dc"}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x102, 0x0) 6.965994135s ago: executing program 9 (id=9454): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x88, 0x2c, 0x6f14cf9ac61f9c9b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f00000006c0)={{}, "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"}) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8864000000000000) 5.95736768s ago: executing program 5 (id=9322): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xed}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0xa, 0x3) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x61) syz_emit_ethernet(0x2a, 0x0, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080)={0x6, 0x1}, 0x2) sched_setscheduler(0x0, 0x1, 0x0) ptrace$ARCH_GET_GS(0x1e, r1, 0x0, 0x1004) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_debug_messages', 0x42, 0x0) 5.956171658s ago: executing program 6 (id=9456): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(0x3) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) gettid() r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 4.075992604s ago: executing program 5 (id=9457): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r1, 0x0, 0x4004) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000580), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xfffffffc) umount2(&(0x7f0000000340)='./file0\x00', 0xb) 4.058054901s ago: executing program 6 (id=9458): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x3c, r4, 0x7, 0xffffffff, 0x0, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x400d4) 3.973805068s ago: executing program 9 (id=9459): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x8}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) 2.967518943s ago: executing program 6 (id=9460): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000061188e000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.78001692s ago: executing program 9 (id=9461): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) creat(&(0x7f0000000040)='./file0\x00', 0x12c) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, 0x0, 0x0, 0x0) 2.719979446s ago: executing program 6 (id=9462): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffdfe}) 2.411118321s ago: executing program 9 (id=9463): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x1ddd, &(0x7f0000000240)={0x0, 0x40000000, 0x0, 0x1, 0x8}) eventfd2(0x0, 0x0) socket(0x28, 0x5, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x3) 2.288058752s ago: executing program 6 (id=9464): r0 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2040400) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 2.279461616s ago: executing program 3 (id=9331): dup(0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000140)={0x37db, 0x8000000000000000, 0x1, 0x0, 0x0, 0x81, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) inotify_init() accept4$bt_l2cap(r0, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 727.526605ms ago: executing program 5 (id=9465): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000005fc0)=[{{&(0x7f0000003000)={0xa, 0x4e24, 0x9, @private1, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000003240)=[@hopopts_2292={{0x14}}, @hopopts={{0x14, 0x29, 0x36, {0x3b}}}], 0x28}}], 0x1, 0x4090) 0s ago: executing program 6 (id=9466): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xed}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0xa, 0x3) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x61) syz_emit_ethernet(0x2a, 0x0, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080)={0x6, 0x1}, 0x2) sched_setscheduler(0x0, 0x1, 0x0) ptrace$ARCH_GET_GS(0x1e, r1, 0x0, 0x1004) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_debug_messages', 0x42, 0x0) kernel console output (not intermixed with test programs): 0 arch=c000003e syscall=307 compat=0 ip=0x7f4f5bb9c629 code=0x7ffc0000 [ 1591.118449][ T2477] vcan0: tx address claim with dest, not broadcast [ 1591.172411][ T30] audit: type=1326 audit(1771769155.061:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2458 comm="syz.8.8734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5bb9c629 code=0x7ffc0000 [ 1591.209168][ T30] audit: type=1326 audit(1771769155.061:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2458 comm="syz.8.8734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5bb9c629 code=0x7ffc0000 [ 1591.245338][ T30] audit: type=1326 audit(1771769155.061:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2458 comm="syz.8.8734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5bb9c629 code=0x7ffc0000 [ 1591.368356][ T6016] usb 9-1: Using ep0 maxpacket: 16 [ 1591.384160][ T6016] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1591.416860][ T6016] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1591.467500][ T6016] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1591.496310][ T30] audit: type=1326 audit(1771769155.061:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2458 comm="syz.8.8734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4f5bb9c629 code=0x7ffc0000 [ 1591.631275][ T6016] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1591.664641][ T30] audit: type=1326 audit(1771769155.061:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2458 comm="syz.8.8734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5bb9c629 code=0x7ffc0000 [ 1591.684234][ T6016] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.748940][ T2494] loop1: detected capacity change from 0 to 128 [ 1591.762834][ T6016] usb 9-1: config 0 descriptor?? [ 1591.817452][ T2494] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1591.844339][ T2494] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1592.871100][ T2501] Invalid logical block size (6) [ 1592.982484][ T6016] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0 [ 1592.991337][ T6016] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0 [ 1592.998554][ T6016] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0 [ 1593.005966][ T6016] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0 [ 1593.075155][ T6016] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0 [ 1593.114248][ T6016] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0 [ 1593.151295][ T6016] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0 [ 1593.196651][ T6016] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0 [ 1593.241174][ T6016] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0 [ 1593.272974][ T6016] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0 [ 1593.344077][ T6016] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0029/input/input82 [ 1593.438409][ T6016] microsoft 0003:045E:07DA.0029: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 1593.570297][ T6016] usb 9-1: USB disconnect, device number 7 [ 1596.279443][ T2521] fido_id[2521]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1596.584432][ T2538] loop2: detected capacity change from 0 to 2048 [ 1596.607268][ T2541] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8766'. [ 1596.669473][ T2538] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1596.721311][ T2541] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8766'. [ 1596.744782][ T2538] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1596.820782][ T2538] UDF-fs: Scanning with blocksize 512 failed [ 1596.920223][ T2538] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1596.960546][ T2538] UDF-fs: Scanning with blocksize 1024 failed [ 1597.026982][ T2538] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1597.073358][ T2538] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1597.136664][ T2538] UDF-fs: Scanning with blocksize 2048 failed [ 1597.159921][ T2538] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1597.205422][ T2538] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1597.240613][ T2538] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1597.272199][ T2538] UDF-fs: Scanning with blocksize 4096 failed [ 1597.278287][ T2538] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 1597.483655][ T2558] loop8: detected capacity change from 0 to 128 [ 1597.491515][ T2558] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1597.504171][ T2558] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1598.284287][ T127] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1598.339453][ T2571] loop2: detected capacity change from 0 to 128 [ 1599.993262][ T2597] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8779'. [ 1600.080978][ T2597] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8779'. [ 1601.477337][ T2618] vcan0: tx address claim with dest, not broadcast [ 1604.119691][ T2641] loop1: detected capacity change from 0 to 4096 [ 1604.277270][ T2641] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1604.286313][ T2641] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1604.382393][ T2641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1604.604125][ T955] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1606.010144][ T2665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8793'. [ 1606.080602][ T2665] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8793'. [ 1606.691092][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.697621][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1606.713002][ T1285] lec:lec_start_xmit: lec0:No lecd attached [ 1608.130749][ T2684] loop2: detected capacity change from 0 to 1024 [ 1608.188685][ T2684] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1608.275910][ T2684] ext4: Unknown parameter 'obj_role' [ 1608.504925][ T2689] loop2: detected capacity change from 0 to 16 [ 1608.558839][ T2689] erofs (device loop2): mounted with root inode @ nid 36. [ 1612.180983][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5470 ms [ 1612.189036][ C0] lec:lec_tx_timeout: lec0 [ 1613.074203][ T2734] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8808'. [ 1617.760491][ T2780] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1618.770275][ T2792] vcan0: tx address claim with dest, not broadcast [ 1620.040866][ T2795] Device name cannot be null; rc = [-22] [ 1623.708539][ T2856] loop2: detected capacity change from 0 to 128 [ 1625.749041][ T2867] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1628.518530][ T5837] Bluetooth: hci6: unexpected event for opcode 0x0c25 [ 1629.774928][ T2915] vcan0: tx address claim with dest, not broadcast [ 1632.093073][ T2935] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1635.416308][ T2957] loop2: detected capacity change from 0 to 1024 [ 1635.645681][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1635.645704][ T30] audit: type=1800 audit(2000000006.269:147): pid=2957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8832" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 1639.249871][ T2994] ceph: No mds server is up or the cluster is laggy [ 1639.405396][T32495] libceph: connect (1)[c::]:6789 error -101 [ 1639.560995][T32495] libceph: mon0 (1)[c::]:6789 connect error [ 1641.201576][ T3010] syzkaller0: entered promiscuous mode [ 1641.207079][ T3010] syzkaller0: entered allmulticast mode [ 1642.038543][ T3047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8872'. [ 1643.398513][ T3077] syzkaller0: entered promiscuous mode [ 1643.404247][ T3077] syzkaller0: entered allmulticast mode [ 1643.525627][ T3083] loop1: detected capacity change from 0 to 512 [ 1643.568965][ T3083] EXT4-fs: Ignoring removed orlov option [ 1643.611559][ T3083] EXT4-fs: Ignoring removed mblk_io_submit option [ 1643.690858][ T3083] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.8881: corrupted in-inode xattr: e_value size too large [ 1643.705940][ T3083] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1643.710456][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1643.726057][ C1] EXT4-fs (loop1): initial error at time 2000000014: ext4_iget_extra_inode:5025: inode 15 [ 1643.736006][ C1] EXT4-fs (loop1): last error at time 2000000014: ext4_iget_extra_inode:5025: inode 15 [ 1643.742677][ T3083] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.8881: couldn't read orphan inode 15 (err -117) [ 1643.852084][ T3083] loop1: lost filesystem error report for type 5 error -117 [ 1643.856543][ T3083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1644.144153][ T3102] syzkaller0: entered promiscuous mode [ 1644.173911][ T3102] syzkaller0: entered allmulticast mode [ 1644.678667][ T3109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8886'. [ 1644.711697][ T3109] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8886'. [ 1644.893340][ T955] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1645.319369][ T3057] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1646.715953][ T3154] loop2: detected capacity change from 0 to 1024 [ 1646.768464][ T3154] hfsplus: invalid file type 0177777 for inode 2 [ 1646.790172][ T3154] hfsplus: failed to load root directory [ 1646.851639][ T3158] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8901'. [ 1646.914844][ T3161] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8901'. [ 1648.320807][ T3187] tipc: Started in network mode [ 1648.325723][ T3187] tipc: Node identity 3678ba9d2f27, cluster identity 4711 [ 1648.493773][ T3187] tipc: Enabled bearer , priority 0 [ 1648.611438][ T3200] tipc: Resetting bearer [ 1648.769584][ T3186] tipc: Disabling bearer [ 1649.878656][ T3222] tipc: Enabling of bearer rejected, failed to enable media [ 1650.290711][ T3233] syzkaller0: entered promiscuous mode [ 1650.297065][ T3233] syzkaller0: entered allmulticast mode [ 1652.144345][ T3240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8917'. [ 1652.151937][T17402] lec:lec_start_xmit: lec0:No lecd attached [ 1652.212698][ T3245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8917'. [ 1652.248520][ T3252] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8919'. [ 1652.529571][ T3261] loop1: detected capacity change from 0 to 1024 [ 1652.983644][ T30] audit: type=1800 audit(2000000023.589:148): pid=3270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8923" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 1655.693474][ T3290] syzkaller0: entered promiscuous mode [ 1655.714257][ T3290] syzkaller0: entered allmulticast mode [ 1655.780647][T29223] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 1655.845463][ T3297] tipc: Started in network mode [ 1655.850495][ T3297] tipc: Node identity 3a466c80ba73, cluster identity 4711 [ 1655.885921][ T3297] tipc: Enabled bearer , priority 0 [ 1655.962292][T29223] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1655.990309][ T3287] tipc: Resetting bearer [ 1656.000555][T29223] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1656.045628][T29223] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1656.090466][T29223] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1656.132339][ T3287] tipc: Disabling bearer [ 1656.144027][T29223] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1656.170523][T29223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.199546][T29223] usb 3-1: Product: syz [ 1656.217171][T29223] usb 3-1: Manufacturer: syz [ 1656.233169][T29223] usb 3-1: SerialNumber: syz [ 1656.264729][ T3285] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1656.445919][ T3310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8936'. [ 1656.484488][ T3310] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8936'. [ 1656.519889][ T3285] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1656.551159][ T3285] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1657.160469][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1657.168523][ C0] lec:lec_tx_timeout: lec0 [ 1657.187269][T29223] cdc_ncm 3-1:1.0: SET_CRC_MODE failed [ 1657.195060][T29223] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 1657.255773][T29223] cdc_ncm 3-1:1.0: bind() failure [ 1657.286503][T29223] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1657.326230][T29223] cdc_ncm 3-1:1.1: bind() failure [ 1657.371954][T29223] usb 3-1: USB disconnect, device number 7 [ 1659.777834][ T3360] syzkaller0: entered promiscuous mode [ 1659.787258][ T3360] syzkaller0: entered allmulticast mode [ 1659.819229][ T3366] tipc: Enabling of bearer rejected, failed to enable media [ 1661.280669][ T3369] xt_policy: neither incoming nor outgoing policy selected [ 1661.533544][ T3398] tipc: Enabling of bearer rejected, failed to enable media [ 1667.762964][ T3435] tipc: Enabling of bearer rejected, failed to enable media [ 1668.121844][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.128196][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.138736][ T1285] lec:lec_start_xmit: lec0:No lecd attached [ 1669.992073][ T3466] syzkaller0: entered promiscuous mode [ 1669.997574][ T3466] syzkaller0: entered allmulticast mode [ 1671.457753][ T3480] loop2: detected capacity change from 0 to 2048 [ 1671.503380][ T3480] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1671.818594][ T3489] tipc: Enabling of bearer rejected, failed to enable media [ 1673.150443][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1673.158469][ C0] lec:lec_tx_timeout: lec0 [ 1675.671641][ T3513] syzkaller0: entered promiscuous mode [ 1675.677232][ T3513] syzkaller0: entered allmulticast mode [ 1675.834009][ T3521] tipc: Enabled bearer , priority 0 [ 1675.914844][ T3513] tipc: Resetting bearer [ 1675.986433][ T3508] tipc: Resetting bearer [ 1676.223403][ T3508] tipc: Disabling bearer [ 1676.272767][ T3533] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8986'. [ 1676.330814][ T3533] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8986'. [ 1677.752218][ T3544] loop3: detected capacity change from 0 to 8 [ 1681.087219][ T3567] tipc: Enabling of bearer rejected, failed to enable media [ 1682.360596][ T30] audit: type=1326 audit(2000000052.989:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3596 comm="syz.0.9005" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f451519c629 code=0x0 [ 1686.923287][ T3626] tipc: Enabling of bearer rejected, failed to enable media [ 1688.282772][ T3631] 8021q: VLANs not supported on ipvlan0 [ 1688.622148][T16794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1688.652789][T16794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1688.670618][T16794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1688.700781][T16794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1688.730641][T16794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1689.886523][ T3657] loop2: detected capacity change from 0 to 128 [ 1689.893572][ T3657] vfat: Unknown parameter 'utf' [ 1691.107697][ T3663] 9p: Bad value for 'rfdno' [ 1691.188742][T16794] Bluetooth: hci3: command tx timeout [ 1691.382612][ T30] audit: type=1326 audit(2000000062.019:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3667 comm="syz.2.9021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e899c629 code=0x7ffc0000 [ 1691.573675][ T30] audit: type=1326 audit(2000000062.019:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3667 comm="syz.2.9021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e899c629 code=0x7ffc0000 [ 1691.657877][ T3642] chnl_net:caif_netlink_parms(): no params data found [ 1691.758712][ T30] audit: type=1326 audit(2000000062.019:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3667 comm="syz.2.9021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e899c629 code=0x7ffc0000 [ 1691.927979][ T30] audit: type=1326 audit(2000000062.019:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3667 comm="syz.2.9021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e899c629 code=0x7ffc0000 [ 1692.082373][ T30] audit: type=1326 audit(2000000062.019:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3667 comm="syz.2.9021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e899c629 code=0x7ffc0000 [ 1692.286572][ T30] audit: type=1326 audit(2000000062.039:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3667 comm="syz.2.9021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fb3e899c629 code=0x7ffc0000 [ 1692.650046][ T30] audit: type=1326 audit(2000000062.039:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3667 comm="syz.2.9021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e899c629 code=0x7ffc0000 [ 1693.222735][ T5837] Bluetooth: hci3: command tx timeout [ 1693.358136][ T30] audit: type=1326 audit(2000000062.039:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3667 comm="syz.2.9021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e899c629 code=0x7ffc0000 [ 1693.520614][ T30] audit: type=1326 audit(2000000062.039:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3667 comm="syz.2.9021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e899c629 code=0x7ffc0000 [ 1693.543119][ T30] audit: type=1326 audit(2000000062.039:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3667 comm="syz.2.9021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fb3e899c629 code=0x7ffc0000 [ 1693.938901][ T3642] bridge0: port 1(bridge_slave_0) entered blocking state [ 1693.958375][ T3642] bridge0: port 1(bridge_slave_0) entered disabled state [ 1694.014606][ T3642] bridge_slave_0: entered allmulticast mode [ 1694.049086][ T3642] bridge_slave_0: entered promiscuous mode [ 1694.078385][ T3642] bridge0: port 2(bridge_slave_1) entered blocking state [ 1694.130628][ T3642] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.150565][T32489] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1694.171940][ T3642] bridge_slave_1: entered allmulticast mode [ 1694.202229][ T3642] bridge_slave_1: entered promiscuous mode [ 1694.364259][T32489] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 1694.381944][T32489] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.456967][T32489] usb 2-1: Product: syz [ 1694.510864][T32489] usb 2-1: Manufacturer: syz [ 1694.520617][T32489] usb 2-1: SerialNumber: syz [ 1694.577369][T32489] usb 2-1: config 0 descriptor?? [ 1694.639308][T32489] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1694.639501][T32454] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1694.851036][T32489] usb 2-1: USB disconnect, device number 2 [ 1694.939684][ T3706] tipc: Enabled bearer , priority 0 [ 1695.069654][ T3710] syzkaller0: entered promiscuous mode [ 1695.088035][ T3710] syzkaller0: entered allmulticast mode [ 1695.118421][ T3699] tipc: Resetting bearer [ 1695.208420][ T3699] tipc: Disabling bearer [ 1695.320508][ T5837] Bluetooth: hci3: command tx timeout [ 1695.412269][T32454] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1695.722167][ T3642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1696.502181][ T3642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1697.625603][ T3737] 9p: Bad value for 'rfdno' [ 1697.630456][ T5837] Bluetooth: hci3: command tx timeout [ 1699.617159][T32454] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.499767][ T3642] team0: Port device team_slave_0 added [ 1701.505597][ T3745] 8021q: VLANs not supported on ipvlan0 [ 1701.619291][ T3642] team0: Port device team_slave_1 added [ 1701.882074][ T3642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1701.940747][ T3642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1702.061241][ T3642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1702.298664][ T3642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1702.330081][ T3642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1702.479638][ T3642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1702.716430][ T3642] hsr_slave_0: entered promiscuous mode [ 1702.751990][ T3642] hsr_slave_1: entered promiscuous mode [ 1702.758160][ T3642] debugfs: 'hsr0' already exists in 'hsr' [ 1702.800804][ T3642] Cannot create hsr debugfs directory [ 1703.603247][ T3769] tipc: Enabled bearer , priority 0 [ 1704.780006][T32454] bridge_slave_1: left allmulticast mode [ 1704.820665][T32454] bridge_slave_1: left promiscuous mode [ 1704.826464][T32454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1705.835664][T32454] bridge_slave_0: left allmulticast mode [ 1705.855630][T32454] bridge_slave_0: left promiscuous mode [ 1705.878721][T32454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1706.948422][ T3788] 9p: Bad value for 'rfdno' [ 1709.439865][T32454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1709.485726][T32454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1709.515358][T32454] bond0 (unregistering): Released all slaves [ 1709.556906][T32454] bond1 (unregistering): (slave dummy0): Releasing active interface [ 1709.601510][T32454] bond1 (unregistering): Released all slaves [ 1709.968661][ T3769] syzkaller0: entered promiscuous mode [ 1709.985212][ T3769] syzkaller0: entered allmulticast mode [ 1710.194066][ T790] tipc: Node number set to 3323308819 [ 1710.206366][ T3776] tipc: Resetting bearer [ 1710.256006][ T3765] tipc: Resetting bearer [ 1710.365133][ T3765] tipc: Disabling bearer [ 1710.645226][T32454] tipc: Left network mode [ 1714.666468][ T3855] 9p: Bad value for 'rfdno' [ 1718.586073][ T3888] tipc: Enabling of bearer rejected, failed to enable media [ 1718.827946][T32454] hsr_slave_0: left promiscuous mode [ 1718.868608][T32454] hsr_slave_1: left promiscuous mode [ 1718.887012][T32454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1718.926702][T32454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1718.978104][T32454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1719.022041][T32454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1719.208624][T32454] veth1_macvtap: left promiscuous mode [ 1719.221356][T32454] veth0_macvtap: left promiscuous mode [ 1719.226997][T32454] veth1_vlan: left promiscuous mode [ 1720.832805][T32454] veth0_vlan: left promiscuous mode [ 1721.975978][ T3918] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1723.051882][ T3921] 9p: Bad value for 'rfdno' [ 1724.246971][ T3918] loop2: detected capacity change from 0 to 512 [ 1724.328194][ T3918] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1724.480608][ T3918] EXT4-fs (loop2): 1 truncate cleaned up [ 1724.487761][ T3918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1724.612839][ T3918] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1725.413636][T32454] team0 (unregistering): Port device team_slave_1 removed [ 1725.455833][T32454] team0 (unregistering): Port device team_slave_0 removed [ 1727.719284][ T3642] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1727.925284][ T3642] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1728.037587][ T3642] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1728.180559][ T3642] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1729.548012][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.554863][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1729.567741][ T1285] lec:lec_start_xmit: lec0:No lecd attached [ 1729.642044][ T3965] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1729.762322][ T3965] tipc: Enabled bearer , priority 0 [ 1729.814270][ T3968] syzkaller0: entered promiscuous mode [ 1729.819785][ T3968] syzkaller0: entered allmulticast mode [ 1729.903057][ T3965] tipc: Resetting bearer [ 1729.941611][ T3964] tipc: Resetting bearer [ 1730.233572][ T3964] tipc: Disabling bearer [ 1730.442987][ T3642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1730.545068][ T3642] 8021q: adding VLAN 0 to HW filter on device team0 [ 1730.655527][ T6089] bridge0: port 1(bridge_slave_0) entered blocking state [ 1730.662713][ T6089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1730.738097][ T6089] bridge0: port 2(bridge_slave_1) entered blocking state [ 1730.745302][ T6089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1733.583491][ T3642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1733.643664][ T4015] loop1: detected capacity change from 0 to 512 [ 1733.800205][ T4015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1734.040611][ T4015] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1734.221693][ T4015] EXT4-fs error (device loop1): ext4_empty_dir:3075: inode #12: comm syz.1.9092: invalid size [ 1735.140580][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5570 ms [ 1735.148611][ C0] lec:lec_tx_timeout: lec0 [ 1735.407799][ T3642] veth0_vlan: entered promiscuous mode [ 1735.458449][ T3642] veth1_vlan: entered promiscuous mode [ 1735.495787][ T955] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1735.540138][ T4040] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 1735.547248][ T4040] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1735.557662][ T4040] vhci_hcd vhci_hcd.0: Device attached [ 1735.568309][ T4042] vhci_hcd: connection closed [ 1735.573260][ T66] vhci_hcd vhci_hcd.8: stop threads [ 1735.627160][ T66] vhci_hcd vhci_hcd.8: release socket [ 1735.642712][ T66] vhci_hcd vhci_hcd.8: disconnect device [ 1735.644477][ T3642] veth0_macvtap: entered promiscuous mode [ 1735.716210][ T3642] veth1_macvtap: entered promiscuous mode [ 1735.840053][ T4048] tipc: Enabling of bearer rejected, failed to enable media [ 1735.904835][ T3642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1735.961017][ T3642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1736.046404][ T155] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1736.085286][ T155] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.925739][ T155] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.961133][ T155] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.136774][ T6072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1740.192554][ T6072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1740.367786][ T6072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1740.557709][ T6072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1745.461921][T17402] lec:lec_start_xmit: lec0:No lecd attached [ 1746.242491][T16794] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1746.270758][T16794] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1746.290893][T16794] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1746.328244][T16794] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1746.341485][T16794] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1746.482349][ T4128] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1746.575764][ T4127] tipc: Enabled bearer , priority 0 [ 1747.175300][ T4128] syzkaller0: entered promiscuous mode [ 1747.191058][ T4128] syzkaller0: entered allmulticast mode [ 1747.512800][ T4127] tipc: Resetting bearer [ 1747.559544][ T4125] tipc: Resetting bearer [ 1747.742818][ T4125] tipc: Disabling bearer [ 1749.035588][T16794] Bluetooth: hci5: command tx timeout [ 1751.085808][T16794] Bluetooth: hci5: command tx timeout [ 1751.140404][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5680 ms [ 1751.148417][ C0] lec:lec_tx_timeout: lec0 [ 1751.914720][T32456] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1752.044715][T29223] tipc: Node number set to 4169262943 [ 1752.359180][T32456] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1752.590727][T32456] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1753.167123][T16794] Bluetooth: hci5: command tx timeout [ 1754.520471][T32456] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1754.765239][ T4208] loop7: detected capacity change from 0 to 512 [ 1756.765052][T16794] Bluetooth: hci5: command tx timeout [ 1756.856704][ T4212] tipc: Enabled bearer , priority 0 [ 1756.874056][ T4208] EXT4-fs warning (device loop7): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop7. [ 1758.099409][ T4202] tipc: Resetting bearer [ 1758.245631][ T4215] syzkaller0: entered promiscuous mode [ 1758.328573][ T4215] syzkaller0: entered allmulticast mode [ 1758.402900][ T4198] tipc: Resetting bearer [ 1758.638371][ T4198] tipc: Disabling bearer [ 1759.188859][ T4122] chnl_net:caif_netlink_parms(): no params data found [ 1759.611977][T32456] bridge_slave_1: left allmulticast mode [ 1759.638770][T32456] bridge_slave_1: left promiscuous mode [ 1759.644582][T32456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1759.702854][T32456] bridge_slave_0: left allmulticast mode [ 1759.729486][T32456] bridge_slave_0: left promiscuous mode [ 1759.741596][T32456] bridge0: port 1(bridge_slave_0) entered disabled state [ 1759.782179][ T24] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 1759.956949][ T24] usb 3-1: config 0 has an invalid interface number: 128 but max is 2 [ 1759.984142][ T24] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 1760.006772][ T24] usb 3-1: config 0 has no interface number 1 [ 1760.026892][ T24] usb 3-1: config 0 has no interface number 2 [ 1760.042653][ T24] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1760.070473][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.100844][ T24] usb 3-1: config 0 descriptor?? [ 1760.340303][ T24] qcserial 3-1:0.128: Qualcomm USB modem converter detected [ 1760.406475][ T4256] loop1: detected capacity change from 0 to 8192 [ 1760.418677][T32456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1760.436711][T32456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1760.459428][T32456] bond0 (unregistering): Released all slaves [ 1760.549047][T29223] usb 3-1: USB disconnect, device number 8 [ 1760.579686][T29223] qcserial 3-1:0.128: device disconnected [ 1760.640406][T32456] tipc: Left network mode [ 1760.678482][ T4122] bridge0: port 1(bridge_slave_0) entered blocking state [ 1760.717308][ T4122] bridge0: port 1(bridge_slave_0) entered disabled state [ 1760.737997][ T4122] bridge_slave_0: entered allmulticast mode [ 1760.760597][ T4122] bridge_slave_0: entered promiscuous mode [ 1760.793565][ T4122] bridge0: port 2(bridge_slave_1) entered blocking state [ 1760.800709][ T4122] bridge0: port 2(bridge_slave_1) entered disabled state [ 1760.864524][ T4122] bridge_slave_1: entered allmulticast mode [ 1760.874196][ T4122] bridge_slave_1: entered promiscuous mode [ 1760.887115][ T4268] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9143'. [ 1760.906966][ T4268] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1761.922973][T16794] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 1761.930181][T16794] Bluetooth: hci0: command 0x0406 tx timeout [ 1762.319236][ T4122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1762.331941][ T4122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1763.094251][ T4122] team0: Port device team_slave_0 added [ 1763.163513][ T4122] team0: Port device team_slave_1 added [ 1765.220122][ T4316] tipc: Enabled bearer , priority 0 [ 1766.470462][ T4295] tipc: Disabling bearer [ 1766.646320][T32456] hsr_slave_0: left promiscuous mode [ 1766.654412][T32456] hsr_slave_1: left promiscuous mode [ 1766.673336][T32456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1766.685284][T32456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1767.515444][T32456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1767.542302][T32456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1767.595271][T32456] veth1_macvtap: left promiscuous mode [ 1767.615947][T32456] veth0_macvtap: left promiscuous mode [ 1767.636699][T32456] veth1_vlan: left promiscuous mode [ 1767.654229][T32456] veth0_vlan: left promiscuous mode [ 1768.313478][T32456] team0 (unregistering): Port device team_slave_1 removed [ 1768.343892][T32456] team0 (unregistering): Port device team_slave_0 removed [ 1768.558961][T32456] team0 (unregistering): Port device dummy0 removed [ 1768.735921][ T4122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1768.748415][ T4122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1769.541698][ T4122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1769.558376][ T4122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1769.565456][ T4122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1769.591784][ T4122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1769.618232][ T4333] netlink: 'syz.1.9158': attribute type 12 has an invalid length. [ 1769.626243][ T4333] netlink: 'syz.1.9158': attribute type 29 has an invalid length. [ 1769.634058][ T4333] netlink: 148 bytes leftover after parsing attributes in process `syz.1.9158'. [ 1770.052134][ T4122] hsr_slave_0: entered promiscuous mode [ 1770.066882][ T4122] hsr_slave_1: entered promiscuous mode [ 1770.100408][ T4122] debugfs: 'hsr0' already exists in 'hsr' [ 1770.151235][ T4122] Cannot create hsr debugfs directory [ 1772.780311][T32456] IPVS: stop unused estimator thread 0... [ 1775.825174][ T4395] loop2: detected capacity change from 0 to 8192 [ 1776.329390][ T4409] loop2: detected capacity change from 0 to 128 [ 1777.556058][ T4122] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1777.568155][ T4409] vfat: Bad value for 'nonumtail' [ 1778.733277][ T4122] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1778.958175][ T4122] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1779.817511][ T4122] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1779.889497][ T4435] loop1: detected capacity change from 0 to 1024 [ 1781.667104][ T4435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1781.703088][ T4435] EXT4-fs error (device loop1): __ext4_iget:5378: inode #15: block 1803188595: comm syz.1.9182: invalid block [ 1781.728279][ T4435] EXT4-fs (loop1): shut down requested (0) [ 1781.812945][ T4122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1781.836627][ T4122] 8021q: adding VLAN 0 to HW filter on device team0 [ 1781.854757][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 1781.864290][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1781.911184][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 1781.918379][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1782.070161][ T4122] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1782.188976][ T955] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1786.483351][ T4122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1786.791127][ T4478] loop7: detected capacity change from 0 to 1024 [ 1786.836424][ T4478] hfsplus: Bad value for 'session' [ 1788.687402][ T4122] veth0_vlan: entered promiscuous mode [ 1788.735060][ T4122] veth1_vlan: entered promiscuous mode [ 1788.772875][ T4499] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9192'. [ 1788.824557][ T4499] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9192'. [ 1789.461430][ T4122] veth0_macvtap: entered promiscuous mode [ 1791.326380][ T4122] veth1_macvtap: entered promiscuous mode [ 1791.454174][ T4122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1792.635126][ T4122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1792.643035][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.649344][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.663076][ T1285] lec:lec_start_xmit: lec0:No lecd attached [ 1792.840281][T32454] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1792.876425][T32454] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1792.930968][T32454] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.073686][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1793.122909][T32454] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.133239][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1793.155274][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1793.178368][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1793.193025][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1793.598894][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1793.647033][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1793.935260][ T6099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1794.027556][ T6099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1794.110772][ T5837] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1794.131896][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: kworker/u9:8 Not tainted syzkaller #0 PREEMPT(full) [ 1794.131932][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1794.131950][ T5837] Workqueue: hci3 hci_rx_work [ 1794.131997][ T5837] Call Trace: [ 1794.132007][ T5837] [ 1794.132019][ T5837] dump_stack_lvl+0xe8/0x150 [ 1794.132058][ T5837] sysfs_create_dir_ns+0x271/0x2a0 [ 1794.132094][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1794.132128][ T5837] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1794.132164][ T5837] ? do_raw_spin_unlock+0xf5/0x210 [ 1794.132198][ T5837] kobject_add_internal+0x62b/0xd00 [ 1794.132249][ T5837] kobject_add+0x163/0x240 [ 1794.132276][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1794.132317][ T5837] ? __pfx_kobject_add+0x10/0x10 [ 1794.132346][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1794.132379][ T5837] ? _raw_spin_unlock+0x28/0x50 [ 1794.132414][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1794.132452][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1794.132484][ T5837] ? get_device_parent+0x366/0x3a0 [ 1794.132534][ T5837] device_add+0x408/0xb70 [ 1794.132583][ T5837] hci_conn_add_sysfs+0xd5/0x210 [ 1794.132629][ T5837] le_conn_complete_evt+0xf1d/0x1430 [ 1794.132664][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1794.132708][ T5837] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1794.132739][ T5837] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1794.132783][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1794.132819][ T5837] ? __pfx___mutex_lock+0x10/0x10 [ 1794.132846][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1794.132878][ T5837] ? skb_pull_data+0xfb/0x200 [ 1794.132913][ T5837] hci_le_conn_complete_evt+0x187/0x470 [ 1794.132956][ T5837] hci_event_packet+0x7af/0x12c0 [ 1794.133005][ T5837] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1794.133036][ T5837] ? __pfx_hci_event_packet+0x10/0x10 [ 1794.133087][ T5837] ? kcov_remote_start+0x49a/0x7a0 [ 1794.133129][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1794.133159][ T5837] ? hci_send_to_monitor+0xe2/0x590 [ 1794.133194][ T5837] hci_rx_work+0x3ee/0x1030 [ 1794.133244][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1794.133279][ T5837] ? process_scheduled_works+0xa25/0x1830 [ 1794.133315][ T5837] process_scheduled_works+0xb02/0x1830 [ 1794.133383][ T5837] ? __pfx_process_scheduled_works+0x10/0x10 [ 1794.133420][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1794.133451][ T5837] ? assign_work+0x3d5/0x5e0 [ 1794.133491][ T5837] worker_thread+0xa50/0xfc0 [ 1794.133546][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1794.133586][ T5837] kthread+0x388/0x470 [ 1794.133608][ T5837] ? __pfx_worker_thread+0x10/0x10 [ 1794.133636][ T5837] ? __pfx_kthread+0x10/0x10 [ 1794.133660][ T5837] ret_from_fork+0x51e/0xb90 [ 1794.133691][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1794.133719][ T5837] ? __pfx_ret_from_fork+0x10/0x10 [ 1794.133745][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1794.133771][ T5837] ? __switch_to+0xc7d/0x1450 [ 1794.133804][ T5837] ? __pfx_kthread+0x10/0x10 [ 1794.133829][ T5837] ret_from_fork_asm+0x1a/0x30 [ 1794.133881][ T5837] [ 1794.133911][ T5837] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1794.450128][ T5837] Bluetooth: hci3: failed to register connection device [ 1795.368263][ T5837] Bluetooth: hci4: command tx timeout [ 1795.382832][ T4518] chnl_net:caif_netlink_parms(): no params data found [ 1796.681795][ T4570] loop9: detected capacity change from 0 to 8 [ 1796.763688][ T4570] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1796.843706][ T4570] SQUASHFS error: Failed to read block 0x91: -5 [ 1797.907486][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5130 ms [ 1797.915520][ C0] lec:lec_tx_timeout: lec0 [ 1798.523979][ T5837] Bluetooth: hci4: command tx timeout [ 1798.646979][ T4570] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1798.654409][ T4570] SQUASHFS error: Unable to read inode 0x11f [ 1801.302748][ T5837] Bluetooth: hci4: command tx timeout [ 1801.308261][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 1802.559805][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1802.559828][ T30] audit: type=1326 audit(2000000169.688:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4598 comm="syz.2.9211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e899c629 code=0x7ffc0000 [ 1802.622936][ T30] audit: type=1326 audit(2000000169.688:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4598 comm="syz.2.9211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e899c629 code=0x7ffc0000 [ 1802.773878][ T30] audit: type=1326 audit(2000000169.697:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4598 comm="syz.2.9211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb3e899c629 code=0x7ffc0000 [ 1802.916364][ T30] audit: type=1326 audit(2000000169.717:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4598 comm="syz.2.9211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb3e899c392 code=0x7ffc0000 [ 1802.997794][ T30] audit: type=1326 audit(2000000169.717:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4598 comm="syz.2.9211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb3e899c392 code=0x7ffc0000 [ 1803.036430][T32454] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.140477][ T30] audit: type=1326 audit(2000000169.727:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4598 comm="syz.2.9211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e899c629 code=0x7ffc0000 [ 1803.266373][ T30] audit: type=1326 audit(2000000169.727:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4598 comm="syz.2.9211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e899c629 code=0x7ffc0000 [ 1803.359230][ T4518] bridge0: port 1(bridge_slave_0) entered blocking state [ 1803.396531][T16794] Bluetooth: hci4: command tx timeout [ 1803.402079][ T30] audit: type=1326 audit(2000000169.805:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4598 comm="syz.2.9211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb3e899c629 code=0x7ffc0000 [ 1803.455177][ T4518] bridge0: port 1(bridge_slave_0) entered disabled state [ 1803.462468][ T30] audit: type=1326 audit(2000000169.932:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4598 comm="syz.2.9211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e899c629 code=0x7ffc0000 [ 1803.485020][ T30] audit: type=1326 audit(2000000169.932:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4598 comm="syz.2.9211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e899c629 code=0x7ffc0000 [ 1803.537844][ T4518] bridge_slave_0: entered allmulticast mode [ 1803.545798][ T4518] bridge_slave_0: entered promiscuous mode [ 1804.895288][T32454] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1805.062265][ T4518] bridge0: port 2(bridge_slave_1) entered blocking state [ 1805.099288][ T4518] bridge0: port 2(bridge_slave_1) entered disabled state [ 1805.136813][ T4518] bridge_slave_1: entered allmulticast mode [ 1805.176680][ T4518] bridge_slave_1: entered promiscuous mode [ 1805.538613][ T4631] tap0: tun_chr_ioctl cmd 1074025677 [ 1805.571791][ T4631] tap0: linktype set to 823 [ 1805.896481][T32454] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1806.365938][T32454] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1806.570536][ T4518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1806.661363][ T4518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1806.699917][ T4657] loop9: detected capacity change from 0 to 512 [ 1808.722502][ T4518] team0: Port device team_slave_0 added [ 1809.161779][ T4518] team0: Port device team_slave_1 added [ 1809.284976][ T4657] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1809.396357][ T4657] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1809.502759][ T4518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1809.646087][ T4518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1809.748577][T17402] lec:lec_start_xmit: lec0:No lecd attached [ 1809.809841][ T4518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1809.824220][ T4676] loop7: detected capacity change from 0 to 8192 [ 1809.869336][ T4518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1809.929846][ T4518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1810.026976][T16794] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1810.037678][T16794] CPU: 1 UID: 0 PID: 16794 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 1810.037703][T16794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1810.037717][T16794] Workqueue: hci0 hci_rx_work [ 1810.037751][T16794] Call Trace: [ 1810.037762][T16794] [ 1810.037771][T16794] dump_stack_lvl+0xe8/0x150 [ 1810.037802][T16794] sysfs_create_dir_ns+0x271/0x2a0 [ 1810.037828][T16794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1810.037853][T16794] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1810.037880][T16794] ? do_raw_spin_unlock+0xf5/0x210 [ 1810.037905][T16794] kobject_add_internal+0x62b/0xd00 [ 1810.037935][T16794] kobject_add+0x163/0x240 [ 1810.037954][T16794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1810.037981][T16794] ? __pfx_kobject_add+0x10/0x10 [ 1810.038001][T16794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1810.038023][T16794] ? _raw_spin_unlock+0x28/0x50 [ 1810.038048][T16794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1810.038073][T16794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1810.038095][T16794] ? get_device_parent+0x366/0x3a0 [ 1810.038129][T16794] device_add+0x408/0xb70 [ 1810.038162][T16794] hci_conn_add_sysfs+0xd5/0x210 [ 1810.038204][T16794] le_conn_complete_evt+0xf1d/0x1430 [ 1810.038228][T16794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1810.038259][T16794] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1810.038280][T16794] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1810.038311][T16794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1810.038336][T16794] ? __pfx___mutex_lock+0x10/0x10 [ 1810.038354][T16794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1810.038376][T16794] ? skb_pull_data+0xfb/0x200 [ 1810.038400][T16794] hci_le_conn_complete_evt+0x187/0x470 [ 1810.038429][T16794] hci_event_packet+0x7af/0x12c0 [ 1810.038464][T16794] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1810.038486][T16794] ? __pfx_hci_event_packet+0x10/0x10 [ 1810.038524][T16794] ? kcov_remote_start+0x49a/0x7a0 [ 1810.038555][T16794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1810.038577][T16794] ? hci_send_to_monitor+0xe2/0x590 [ 1810.038604][T16794] hci_rx_work+0x3ee/0x1030 [ 1810.038636][T16794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1810.038662][T16794] ? process_scheduled_works+0xa25/0x1830 [ 1810.038690][T16794] process_scheduled_works+0xb02/0x1830 [ 1810.038741][T16794] ? __pfx_process_scheduled_works+0x10/0x10 [ 1810.038771][T16794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1810.038794][T16794] ? assign_work+0x3d5/0x5e0 [ 1810.038824][T16794] worker_thread+0xa50/0xfc0 [ 1810.038865][T16794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1810.038895][T16794] kthread+0x388/0x470 [ 1810.038915][T16794] ? __pfx_worker_thread+0x10/0x10 [ 1810.038939][T16794] ? __pfx_kthread+0x10/0x10 [ 1810.038960][T16794] ret_from_fork+0x51e/0xb90 [ 1810.038988][T16794] ? __pfx_ret_from_fork+0x10/0x10 [ 1810.039011][T16794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1810.039034][T16794] ? __switch_to+0xc7d/0x1450 [ 1810.039060][T16794] ? __pfx_kthread+0x10/0x10 [ 1810.039080][T16794] ret_from_fork_asm+0x1a/0x30 [ 1810.039124][T16794] [ 1810.039291][T16794] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1810.349465][T16794] Bluetooth: hci0: failed to register connection device [ 1810.374194][ T4518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1810.397325][ T4122] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1813.329551][ T4518] hsr_slave_0: entered promiscuous mode [ 1813.370386][ T4518] hsr_slave_1: entered promiscuous mode [ 1813.395702][ T4518] debugfs: 'hsr0' already exists in 'hsr' [ 1813.417883][ T4518] Cannot create hsr debugfs directory [ 1813.914531][T32454] bridge_slave_1: left allmulticast mode [ 1813.974369][T32454] bridge_slave_1: left promiscuous mode [ 1814.023054][T32454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1815.297452][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5410 ms [ 1815.305490][ C0] lec:lec_tx_timeout: lec0 [ 1815.773360][T32454] bridge_slave_0: left allmulticast mode [ 1815.798606][T32454] bridge_slave_0: left promiscuous mode [ 1817.039212][T32454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1817.261340][T16794] Bluetooth: hci0: command 0x0406 tx timeout [ 1817.522007][ T5837] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1817.535595][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: kworker/u9:8 Not tainted syzkaller #0 PREEMPT(full) [ 1817.535636][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1817.535657][ T5837] Workqueue: hci5 hci_rx_work [ 1817.535710][ T5837] Call Trace: [ 1817.535720][ T5837] [ 1817.535731][ T5837] dump_stack_lvl+0xe8/0x150 [ 1817.535776][ T5837] sysfs_create_dir_ns+0x271/0x2a0 [ 1817.535817][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1817.535854][ T5837] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1817.535901][ T5837] ? do_raw_spin_unlock+0xf5/0x210 [ 1817.535942][ T5837] kobject_add_internal+0x62b/0xd00 [ 1817.535987][ T5837] kobject_add+0x163/0x240 [ 1817.536018][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1817.536062][ T5837] ? __pfx_kobject_add+0x10/0x10 [ 1817.536096][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1817.536131][ T5837] ? _raw_spin_unlock+0x28/0x50 [ 1817.536171][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1817.536219][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1817.536256][ T5837] ? get_device_parent+0x366/0x3a0 [ 1817.536311][ T5837] device_add+0x408/0xb70 [ 1817.536366][ T5837] hci_conn_add_sysfs+0xd5/0x210 [ 1817.536418][ T5837] le_conn_complete_evt+0xf1d/0x1430 [ 1817.536455][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1817.536506][ T5837] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1817.536541][ T5837] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1817.536592][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1817.536633][ T5837] ? __pfx___mutex_lock+0x10/0x10 [ 1817.536663][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1817.536699][ T5837] ? skb_pull_data+0xfb/0x200 [ 1817.536738][ T5837] hci_le_conn_complete_evt+0x187/0x470 [ 1817.536786][ T5837] hci_event_packet+0x7af/0x12c0 [ 1817.536844][ T5837] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1817.536880][ T5837] ? __pfx_hci_event_packet+0x10/0x10 [ 1817.536935][ T5837] ? kcov_remote_start+0x49a/0x7a0 [ 1817.536978][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1817.537008][ T5837] ? hci_send_to_monitor+0xe2/0x590 [ 1817.537044][ T5837] hci_rx_work+0x3ee/0x1030 [ 1817.537087][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1817.537122][ T5837] ? process_scheduled_works+0xa25/0x1830 [ 1817.537160][ T5837] process_scheduled_works+0xb02/0x1830 [ 1817.537241][ T5837] ? __pfx_process_scheduled_works+0x10/0x10 [ 1817.537291][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1817.537328][ T5837] ? assign_work+0x3d5/0x5e0 [ 1817.537377][ T5837] worker_thread+0xa50/0xfc0 [ 1817.537444][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1817.537495][ T5837] kthread+0x388/0x470 [ 1817.537525][ T5837] ? __pfx_worker_thread+0x10/0x10 [ 1817.537558][ T5837] ? __pfx_kthread+0x10/0x10 [ 1817.537584][ T5837] ret_from_fork+0x51e/0xb90 [ 1817.537619][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1817.537650][ T5837] ? __pfx_ret_from_fork+0x10/0x10 [ 1817.537680][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1817.537709][ T5837] ? __switch_to+0xc7d/0x1450 [ 1817.537745][ T5837] ? __pfx_kthread+0x10/0x10 [ 1817.537770][ T5837] ret_from_fork_asm+0x1a/0x30 [ 1817.537830][ T5837] [ 1817.537868][ T5837] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1817.675754][ T4751] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1817.863672][ T5837] Bluetooth: hci5: failed to register connection device [ 1819.365283][T32454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1819.402701][T32454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1819.425278][T32454] bond0 (unregistering): Released all slaves [ 1820.142760][T32454] tipc: Left network mode [ 1820.872635][ T5837] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 1820.883951][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: kworker/u9:8 Not tainted syzkaller #0 PREEMPT(full) [ 1820.883986][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1820.884005][ T5837] Workqueue: hci6 hci_rx_work [ 1820.884050][ T5837] Call Trace: [ 1820.884061][ T5837] [ 1820.884071][ T5837] dump_stack_lvl+0xe8/0x150 [ 1820.884111][ T5837] sysfs_create_dir_ns+0x271/0x2a0 [ 1820.884146][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1820.884180][ T5837] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1820.884227][ T5837] ? do_raw_spin_unlock+0xf5/0x210 [ 1820.884261][ T5837] kobject_add_internal+0x62b/0xd00 [ 1820.884301][ T5837] kobject_add+0x163/0x240 [ 1820.884327][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1820.884364][ T5837] ? __pfx_kobject_add+0x10/0x10 [ 1820.884392][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1820.884422][ T5837] ? _raw_spin_unlock+0x28/0x50 [ 1820.884455][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1820.884490][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1820.884520][ T5837] ? get_device_parent+0x366/0x3a0 [ 1820.884566][ T5837] device_add+0x408/0xb70 [ 1820.884612][ T5837] hci_conn_add_sysfs+0xd5/0x210 [ 1820.884655][ T5837] le_conn_complete_evt+0xf1d/0x1430 [ 1820.884687][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1820.884727][ T5837] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1820.884752][ T5837] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1820.884782][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1820.884807][ T5837] ? __pfx___mutex_lock+0x10/0x10 [ 1820.884825][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1820.884848][ T5837] ? skb_pull_data+0xfb/0x200 [ 1820.884872][ T5837] hci_le_conn_complete_evt+0x187/0x470 [ 1820.884901][ T5837] hci_event_packet+0x7af/0x12c0 [ 1820.884936][ T5837] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1820.884960][ T5837] ? __pfx_hci_event_packet+0x10/0x10 [ 1820.884994][ T5837] ? kcov_remote_start+0x49a/0x7a0 [ 1820.885025][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1820.885047][ T5837] ? hci_send_to_monitor+0xe2/0x590 [ 1820.885075][ T5837] hci_rx_work+0x3ee/0x1030 [ 1820.885106][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1820.885133][ T5837] ? process_scheduled_works+0xa25/0x1830 [ 1820.885161][ T5837] process_scheduled_works+0xb02/0x1830 [ 1820.885216][ T5837] ? __pfx_process_scheduled_works+0x10/0x10 [ 1820.885246][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1820.885269][ T5837] ? assign_work+0x3d5/0x5e0 [ 1820.885298][ T5837] worker_thread+0xa50/0xfc0 [ 1820.885340][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1820.885370][ T5837] kthread+0x388/0x470 [ 1820.885390][ T5837] ? __pfx_worker_thread+0x10/0x10 [ 1820.885414][ T5837] ? __pfx_kthread+0x10/0x10 [ 1820.885434][ T5837] ret_from_fork+0x51e/0xb90 [ 1820.885460][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1820.885484][ T5837] ? __pfx_ret_from_fork+0x10/0x10 [ 1820.885507][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1820.885529][ T5837] ? __switch_to+0xc7d/0x1450 [ 1820.885556][ T5837] ? __pfx_kthread+0x10/0x10 [ 1820.885576][ T5837] ret_from_fork_asm+0x1a/0x30 [ 1820.885620][ T5837] [ 1820.885647][ T5837] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1821.198779][ T5837] Bluetooth: hci6: failed to register connection device [ 1824.066580][T32454] hsr_slave_0: left promiscuous mode [ 1824.384909][T32454] hsr_slave_1: left promiscuous mode [ 1824.391105][T32454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1824.424428][T32454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1824.517777][T32454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1824.525217][T32454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1824.644938][T32454] veth1_macvtap: left promiscuous mode [ 1824.660847][ T5904] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1824.669746][ T4836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9269'. [ 1824.678783][T32454] veth0_macvtap: left promiscuous mode [ 1824.695442][T32454] veth1_vlan: left promiscuous mode [ 1824.715823][T32454] veth0_vlan: left promiscuous mode [ 1824.716986][ T5837] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1824.734782][ T4836] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9269'. [ 1824.845062][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 1824.857595][ T5904] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1824.880004][ T5904] usb 3-1: config 179 has no interface number 0 [ 1824.894700][ T5904] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1824.902853][ T4825] loop9: detected capacity change from 0 to 8192 [ 1824.912741][ T4839] Bluetooth: hci5: command 0x0406 tx timeout [ 1824.914855][ T5904] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1824.955804][ T5904] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1825.000313][ T5904] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1825.046777][ T5904] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1825.086960][ T5904] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1825.125957][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.173227][ T4829] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1826.567190][T32454] team0 (unregistering): Port device team_slave_1 removed [ 1826.873041][T29223] usb 3-1: USB disconnect, device number 9 [ 1826.873081][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1826.888627][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1826.935654][T32454] team0 (unregistering): Port device team_slave_0 removed [ 1835.631094][ T4839] Bluetooth: hci3: command 0x0406 tx timeout [ 1839.120176][ T4902] loop2: detected capacity change from 0 to 256 [ 1839.224148][ T4889] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1839.747142][ T4518] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1839.860608][ T4518] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1839.931045][ T4518] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1840.062513][ T4518] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1841.345946][ T4518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1841.401985][ T4518] 8021q: adding VLAN 0 to HW filter on device team0 [ 1841.463241][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 1841.470436][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1841.582951][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 1841.590095][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1842.194370][ T4944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9287'. [ 1842.224343][ T4944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9287'. [ 1842.473209][ T4946] loop2: detected capacity change from 0 to 8192 [ 1842.860796][ T4518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1844.808700][ T4965] vcan0: tx address claim with dest, not broadcast [ 1847.393471][ T4518] veth0_vlan: entered promiscuous mode [ 1847.465229][ T4518] veth1_vlan: entered promiscuous mode [ 1847.560868][ T4518] veth0_macvtap: entered promiscuous mode [ 1847.629083][ T4518] veth1_macvtap: entered promiscuous mode [ 1847.742191][ T4518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1847.797490][ T4518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1847.862133][T32456] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1847.944053][T32456] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1847.989152][T32456] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1848.011119][T32456] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1849.418773][ T4993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1849.608538][ T127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1849.674966][ T127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1849.677037][ T4999] input: syz1 as /devices/virtual/input/input84 [ 1849.817401][ T127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1849.825277][ T127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1854.853274][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1854.874016][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.884663][ T1285] lec:lec_start_xmit: lec0:No lecd attached [ 1855.044939][ T5022] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1859.093026][ T5041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1859.986362][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5080 ms [ 1859.994400][ C0] lec:lec_tx_timeout: lec0 [ 1861.538716][ T5050] loop6: detected capacity change from 0 to 512 [ 1861.631454][ T5050] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.9317: inode has both inline data and extents flags [ 1861.655594][ T5050] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1861.671570][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1861.687174][ C0] EXT4-fs (loop6): initial error at time 2000000230: ext4_orphan_get:1391: inode 15 [ 1861.696643][ C0] EXT4-fs (loop6): last error at time 2000000230: ext4_orphan_get:1391: inode 15 [ 1861.709369][ T5050] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.9317: couldn't read orphan inode 15 (err -117) [ 1861.790906][ T5050] loop6: lost filesystem error report for type 5 error -117 [ 1861.793642][ T5050] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1862.231562][ T4518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1865.539277][ T4839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1865.549150][ T4839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1865.559911][ T4839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1865.569875][ T4839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1865.577860][ T4839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1868.088846][ T4839] Bluetooth: hci2: command tx timeout [ 1870.172088][T16794] Bluetooth: hci2: command tx timeout [ 1870.295769][ T5110] vcan0: tx address claim with dest, not broadcast [ 1870.431094][ T5082] chnl_net:caif_netlink_parms(): no params data found [ 1870.572035][ T5115] loop7: detected capacity change from 0 to 512 [ 1870.640364][ T5115] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 1871.344874][ T3644] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1871.357507][ T3644] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1871.427034][ T3644] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1871.440551][ T3644] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1871.448882][ T3644] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1871.858831][ T5123] loop7: detected capacity change from 0 to 4096 [ 1871.925540][ T5123] EXT4-fs: Ignoring removed mblk_io_submit option [ 1871.941902][ T3644] Bluetooth: hci5: command 0x0406 tx timeout [ 1872.031055][ T5123] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1872.238590][ T5123] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1872.263552][ T4839] Bluetooth: hci2: command tx timeout [ 1872.350153][ T5082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1872.395612][ T5082] bridge0: port 1(bridge_slave_0) entered disabled state [ 1872.402888][ T5082] bridge_slave_0: entered allmulticast mode [ 1872.485458][ T5082] bridge_slave_0: entered promiscuous mode [ 1872.512883][ T5082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1872.537839][ T5082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1872.545111][ T5082] bridge_slave_1: entered allmulticast mode [ 1872.565013][ T3642] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1872.617709][ T5082] bridge_slave_1: entered promiscuous mode [ 1873.274141][ T3644] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1873.286912][ T3644] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1873.294957][ T3644] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1873.320667][ T3644] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1873.346854][ T3644] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1873.461044][ T5082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1873.539953][ T4839] Bluetooth: hci6: command tx timeout [ 1873.599844][ T5082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1873.693171][ T5161] loop9: detected capacity change from 0 to 512 [ 1873.767459][ T5161] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 1875.565795][ T4839] Bluetooth: hci2: command tx timeout [ 1875.566198][ T3644] Bluetooth: hci7: command tx timeout [ 1875.619700][ T3644] Bluetooth: hci6: command tx timeout [ 1875.652767][ T5161] EXT4-fs (loop9): failed to initialize system zone (-117) [ 1875.730043][ T5161] EXT4-fs (loop9): mount failed [ 1877.431494][ T5082] team0: Port device team_slave_0 added [ 1877.503999][ T5082] team0: Port device team_slave_1 added [ 1877.595592][ T5176] netlink: 'syz.6.9327': attribute type 12 has an invalid length. [ 1877.712166][ T3644] Bluetooth: hci7: command tx timeout [ 1877.712205][ T4839] Bluetooth: hci6: command tx timeout [ 1877.824681][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1877.831656][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1877.901902][ T5082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1877.947537][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1877.962460][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1878.031368][ T5082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1879.781564][ T5082] hsr_slave_0: entered promiscuous mode [ 1879.788267][ T4839] Bluetooth: hci6: command tx timeout [ 1879.793679][ T4839] Bluetooth: hci7: command tx timeout [ 1879.826451][ T5082] hsr_slave_1: entered promiscuous mode [ 1879.994751][ T5116] chnl_net:caif_netlink_parms(): no params data found [ 1880.616901][ T6077] veth0_to_bond: left allmulticast mode [ 1880.633000][ T6077] veth0_to_bond: left promiscuous mode [ 1880.654113][ T6077] bridge0: port 3(veth0_to_bond) entered disabled state [ 1880.698128][ T6077] bridge_slave_1: left allmulticast mode [ 1880.714165][ T6077] bridge_slave_1: left promiscuous mode [ 1880.738377][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state [ 1880.762163][ T6077] bridge_slave_0: left allmulticast mode [ 1880.775155][ T6077] bridge_slave_0: left promiscuous mode [ 1880.786764][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state [ 1881.886231][ T4839] Bluetooth: hci7: command tx timeout [ 1882.149597][ T5226] loop7: detected capacity change from 0 to 512 [ 1882.182584][ T5226] EXT4-fs (loop7): blocks per group (255) and clusters per group (8192) inconsistent [ 1882.190896][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1882.190914][ T30] audit: type=1326 audit(2000000250.960:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5228 comm="syz.9.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee519c629 code=0x7ffc0000 [ 1882.289558][ T30] audit: type=1326 audit(2000000250.960:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5228 comm="syz.9.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee519c629 code=0x7ffc0000 [ 1882.373399][ T30] audit: type=1326 audit(2000000250.960:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5228 comm="syz.9.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee519c629 code=0x7ffc0000 [ 1882.452250][ T30] audit: type=1326 audit(2000000251.000:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5228 comm="syz.9.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee519c629 code=0x7ffc0000 [ 1882.524054][ T30] audit: type=1326 audit(2000000251.000:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5228 comm="syz.9.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1ee519c629 code=0x7ffc0000 [ 1884.518218][ T30] audit: type=1326 audit(2000000251.000:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5228 comm="syz.9.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee519c629 code=0x7ffc0000 [ 1884.578258][ T30] audit: type=1326 audit(2000000251.000:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5228 comm="syz.9.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee519c629 code=0x7ffc0000 [ 1884.603234][ T30] audit: type=1326 audit(2000000251.000:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5228 comm="syz.9.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee519c629 code=0x7ffc0000 [ 1884.626011][ T30] audit: type=1326 audit(2000000251.000:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5228 comm="syz.9.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee519c629 code=0x7ffc0000 [ 1884.659136][ T30] audit: type=1326 audit(2000000251.010:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5228 comm="syz.9.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f1ee519c629 code=0x7ffc0000 [ 1884.716764][ T6077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1884.740932][ T6077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1884.766472][ T6077] bond0 (unregistering): Released all slaves [ 1884.793705][ T6077] bond1 (unregistering): Released all slaves [ 1884.836689][ T6077] bond2 (unregistering): Released all slaves [ 1884.875621][ T6077] bond3 (unregistering): Released all slaves [ 1884.929058][ T6077] bond4 (unregistering): (slave dummy0): Releasing active interface [ 1884.955072][ T6077] bond4 (unregistering): Released all slaves [ 1888.274874][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1888.325272][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state [ 1888.351182][ T5116] bridge_slave_0: entered allmulticast mode [ 1888.364231][ T5116] bridge_slave_0: entered promiscuous mode [ 1888.393419][ T5151] chnl_net:caif_netlink_parms(): no params data found [ 1888.441874][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1888.449049][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1888.464101][ T5116] bridge_slave_1: entered allmulticast mode [ 1888.472342][ T5116] bridge_slave_1: entered promiscuous mode [ 1888.487910][ T6077] hsr_slave_0: left promiscuous mode [ 1888.494044][ T6077] hsr_slave_1: left promiscuous mode [ 1888.500906][ T6077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1888.512085][ T6077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1888.535832][ T5283] loop6: detected capacity change from 0 to 1024 [ 1889.081156][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 1889.081213][ T30] audit: type=1800 audit(2000000257.786:239): pid=5287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.9353" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 1891.290540][ T6077] team0 (unregistering): Port device team_slave_1 removed [ 1891.356372][ T6077] team0 (unregistering): Port device team_slave_0 removed [ 1892.001120][ T5116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1892.055500][ T5116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1892.568372][ T5116] team0: Port device team_slave_0 added [ 1893.218751][ T5116] team0: Port device team_slave_1 added [ 1893.379400][ T5340] loop6: detected capacity change from 0 to 512 [ 1893.782617][ T5340] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 1893.801772][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1893.811883][ T5151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1893.888139][ T5151] bridge_slave_0: entered allmulticast mode [ 1893.929367][ T5151] bridge_slave_0: entered promiscuous mode [ 1894.251131][ T5348] loop9: detected capacity change from 0 to 4096 [ 1894.339974][ T5348] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1894.426977][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1894.452122][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1894.528460][ T4122] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1894.533405][ T5116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1894.558951][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1894.573665][ T5151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1894.581299][ T5151] bridge_slave_1: entered allmulticast mode [ 1894.637729][ T5151] bridge_slave_1: entered promiscuous mode [ 1894.667510][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1894.717320][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1896.339152][ T5116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1896.656047][ T5151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1896.697582][ T5151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1896.881498][ T5116] hsr_slave_0: entered promiscuous mode [ 1896.893400][ T5116] hsr_slave_1: entered promiscuous mode [ 1896.906023][ T5116] debugfs: 'hsr0' already exists in 'hsr' [ 1896.911906][ T5116] Cannot create hsr debugfs directory [ 1899.336488][ T5151] team0: Port device team_slave_0 added [ 1899.396772][ T5151] team0: Port device team_slave_1 added [ 1901.158418][ T3644] Bluetooth: hci3: command 0x0406 tx timeout [ 1901.629701][ T5151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1901.656364][ T5151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1901.745667][ T5151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1901.857327][ T5151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1901.865765][ T5398] loop9: detected capacity change from 0 to 2048 [ 1901.881192][ T5151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1901.957005][ T5398] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1901.985585][ T5151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1901.996631][ T5398] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 1902.004399][ T5398] UDF-fs: Scanning with blocksize 512 failed [ 1902.064305][ T5082] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1902.089059][ T5398] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1902.260327][ T5082] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1902.313479][ T5082] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1904.578282][ T5151] hsr_slave_0: entered promiscuous mode [ 1904.595202][ T5151] hsr_slave_1: entered promiscuous mode [ 1904.605724][ T5151] debugfs: 'hsr0' already exists in 'hsr' [ 1904.617576][ T5151] Cannot create hsr debugfs directory [ 1904.633607][ T5082] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1904.657283][ T5416] loop9: detected capacity change from 0 to 4096 [ 1904.731084][ T5416] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1905.988019][ T4122] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1910.034429][ T6077] bridge_slave_1: left allmulticast mode [ 1910.041666][ T6077] bridge_slave_1: left promiscuous mode [ 1910.060301][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state [ 1910.099259][ T6077] bridge_slave_0: left allmulticast mode [ 1910.104932][ T6077] bridge_slave_0: left promiscuous mode [ 1910.127471][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state [ 1911.702863][ T6077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1911.769756][ T6077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1911.808302][ T6077] bond0 (unregistering): Released all slaves [ 1912.060968][ T6077] tipc: Left network mode [ 1912.569198][ T5082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1912.727871][ T5082] 8021q: adding VLAN 0 to HW filter on device team0 [ 1916.288926][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1916.295378][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1916.305728][ T1285] lec:lec_start_xmit: lec0:No lecd attached [ 1916.397991][ T6077] hsr_slave_0: left promiscuous mode [ 1916.501910][ T6077] hsr_slave_1: left promiscuous mode [ 1916.538362][ T6077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1916.559362][ T6077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1916.652883][ T5511] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1917.874324][ T6077] team0 (unregistering): Port device team_slave_1 removed [ 1917.901706][ T6077] team0 (unregistering): Port device team_slave_0 removed [ 1918.189476][ T5520] loop6: detected capacity change from 0 to 1024 [ 1918.283444][ T6082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1918.290631][ T6082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1918.334497][ T6082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1918.341718][ T6082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1918.352625][ T5116] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1918.362596][ T4839] Bluetooth: hci4: command 0x0406 tx timeout [ 1918.380672][ T5520] hfsplus: catalog searching failed [ 1918.413035][ T5116] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1920.169713][ T5116] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1920.298768][ T5116] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1921.269201][ T5116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1921.327564][ T5116] 8021q: adding VLAN 0 to HW filter on device team0 [ 1921.402808][T32454] bridge0: port 1(bridge_slave_0) entered blocking state [ 1921.410007][T32454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1921.464131][ T6072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1921.471373][ T6072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1921.780097][ T5082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1922.007484][ T5151] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1922.048514][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 1922.056564][ C0] lec:lec_tx_timeout: lec0 [ 1922.086814][ T5151] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1922.122328][ T5151] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1922.188580][ T5151] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1922.431526][ T5577] loop7: detected capacity change from 0 to 4096 [ 1922.501088][ T5577] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1922.602563][ T5116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1923.724450][ T3642] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1923.772686][ T5151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1923.923245][ T5151] 8021q: adding VLAN 0 to HW filter on device team0 [ 1924.035197][T32456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1924.042388][T32456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1924.100216][T32456] bridge0: port 2(bridge_slave_1) entered blocking state [ 1924.107377][T32456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1924.199067][ T5082] veth0_vlan: entered promiscuous mode [ 1924.293979][ T5082] veth1_vlan: entered promiscuous mode [ 1924.512138][ T5082] veth0_macvtap: entered promiscuous mode [ 1924.556114][ T5082] veth1_macvtap: entered promiscuous mode [ 1924.670201][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1924.720199][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1924.746634][ T5116] veth0_vlan: entered promiscuous mode [ 1924.779055][ T5151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1924.786895][ T6082] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1924.797272][ T6082] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1924.813195][ T5116] veth1_vlan: entered promiscuous mode [ 1924.822710][ T155] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1924.852104][ T155] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1924.983349][ T5116] veth0_macvtap: entered promiscuous mode [ 1924.992864][ T5151] veth0_vlan: entered promiscuous mode [ 1925.008101][ T5116] veth1_macvtap: entered promiscuous mode [ 1925.025601][ T5151] veth1_vlan: entered promiscuous mode [ 1925.057308][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1925.093613][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1925.152911][ T66] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1925.199616][ T66] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1925.231116][ T66] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1925.238420][ T5641] loop7: detected capacity change from 0 to 1024 [ 1925.283251][ T5151] veth0_macvtap: entered promiscuous mode [ 1925.296045][ T5641] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1925.329173][ T6082] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1925.352570][ T5151] veth1_macvtap: entered promiscuous mode [ 1925.375016][ T4839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1925.386841][ T4839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1925.395366][ T4839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1925.406270][ T4839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1925.415320][ T4839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1925.475643][ T5641] loop7: detected capacity change from 1024 to 64 [ 1925.492710][ T30] audit: type=1800 audit(2000000294.268:240): pid=5646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.9402" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1925.502955][ T5151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1925.525365][ T5646] syz.7.9402: attempt to access beyond end of device [ 1925.525365][ T5646] loop7: rw=2049, sector=226, nr_sectors = 2 limit=64 [ 1925.574600][ T5151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1925.595913][T32454] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1925.598759][ T5646] EXT4-fs warning (device loop7): ext4_end_bio:373: I/O error 10 writing to inode 15 starting block 113) [ 1925.606784][T32454] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1925.625422][ T5646] syz.7.9402: attempt to access beyond end of device [ 1925.625422][ T5646] loop7: rw=2049, sector=226, nr_sectors = 6 limit=64 [ 1925.661430][ T5646] EXT4-fs warning (device loop7): ext4_end_bio:373: I/O error 10 writing to inode 15 starting block 113) [ 1925.678522][ T5646] EXT4-fs (loop7): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -5) [ 1925.692489][ T5646] Buffer I/O error on device loop7, logical block 113 [ 1925.700099][ T5646] Buffer I/O error on device loop7, logical block 114 [ 1925.706865][ T5646] Buffer I/O error on device loop7, logical block 115 [ 1925.728766][T32454] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1925.742207][T32454] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1925.828773][ T5646] Buffer I/O error on device loop7, logical block 113 [ 1925.852875][ T5646] syz.7.9402: attempt to access beyond end of device [ 1925.852875][ T5646] loop7: rw=2049, sector=232, nr_sectors = 10 limit=64 [ 1925.898344][ T5646] EXT4-fs warning (device loop7): ext4_end_bio:373: I/O error 10 writing to inode 15 starting block 116) [ 1925.919960][ T5646] EXT4-fs (loop7): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -5) [ 1925.955748][ T5646] Buffer I/O error on device loop7, logical block 116 [ 1925.962633][ T5646] Buffer I/O error on device loop7, logical block 117 [ 1925.969389][ T5646] Buffer I/O error on device loop7, logical block 118 [ 1925.976141][ T5646] Buffer I/O error on device loop7, logical block 119 [ 1926.074084][ T5646] Buffer I/O error on device loop7, logical block 120 [ 1926.751153][ T3642] EXT4-fs warning (device loop7): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1926.806170][ T3642] EXT4-fs warning (device loop7): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1926.868911][ T3642] EXT4-fs warning (device loop7): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1926.883997][ T3642] EXT4-fs warning (device loop7): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1926.902108][ T3642] EXT4-fs warning (device loop7): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1926.927347][ T3642] EXT4-fs warning (device loop7): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1926.980007][ T3642] EXT4-fs warning (device loop7): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1927.224069][ T5644] chnl_net:caif_netlink_parms(): no params data found [ 1927.333224][ T5613] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1927.487467][T16794] Bluetooth: hci0: command tx timeout [ 1929.441770][ T5679] loop9: detected capacity change from 0 to 1024 [ 1929.479108][ T3642] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1929.521148][ T5679] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1929.560948][T16794] Bluetooth: hci0: command tx timeout [ 1929.573431][ T5679] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1929.650397][ T5642] kmmpd-loop7: attempt to access beyond end of device [ 1929.650397][ T5642] loop7: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 1929.678614][ T5642] Buffer I/O error on dev loop7, logical block 64, lost sync page write [ 1929.738493][ T5679] jbd2_journal_init_inode: Cannot locate journal superblock [ 1929.768128][ T5679] EXT4-fs (loop9): Could not load journal inode [ 1929.828719][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1929.843106][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1930.325861][T32454] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1930.825913][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state [ 1930.850734][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1930.886958][ T5644] bridge_slave_0: entered allmulticast mode [ 1930.904478][ T5644] bridge_slave_0: entered promiscuous mode [ 1930.932326][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state [ 1930.958738][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1930.966043][ T5644] bridge_slave_1: entered allmulticast mode [ 1930.991000][ T5644] bridge_slave_1: entered promiscuous mode [ 1931.101645][ T6072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1931.148148][ T6072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1931.281851][T32454] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1933.278640][T16794] Bluetooth: hci0: command tx timeout [ 1933.370418][ T4839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1933.391936][ T4839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1933.401319][ T4839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1933.427193][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1933.435288][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1933.441000][ T5710] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1933.490395][ T5710] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1933.508883][ T5710] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1933.525766][ T5710] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1933.539676][ T5710] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1935.508594][ T3644] Bluetooth: hci0: command tx timeout [ 1935.508647][ T5710] Bluetooth: hci1: command tx timeout [ 1935.590235][T32454] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1935.646390][ T5710] Bluetooth: hci2: command tx timeout [ 1935.739434][ T3644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1935.752836][ T5644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1935.773809][ T3644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1935.785580][ T3644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1935.818769][ T3644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1935.848816][ T3644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1936.040955][T32454] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1936.242918][ T5644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1936.387006][ T5644] team0: Port device team_slave_0 added [ 1936.542203][ T5644] team0: Port device team_slave_1 added [ 1936.721532][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1936.728492][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1936.798720][ T5644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1936.822649][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1936.850430][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1936.906122][ T30] audit: type=1326 audit(2000000305.678:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.9.9412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee519c629 code=0x7ffc0000 [ 1936.928624][ T5644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1937.004669][ T30] audit: type=1326 audit(2000000305.718:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.9.9412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee519c629 code=0x7ffc0000 [ 1937.084774][ T30] audit: type=1326 audit(2000000305.718:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.9.9412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee519c629 code=0x7ffc0000 [ 1937.133133][ T30] audit: type=1326 audit(2000000305.728:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.9.9412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee519c629 code=0x7ffc0000 [ 1937.304805][ T30] audit: type=1326 audit(2000000305.728:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.9.9412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f1ee519c629 code=0x7ffc0000 [ 1937.327534][ T30] audit: type=1326 audit(2000000305.728:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.9.9412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee519c629 code=0x7ffc0000 [ 1937.571293][ T5710] Bluetooth: hci1: command tx timeout [ 1937.726400][ T30] audit: type=1326 audit(2000000305.728:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.9.9412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee519c629 code=0x7ffc0000 [ 1937.793433][ T5710] Bluetooth: hci2: command tx timeout [ 1937.895747][ T5710] Bluetooth: hci3: command tx timeout [ 1938.006891][ T30] audit: type=1326 audit(2000000305.728:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.9.9412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee519c629 code=0x7ffc0000 [ 1938.208984][ T30] audit: type=1326 audit(2000000305.728:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.9.9412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee519c629 code=0x7ffc0000 [ 1938.276585][ T30] audit: type=1326 audit(2000000305.728:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.9.9412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f1ee519c629 code=0x7ffc0000 [ 1938.458393][ T5644] hsr_slave_0: entered promiscuous mode [ 1938.465680][ T5644] hsr_slave_1: entered promiscuous mode [ 1938.472714][ T5644] debugfs: 'hsr0' already exists in 'hsr' [ 1938.478548][ T5644] Cannot create hsr debugfs directory [ 1938.511733][T32454] bridge_slave_1: left allmulticast mode [ 1938.517470][T32454] bridge_slave_1: left promiscuous mode [ 1938.529059][T32454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1938.551095][T32454] bridge_slave_0: left allmulticast mode [ 1938.570155][T32454] bridge_slave_0: left promiscuous mode [ 1938.577875][T32454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1938.697273][ T5766] loop6: detected capacity change from 0 to 1024 [ 1938.737510][ T5766] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1938.835944][ T4518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1939.178239][T32454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1939.205874][T17402] lec:lec_start_xmit: lec0:No lecd attached [ 1939.228422][T32454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1939.270554][T32454] bond0 (unregistering): Released all slaves [ 1939.458765][ T5786] loop6: detected capacity change from 0 to 512 [ 1939.479806][ T5786] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1939.514446][ T5786] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1939.539999][ T5786] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 1939.550551][ T5786] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1939.638824][ T5710] Bluetooth: hci1: command tx timeout [ 1939.887487][ T5710] Bluetooth: hci2: command tx timeout [ 1940.042082][ T5710] Bluetooth: hci3: command tx timeout [ 1940.084242][ T4518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1940.175855][ T5791] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1941.558403][ T5747] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1942.054683][ T5710] Bluetooth: hci1: command tx timeout [ 1942.060199][ T3644] Bluetooth: hci2: command tx timeout [ 1942.118756][ T5710] Bluetooth: hci3: command tx timeout [ 1942.500150][T32454] hsr_slave_0: left promiscuous mode [ 1942.518909][T32454] hsr_slave_1: left promiscuous mode [ 1942.524865][T32454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1942.548872][T32454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1942.559535][T32454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1942.566943][T32454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1942.599785][T32454] veth1_macvtap: left promiscuous mode [ 1942.605289][T32454] veth0_macvtap: left promiscuous mode [ 1942.619609][T32454] veth1_vlan: left promiscuous mode [ 1942.625006][T32454] veth0_vlan: left promiscuous mode [ 1942.942284][T32454] team0 (unregistering): Port device team_slave_1 removed [ 1942.985865][T32454] team0 (unregistering): Port device team_slave_0 removed [ 1943.146809][ T5707] chnl_net:caif_netlink_parms(): no params data found [ 1943.233563][ T5811] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1943.258502][ T5716] chnl_net:caif_netlink_parms(): no params data found [ 1943.371699][ T5705] chnl_net:caif_netlink_parms(): no params data found [ 1944.228830][ T5710] Bluetooth: hci3: command tx timeout [ 1944.998804][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 1945.006829][ C0] lec:lec_tx_timeout: lec0 [ 1947.938535][ T5644] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1948.040012][ T5716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1948.049150][ T5716] bridge0: port 1(bridge_slave_0) entered disabled state [ 1948.056429][ T5716] bridge_slave_0: entered allmulticast mode [ 1948.091432][ T5716] bridge_slave_0: entered promiscuous mode [ 1948.110911][ T5716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1948.118081][ T5716] bridge0: port 2(bridge_slave_1) entered disabled state [ 1948.147550][ T5716] bridge_slave_1: entered allmulticast mode [ 1948.161065][ T5716] bridge_slave_1: entered promiscuous mode [ 1948.470569][ T5644] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1948.597261][ T5705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1948.609632][ T5705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1948.617077][ T5705] bridge_slave_0: entered allmulticast mode [ 1948.651042][ T5705] bridge_slave_0: entered promiscuous mode [ 1948.671493][ T5705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1948.678663][ T5705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1948.699369][ T5705] bridge_slave_1: entered allmulticast mode [ 1948.707847][ T5705] bridge_slave_1: entered promiscuous mode [ 1948.733790][ T5716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1948.747485][ T5716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1948.801593][ T5644] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1948.834207][ T5707] bridge0: port 1(bridge_slave_0) entered blocking state [ 1948.855617][ T5707] bridge0: port 1(bridge_slave_0) entered disabled state [ 1948.871738][ T5707] bridge_slave_0: entered allmulticast mode [ 1948.883619][ T5707] bridge_slave_0: entered promiscuous mode [ 1948.938154][ T5707] bridge0: port 2(bridge_slave_1) entered blocking state [ 1948.946070][ T5707] bridge0: port 2(bridge_slave_1) entered disabled state [ 1948.956568][ T5707] bridge_slave_1: entered allmulticast mode [ 1948.964941][ T5707] bridge_slave_1: entered promiscuous mode [ 1949.044042][ T5716] team0: Port device team_slave_0 added [ 1949.082218][ T5644] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1949.162251][ T5705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1949.192253][ T5716] team0: Port device team_slave_1 added [ 1949.246315][T32454] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1949.268122][ T5707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1949.282377][ T5707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1949.295543][ T5705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1949.431480][ T5707] team0: Port device team_slave_0 added [ 1949.460091][ T5716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1949.467119][ T5716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1949.495055][ T5716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1949.508249][ T5716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1949.519373][ T5716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1949.547609][ T5716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1949.578234][T32454] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1949.600610][ T5707] team0: Port device team_slave_1 added [ 1949.632096][ T5705] team0: Port device team_slave_0 added [ 1949.672925][T32454] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1949.713567][ T5705] team0: Port device team_slave_1 added [ 1949.762838][ T5707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1949.772717][ T5707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1949.800079][ T5707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1949.834278][T32454] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1949.907721][ T5707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1949.915195][ T5707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1949.942506][ T5707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1949.998612][ T5716] hsr_slave_0: entered promiscuous mode [ 1950.007026][ T5716] hsr_slave_1: entered promiscuous mode [ 1950.014277][ T5716] debugfs: 'hsr0' already exists in 'hsr' [ 1950.022595][ T5716] Cannot create hsr debugfs directory [ 1950.029271][ T5705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1950.037376][ T5705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1950.066064][ T5705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1950.091370][ T5705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1950.108865][ T5705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1950.136410][ T5705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1950.307503][ T5707] hsr_slave_0: entered promiscuous mode [ 1950.315004][ T5707] hsr_slave_1: entered promiscuous mode [ 1950.321788][ T5707] debugfs: 'hsr0' already exists in 'hsr' [ 1950.327612][ T5707] Cannot create hsr debugfs directory [ 1950.426320][ T5705] hsr_slave_0: entered promiscuous mode [ 1950.434450][ T5705] hsr_slave_1: entered promiscuous mode [ 1950.441792][ T5705] debugfs: 'hsr0' already exists in 'hsr' [ 1950.447655][ T5705] Cannot create hsr debugfs directory [ 1950.772539][T32454] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1950.906685][T32454] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1951.065746][T32454] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1951.180388][T32454] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1951.450563][T32454] bridge_slave_1: left allmulticast mode [ 1951.456242][T32454] bridge_slave_1: left promiscuous mode [ 1951.467299][T32454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1951.480924][T32454] bridge_slave_0: left allmulticast mode [ 1951.486583][T32454] bridge_slave_0: left promiscuous mode [ 1951.493593][T32454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1951.507283][T32454] bridge_slave_1: left allmulticast mode [ 1951.513208][T32454] bridge_slave_1: left promiscuous mode [ 1951.520076][T32454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1951.534463][T32454] bridge_slave_0: left allmulticast mode [ 1951.540503][T32454] bridge_slave_0: left promiscuous mode [ 1951.546423][T32454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1951.568477][T32454] bridge_slave_1: left allmulticast mode [ 1951.574352][T32454] bridge_slave_1: left promiscuous mode [ 1951.593781][T32454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1951.614767][T32454] bridge_slave_0: left allmulticast mode [ 1951.620690][T32454] bridge_slave_0: left promiscuous mode [ 1951.626521][T32454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1951.992631][T32454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1952.004689][T32454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1952.015502][T32454] bond0 (unregistering): Released all slaves [ 1952.208840][ T5862] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1952.218190][T32454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1952.241494][T32454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1952.263628][T32454] bond0 (unregistering): Released all slaves [ 1952.466143][T32454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1952.478267][T32454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1952.490069][T32454] bond0 (unregistering): Released all slaves [ 1952.529321][ T5644] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1952.565116][ T5644] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1952.595856][ T5644] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1952.661175][ T5644] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1953.283384][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1953.315347][ T5644] 8021q: adding VLAN 0 to HW filter on device team0 [ 1953.371558][ T5644] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1953.382348][ T5644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1953.910890][T32456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1953.918112][T32456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1953.929576][T32456] bridge0: port 2(bridge_slave_1) entered blocking state [ 1953.936742][T32456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1954.084877][T32454] hsr_slave_0: left promiscuous mode [ 1954.098517][T32454] hsr_slave_1: left promiscuous mode [ 1954.110870][T32454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1954.181418][T32454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1954.213662][T32454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1954.238829][T32454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1954.260532][T32454] hsr_slave_0: left promiscuous mode [ 1954.276965][T32454] hsr_slave_1: left promiscuous mode [ 1954.289634][T32454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1954.301849][T32454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1954.332622][T32454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1954.350058][T32454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1954.835724][ T5987] usb usb8: usbfs: process 5987 (syz.6.9440) did not claim interface 0 before use [ 1956.196774][T32454] hsr_slave_0: left promiscuous mode [ 1956.236690][T32454] hsr_slave_1: left promiscuous mode [ 1956.249775][T32454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1956.257197][T32454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1956.312027][T32454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1956.329481][T32454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1956.421577][T32454] veth1_macvtap: left promiscuous mode [ 1956.427117][T32454] veth0_macvtap: left promiscuous mode [ 1956.439585][T32454] veth1_vlan: left promiscuous mode [ 1956.458977][T32454] veth0_vlan: left promiscuous mode [ 1956.501881][T32454] veth1_macvtap: left promiscuous mode [ 1956.507407][T32454] veth0_macvtap: left promiscuous mode [ 1956.519020][T32454] veth1_vlan: left promiscuous mode [ 1956.529895][T32454] veth0_vlan: left promiscuous mode [ 1956.538360][T32454] veth1_macvtap: left promiscuous mode [ 1956.547722][T32454] veth0_macvtap: left promiscuous mode [ 1956.559383][T32454] veth1_vlan: left promiscuous mode [ 1956.564849][T32454] veth0_vlan: left promiscuous mode [ 1959.249521][T32454] team0 (unregistering): Port device team_slave_1 removed [ 1959.309518][T32454] team0 (unregistering): Port device team_slave_0 removed [ 1960.705322][T32454] team0 (unregistering): Port device team_slave_1 removed [ 1960.737827][T32454] team0 (unregistering): Port device team_slave_0 removed [ 1961.449567][ T6057] isofs_fill_super: bread failed, dev=loop6, iso_blknum=16, block=32 [ 1962.775386][T32454] team0 (unregistering): Port device team_slave_1 removed [ 1962.801678][T32454] team0 (unregistering): Port device team_slave_0 removed [ 1963.023300][ T5716] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1963.036410][ T5716] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1963.072976][ T5716] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1963.108121][ T5716] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1963.461406][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1968.213884][ T5716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1968.464050][ T5716] 8021q: adding VLAN 0 to HW filter on device team0 [ 1968.534973][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1968.542204][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1968.582428][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1968.589621][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1968.863616][ T5644] veth0_vlan: entered promiscuous mode [ 1968.997240][ T5644] veth1_vlan: entered promiscuous mode [ 1969.215706][ T5705] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1969.259894][ T5705] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1969.431034][ T5705] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1969.503134][ T5705] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1969.567610][ T5644] veth0_macvtap: entered promiscuous mode [ 1969.582598][ T5644] veth1_macvtap: entered promiscuous mode [ 1969.741592][ T5716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1969.764640][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1969.854754][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1970.016984][T32456] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1970.055253][T32456] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1970.326692][T32456] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1970.519092][T32456] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1970.831366][T32454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1970.849055][T32454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1970.870321][T32454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1970.879101][T32454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1970.951201][ T5716] veth0_vlan: entered promiscuous mode [ 1971.005083][ T5707] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1971.092796][ T5707] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1971.156788][ T5707] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1971.188185][ T5707] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1973.049649][ T5716] veth1_vlan: entered promiscuous mode [ 1973.189262][ T5705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1973.275617][ T5705] 8021q: adding VLAN 0 to HW filter on device team0 [ 1973.358176][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1973.365396][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1973.410764][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1973.418006][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1973.434527][ T5716] veth0_macvtap: entered promiscuous mode [ 1973.495307][ T5716] veth1_macvtap: entered promiscuous mode [ 1973.596368][ T5716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1973.641149][ T5716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1973.694801][ T155] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1973.705708][ T155] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1973.777205][ T155] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1973.809882][ T155] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1973.854677][ T5707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1973.964742][ T5707] 8021q: adding VLAN 0 to HW filter on device team0 [ 1974.106647][T32454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1974.148120][T32454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1974.159412][ T6072] bridge0: port 1(bridge_slave_0) entered blocking state [ 1974.166542][ T6072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1974.241989][ T6072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1974.249181][ T6072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1974.481928][ T6077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1974.520248][ T6077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1974.682892][ T5705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1976.925209][ T5710] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1976.935112][ T5710] CPU: 0 UID: 0 PID: 5710 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1976.935141][ T5710] Tainted: [L]=SOFTLOCKUP [ 1976.935149][ T5710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1976.935161][ T5710] Workqueue: hci3 hci_rx_work [ 1976.935194][ T5710] Call Trace: [ 1976.935203][ T5710] [ 1976.935211][ T5710] dump_stack_lvl+0xe8/0x150 [ 1976.935242][ T5710] sysfs_create_dir_ns+0x271/0x2a0 [ 1976.935269][ T5710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1976.935294][ T5710] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1976.935323][ T5710] ? do_raw_spin_unlock+0xf5/0x210 [ 1976.935348][ T5710] kobject_add_internal+0x62b/0xd00 [ 1976.935377][ T5710] kobject_add+0x163/0x240 [ 1976.935396][ T5710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1976.935423][ T5710] ? __pfx_kobject_add+0x10/0x10 [ 1976.935443][ T5710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1976.935465][ T5710] ? _raw_spin_unlock+0x28/0x50 [ 1976.935490][ T5710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1976.935516][ T5710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1976.935538][ T5710] ? get_device_parent+0x366/0x3a0 [ 1976.935573][ T5710] device_add+0x408/0xb70 [ 1976.935606][ T5710] hci_conn_add_sysfs+0xd5/0x210 [ 1976.935638][ T5710] le_conn_complete_evt+0xf1d/0x1430 [ 1976.935661][ T5710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1976.935697][ T5710] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1976.935727][ T5710] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1976.935771][ T5710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1976.935804][ T5710] ? __pfx___mutex_lock+0x10/0x10 [ 1976.935824][ T5710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1976.935846][ T5710] ? skb_pull_data+0xfb/0x200 [ 1976.935870][ T5710] hci_le_conn_complete_evt+0x187/0x470 [ 1976.935899][ T5710] hci_event_packet+0x7af/0x12c0 [ 1976.935934][ T5710] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1976.935956][ T5710] ? __pfx_hci_event_packet+0x10/0x10 [ 1976.935990][ T5710] ? kcov_remote_start+0x49a/0x7a0 [ 1976.936021][ T5710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1976.936043][ T5710] ? hci_send_to_monitor+0xe2/0x590 [ 1976.936078][ T5710] hci_rx_work+0x3ee/0x1030 [ 1976.936111][ T5710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1976.936137][ T5710] ? process_scheduled_works+0xa25/0x1830 [ 1976.936165][ T5710] process_scheduled_works+0xb02/0x1830 [ 1976.936216][ T5710] ? __pfx_process_scheduled_works+0x10/0x10 [ 1976.936246][ T5710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1976.936269][ T5710] ? assign_work+0x3d5/0x5e0 [ 1976.936299][ T5710] worker_thread+0xa50/0xfc0 [ 1976.936327][ T5710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1976.936363][ T5710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1976.936394][ T5710] kthread+0x388/0x470 [ 1976.936413][ T5710] ? __pfx_worker_thread+0x10/0x10 [ 1976.936437][ T5710] ? __pfx_kthread+0x10/0x10 [ 1976.936458][ T5710] ret_from_fork+0x51e/0xb90 [ 1976.936484][ T5710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1976.936507][ T5710] ? __pfx_ret_from_fork+0x10/0x10 [ 1976.936531][ T5710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1976.936553][ T5710] ? __switch_to+0xc7d/0x1450 [ 1976.936579][ T5710] ? __pfx_kthread+0x10/0x10 [ 1976.936599][ T5710] ret_from_fork_asm+0x1a/0x30 [ 1976.936643][ T5710] [ 1976.936680][ T5710] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1977.267004][ T5710] Bluetooth: hci3: failed to register connection device [ 1977.274549][ T5710] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN NOPTI [ 1977.286619][ T5710] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 1977.290072][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1977.295029][ T5710] CPU: 0 UID: 0 PID: 5710 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1977.295066][ T5710] Tainted: [L]=SOFTLOCKUP [ 1977.316642][ T5710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1977.326688][ T5710] Workqueue: hci3 hci_rx_work [ 1977.331378][ T5710] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 1977.337270][ T5710] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 3b a5 e0 fe cc 66 66 66 66 66 66 2e [ 1977.356869][ T5710] RSP: 0018:ffffc90006727518 EFLAGS: 00010212 [ 1977.362933][ T5710] RAX: dffffc0000000000 RBX: ffffffff897355b8 RCX: 0000000080000001 [ 1977.370982][ T5710] RDX: 0000000000000000 RSI: ffffffff897355b8 RDI: 000000000000004c [ 1977.378944][ T5710] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1977.386904][ T5710] R10: dffffc0000000000 R11: ffffffff8aacf500 R12: 0000000000000000 [ 1977.394871][ T5710] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 1977.402921][ T5710] FS: 0000000000000000(0000) GS:ffff888125466000(0000) knlGS:0000000000000000 [ 1977.411844][ T5710] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1977.418421][ T5710] CR2: 00007f925657de9c CR3: 000000000e54c000 CR4: 0000000000350ef0 [ 1977.426385][ T5710] Call Trace: [ 1977.429647][ T5710] [ 1977.432562][ T5710] __kasan_check_byte+0x12/0x40 [ 1977.437412][ T5710] lock_acquire+0x79/0x2e0 [ 1977.441826][ T5710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1977.447453][ T5710] ? l2cap_global_fixed_chan+0x2ee/0x380 [ 1977.453093][ T5710] lock_sock_nested+0x48/0x100 [ 1977.457851][ T5710] ? l2cap_sock_new_connection_cb+0x4a/0x2e0 [ 1977.463919][ T5710] l2cap_sock_new_connection_cb+0x4a/0x2e0 [ 1977.469725][ T5710] l2cap_connect_cfm+0x368/0x1390 [ 1977.474752][ T5710] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1977.480202][ T5710] ? __pfx_bt_err+0x10/0x10 [ 1977.484699][ T5710] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1977.490156][ T5710] hci_connect_cfm+0x95/0x140 [ 1977.494828][ T5710] le_conn_complete_evt+0xf65/0x1430 [ 1977.500195][ T5710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1977.505826][ T5710] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1977.511536][ T5710] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1977.517169][ T5710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1977.522796][ T5710] ? __pfx___mutex_lock+0x10/0x10 [ 1977.527805][ T5710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1977.533428][ T5710] ? skb_pull_data+0xfb/0x200 [ 1977.538099][ T5710] hci_le_conn_complete_evt+0x187/0x470 [ 1977.543661][ T5710] hci_event_packet+0x7af/0x12c0 [ 1977.548715][ T5710] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1977.554003][ T5710] ? __pfx_hci_event_packet+0x10/0x10 [ 1977.559473][ T5710] ? kcov_remote_start+0x49a/0x7a0 [ 1977.564590][ T5710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1977.570219][ T5710] ? hci_send_to_monitor+0xe2/0x590 [ 1977.575420][ T5710] hci_rx_work+0x3ee/0x1030 [ 1977.579930][ T5710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1977.585557][ T5710] ? process_scheduled_works+0xa25/0x1830 [ 1977.591274][ T5710] process_scheduled_works+0xb02/0x1830 [ 1977.596834][ T5710] ? __pfx_process_scheduled_works+0x10/0x10 [ 1977.602811][ T5710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1977.608436][ T5710] ? assign_work+0x3d5/0x5e0 [ 1977.613021][ T5710] worker_thread+0xa50/0xfc0 [ 1977.617618][ T5710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1977.623256][ T5710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1977.628890][ T5710] kthread+0x388/0x470 [ 1977.632948][ T5710] ? __pfx_worker_thread+0x10/0x10 [ 1977.638058][ T5710] ? __pfx_kthread+0x10/0x10 [ 1977.642638][ T5710] ret_from_fork+0x51e/0xb90 [ 1977.647225][ T5710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1977.652852][ T5710] ? __pfx_ret_from_fork+0x10/0x10 [ 1977.658045][ T5710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1977.663672][ T5710] ? __switch_to+0xc7d/0x1450 [ 1977.668352][ T5710] ? __pfx_kthread+0x10/0x10 [ 1977.672933][ T5710] ret_from_fork_asm+0x1a/0x30 [ 1977.677709][ T5710] [ 1977.680711][ T5710] Modules linked in: [ 1977.686299][ T5710] ---[ end trace 0000000000000000 ]--- [ 1977.698274][ T5710] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 1977.700783][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.704238][ T5710] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 3b a5 e0 fe cc 66 66 66 66 66 66 2e [ 1977.718091][ T1285] lec:lec_start_xmit: lec0:No lecd attached [ 1977.730594][ T5710] RSP: 0018:ffffc90006727518 EFLAGS: 00010212 [ 1977.742043][ T5710] RAX: dffffc0000000000 RBX: ffffffff897355b8 RCX: 0000000080000001 [ 1977.750077][ T5710] RDX: 0000000000000000 RSI: ffffffff897355b8 RDI: 000000000000004c [ 1977.758765][ T5710] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1977.766775][ T5710] R10: dffffc0000000000 R11: ffffffff8aacf500 R12: 0000000000000000 [ 1977.774932][ T5710] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 1977.783379][ T5710] FS: 0000000000000000(0000) GS:ffff888125466000(0000) knlGS:0000000000000000 [ 1977.792456][ T5710] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1977.799112][ T5710] CR2: 00007f925657de9c CR3: 000000000e54c000 CR4: 0000000000350ef0 [ 1977.807386][ T5710] Kernel panic - not syncing: Fatal exception [ 1977.813755][ T5710] Kernel Offset: disabled [ 1977.818106][ T5710] Rebooting in 86400 seconds..