last executing test programs: 3m36.904666365s ago: executing program 0 (id=1): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x3ff, &(0x7f00000003c0)=0x0) io_submit(r0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000001000)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000009, 0x5}, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000440)='./bus\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="757466383d312c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c696f636861727365743d73703836322c696f636861727365743d63703433372c73686f72746e616d653d77696e39352c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c756e695f786c6174653d302c003c24d06816418f4be78ed4fbfe47efc82f966a602a8db43ad053c978bbd3501706515140ef63c2a58653ced497550b22917b09702604bc162c57e05beec5bb0c11fc2f9238b25e4527e24bab534e9ba458d92a597c3fee89f57053a4a1535771c9877b3ab101fb26937779cff75a95a296fafddf11280fafeb9bd5f2da4a88b43f3e4d5b1a9aed1f659d88f914548fba990603b0d4f14adda86d459c62701d3d6f007c7e50da9608a03eff5843f6739a8ec5ff33791394a5c075018b5d92bbd7d9874589f3561fbdfc44653bb6c56b522a3413"], 0xff, 0x39a, &(0x7f0000000600)="$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") openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file1\x00', 0x42, 0x0) 3m35.525186537s ago: executing program 0 (id=12): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x80, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f00000009c0)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='nocase,rodir,utf8=1,dmask=00000000000000000000001,utf8=0,uni_xlate=0,nfs,shortname=winnt,nfs,shortname=mixed,shortname=lowefloppy,\x00'/145], 0x1, 0x2b4, &(0x7f0000000d00)="$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") fchownat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x548}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 3m33.492412896s ago: executing program 0 (id=21): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='smaps_rollup\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000012840)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x2000) mbind(&(0x7f00006aa000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x4, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='*\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f00000102c0)={0x2020}, 0x2020) 3m32.720325846s ago: executing program 0 (id=22): socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x321081a, &(0x7f0000000100)={[{@acl}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b80)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000400)='.\x00', 0x9000, &(0x7f0000000440)={0x0, 0xf5, 0x20000}, 0x20) 3m31.926570898s ago: executing program 0 (id=27): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x242, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 3m31.22180313s ago: executing program 0 (id=30): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f0000000100)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r2 = dup3(r0, r1, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 3m30.529243432s ago: executing program 32 (id=30): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f0000000100)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r2 = dup3(r0, r1, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 1m25.506533912s ago: executing program 3 (id=558): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002b40)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000002740)={0x0, 0xf, &(0x7f0000002780)=[{&(0x7f00000027c0)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0001400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) 1m25.051561108s ago: executing program 3 (id=562): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, '\x00'}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r2, 0x2}, 0x8) 1m24.971532867s ago: executing program 3 (id=563): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x18}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000007c0)=0x7) r2 = syz_io_uring_setup(0x10f, &(0x7f0000000800)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)) io_uring_enter(r2, 0x66a8, 0x4000, 0xf, 0x0, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x6) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 1m23.748614542s ago: executing program 3 (id=566): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='.\x00', &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000322, 0x0) unshare(0x24060400) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000440)='./file0/file0/../file0\x00', 0x200008, &(0x7f0000000480)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT, @ANYRES64=r0, @ANYRES16=r0], 0x1, 0x392, &(0x7f00000004c0)="$eJzs3T1vW2UUAOATt/mExBkQEiDEq24sVhL+QCPUSohIoFCj0gFxS5xixY0j2wpyhaADEiv/gL1iZENC/IEMsLOxZWHsUNXIX6mdul+kyaXq80jRPfZ7jvO+tnx1FuscXv3x5s52s7SdtaJwMUUhIgp3I5Z7Ud/U4FroxTMx6na8W7z619uffHbtw/WNjUubKV1ev/LeWkpp6Z3fvv7m5wu/t1759JelX2fjYPnzw3/W/j54/eCNw/tXvqo2U7WZduutlKXr9Xoru16rpK1qc6eU0se1StaspOpus9IYW9+u1ff22inb3Vpc2GtUms2U7bbTTqWdWvXUarRTdiOr7qZSqZQWF4InKd/Z3MzW+/HcY/IuntWGOAWNxnrW/Q7PPrRSvpPLhgCAXJ20/595qv7/WmGk/5+LR/b/06H/fy6mny5ttP//zy/C/1y3/58ZfH/H6f8BAAAAAAAAAAAAAOBFcLfTKXY6neLw2hn+SHjwOOftccoe+vyP/eW9P07XyA/35iJqP+yX98v9a399fTuqUYtKrEQx7nVvC0P9+PIHG5dWUs9yLN78rld/4Y+I8rnx+tUoxvLk+tV+fTqqj+51OhZG69fii3htcv3axPqZWPlppL4Uxfjzy6hHLbZ6t7cH9d+upvT+RxvH6md7eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8HEpp6K3oz73fL0fMx/5gfn/pQcLy+Hz8fv3RfP2VKMa9yfP5VybO5z8fb57P9+wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMNRs39rJarVK46yC4cz/3jMzw+DRVVP99NvHluZjPHn2Sa9zwqDwTFXzg0NOWLrf6XR6wY3vn/tW5872ozxJMB0Rj8npDN7Ak/+vVyNi9Jlz4zmzEXGqJ13qBoX83/BnDvK4GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC+joZ+dx9M5b0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8tJs39rJarVK4xSDvM8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIvk3AAD//8s8Cyw=") 1m23.326789186s ago: executing program 3 (id=569): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = fsopen(&(0x7f00000006c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002c40)=ANY=[@ANYBLOB="1c00000002030102000000000000001c01009103080001000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x24004800) read(r3, &(0x7f0000000800)=""/1024, 0x400) read$FUSE(r3, &(0x7f0000000c00)={0x2020}, 0x2020) 1m22.880375762s ago: executing program 3 (id=572): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = epoll_create1(0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x1262, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x30000009}) close(r2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 1m22.115888781s ago: executing program 33 (id=572): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = epoll_create1(0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x1262, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x30000009}) close(r2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 1m20.149215573s ago: executing program 1 (id=583): r0 = socket$nl_generic(0x10, 0x3, 0x10) eventfd2(0x9, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x50841) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xeb9c, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m19.88869471s ago: executing program 1 (id=585): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_read_part_table(0x5f2, &(0x7f0000000000)="$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") clock_settime(0xfffffffb, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc4) landlock_create_ruleset(&(0x7f0000000040)={0x2000}, 0x18, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0xffb2) chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0xffb2) 1m18.976533794s ago: executing program 1 (id=589): open_tree(0xffffffffffffff9c, 0x0, 0x89901) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x1000002, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m16.449933904s ago: executing program 1 (id=597): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f0000000180)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@mblk_io_submit}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodioread_nolock}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") open(&(0x7f0000001240)='./bus\x00', 0x400141042, 0x22) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r0, 0x0) mount(&(0x7f0000001280)=@loop={'/dev/loop', 0x0}, &(0x7f00000012c0)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000001300)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) openat(0xffffffffffffff9c, &(0x7f0000001180)='./file1\x00', 0x42, 0x0) open(&(0x7f0000001940)='./bus\x00', 0x14927e, 0x9) r2 = open(&(0x7f0000001980)='./file2\x00', 0x181042, 0x124) write$P9_RREADDIR(r2, &(0x7f00000019c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x1, 0x5}, 0x7, 0x7, 0x7, './file0'}]}}, 0x2a) 1m15.780648063s ago: executing program 1 (id=602): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000003000000000000000200000d0000000000000000020000000100000002000000000000000000000200000000002e"], &(0x7f0000000100)=""/236, 0x43, 0xec, 0x1}, 0x20) 1m15.169757326s ago: executing program 1 (id=604): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) umount2(0x0, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x1015, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x4000) close_range(r0, 0xffffffffffffffff, 0x0) 1m14.500079155s ago: executing program 34 (id=604): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) umount2(0x0, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x1015, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x4000) close_range(r0, 0xffffffffffffffff, 0x0) 28.810775132s ago: executing program 6 (id=818): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x2, 0x6, 0x2, 0xffffffff, 0x8000000}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x2}}, @TCA_NETEM_REORDER={0xc, 0x3, {0xd396, 0x44}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x8010) sendmmsg$inet(r1, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001240)="cc5fd2518c506ebf347763559129e729164723d0e47c59f1b71a169d2bf45153816f628ff44cbe57e3b69377793663b2d7f0c39319dd2d25cf661253e80493fe43d4bd2521579cc80e15640e30cfedcde5be166f87dd93bc68ac7b179df08a08b19ec17b48e6ffa0026287ca02aec3d811c6", 0x72}], 0x1}}], 0x1, 0x2090) 28.526935081s ago: executing program 6 (id=821): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8002, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0xfffffffd, 0x8, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x6, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xf, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x4, 0x8, 0x30b1d693, 0x6, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x3, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000005c0)='.\x00', 0x2000690) write$binfmt_elf32(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4680400400050000000000000002000600c42f75405f000000380000004600000008000000010020000100050009000000000000000300000004"], 0xb0) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 28.285208636s ago: executing program 6 (id=823): ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"}) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6062, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x81, 0xc3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2040004) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x8, 0x28, {0x28, 0x22, "b5743125cc6bad051a92108af7d5cb741f6a72379573718720ec93272a6f943b1ca4ef3335a6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x80002, 0x2) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) 25.761124826s ago: executing program 6 (id=832): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002840)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000002880), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000028c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000002980)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdc02, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x800, 0x2, 0x51, 0x1ff, 0x6, 0x100, 0xffffffff, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40008c5}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000002a80)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff2, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xc7, 0x7}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002ac0)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002b00)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000002b40)='l', 0x1, 0x4009, &(0x7f0000002b80)={0x11, 0xf6, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 25.481741025s ago: executing program 6 (id=833): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = open(0x0, 0x10507e, 0xa6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000004cc0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000009200)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000009240)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x0, 0x0) read(r2, &(0x7f0000000100), 0x64) syz_ublk_setup_queues(r0, r1, &(0x7f0000009300)={0x0, 0xb828, 0x0, 0x20003, 0x3a6}, &(0x7f0000009380)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x4000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x19a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x400, 0x0, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab60, 0x2, 0x1, 0xfffffffe}}], 0x1, 0x0, 0x0) 24.982935396s ago: executing program 6 (id=836): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000018c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "46c8"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 9.814233919s ago: executing program 35 (id=836): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000018c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "46c8"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 8.009016115s ago: executing program 2 (id=900): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r1, r2, 0x0, 0x8000fb00) 7.905345915s ago: executing program 5 (id=901): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) setsockopt$sock_int(r2, 0x1, 0x6, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000180)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1, 0x81, 0x800, {0x0, 0xea60}, {}, {}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "5e3dba8ae862e81c"}}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1, 0x944, 0xffffffff, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @canfd={{0x0, 0x1, 0x1}, 0x2f, 0x3, 0x0, 0x0, "f1b68c3e70a5d4bb02ab9dd1826faf62d4bcfd6c350a928a417ccf61f72b6378965ff4776ad1e8e0b6d8bc529caeb5e8ff90381a02e9b1826bd45bc45cb236d7"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x8050) sendmsg$can_bcm(r4, 0x0, 0xc084) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xffe0}, {0x7, 0xffff}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xc8d6}, 0x20000050) 6.780633791s ago: executing program 2 (id=902): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x2) fcntl$setsig(r0, 0xa, 0x17) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x1, r2}) setns(0xc9, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000050000005600000025000000190004000400000007fd170000000000040000000000000000", 0x39}], 0x1) 6.634140306s ago: executing program 4 (id=903): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) syz_io_uring_setup(0xefe, &(0x7f00000005c0)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, 0x0, 0x0, 0x0) 6.126118659s ago: executing program 2 (id=904): r0 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x140, 0x11) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000980)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001cc0)={@ifindex, 0xffffffffffffffff, 0x37, 0x18, 0x4}, 0x20) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x121042, 0x0) rename(&(0x7f00000001c0)='./file2\x00', &(0x7f0000000200)='./file1\x00') 6.100331472s ago: executing program 5 (id=905): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000240)=0x10001, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f00000004c0), 0x2e9, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) 5.942554488s ago: executing program 4 (id=906): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000080)={0xa, 0x4e26, 0x8, @remote, 0xa}, 0x1c, 0x0}}], 0x1, 0x200880c0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="16", 0x1}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.850312087s ago: executing program 2 (id=907): ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000380)='./bus\x00', 0x141b42, 0x8) splice(r1, 0x0, r3, 0x0, 0x402000784853bb, 0x0) fcntl$setpipe(r2, 0x407, 0x2010001) write$P9_RLOPEN(r2, &(0x7f00000003c0)={0x18, 0xd, 0x2, {{0x30, 0x3, 0x7}, 0xe}}, 0x18) 5.372301567s ago: executing program 4 (id=908): getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) dup(0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0xabfeb000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x32, 0x0, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_create_resource$futex(&(0x7f0000000200)=0x1) r2 = syz_create_resource$futex(&(0x7f0000000240)=0x1) futex(r2, 0xb, 0x1, 0x0, r1, 0x403) futex(r2, 0xc, 0x1, 0x0, r1, 0x1) 5.157937319s ago: executing program 5 (id=909): r0 = open(&(0x7f0000000600)='.\x00', 0x8000, 0x50) openat2$dir(0xffffffffffffff9c, &(0x7f0000000640)='./bus\x00', 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000800)=@abs, 0x6e) r3 = io_uring_setup(0x650b, &(0x7f0000000040)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f0000000880), 0x651, 0x0) 5.084455156s ago: executing program 2 (id=910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @broadcast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x8, 0x80000001, 0x7}, 0x24}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000003c0)={&(0x7f0000000400)=@xdp={0x2c, 0x8, r5, 0x42}, 0x80, &(0x7f0000000480)=[{&(0x7f00000004c0)="27030200dc0f14000e0000000024c1020000ff88", 0x14}], 0x1}, 0x4005) 4.874113968s ago: executing program 5 (id=911): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42, 0x1ff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="85000000ae00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x14, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000480)='./file0\x00', &(0x7f00000008c0)=[0x0], 0x0, 0x0, 0x200000000000017b}}, 0x40) 3.511739338s ago: executing program 4 (id=912): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket(0x1, 0x803, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffb}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2000004}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000ac0)="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", 0xd6a}], 0x1}}], 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0xd, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0xbf, 0x2, 0xa, 0x5}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.473141052s ago: executing program 5 (id=913): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, 0x0, 0x400c004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000840), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc02864cf, &(0x7f0000000880)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x8070bd28, 0xfffffffa, {0x2, 0x18, 0x1ef, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64000100}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x871ac4b32833d133}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) 286.285491ms ago: executing program 2 (id=914): mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3586dd6c370c8900082b0100000000000000000005000000000001fe8000000000000000000000000000aaff"], 0x0) unshare(0x22020600) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x2}}, 0x26}}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000100)=0x7fff, 0x4) 220.264107ms ago: executing program 4 (id=915): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_ife={0x30, 0x1, 0x0, 0x0, {{0x8}, {0x8, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0) 169.728622ms ago: executing program 5 (id=916): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0), 0x0, 0x2}, 0x38) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r3, 0x0, 0xb) splice(r4, 0x0, r3, 0x0, 0xf3a, 0x8) splice(r2, 0x0, r5, 0x0, 0x50, 0x8) timer_settime(r1, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$FUSE_INIT(r3, &(0x7f0000000380)={0xffffffffffffffb6, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x2, 0x0, 0x0, 0x2a, 0x3}}, 0x50) 0s ago: executing program 4 (id=917): prlimit64(0x0, 0xe, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xbfffff, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) kernel console output (not intermixed with test programs): usb 5-1: config 0 interface 0 has no altsetting 0 [ 129.465287][ T6287] usb 5-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 129.477025][ T6375] bond1: (slave team0): making interface the new active one [ 129.487077][ T6287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.514370][ T6375] bond1: (slave team0): Enslaving as an active interface with an up link [ 129.519344][ T6287] usb 5-1: config 0 descriptor?? [ 129.576104][ T2956] bond1: (slave team0): link status definitely down, disabling slave [ 129.607262][ T2956] bond1: now running without any active interface! [ 129.808250][ T6388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.120'. [ 129.984061][ T6287] ntrig 0003:1B96:0009.0001: unknown main item tag 0x0 [ 130.010952][ T6368] syz.3.116 (6368) used greatest stack depth: 19976 bytes left [ 130.026334][ T6287] ntrig 0003:1B96:0009.0001: unknown main item tag 0x0 [ 130.062918][ T6287] ntrig 0003:1B96:0009.0001: unknown main item tag 0x0 [ 130.078424][ T6287] ntrig 0003:1B96:0009.0001: unknown main item tag 0x0 [ 130.102878][ T6287] ntrig 0003:1B96:0009.0001: unknown main item tag 0x0 [ 130.119941][ T6287] ntrig 0003:1B96:0009.0001: unknown main item tag 0x0 [ 130.144508][ T6287] ntrig 0003:1B96:0009.0001: unknown main item tag 0x0 [ 130.163394][ T6287] ntrig 0003:1B96:0009.0001: unknown main item tag 0x0 [ 130.170390][ T6287] ntrig 0003:1B96:0009.0001: unknown main item tag 0x0 [ 130.215768][ T6287] ntrig 0003:1B96:0009.0001: unknown main item tag 0x0 [ 130.275779][ T6287] ntrig 0003:1B96:0009.0001: hidraw0: USB HID v0.c1 Device [HID 1b96:0009] on usb-dummy_hcd.4-1/input0 [ 130.374700][ T6287] usb 5-1: USB disconnect, device number 2 [ 130.488415][ T6402] loop2: detected capacity change from 0 to 1024 [ 130.586650][ T6402] hfsplus: invalid length 32517 has been corrected to 255 [ 130.647157][ T6399] fido_id[6399]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 130.693763][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 130.693782][ T28] audit: type=1800 audit(1794627893.338:40): pid=6402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.124" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 130.867809][ T6402] hfsplus: b-tree write err: -5, ino 20 [ 130.971886][ T6411] netlink: 'syz.3.126': attribute type 10 has an invalid length. [ 130.986503][ T6411] geneve1: left promiscuous mode [ 131.032917][ T6411] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.052879][ T28] audit: type=1326 audit(1794627893.698:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.1.123" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f421a94d9 code=0x7fc00000 [ 131.078222][ T6411] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.098792][ T6411] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.108387][ T6411] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.122414][ T28] audit: type=1326 audit(1794627893.698:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.1.123" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f421a94d9 code=0x7fc00000 [ 131.159140][ T61] hfsplus: b-tree write err: -5, ino 20 [ 131.167206][ T6411] team0: Port device geneve1 added [ 131.223353][ T28] audit: type=1326 audit(1794627893.698:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.1.123" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f421a94d9 code=0x7fc00000 [ 131.644219][ T28] audit: type=1326 audit(1794627893.698:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.1.123" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f421a94d9 code=0x7fc00000 [ 132.229187][ T6421] loop2: detected capacity change from 0 to 36864 [ 132.292965][ T6421] EXT4-fs (loop2): Test dummy encryption mode enabled [ 132.339056][ T6421] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a80cc01c, mo2=0002] [ 132.413103][ T6421] System zones: 0-5 [ 132.418820][ T6421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.621167][ T6421] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a80cc01c, mo2=0002] [ 132.671539][ T6421] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 132.888272][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.156174][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.163793][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.154214][ T28] audit: type=1326 audit(1794627896.808:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.1.138" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f421a94d9 code=0x7ffc0000 [ 134.239858][ T28] audit: type=1326 audit(1794627896.838:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.1.138" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f421a94d9 code=0x7ffc0000 [ 134.315228][ T28] audit: type=1326 audit(1794627896.838:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.1.138" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f421a94d9 code=0x7ffc0000 [ 134.421789][ T28] audit: type=1326 audit(1794627896.838:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.1.138" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f421a94d9 code=0x7ffc0000 [ 134.482760][ T28] audit: type=1326 audit(1794627896.838:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.1.138" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f9f421a94d9 code=0x7ffc0000 [ 135.060946][ T6488] netlink: 36 bytes leftover after parsing attributes in process `syz.2.141'. [ 135.173172][ T6485] syz_tun: entered allmulticast mode [ 135.229623][ T6482] dvmrp6: entered allmulticast mode [ 135.507975][ T6477] syz_tun: left allmulticast mode [ 135.804986][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.148'. [ 135.840064][ T6507] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.849131][ T6507] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.858491][ T6507] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.867708][ T6507] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.898684][ T6507] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.907999][ T6507] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.917625][ T6507] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.926974][ T6507] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.027511][ T5798] Bluetooth: hci0: command tx timeout [ 136.034680][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.148'. [ 136.075949][ T6507] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.085384][ T6507] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.094676][ T6507] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.103654][ T6507] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.129370][ T6507] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.138646][ T6507] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.147815][ T6507] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.156982][ T6507] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.974647][ T6523] rxe_eth0 speed is unknown, defaulting to 1000 [ 137.081596][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802e9e2c00: rx timeout, send abort [ 137.092641][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802e9e2c00: 0x2f002: (3) A timeout occurred and this is the connection abort to close the session. [ 137.121069][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 137.121085][ T28] audit: type=1326 audit(1794627899.768:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6516 comm="syz.4.151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8baeba3257 code=0x7ffc0000 [ 137.166506][ T28] audit: type=1326 audit(1794627899.768:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6516 comm="syz.4.151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8baeb41719 code=0x7ffc0000 [ 137.252218][ T28] audit: type=1326 audit(1794627899.768:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6516 comm="syz.4.151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8baeba3257 code=0x7ffc0000 [ 137.319450][ T28] audit: type=1326 audit(1794627899.768:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6516 comm="syz.4.151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8baeb41719 code=0x7ffc0000 [ 137.383524][ T28] audit: type=1326 audit(1794627899.768:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6516 comm="syz.4.151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8baeba3257 code=0x7ffc0000 [ 137.461867][ T28] audit: type=1326 audit(1794627899.768:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6516 comm="syz.4.151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8baeb41719 code=0x7ffc0000 [ 137.549195][ T28] audit: type=1326 audit(1794627899.768:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6516 comm="syz.4.151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8baeba3257 code=0x7ffc0000 [ 137.580398][ T28] audit: type=1326 audit(1794627899.768:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6516 comm="syz.4.151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8baeb41719 code=0x7ffc0000 [ 137.605805][ T28] audit: type=1326 audit(1794627899.768:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6516 comm="syz.4.151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8baeba3257 code=0x7ffc0000 [ 137.674196][ T28] audit: type=1326 audit(1794627899.768:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6516 comm="syz.4.151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8baeb41719 code=0x7ffc0000 [ 138.631722][ T6556] rxe_eth0 speed is unknown, defaulting to 1000 [ 139.541162][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.169'. [ 140.042339][ T6610] loop3: detected capacity change from 0 to 1024 [ 140.084079][ T6610] hfsplus: invalid length 32517 has been corrected to 255 [ 140.189306][ T6610] hfsplus: b-tree write err: -5, ino 20 [ 140.277735][ T2956] hfsplus: b-tree write err: -5, ino 20 [ 140.636244][ T6617] loop3: detected capacity change from 0 to 256 [ 140.674679][ T6617] exfat: Deprecated parameter 'utf8' [ 140.709389][ T6617] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 141.394882][ T6637] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 141.420905][ T6637] netlink: 36 bytes leftover after parsing attributes in process `syz.3.180'. [ 141.735826][ T6632] loop2: detected capacity change from 0 to 40427 [ 141.790417][ T6632] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 141.823038][ T6632] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 141.835175][ T6632] F2FS-fs (loop2): invalid crc value [ 141.868465][ T6632] F2FS-fs (loop2): Found nat_bits in checkpoint [ 141.890740][ T6640] netlink: 'syz.3.181': attribute type 1 has an invalid length. [ 142.080251][ T6640] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.143873][ T6646] veth0_to_bond: left promiscuous mode [ 142.173362][ T6632] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 142.180499][ T6632] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 142.205863][ T6646] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 142.318904][ T6647] macvlan2: entered promiscuous mode [ 142.354925][ T6647] macvlan2: entered allmulticast mode [ 142.361779][ T6647] bond3: entered promiscuous mode [ 142.384130][ T6647] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 142.392672][ T6647] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 142.417612][ T6647] bond3: left promiscuous mode [ 142.479572][ T6656] lo: entered promiscuous mode [ 142.490670][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.183'. [ 142.787895][ T6653] lo: left promiscuous mode [ 143.244666][ T6676] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 143.390238][ T6679] syz.2.190 uses obsolete (PF_INET,SOCK_PACKET) [ 145.244266][ T6722] loop1: detected capacity change from 0 to 32896 [ 145.282668][ T6722] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 145.290910][ T6722] System zones: 1-3, 19-19, 35-36 [ 145.312383][ T6722] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.341972][ T6722] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 145.508095][ T5786] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.559052][ T6730] xt_TPROXY: Can be used only with -p tcp or -p udp [ 145.863163][ T972] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 146.092967][ T972] usb 5-1: Using ep0 maxpacket: 32 [ 146.115823][ T972] usb 5-1: unable to get BOS descriptor or descriptor too short [ 146.139104][ T972] usb 5-1: New USB device found, idVendor=04b4, idProduct=931b, bcdDevice= 0.40 [ 146.167517][ T972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.190782][ T972] usb 5-1: Product: syz [ 146.203331][ T972] usb 5-1: Manufacturer: syz [ 146.222943][ T972] usb 5-1: SerialNumber: syz [ 146.634070][ T972] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 146.763579][ T972] usb 5-1: USB disconnect, device number 3 [ 146.923605][ T6735] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.931498][ T6735] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.951658][ T6747] udevd[6747]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.596493][ T6757] netlink: 32 bytes leftover after parsing attributes in process `syz.3.215'. [ 147.872137][ T6765] loop2: detected capacity change from 0 to 128 [ 147.979842][ T5790] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 148.028194][ T6765] netlink: 'syz.2.218': attribute type 29 has an invalid length. [ 148.037457][ T6735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.135910][ T6735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.584138][ T6735] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.618044][ T6735] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.645347][ T6735] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.669960][ T6735] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.397939][ T6819] loop2: detected capacity change from 0 to 128 [ 151.573882][ T6822] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 152.619660][ T6855] netlink: 'syz.4.239': attribute type 1 has an invalid length. [ 152.696276][ T6855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.880662][ T6862] bond1: (slave veth3): Enslaving as an active interface with a down link [ 153.528041][ T6855] bond1: (slave dummy0): making interface the new active one [ 153.651453][ T6855] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 153.859797][ T6862] netlink: 'syz.4.239': attribute type 10 has an invalid length. [ 154.039487][ T6862] netlink: 40 bytes leftover after parsing attributes in process `syz.4.239'. [ 154.181013][ T6862] dummy0: entered promiscuous mode [ 154.442103][ T6862] bond1: (slave dummy0): Releasing active interface [ 154.602208][ T6884] xt_bpf: check failed: parse error [ 154.987424][ T6904] mmap: syz.4.250 (6904) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 155.054240][ T6907] netlink: 24 bytes leftover after parsing attributes in process `syz.3.251'. [ 157.061186][ T6939] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.111137][ T6941] bond2: (slave ip6gretap1): making interface the new active one [ 157.213701][ T6941] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 157.941757][ T6963] loop3: detected capacity change from 0 to 33792 [ 158.323815][ T6975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.266'. [ 158.619795][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'. [ 159.431988][ T7011] TC_ACT_REPEAT abuse ? [ 160.355001][ T7036] netlink: 'syz.2.283': attribute type 4 has an invalid length. [ 161.669589][ T7046] nvmet_fc: nvme_fc_parse_traddr: bad traddr string [ 162.142160][ T7052] rxe_eth0 speed is unknown, defaulting to 1000 [ 162.317188][ T7070] netlink: 'syz.4.289': attribute type 39 has an invalid length. [ 162.930324][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.292'. [ 163.029724][ T7086] Packet exceeded mirred recursion limit on dev syzkaller1 [ 163.037724][ T7086] Packet exceeded mirred recursion limit on dev syzkaller1 [ 163.045154][ T7086] Packet exceeded mirred recursion limit on dev syzkaller1 [ 163.052497][ T7086] Packet exceeded mirred recursion limit on dev syzkaller1 [ 163.059906][ T7086] Packet exceeded mirred recursion limit on dev syzkaller1 [ 163.067566][ T7086] Packet exceeded mirred recursion limit on dev syzkaller1 [ 163.075075][ T7086] Packet exceeded mirred recursion limit on dev syzkaller1 [ 163.082926][ T7086] Packet exceeded mirred recursion limit on dev syzkaller1 [ 163.090302][ T7086] Packet exceeded mirred recursion limit on dev syzkaller1 [ 164.432672][ T7086] net_ratelimit: 17192 callbacks suppressed [ 164.432699][ T7086] Packet exceeded mirred recursion limit on dev syzkaller1 [ 164.447226][ T7086] Packet exceeded mirred recursion limit on dev syzkaller1 [ 164.454633][ T7086] Packet exceeded mirred recursion limit on dev syzkaller1 [ 164.461992][ T7086] Packet exceeded mirred recursion limit on dev syzkaller1 [ 164.469420][ T7086] Packet exceeded mirred recursion limit on dev syzkaller1 [ 164.476863][ T7086] Packet exceeded mirred recursion limit on dev syzkaller1 [ 164.484302][ T7086] Packet exceeded mirred recursion limit on dev syzkaller1 [ 164.491693][ T7086] Packet exceeded mirred recursion limit on dev syzkaller1 [ 164.499684][ T7086] Packet exceeded mirred recursion limit on dev syzkaller1 [ 164.507109][ T7086] Packet exceeded mirred recursion limit on dev syzkaller1 [ 169.053497][ T7125] tipc: Started in network mode [ 169.058796][ T7125] tipc: Node identity ac14140f, cluster identity 4711 [ 169.078715][ T7125] tipc: New replicast peer: 255.255.255.255 [ 169.097515][ T7125] tipc: Enabled bearer , priority 10 [ 169.157294][ T7086] syz.4.293 (7086) used greatest stack depth: 17784 bytes left [ 169.186846][ T7125] loop1: detected capacity change from 0 to 33280 [ 169.297453][ T7125] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 169.314153][ T7125] EXT4-fs (loop1): orphan cleanup on readonly fs [ 169.326100][ T7133] lo: entered allmulticast mode [ 169.332982][ T7125] EXT4-fs error (device loop1): ext4_quota_enable:7149: inode #15: comm syz.1.296: iget: bad i_size value: 360287970189639690 [ 169.381545][ T7125] EXT4-fs error (device loop1): ext4_quota_enable:7152: comm syz.1.296: Bad quota inode: 15, type: 2 [ 169.398209][ T7125] EXT4-fs warning (device loop1): ext4_enable_quotas:7193: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 169.432340][ T7125] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 169.459419][ T7125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 169.752814][ T6088] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 169.944893][ T6088] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 169.980133][ T6088] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 169.994791][ T6088] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 170.008533][ T6088] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.024708][ T6088] usb 2-1: Product: syz [ 170.036207][ T6088] usb 2-1: Manufacturer: syz [ 170.061390][ T6088] usb 2-1: SerialNumber: syz [ 170.088418][ T6088] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 170.126196][ T6088] ums-sddr09 2-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 170.126196][ T6088] Please send a copy of this message to and [ 170.226079][ T5888] tipc: Node number set to 2886997007 [ 170.361247][ T6088] ums-sddr09: probe of 2-1:1.0 failed with error -22 [ 170.395499][ T6088] usb 2-1: USB disconnect, device number 3 [ 170.431932][ T7163] device-mapper: table: 248:0: thin: Error opening pool device (-ENOENT) [ 170.469169][ T7163] device-mapper: ioctl: error adding target to table [ 170.720820][ T7175] FAULT_INJECTION: forcing a failure. [ 170.720820][ T7175] name failslab, interval 1, probability 0, space 0, times 1 [ 170.750886][ T7175] CPU: 1 PID: 7175 Comm: syz.4.306 Not tainted syzkaller #0 [ 170.758388][ T7175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 170.768501][ T7175] Call Trace: [ 170.771833][ T7175] [ 170.774839][ T7175] dump_stack_lvl+0x18c/0x250 [ 170.779642][ T7175] ? show_regs_print_info+0x20/0x20 [ 170.784926][ T7175] ? load_image+0x420/0x420 [ 170.789509][ T7175] ? __might_sleep+0xe0/0xe0 [ 170.794172][ T7175] ? __lock_acquire+0x7eb0/0x7eb0 [ 170.799491][ T7175] should_fail_ex+0x394/0x4c0 [ 170.804330][ T7175] should_failslab+0x9/0x20 [ 170.808895][ T7175] slab_pre_alloc_hook+0x59/0x300 [ 170.813999][ T7175] kmem_cache_alloc+0x5a/0x2d0 [ 170.818950][ T7175] ? sk_prot_alloc+0x57/0x210 [ 170.823814][ T7175] sk_prot_alloc+0x57/0x210 [ 170.828363][ T7175] ? sk_alloc+0x24/0x350 [ 170.832672][ T7175] sk_alloc+0x3a/0x350 [ 170.836821][ T7175] inet6_create+0x7d3/0x1160 [ 170.841496][ T7175] ? inet6_create+0x80/0x1160 [ 170.846303][ T7175] __sock_create+0x49e/0x940 [ 170.850958][ T7175] sctp_do_peeloff+0x3bf/0x690 [ 170.855879][ T7175] ? sctp_transport_traverse_process+0x490/0x490 [ 170.862265][ T7175] ? __lock_acquire+0x7eb0/0x7eb0 [ 170.867731][ T7175] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 170.873980][ T7175] sctp_getsockopt_peeloff_common+0x63/0x280 [ 170.880065][ T7175] sctp_getsockopt_peeloff_flags+0x148/0x230 [ 170.886154][ T7175] ? sctp_getsockopt_peeloff+0x230/0x230 [ 170.891878][ T7175] sctp_getsockopt+0x3a7/0xb60 [ 170.897168][ T7175] ? sock_recv_errqueue+0x5e0/0x5e0 [ 170.903302][ T7175] do_sock_getsockopt+0x379/0x450 [ 170.908402][ T7175] ? __ia32_sys_setsockopt+0x200/0x200 [ 170.913943][ T7175] ? lockdep_hardirqs_on+0x50/0x150 [ 170.919241][ T7175] __x64_sys_getsockopt+0x1d6/0x280 [ 170.924523][ T7175] ? lockdep_hardirqs_on+0x50/0x150 [ 170.929796][ T7175] ? lockdep_hardirqs_on+0x50/0x150 [ 170.935067][ T7175] do_syscall_64+0x55/0xb0 [ 170.939657][ T7175] ? clear_bhb_loop+0x40/0x90 [ 170.944425][ T7175] ? clear_bhb_loop+0x40/0x90 [ 170.949183][ T7175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.955155][ T7175] RIP: 0033:0x7f8baeba94d9 [ 170.959630][ T7175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.979397][ T7175] RSP: 002b:00007f8baf9cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 170.987886][ T7175] RAX: ffffffffffffffda RBX: 00007f8baee25fa0 RCX: 00007f8baeba94d9 [ 170.995929][ T7175] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003 [ 171.004060][ T7175] RBP: 00007f8baec3804e R08: 0000200000000440 R09: 0000000000000000 [ 171.012090][ T7175] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 171.020121][ T7175] R13: 00007f8baee26038 R14: 00007f8baee25fa0 R15: 00007fffd622d9a8 [ 171.028262][ T7175] [ 171.212475][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.990417][ T7203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.316'. [ 172.064435][ T7205] netlink: 'syz.4.317': attribute type 1 has an invalid length. [ 172.171148][ T7205] 8021q: adding VLAN 0 to HW filter on device bond3 [ 172.204838][ T7210] loop1: detected capacity change from 0 to 33280 [ 172.238528][ T7210] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 172.249393][ T7210] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 172.284451][ T7210] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 172.306770][ T7210] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e02c, mo2=0006] [ 172.316602][ T7210] System zones: 0-2, 18-18, 34-35 [ 172.345600][ T7210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.364897][ T7207] bond3: (slave veth5): Enslaving as an active interface with a down link [ 172.459866][ T7205] dummy0: left promiscuous mode [ 172.486506][ T7205] bond3: (slave dummy0): making interface the new active one [ 172.503608][ T7205] dummy0: entered promiscuous mode [ 172.509427][ T7205] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 172.527264][ T7207] netlink: 'syz.4.317': attribute type 10 has an invalid length. [ 172.543893][ T7214] loop2: detected capacity change from 0 to 33280 [ 172.552238][ T7207] netlink: 40 bytes leftover after parsing attributes in process `syz.4.317'. [ 172.569209][ T7207] bond3: (slave dummy0): Releasing active interface [ 172.590696][ T7215] lo: entered allmulticast mode [ 172.599114][ T7214] EXT4-fs (loop2): 1 truncate cleaned up [ 172.637445][ T7214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.704332][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.041397][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.130080][ T7223] loop1: detected capacity change from 0 to 256 [ 173.200647][ T7223] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 173.278424][ T7223] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff) [ 173.801611][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.328'. [ 173.903334][ T7245] binder: 7244:7245 ioctl c0306201 200000000100 returned -14 [ 173.943222][ T7245] binder: 7244:7245 ioctl c0306201 2000000002c0 returned -14 [ 175.103196][ T7256] syzkaller0: entered promiscuous mode [ 175.122709][ T7256] syzkaller0: entered allmulticast mode [ 175.522906][ T7266] 8021q: adding VLAN 0 to HW filter on device bond2 [ 175.635220][ T7269] bond_slave_0: entered promiscuous mode [ 175.641486][ T7269] bond_slave_1: entered promiscuous mode [ 175.647324][ T7269] bridge0: entered promiscuous mode [ 175.734881][ T7269] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 175.828233][ T7269] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 178.048791][ T7273] loop3: detected capacity change from 0 to 32768 [ 178.186601][ T7273] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 178.411263][ T7273] XFS (loop3): Ending clean mount [ 178.549594][ T5787] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 178.808332][ T7316] loop1: detected capacity change from 0 to 1764 [ 179.931837][ T7329] loop3: detected capacity change from 0 to 33792 [ 179.988754][ T7329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.083405][ T5888] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 180.182717][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.317469][ T5888] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 180.328273][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.362747][ T5888] usb 2-1: Product: syz [ 180.367008][ T5888] usb 2-1: Manufacturer: syz [ 180.380424][ T7340] loop3: detected capacity change from 0 to 36864 [ 180.402753][ T5888] usb 2-1: SerialNumber: syz [ 180.438494][ T7132] I/O error, dev loop3, sector 36736 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 180.910565][ T7346] loop3: detected capacity change from 0 to 34816 [ 180.966847][ T7346] EXT4-fs: Mount option(s) incompatible with ext2 [ 181.264017][ T5888] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 181.385490][ T5888] usb 2-1: USB disconnect, device number 4 [ 181.489555][ T7354] netlink: 24 bytes leftover after parsing attributes in process `syz.1.360'. [ 181.560097][ T7130] udevd[7130]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.893940][ T7366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.363'. [ 181.930560][ T7365] netlink: 24 bytes leftover after parsing attributes in process `syz.3.364'. [ 182.036913][ T7369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.363'. [ 182.119528][ T7369] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 182.147834][ T7369] bond3: (slave vti0): Error -95 calling set_mac_address [ 182.180171][ T7372] vlan3: entered allmulticast mode [ 182.201293][ T7372] bond3: entered allmulticast mode [ 182.231278][ T7372] bond3: (slave vlan3): Opening slave failed [ 183.369323][ T7381] loop3: detected capacity change from 0 to 1024 [ 183.547412][ T7388] netlink: 164 bytes leftover after parsing attributes in process `syz.4.370'. [ 183.563506][ T7388] netlink: 36 bytes leftover after parsing attributes in process `syz.4.370'. [ 183.881707][ T7392] kvm: kvm [7390]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 184.020228][ T7399] netlink: 'syz.4.375': attribute type 1 has an invalid length. [ 184.068208][ T7399] 8021q: adding VLAN 0 to HW filter on device bond4 [ 184.168485][ T7399] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 185.199940][ T7397] loop3: detected capacity change from 0 to 40427 [ 185.215591][ T7397] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 185.233595][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 185.233608][ T28] audit: type=1800 audit(1794627947.888:171): pid=7410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.378" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 185.241656][ T7397] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 185.280298][ T7397] F2FS-fs (loop3): Image doesn't support compression [ 185.287785][ T7397] F2FS-fs (loop3): Image doesn't support compression [ 185.303023][ T7397] F2FS-fs (loop3): invalid crc value [ 185.432121][ T7397] F2FS-fs (loop3): Start checkpoint disabled! [ 185.480075][ T7397] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 185.489944][ T7414] xt_TCPMSS: Only works on TCP SYN packets [ 185.496384][ T7397] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 185.699037][ T50] kworker/u4:3: attempt to access beyond end of device [ 185.699037][ T50] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 185.739372][ T50] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 185.764122][ T50] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 186.012294][ T7432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.387'. [ 186.204055][ T7432] bond4: entered promiscuous mode [ 186.209536][ T7432] 8021q: adding VLAN 0 to HW filter on device bond4 [ 186.406596][ T7432] 8021q: adding VLAN 0 to HW filter on device bond4 [ 186.430272][ T7432] bond4: (slave sit1): The slave device specified does not support setting the MAC address [ 186.457125][ T7432] bond4: (slave sit1): Error -95 calling set_mac_address [ 186.930848][ T28] audit: type=1326 audit(1794627949.578:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.2.388" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04537a94d9 code=0x0 [ 187.158132][ T7452] loop3: detected capacity change from 0 to 1764 [ 187.632825][ T6268] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 187.852903][ T6268] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 187.868763][ T6268] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.878029][ T6268] usb 4-1: Product: syz [ 187.886114][ T6268] usb 4-1: Manufacturer: syz [ 187.907423][ T6268] usb 4-1: SerialNumber: syz [ 188.235665][ T7473] WARNING! power/level is deprecated; use power/control instead [ 188.247409][ T6268] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 188.319313][ T6268] usb 4-1: USB disconnect, device number 2 [ 188.471886][ T7349] udevd[7349]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.855777][ T7509] syzkaller0: entered promiscuous mode [ 190.884526][ T7509] syzkaller0: entered allmulticast mode [ 191.804640][ T7531] syzkaller0: entered promiscuous mode [ 191.870629][ T7531] syzkaller0: entered allmulticast mode [ 193.579769][ T7540] loop2: detected capacity change from 0 to 1024 [ 194.310541][ T7559] FAULT_INJECTION: forcing a failure. [ 194.310541][ T7559] name failslab, interval 1, probability 0, space 0, times 0 [ 194.343016][ T7559] CPU: 0 PID: 7559 Comm: syz.1.425 Not tainted syzkaller #0 [ 194.350452][ T7559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 194.360567][ T7559] Call Trace: [ 194.363932][ T7559] [ 194.366996][ T7559] dump_stack_lvl+0x18c/0x250 [ 194.371755][ T7559] ? show_regs_print_info+0x20/0x20 [ 194.377018][ T7559] ? load_image+0x420/0x420 [ 194.381596][ T7559] ? __might_sleep+0xe0/0xe0 [ 194.386252][ T7559] ? __lock_acquire+0x7eb0/0x7eb0 [ 194.391367][ T7559] should_fail_ex+0x394/0x4c0 [ 194.396154][ T7559] should_failslab+0x9/0x20 [ 194.400711][ T7559] slab_pre_alloc_hook+0x59/0x300 [ 194.405791][ T7559] ? trace_contention_end+0x39/0xe0 [ 194.411049][ T7559] ? ipt_alloc_initial_table+0x6e/0x610 [ 194.416668][ T7559] ? ipt_alloc_initial_table+0x6e/0x610 [ 194.422286][ T7559] __kmem_cache_alloc_node+0x53/0x260 [ 194.427727][ T7559] ? ipt_alloc_initial_table+0x6e/0x610 [ 194.433378][ T7559] __kmalloc+0xa7/0x240 [ 194.437617][ T7559] ipt_alloc_initial_table+0x6e/0x610 [ 194.443093][ T7559] iptable_nat_table_init+0x23/0x2d0 [ 194.448453][ T7559] xt_find_table_lock+0x304/0x3e0 [ 194.453531][ T7559] xt_request_find_table_lock+0x26/0x100 [ 194.459209][ T7559] do_ipt_get_ctl+0x71a/0x1210 [ 194.464027][ T7559] ? do_ipt_set_ctl+0xe00/0xe00 [ 194.468938][ T7559] ? __lock_acquire+0x7eb0/0x7eb0 [ 194.474000][ T7559] ? rcu_is_watching+0x15/0xb0 [ 194.478804][ T7559] ? trace_contention_end+0x39/0xe0 [ 194.484035][ T7559] ? __mutex_lock+0x30d/0xce0 [ 194.488746][ T7559] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 194.494414][ T7559] ? mutex_unlock+0x10/0x10 [ 194.498963][ T7559] ? __might_fault+0xaa/0x120 [ 194.503675][ T7559] ? __lock_acquire+0x7eb0/0x7eb0 [ 194.508757][ T7559] nf_getsockopt+0x262/0x280 [ 194.513573][ T7559] ip_getsockopt+0x19f/0x230 [ 194.518249][ T7559] ? ip_get_mcast_msfilter+0x360/0x360 [ 194.523743][ T7559] ? __might_fault+0xaa/0x120 [ 194.528483][ T7559] ? __might_fault+0xc6/0x120 [ 194.533212][ T7559] ? __might_fault+0xaa/0x120 [ 194.537941][ T7559] ? sctp_getsockopt+0x9b/0xb60 [ 194.542842][ T7559] ? sock_recv_errqueue+0x5e0/0x5e0 [ 194.548124][ T7559] do_sock_getsockopt+0x379/0x450 [ 194.553212][ T7559] ? __ia32_sys_setsockopt+0x200/0x200 [ 194.558727][ T7559] ? lockdep_hardirqs_on+0x50/0x150 [ 194.564239][ T7559] __x64_sys_getsockopt+0x1d6/0x280 [ 194.569515][ T7559] ? lockdep_hardirqs_on+0x50/0x150 [ 194.574793][ T7559] ? lockdep_hardirqs_on+0x50/0x150 [ 194.580061][ T7559] do_syscall_64+0x55/0xb0 [ 194.584541][ T7559] ? clear_bhb_loop+0x40/0x90 [ 194.589271][ T7559] ? clear_bhb_loop+0x40/0x90 [ 194.594003][ T7559] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.599939][ T7559] RIP: 0033:0x7f9f421a94d9 [ 194.604421][ T7559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.624066][ T7559] RSP: 002b:00007f9f42fe2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 194.632694][ T7559] RAX: ffffffffffffffda RBX: 00007f9f42425fa0 RCX: 00007f9f421a94d9 [ 194.640732][ T7559] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 194.648744][ T7559] RBP: 00007f9f4223804e R08: 00002000000000c0 R09: 0000000000000000 [ 194.656774][ T7559] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 194.664785][ T7559] R13: 00007f9f42426038 R14: 00007f9f42425fa0 R15: 00007ffc2e7e4868 [ 194.672815][ T7559] [ 194.701262][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.708963][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.765918][ T7562] loop4: detected capacity change from 0 to 33792 [ 194.840173][ T28] audit: type=1326 audit(1794627957.488:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.2.427" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04537a94d9 code=0x7ffc0000 [ 195.149388][ T28] audit: type=1326 audit(1794627957.488:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.2.427" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04537a94d9 code=0x7ffc0000 [ 195.497989][ T7562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 195.591097][ T28] audit: type=1326 audit(1794627957.838:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.2.427" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04537a94d9 code=0x7ffc0000 [ 195.692950][ T7562] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.721302][ T7572] loop2: detected capacity change from 0 to 33280 [ 195.765169][ T28] audit: type=1326 audit(1794627957.858:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.2.427" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04537a94d9 code=0x7ffc0000 [ 195.813497][ T28] audit: type=1326 audit(1794627957.858:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.2.427" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f04537a94d9 code=0x7ffc0000 [ 195.888266][ T28] audit: type=1326 audit(1794627957.938:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.2.427" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04537a94d9 code=0x7ffc0000 [ 195.937951][ T7572] EXT4-fs error (device loop2): __ext4_fill_super:5525: inode #2: comm syz.2.427: casefold flag without casefold feature [ 195.972847][ T28] audit: type=1326 audit(1794627957.968:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.2.427" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f04537a9242 code=0x7ffc0000 [ 196.037484][ T5999] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 196.072505][ T7572] EXT4-fs (loop2): get root inode failed [ 196.078881][ T7572] EXT4-fs (loop2): mount failed [ 196.086304][ T28] audit: type=1326 audit(1794627958.048:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.2.427" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04537a94d9 code=0x7ffc0000 [ 196.114590][ T28] audit: type=1326 audit(1794627958.048:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.2.427" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f04537a92d7 code=0x7ffc0000 [ 196.211324][ T28] audit: type=1326 audit(1794627958.068:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.2.427" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04537a94d9 code=0x7ffc0000 [ 198.080851][ T7615] warning: `syz.3.439' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 199.104416][ T7649] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 199.130589][ T7649] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 200.245813][ T7658] loop2: detected capacity change from 0 to 128 [ 201.937855][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.460'. [ 202.083110][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.460'. [ 204.245130][ T7734] loop1: detected capacity change from 0 to 2048 [ 204.385720][ T7734] loop1: p2 < > p3 p4 [ 204.418734][ T7734] loop1: p3 start 65535 is beyond EOD, truncated [ 204.425531][ T7734] loop1: p4 size 262144 extends beyond EOD, truncated [ 205.033550][ T5153] loop1: p2 < > p3 p4 [ 205.043237][ T5153] loop1: p3 start 65535 is beyond EOD, truncated [ 205.049722][ T5153] loop1: p4 size 262144 extends beyond EOD, truncated [ 205.140565][ T7359] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 205.257385][ T7132] udevd[7132]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 205.277619][ T7359] udevd[7359]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 205.347932][ T7132] udevd[7132]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 205.361524][ T7359] udevd[7359]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 205.512915][ T5862] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 205.707579][ T5862] usb 4-1: unable to get BOS descriptor or descriptor too short [ 205.729357][ T5862] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 205.757122][ T5862] usb 4-1: config 1 interface 0 has no altsetting 0 [ 205.779084][ T5862] usb 4-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.40 [ 205.794135][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.810938][ T5862] usb 4-1: Manufacturer: 㠸 [ 205.822433][ T5862] usb 4-1: SerialNumber: 􌙬૽杓扵䣀긮쉬°넜䴻㠀罶呵夜꾳⤮婈䝉ຮ攕疛昴㪦奲궈簳⩜눎䰛㽣棽幮⑗❱᧏富ꛛ렞牤魑뉿ᛓꍈ椮鱄꞉㇯ⱙ饪꾸쑥䎦닿ᆚ코楥 [ 205.853644][ T7743] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 206.106547][ T5862] usbhid 4-1:1.0: can't add hid device: -71 [ 206.125945][ T5862] usbhid: probe of 4-1:1.0 failed with error -71 [ 206.142968][ T5862] usb 4-1: USB disconnect, device number 3 [ 207.843959][ T7775] loop4: detected capacity change from 0 to 2048 [ 207.973885][ T7775] loop4: p2 < > p3 p4 [ 208.087465][ T7775] loop4: p3 start 65535 is beyond EOD, truncated [ 208.094546][ T7775] loop4: p4 size 262144 extends beyond EOD, truncated [ 208.719272][ T7777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.484'. [ 208.815616][ T7777] dummy0: left promiscuous mode [ 208.831250][ T7777] bridge2: port 1(dummy0) entered blocking state [ 208.844548][ T7777] bridge2: port 1(dummy0) entered disabled state [ 208.857514][ T7777] dummy0: entered allmulticast mode [ 208.868816][ T7767] loop3: detected capacity change from 0 to 40427 [ 208.895011][ T7767] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 208.913325][ T7777] dummy0: entered promiscuous mode [ 208.922681][ T7767] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 208.949957][ T7778] netlink: 'syz.4.484': attribute type 10 has an invalid length. [ 208.981686][ T7767] F2FS-fs (loop3): Found nat_bits in checkpoint [ 209.012749][ T7778] netlink: 40 bytes leftover after parsing attributes in process `syz.4.484'. [ 209.046928][ T7778] bridge2: port 1(dummy0) entered blocking state [ 209.053581][ T7778] bridge2: port 1(dummy0) entered forwarding state [ 209.088113][ T7778] dummy0: left allmulticast mode [ 209.107203][ T7778] bridge2: port 1(dummy0) entered disabled state [ 209.197370][ T7767] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 209.220958][ T7767] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 209.742707][ T5776] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 209.902151][ T7793] loop1: detected capacity change from 0 to 164 [ 209.944863][ T5776] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 209.955903][ T5776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.285413][ T7767] netlink: 28 bytes leftover after parsing attributes in process `syz.3.481'. [ 210.317196][ T7767] netlink: 28 bytes leftover after parsing attributes in process `syz.3.481'. [ 210.430262][ T5776] usb 4-1: Cannot read MAC address [ 210.440607][ T5776] MOSCHIP usb-ethernet driver: probe of 4-1:7.0 failed with error -71 [ 210.467086][ T5776] usb 4-1: USB disconnect, device number 4 [ 211.044946][ T7801] loop2: detected capacity change from 0 to 33280 [ 211.257697][ T7801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.399421][ T7801] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.539180][ T7814] loop1: detected capacity change from 0 to 33280 [ 211.599035][ T7814] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 211.635574][ T7814] System zones: 1-12 [ 211.680760][ T7814] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.493: missing EA_INODE flag [ 211.756722][ T7814] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.493: error while reading EA inode 12 err=-117 [ 211.834034][ T7814] EXT4-fs (loop1): 1 orphan inode deleted [ 211.861806][ T7814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.977430][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 211.977447][ T28] audit: type=1804 audit(1794627974.618:242): pid=7814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.493" name="/newroot/112/file0/bus" dev="loop1" ino=15 res=1 errno=0 [ 212.012838][ T5793] Bluetooth: hci1: command 0x0406 tx timeout [ 212.019003][ T5795] Bluetooth: hci2: command 0x0406 tx timeout [ 212.025129][ T5099] Bluetooth: hci0: command 0x0406 tx timeout [ 212.190266][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.513856][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.678899][ T7829] loop1: detected capacity change from 0 to 128 [ 212.847807][ T7830] syz.1.496: attempt to access beyond end of device [ 212.847807][ T7830] loop1: rw=2049, sector=145, nr_sectors = 328 limit=128 [ 213.039930][ T7829] syz.1.496: attempt to access beyond end of device [ 213.039930][ T7829] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 213.084743][ T7829] syz.1.496: attempt to access beyond end of device [ 213.084743][ T7829] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 213.219979][ T7834] loop4: detected capacity change from 0 to 256 [ 213.326315][ T7834] FAT-fs (loop4): Directory bread(block 64) failed [ 213.337908][ T7834] FAT-fs (loop4): Directory bread(block 65) failed [ 213.359918][ T7834] FAT-fs (loop4): Directory bread(block 66) failed [ 213.372652][ T7834] FAT-fs (loop4): Directory bread(block 67) failed [ 213.392904][ T7834] FAT-fs (loop4): Directory bread(block 68) failed [ 213.402698][ T7834] FAT-fs (loop4): Directory bread(block 69) failed [ 213.420296][ T7834] FAT-fs (loop4): Directory bread(block 70) failed [ 213.429330][ T7834] FAT-fs (loop4): Directory bread(block 71) failed [ 213.439586][ T7834] FAT-fs (loop4): Directory bread(block 72) failed [ 213.452681][ T7834] FAT-fs (loop4): Directory bread(block 73) failed [ 213.455751][ T7838] tipc: Failed to remove unknown binding: 66,0,0/0:2509705245/2509705247 [ 213.476240][ T7838] tipc: Failed to remove unknown binding: 66,0,0/0:2509705245/2509705246 [ 213.565561][ T7842] tipc: Failed to remove unknown binding: 66,0,0/0:2509705245/2509705246 [ 213.645830][ T7842] tipc: Failed to remove unknown binding: 66,0,0/0:2509705245/2509705247 [ 213.715413][ T7842] tipc: Failed to remove unknown binding: 66,0,0/0:2509705245/2509705246 [ 213.974868][ T7844] loop3: detected capacity change from 0 to 2048 [ 214.089814][ T7844] loop3: p2 < > p3 p4 [ 214.105126][ T7844] loop3: p3 start 65535 is beyond EOD, truncated [ 214.111705][ T7844] loop3: p4 size 262144 extends beyond EOD, truncated [ 214.864284][ T7359] udevd[7359]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 214.879775][ T7132] udevd[7132]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 216.007495][ T7866] netlink: 204 bytes leftover after parsing attributes in process `syz.4.509'. [ 216.072924][ T6088] IPVS: starting estimator thread 0... [ 216.193097][ T7868] IPVS: using max 16 ests per chain, 38400 per kthread [ 217.251500][ T7885] loop1: detected capacity change from 0 to 128 [ 217.602847][ T6088] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 217.805750][ T6088] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.822713][ T6088] usb 5-1: config 0 has no interfaces? [ 217.829813][ T6088] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 217.844210][ T6088] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.868694][ T6088] usb 5-1: config 0 descriptor?? [ 218.228818][ T5862] usb 5-1: USB disconnect, device number 4 [ 219.336162][ T7904] gadgetfs: bound to dummy_udc driver [ 219.701513][ T7915] loop2: detected capacity change from 0 to 2048 [ 220.012819][ T6088] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 220.623825][ C0] gadgetfs: connected [ 220.631163][ T6088] gadgetfs: disconnected [ 221.190370][ T7925] loop4: detected capacity change from 0 to 33792 [ 221.324349][ T7359] I/O error, dev loop4, sector 33664 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 221.763074][ T7941] sctp: [Deprecated]: syz.3.536 (pid 7941) Use of int in max_burst socket option deprecated. [ 221.763074][ T7941] Use struct sctp_assoc_value instead [ 222.167759][ T7950] batman_adv: batadv0: Interface deactivated: syz_tun [ 222.242646][ T7950] batman_adv: batadv0: Removing interface: syz_tun [ 222.333561][ T7950] bond4: (slave veth0_to_bond): Releasing backup interface [ 222.461753][ T7950] bond1: (slave veth3): Releasing active interface [ 222.593905][ T7950] bond2: (slave ip6gretap1): Releasing active interface [ 222.712991][ T7950] bond3: (slave veth5): Releasing active interface [ 223.078149][ T7959] loop2: detected capacity change from 0 to 764 [ 223.270456][ T7959] rock: directory entry would overflow storage [ 223.331029][ T7959] rock: sig=0x5245, size=8, remaining=5 [ 223.603820][ T7963] tipc: Failed to remove unknown binding: 66,0,0/0:184587849/184587851 [ 223.657140][ T7963] tipc: Failed to remove unknown binding: 66,0,0/0:184587849/184587850 [ 223.699641][ T7963] tipc: Failed to remove unknown binding: 66,0,0/0:184587849/184587851 [ 223.773983][ T7963] tipc: Failed to remove unknown binding: 66,0,0/0:184587849/184587850 [ 224.391856][ T28] audit: type=1800 audit(1794627987.038:243): pid=7975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.546" name=08 dev="sda1" ino=2046 res=0 errno=0 [ 225.054158][ T7979] FAULT_INJECTION: forcing a failure. [ 225.054158][ T7979] name failslab, interval 1, probability 0, space 0, times 0 [ 225.092781][ T7979] CPU: 0 PID: 7979 Comm: syz.3.548 Not tainted syzkaller #0 [ 225.100185][ T7979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 225.110305][ T7979] Call Trace: [ 225.113645][ T7979] [ 225.116723][ T7979] dump_stack_lvl+0x18c/0x250 [ 225.121569][ T7979] ? show_regs_print_info+0x20/0x20 [ 225.126861][ T7979] ? load_image+0x420/0x420 [ 225.131443][ T7979] ? __might_sleep+0xe0/0xe0 [ 225.136480][ T7979] ? __lock_acquire+0x7eb0/0x7eb0 [ 225.141595][ T7979] should_fail_ex+0x394/0x4c0 [ 225.146362][ T7979] should_failslab+0x9/0x20 [ 225.150929][ T7979] slab_pre_alloc_hook+0x59/0x300 [ 225.156053][ T7979] kmem_cache_alloc+0x5a/0x2d0 [ 225.160874][ T7979] ? fcntl_setlk+0xaa/0x1070 [ 225.165539][ T7979] fcntl_setlk+0xaa/0x1070 [ 225.170051][ T7979] ? __might_fault+0xaa/0x120 [ 225.174833][ T7979] ? vfs_lock_file+0x110/0x110 [ 225.179680][ T7979] ? __might_fault+0xaa/0x120 [ 225.184423][ T7979] ? __might_fault+0xc6/0x120 [ 225.189186][ T7979] ? __might_fault+0xaa/0x120 [ 225.193968][ T7979] do_fcntl+0x8c1/0x1500 [ 225.198295][ T7979] ? kill_fasync+0x4b0/0x4b0 [ 225.202976][ T7979] ? __fget_files+0x28/0x460 [ 225.207642][ T7979] ? __fget_files+0x3fc/0x460 [ 225.212405][ T7979] ? tomoyo_file_fcntl+0x7b/0x220 [ 225.217507][ T7979] ? bpf_lsm_file_fcntl+0x9/0x10 [ 225.222556][ T7979] ? security_file_fcntl+0x80/0xa0 [ 225.227740][ T7979] __se_sys_fcntl+0xc9/0x1a0 [ 225.232412][ T7979] do_syscall_64+0x55/0xb0 [ 225.236908][ T7979] ? clear_bhb_loop+0x40/0x90 [ 225.241655][ T7979] ? clear_bhb_loop+0x40/0x90 [ 225.246399][ T7979] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.252443][ T7979] RIP: 0033:0x7f726f9a94d9 [ 225.256918][ T7979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.276592][ T7979] RSP: 002b:00007f72707a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 225.285081][ T7979] RAX: ffffffffffffffda RBX: 00007f726fc25fa0 RCX: 00007f726f9a94d9 [ 225.293134][ T7979] RDX: 0000200000000300 RSI: 0000000000000026 RDI: 0000000000000004 [ 225.301189][ T7979] RBP: 00007f726fa3804e R08: 0000000000000000 R09: 0000000000000000 [ 225.309231][ T7979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.317278][ T7979] R13: 00007f726fc26038 R14: 00007f726fc25fa0 R15: 00007ffc84741d28 [ 225.325336][ T7979] [ 225.492688][ T28] audit: type=1326 audit(1794627988.138:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.4.549" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baeba94d9 code=0x7ffc0000 [ 225.587866][ T28] audit: type=1326 audit(1794627988.138:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.4.549" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baeba94d9 code=0x7ffc0000 [ 225.613463][ T28] audit: type=1326 audit(1794627988.138:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.4.549" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baeba94d9 code=0x7ffc0000 [ 225.677992][ T28] audit: type=1326 audit(1794627988.138:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.4.549" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baeba94d9 code=0x7ffc0000 [ 225.679186][ T7985] loop4: detected capacity change from 0 to 256 [ 225.727652][ T28] audit: type=1326 audit(1794627988.138:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.4.549" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f8baeba94d9 code=0x7ffc0000 [ 225.818424][ T28] audit: type=1326 audit(1794627988.138:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.4.549" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baeba94d9 code=0x7ffc0000 [ 225.873869][ T7985] FAT-fs (loop4): Unrecognized mount option "utf8=xE6f8=" or missing value [ 225.942341][ T28] audit: type=1326 audit(1794627988.138:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.4.549" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baeba94d9 code=0x7ffc0000 [ 226.037462][ T28] audit: type=1326 audit(1794627988.138:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.4.549" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baeba94d9 code=0x7ffc0000 [ 226.123452][ T28] audit: type=1326 audit(1794627988.138:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.4.549" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baeba94d9 code=0x7ffc0000 [ 226.484599][ T7993] loop4: detected capacity change from 0 to 33280 [ 226.497896][ T7993] ext4: Unknown parameter 'euid<00000000000000000000' [ 226.682698][ T5776] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 226.895498][ T5776] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.918115][ T5776] usb 3-1: config 0 has no interfaces? [ 226.932728][ T5776] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 226.941858][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.979885][ T5776] usb 3-1: config 0 descriptor?? [ 227.019772][ T8001] loop4: detected capacity change from 0 to 64 [ 227.133109][ T8001] hfs: invalid gid -1 [ 227.139600][ T8001] hfs: unable to parse mount options [ 227.281456][ T8001] block device autoloading is deprecated and will be removed. [ 227.331664][ T8007] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 227.375364][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 227.389183][ T8010] netlink: 'syz.3.558': attribute type 4 has an invalid length. [ 227.398174][ T8007] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 227.456675][ T8010] netlink: 152 bytes leftover after parsing attributes in process `syz.3.558'. [ 227.496502][ T5887] usb 3-1: USB disconnect, device number 2 [ 227.576220][ T8014] netlink: 'syz.1.559': attribute type 1 has an invalid length. [ 227.614294][ T8014] bond0: entered promiscuous mode [ 227.619525][ T8014] bond0: entered allmulticast mode [ 227.740512][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'. [ 227.790711][ T8014] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 227.886815][ T8014] bond0: (slave bridge1): making interface the new active one [ 227.902826][ T8014] bridge1: entered promiscuous mode [ 227.909239][ T8014] bridge1: entered allmulticast mode [ 227.922376][ T8014] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 227.935521][ T8022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.559'. [ 227.984413][ T8022] bond0: left promiscuous mode [ 228.041413][ T8022] bridge1: left promiscuous mode [ 228.072125][ T8022] bond0: left allmulticast mode [ 228.090064][ T8022] bridge1: left allmulticast mode [ 228.116590][ T8022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.584255][ T8028] loop1: detected capacity change from 0 to 2048 [ 228.664977][ T8028] loop1: p1 < > p3 p4 < > [ 228.695592][ T8028] loop1: p3 size 861184 extends beyond EOD, truncated [ 229.226022][ T8037] net_ratelimit: 71530 callbacks suppressed [ 229.226040][ T8037] ip_tables: iptables: counters copy to user failed while replacing table [ 229.233427][ T8035] loop3: detected capacity change from 0 to 512 [ 231.239006][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 231.250793][ T8055] netlink: 'syz.1.577': attribute type 1 has an invalid length. [ 231.251355][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 231.275639][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 231.284727][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 231.303163][ T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 231.310784][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 231.381291][ T8055] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.618664][ T8059] veth5: entered allmulticast mode [ 231.644674][ T8059] bond1: (slave veth5): Enslaving as an active interface with a down link [ 231.745928][ T8055] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 231.781806][ T8056] rxe_eth0 speed is unknown, defaulting to 1000 [ 232.083561][ T8070] netlink: 20 bytes leftover after parsing attributes in process `syz.1.581'. [ 232.148602][ T8070] ip6gre1: entered promiscuous mode [ 232.187888][ T8070] ip6gre1: entered allmulticast mode [ 232.322735][ T8073] netlink: 'syz.1.581': attribute type 6 has an invalid length. [ 232.330753][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.581'. [ 232.431031][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'. [ 232.738781][ T8056] chnl_net:caif_netlink_parms(): no params data found [ 232.941356][ T8089] loop1: detected capacity change from 0 to 2048 [ 232.986701][ T8083] fuse: Unknown parameter '0x00000000000000030000000000000000000000000000000000000000' [ 233.010789][ T8056] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.043250][ T8056] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.063089][ T8056] bridge_slave_0: entered allmulticast mode [ 233.090513][ T8056] bridge_slave_0: entered promiscuous mode [ 233.124633][ T8056] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.135292][ T8056] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.149097][ T8056] bridge_slave_1: entered allmulticast mode [ 233.160602][ T8056] bridge_slave_1: entered promiscuous mode [ 233.176974][ T8093] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 233.260076][ T8083] rxe_eth0 speed is unknown, defaulting to 1000 [ 233.290575][ T8056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.318969][ T8056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.372926][ T5796] Bluetooth: hci1: command tx timeout [ 233.415267][ T8089] loop1: unable to read partition table [ 233.421359][ T8089] loop1: partition table beyond EOD, truncated [ 233.434945][ T8089] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 233.452880][ T8056] team0: Port device team_slave_0 added [ 233.503517][ T8056] team0: Port device team_slave_1 added [ 233.632931][ T8056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.657379][ T8056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.692256][ T8056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.766327][ T8056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.774325][ T8056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.803652][ T8056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.837148][ T5153] loop1: unable to read partition table [ 233.843502][ T5153] loop1: partition table beyond EOD, truncated [ 233.956298][ T8056] hsr_slave_0: entered promiscuous mode [ 233.974022][ T8056] hsr_slave_1: entered promiscuous mode [ 233.993178][ T8056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.022732][ T8056] Cannot create hsr debugfs directory [ 234.154943][ T28] kauditd_printk_skb: 124 callbacks suppressed [ 234.154961][ T28] audit: type=1326 audit(1794627996.808:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.4.590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baeba94d9 code=0x7ffc0000 [ 234.209907][ T28] audit: type=1326 audit(1794627996.808:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.4.590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baeba94d9 code=0x7ffc0000 [ 234.264874][ T8101] rxe_eth0 speed is unknown, defaulting to 1000 [ 234.272670][ T28] audit: type=1326 audit(1794627996.808:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.4.590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baeba94d9 code=0x7ffc0000 [ 234.321939][ T28] audit: type=1326 audit(1794627996.808:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.4.590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baeba94d9 code=0x7ffc0000 [ 234.369696][ T28] audit: type=1326 audit(1794627996.808:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.4.590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f8baeba94d9 code=0x7ffc0000 [ 234.449159][ T28] audit: type=1326 audit(1794627996.808:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.4.590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baeba94d9 code=0x7ffc0000 [ 234.480134][ T28] audit: type=1326 audit(1794627996.888:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.4.590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baeba94d9 code=0x7ffc0000 [ 234.514740][ T28] audit: type=1326 audit(1794627996.888:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.4.590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8baeba9242 code=0x7ffc0000 [ 234.547597][ T28] audit: type=1326 audit(1794627996.888:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.4.590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8baeba92d7 code=0x7ffc0000 [ 234.585944][ T28] audit: type=1326 audit(1794627996.888:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.4.590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8baeb661d1 code=0x7ffc0000 [ 234.938292][ T8111] IPVS: sh: FWM 3 0x00000003 - no destination available [ 234.991928][ T8056] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 235.030957][ T8056] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 235.087235][ T8056] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 235.119110][ T8056] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 235.282163][ T8056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.317657][ T8056] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.338907][ T2967] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.346192][ T2967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.372038][ T2967] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.379338][ T2967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.454758][ T5796] Bluetooth: hci1: command tx timeout [ 235.527050][ T8056] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 235.539442][ T8056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 235.597607][ T8120] loop2: detected capacity change from 0 to 256 [ 235.609214][ T8120] exfat: Bad value for 'uid' [ 235.714713][ T8120] loop2: detected capacity change from 0 to 256 [ 236.106099][ T8056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.312402][ T8129] loop1: detected capacity change from 0 to 33792 [ 236.347516][ T8129] EXT4-fs: Ignoring removed mblk_io_submit option [ 236.398912][ T8129] EXT4-fs (loop1): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 236.457464][ T8129] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.623122][ T8129] loop1: detected capacity change from 33792 to 64 [ 236.647285][ T8139] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 236.710501][ T8129] syz.1.597: attempt to access beyond end of device [ 236.710501][ T8129] loop1: rw=524288, sector=192, nr_sectors = 18 limit=64 [ 236.753389][ T8129] syz.1.597: attempt to access beyond end of device [ 236.753389][ T8129] loop1: rw=0, sector=192, nr_sectors = 8 limit=64 [ 236.796466][ T8129] syz.1.597: attempt to access beyond end of device [ 236.796466][ T8129] loop1: rw=0, sector=192, nr_sectors = 2 limit=64 [ 236.904396][ T8146] macvlan2: entered promiscuous mode [ 236.920187][ T5786] EXT4-fs warning (device loop1): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 236.943163][ T8146] vlan2: entered promiscuous mode [ 236.944498][ T5786] EXT4-fs warning (device loop1): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 236.950737][ T8146] gretap0: entered promiscuous mode [ 236.969134][ T5786] EXT4-fs warning (device loop1): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 236.984462][ T5786] EXT4-fs warning (device loop1): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 237.001776][ T8146] vlan2: left promiscuous mode [ 237.006629][ T5786] EXT4-fs warning (device loop1): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 237.016350][ T5786] EXT4-fs warning (device loop1): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 237.028339][ T8146] gretap0: left promiscuous mode [ 237.044730][ T5786] EXT4-fs warning (device loop1): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 237.065145][ T5786] EXT4-fs warning (device loop1): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 237.080537][ T5786] EXT4-fs warning (device loop1): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 237.132087][ T8145] rxe_eth0 speed is unknown, defaulting to 1000 [ 237.227598][ T8056] veth0_vlan: entered promiscuous mode [ 237.269059][ T8056] veth1_vlan: entered promiscuous mode [ 237.345979][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.404506][ T8131] kmmpd-loop1: attempt to access beyond end of device [ 237.404506][ T8131] loop1: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 237.433018][ T8131] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 237.467165][ T8056] veth0_macvtap: entered promiscuous mode [ 237.486369][ T8149] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.603'. [ 237.506734][ T8056] veth1_macvtap: entered promiscuous mode [ 237.532660][ T5796] Bluetooth: hci1: command tx timeout [ 237.580359][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.612910][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.623309][ T5796] Bluetooth: hci2: command 0x0406 tx timeout [ 237.653068][ T8151] loop4: detected capacity change from 0 to 33280 [ 237.657640][ T8056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.699021][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.729429][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.744413][ T8056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.790219][ T8056] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.799835][ T8056] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.825700][ T8151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.852770][ T8056] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.861569][ T8056] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.870868][ T8151] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.065896][ T5999] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.214913][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.237507][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.354328][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.369143][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.767772][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.781215][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.790453][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.801128][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.814677][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 238.822386][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.125479][ T8164] rxe_eth0 speed is unknown, defaulting to 1000 [ 239.613448][ T5796] Bluetooth: hci1: command tx timeout [ 239.861600][ T8164] chnl_net:caif_netlink_parms(): no params data found [ 240.144849][ T8164] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.152337][ T8164] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.160488][ T8164] bridge_slave_0: entered allmulticast mode [ 240.168421][ T8164] bridge_slave_0: entered promiscuous mode [ 240.178581][ T8164] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.194896][ T8164] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.237461][ T8164] bridge_slave_1: entered allmulticast mode [ 240.260513][ T8164] bridge_slave_1: entered promiscuous mode [ 240.370132][ T8164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.411645][ T8164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.538724][ T8164] team0: Port device team_slave_0 added [ 240.556259][ T8164] team0: Port device team_slave_1 added [ 240.668203][ T8164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.684902][ T8164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.727557][ T8164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.782155][ T8164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.806686][ T8164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.893047][ T5796] Bluetooth: hci0: command tx timeout [ 240.894290][ T8164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.978148][ T8164] hsr_slave_0: entered promiscuous mode [ 240.985174][ T8164] hsr_slave_1: entered promiscuous mode [ 240.991712][ T8164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.000128][ T8164] Cannot create hsr debugfs directory [ 241.722847][ T8164] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 241.746859][ T8164] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 241.787490][ T8164] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 241.862796][ T8164] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 241.995189][ T8203] netlink: 'syz.4.619': attribute type 10 has an invalid length. [ 242.014004][ T8203] dummy0: left promiscuous mode [ 242.085887][ T8203] team0: Port device dummy0 added [ 242.171287][ T8164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.228260][ T8164] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.271244][ T2967] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.278592][ T2967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.321780][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.329101][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.973896][ T5796] Bluetooth: hci0: command tx timeout [ 243.005869][ T8164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.796584][ T8164] veth0_vlan: entered promiscuous mode [ 243.824250][ T8164] veth1_vlan: entered promiscuous mode [ 243.877023][ T8164] veth0_macvtap: entered promiscuous mode [ 243.890116][ T8164] veth1_macvtap: entered promiscuous mode [ 243.913605][ T8164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.924588][ T8164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.941214][ T8164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.954570][ T8164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.967538][ T8164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.989653][ T8164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.007440][ T8164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.020944][ T8164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.039274][ T8164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.055556][ T8164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.072069][ T8164] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.082467][ T8164] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.098550][ T8164] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.115139][ T8164] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.271329][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.279537][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.330238][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.341941][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.637797][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.627'. [ 245.063802][ T5796] Bluetooth: hci0: command tx timeout [ 245.411795][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 245.411811][ T28] audit: type=1800 audit(1794628008.058:448): pid=8226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.620" name=08 dev="sda1" ino=2046 res=0 errno=0 [ 245.506863][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.622'. [ 245.864130][ T1134] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.978152][ T8241] netlink: 84 bytes leftover after parsing attributes in process `syz.5.626'. [ 246.047504][ T1134] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.089861][ T8241] veth2: entered allmulticast mode [ 246.184117][ T1134] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.361891][ T1134] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.381422][ T8251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.633'. [ 247.136903][ T5796] Bluetooth: hci0: command tx timeout [ 248.871951][ T1134] bond1: (slave gretap1): Releasing backup interface [ 249.378639][ T5796] Bluetooth: hci2: unexpected event for opcode 0x0c1b [ 249.792087][ T8325] 9pnet_fd: p9_fd_create_unix (8325): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 250.802025][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.932712][ T8329] loop5: detected capacity change from 0 to 34816 [ 251.009457][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.354352][ T8341] loop5: detected capacity change from 0 to 256 [ 251.488411][ T8341] FAT-fs (loop5): Directory bread(block 64) failed [ 251.498227][ T8341] FAT-fs (loop5): Directory bread(block 65) failed [ 251.508508][ T8341] FAT-fs (loop5): Directory bread(block 66) failed [ 251.529157][ T8341] FAT-fs (loop5): Directory bread(block 67) failed [ 251.561714][ T8341] FAT-fs (loop5): Directory bread(block 68) failed [ 251.602818][ T8341] FAT-fs (loop5): Directory bread(block 69) failed [ 251.612945][ T8341] FAT-fs (loop5): Directory bread(block 70) failed [ 251.638103][ T8341] FAT-fs (loop5): Directory bread(block 71) failed [ 251.665715][ T8341] FAT-fs (loop5): Directory bread(block 72) failed [ 251.673505][ T8341] FAT-fs (loop5): Directory bread(block 73) failed [ 251.757934][ T1134] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 251.797262][ T1134] bond3 (unregistering): Released all slaves [ 252.204070][ T1134] bond1 (unregistering): (slave bond2): Releasing backup interface [ 252.220574][ T1134] bond2 (unregistering): Released all slaves [ 252.481576][ T1134] bond1 (unregistering): Released all slaves [ 252.560275][ T1134] team0 (unregistering): Port device geneve1 removed [ 253.525373][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 253.595268][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 253.671533][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.737917][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.748878][ T6268] infiniband syz1: ib_query_port failed (-19) [ 254.251705][ T1134] bond0 (unregistering): Released all slaves [ 254.322782][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.654'. [ 254.715164][ T8376] vlan1: entered allmulticast mode [ 254.720415][ T8376] veth0_vlan: entered allmulticast mode [ 256.039343][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.046380][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.312151][ T8464] tmpfs: Bad value for 'nr_blocks' [ 258.930329][ T8487] loop5: detected capacity change from 0 to 33792 [ 258.984823][ T8487] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.103388][ T5776] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 259.292699][ T5776] usb 3-1: Using ep0 maxpacket: 16 [ 259.309902][ T5776] usb 3-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 259.354872][ T5776] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 259.391272][ T5776] usb 3-1: config 0 interface 0 has no altsetting 0 [ 259.405816][ T5776] usb 3-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 259.419499][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.433101][ T5776] usb 3-1: config 0 descriptor?? [ 259.619648][ T8504] netlink: 'syz.6.691': attribute type 1 has an invalid length. [ 259.869541][ T8056] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.298369][ T5776] usbhid 3-1:0.0: can't add hid device: -71 [ 260.326970][ T5776] usbhid: probe of 3-1:0.0 failed with error -71 [ 260.364506][ T5776] usb 3-1: USB disconnect, device number 3 [ 262.029044][ T8547] loop6: detected capacity change from 0 to 1024 [ 262.486149][ T8566] bond0: (slave bridge0): Releasing backup interface [ 262.509470][ T8566] bridge0: left promiscuous mode [ 262.533941][ T8566] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.541664][ T8566] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.684045][ T8566] bond1: (slave team0): Releasing active interface [ 262.731430][ T8566] batman_adv: batadv0: Interface deactivated: dummy0 [ 262.762814][ T8566] batman_adv: batadv0: Removing interface: dummy0 [ 262.814730][ T8566] bridge_slave_0: left allmulticast mode [ 262.854130][ T8566] bridge_slave_0: left promiscuous mode [ 262.860139][ T8566] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.897950][ T8566] bridge_slave_1: left allmulticast mode [ 262.918400][ T8566] bridge_slave_1: left promiscuous mode [ 262.945926][ T8566] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.984950][ T8566] bond0: (slave bond_slave_0): Releasing backup interface [ 263.008431][ T8566] bond_slave_0: left promiscuous mode [ 263.849123][ T8582] io-wq is not configured for unbound workers [ 263.883344][ T8566] bond0: (slave bond_slave_1): Releasing backup interface [ 263.969155][ T8566] bond_slave_1: left promiscuous mode [ 264.042298][ T8566] team0: Port device team_slave_0 removed [ 264.079800][ T8566] team0: Port device team_slave_1 removed [ 264.106401][ T8566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.123129][ T8566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.148969][ T8566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.156968][ T8566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.181550][ T8566] bond2: (slave macvlan2): Removing an active aggregator [ 264.191359][ T8566] bond2: (slave macvlan2): Releasing backup interface [ 264.249791][ T8596] loop4: detected capacity change from 0 to 164 [ 264.289708][ T8569] team0: Mode changed to "loadbalance" [ 264.814047][ T8611] loop2: detected capacity change from 0 to 1024 [ 264.914857][ T8615] netlink: 'syz.6.718': attribute type 39 has an invalid length. [ 265.630669][ T8641] netlink: 4 bytes leftover after parsing attributes in process `syz.6.725'. [ 266.412997][ T8666] netlink: 12 bytes leftover after parsing attributes in process `syz.6.740'. [ 266.523057][ T8666] bridge1: entered allmulticast mode [ 266.533720][ T8666] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 266.553786][ T8673] netlink: 'syz.2.732': attribute type 39 has an invalid length. [ 267.157893][ T8691] FAULT_INJECTION: forcing a failure. [ 267.157893][ T8691] name failslab, interval 1, probability 0, space 0, times 0 [ 267.190530][ T8691] CPU: 0 PID: 8691 Comm: syz.5.737 Not tainted syzkaller #0 [ 267.199563][ T8691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 267.209823][ T8691] Call Trace: [ 267.213182][ T8691] [ 267.216197][ T8691] dump_stack_lvl+0x18c/0x250 [ 267.220965][ T8691] ? show_regs_print_info+0x20/0x20 [ 267.226243][ T8691] ? load_image+0x420/0x420 [ 267.230828][ T8691] ? __lock_acquire+0x7eb0/0x7eb0 [ 267.236037][ T8691] should_fail_ex+0x394/0x4c0 [ 267.240822][ T8691] should_failslab+0x9/0x20 [ 267.246788][ T8691] slab_pre_alloc_hook+0x59/0x300 [ 267.251900][ T8691] ? __dma_fence_unwrap_merge+0x572/0xee0 [ 267.257787][ T8691] ? __dma_fence_unwrap_merge+0x572/0xee0 [ 267.263610][ T8691] __kmem_cache_alloc_node+0x53/0x260 [ 267.269331][ T8691] ? __dma_fence_unwrap_merge+0x572/0xee0 [ 267.275213][ T8691] __kmalloc+0xa7/0x240 [ 267.279466][ T8691] ? dma_fence_chain_walk+0x3d9/0x4a0 [ 267.285966][ T8691] __dma_fence_unwrap_merge+0x572/0xee0 [ 267.291605][ T8691] sync_file_ioctl+0xc3a/0xef0 [ 267.296446][ T8691] ? sync_file_poll+0x240/0x240 [ 267.301386][ T8691] ? bpf_lsm_file_ioctl+0x9/0x10 [ 267.306386][ T8691] ? security_file_ioctl+0x80/0xa0 [ 267.311939][ T8691] ? sync_file_poll+0x240/0x240 [ 267.316866][ T8691] __se_sys_ioctl+0xfd/0x170 [ 267.321507][ T8691] do_syscall_64+0x55/0xb0 [ 267.326141][ T8691] ? clear_bhb_loop+0x40/0x90 [ 267.330903][ T8691] ? clear_bhb_loop+0x40/0x90 [ 267.335967][ T8691] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 267.343357][ T8691] RIP: 0033:0x7f16411a94d9 [ 267.348517][ T8691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.368406][ T8691] RSP: 002b:00007f164205a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.376865][ T8691] RAX: ffffffffffffffda RBX: 00007f1641425fa0 RCX: 00007f16411a94d9 [ 267.384881][ T8691] RDX: 0000200000000780 RSI: 00000000c0303e03 RDI: 0000000000000006 [ 267.392895][ T8691] RBP: 00007f164123804e R08: 0000000000000000 R09: 0000000000000000 [ 267.400931][ T8691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.408980][ T8691] R13: 00007f1641426038 R14: 00007f1641425fa0 R15: 00007ffe874105d8 [ 267.417008][ T8691] [ 268.227016][ T8715] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.251278][ T8715] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.286768][ T8714] team0: Port device dummy0 removed [ 268.466893][ T8714] team0: Mode changed to "loadbalance" [ 268.478151][ T8716] vlan0: entered promiscuous mode [ 269.433340][ T8756] netlink: 'syz.5.755': attribute type 11 has an invalid length. [ 270.933070][ T8786] batman_adv: batadv0: Adding interface: veth0 [ 270.947033][ T8786] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.972707][ T8786] batman_adv: batadv0: Interface activated: veth0 [ 271.008124][ T8786] batman_adv: batadv0: Interface deactivated: veth0 [ 271.025380][ T8786] batman_adv: batadv0: Removing interface: veth0 [ 271.060760][ T8786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.100167][ T8786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.145392][ T8786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.159290][ T8786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.735161][ T8799] loop4: detected capacity change from 0 to 8 [ 271.964747][ T8788] SQUASHFS error: Failed to read block 0x8f: -5 [ 271.990157][ T28] audit: type=1800 audit(1794628034.638:449): pid=8788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.763" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 272.074273][ T8788] SQUASHFS error: Failed to read block 0x285: -5 [ 272.091149][ T8788] SQUASHFS error: Unable to read metadata cache entry [283] [ 272.111594][ T8788] SQUASHFS error: read_indexes: reading block [283:0] [ 272.156902][ T8788] SQUASHFS error: Failed to read block 0x0: -5 [ 272.175218][ T8788] SQUASHFS error: Unable to read metadata cache entry [283] [ 272.203070][ T8788] SQUASHFS error: read_indexes: reading block [283:0] [ 272.223071][ T8788] SQUASHFS error: Failed to read block 0x0: -5 [ 272.229426][ T8788] SQUASHFS error: Unable to read metadata cache entry [283] [ 272.261118][ T8788] SQUASHFS error: read_indexes: reading block [283:0] [ 272.292128][ T8788] SQUASHFS error: Failed to read block 0x0: -5 [ 272.312778][ T8788] SQUASHFS error: Unable to read metadata cache entry [283] [ 272.320522][ T8788] SQUASHFS error: read_indexes: reading block [283:0] [ 272.373743][ T8788] SQUASHFS error: Failed to read block 0x0: -5 [ 272.380123][ T8788] SQUASHFS error: Unable to read metadata cache entry [283] [ 272.405775][ T8788] SQUASHFS error: read_indexes: reading block [283:0] [ 272.423991][ T8788] SQUASHFS error: Failed to read block 0x0: -5 [ 272.448942][ T8787] SQUASHFS error: Unable to read metadata cache entry [283] [ 272.458511][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 272.472643][ T8788] SQUASHFS error: Unable to read metadata cache entry [283] [ 272.472846][ T8787] SQUASHFS error: read_indexes: reading block [283:0] [ 272.480029][ T8788] SQUASHFS error: read_indexes: reading block [283:0] [ 272.480206][ T8788] SQUASHFS error: Failed to read block 0x0: -5 [ 272.528299][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 272.554015][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 272.573674][ T8788] SQUASHFS error: Unable to read metadata cache entry [283] [ 272.585945][ T8788] SQUASHFS error: read_indexes: reading block [283:0] [ 272.623816][ T8787] SQUASHFS error: Unable to read metadata cache entry [283] [ 272.632640][ T8788] SQUASHFS error: Failed to read block 0x0: -5 [ 272.643331][ T8788] SQUASHFS error: Unable to read metadata cache entry [283] [ 272.650762][ T8788] SQUASHFS error: read_indexes: reading block [283:0] [ 272.682781][ T8787] SQUASHFS error: read_indexes: reading block [283:0] [ 272.721530][ T8787] SQUASHFS error: Unable to read metadata cache entry [283] [ 272.751418][ T8788] SQUASHFS error: Failed to read block 0x0: -5 [ 272.770106][ T8788] SQUASHFS error: Unable to read metadata cache entry [283] [ 272.780523][ T8787] SQUASHFS error: read_indexes: reading block [283:0] [ 272.812702][ T8788] SQUASHFS error: read_indexes: reading block [283:0] [ 272.820387][ T8788] SQUASHFS error: Failed to read block 0x0: -5 [ 272.864404][ T8787] SQUASHFS error: Unable to read metadata cache entry [283] [ 272.872150][ T8787] SQUASHFS error: read_indexes: reading block [283:0] [ 272.926041][ T8788] SQUASHFS error: Unable to read metadata cache entry [283] [ 272.956600][ T8788] SQUASHFS error: read_indexes: reading block [283:0] [ 272.989873][ T8799] SQUASHFS error: Unable to read metadata cache entry [283] [ 273.013605][ T8799] SQUASHFS error: read_indexes: reading block [283:0] [ 273.063034][ T8799] SQUASHFS error: Unable to read metadata cache entry [283] [ 273.070429][ T8799] SQUASHFS error: read_indexes: reading block [283:0] [ 273.227757][ T8787] SQUASHFS error: Unable to read metadata cache entry [283] [ 273.349341][ T8787] SQUASHFS error: read_indexes: reading block [283:0] [ 273.491350][ T8788] SQUASHFS error: Unable to read metadata cache entry [283] [ 273.614169][ T8788] SQUASHFS error: read_indexes: reading block [283:0] [ 273.730109][ T8799] SQUASHFS error: Unable to read metadata cache entry [283] [ 273.998721][ T8799] SQUASHFS error: read_indexes: reading block [283:0] [ 274.066444][ T8835] loop5: detected capacity change from 0 to 33792 [ 274.148572][ T8835] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 274.194012][ T8835] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.271946][ T8843] netlink: 'syz.6.777': attribute type 10 has an invalid length. [ 274.405515][ T8843] team0: Port device wlan0 added [ 274.477729][ T8842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.840844][ T8056] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 275.900070][ T8900] loop2: detected capacity change from 0 to 33792 [ 275.951724][ T8903] loop6: detected capacity change from 0 to 33280 [ 275.967021][ T8900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 275.985685][ T8903] EXT4-fs (loop6): Test dummy encryption mode enabled [ 276.041391][ T8900] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.062057][ T8903] EXT4-fs error (device loop6): ext4_validate_block_bitmap:430: comm syz.6.792: bg 0: block 7: invalid block bitmap [ 276.216313][ T8903] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6660: Corrupt filesystem [ 276.276839][ T8903] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2974: inode #11: comm syz.6.792: corrupted xattr block 95: invalid header [ 276.351115][ T8903] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 276.382769][ T8903] EXT4-fs (loop6): 1 orphan inode deleted [ 276.390067][ T8903] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.743620][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 276.844701][ T8164] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.182294][ T8924] netlink: 1335 bytes leftover after parsing attributes in process `syz.2.795'. [ 278.877964][ T8942] netlink: 'syz.6.799': attribute type 6 has an invalid length. [ 279.739191][ T8933] md: pers->run() failed ... [ 280.303605][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.5.805'. [ 280.394462][ T5776] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 280.438472][ T6268] kernel read not supported for file /input/event1 (pid: 6268 comm: kworker/1:6) [ 280.596930][ T5776] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.621926][ T5776] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 280.651792][ T5776] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.684686][ T5776] usb 5-1: config 0 descriptor?? [ 280.707894][ T5776] usb 5-1: bad CDC descriptors [ 280.921934][ T8954] loop2: detected capacity change from 0 to 32768 [ 281.017272][ T8954] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 281.062361][ T6268] usb 5-1: USB disconnect, device number 5 [ 281.302295][ T8954] XFS (loop2): Ending clean mount [ 281.916574][ T9003] 0: reclassify loop, rule prio 0, protocol 03 [ 281.958161][ T5788] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 283.946279][ T9044] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 284.256454][ T9055] netlink: 52 bytes leftover after parsing attributes in process `syz.5.820'. [ 284.314662][ T9055] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.322156][ T9055] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.548620][ T5796] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 284.559083][ T5796] CPU: 1 PID: 5796 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 284.566717][ T5796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 284.576847][ T5796] Workqueue: hci0 hci_rx_work [ 284.581603][ T5796] Call Trace: [ 284.584928][ T5796] [ 284.587909][ T5796] dump_stack_lvl+0x18c/0x250 [ 284.592744][ T5796] ? show_regs_print_info+0x20/0x20 [ 284.598025][ T5796] ? load_image+0x420/0x420 [ 284.602654][ T5796] sysfs_create_dir_ns+0x26e/0x2a0 [ 284.607862][ T5796] ? __lock_acquire+0x7eb0/0x7eb0 [ 284.613127][ T5796] ? sysfs_warn_dup+0xa0/0xa0 [ 284.618627][ T5796] ? do_raw_spin_unlock+0x121/0x230 [ 284.623868][ T5796] kobject_add_internal+0x617/0xc90 [ 284.629142][ T5796] kobject_add+0x164/0x240 [ 284.633689][ T5796] ? kobject_init+0x1d0/0x1d0 [ 284.638442][ T5796] ? get_device_parent+0x366/0x390 [ 284.643678][ T5796] device_add+0x3fa/0xc40 [ 284.648064][ T5796] hci_conn_add_sysfs+0xd5/0x1e0 [ 284.653076][ T5796] le_conn_complete_evt+0xfe7/0x1690 [ 284.658694][ T5796] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 284.665375][ T5796] ? __copy_skb_header+0xa3/0x4a0 [ 284.670472][ T5796] ? __asan_memcpy+0x40/0x70 [ 284.675128][ T5796] ? __skb_clone+0x5c/0x6c0 [ 284.679693][ T5796] ? skb_pull_data+0xf0/0x1f0 [ 284.684424][ T5796] hci_le_enh_conn_complete_evt+0x189/0x460 [ 284.690462][ T5796] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 284.696939][ T5796] hci_event_packet+0x623/0xe60 [ 284.701877][ T5796] ? hci_remote_host_features_evt+0x150/0x150 [ 284.708018][ T5796] ? bis_list+0x290/0x290 [ 284.712411][ T5796] ? kcov_remote_start+0x513/0x810 [ 284.717563][ T5796] ? lockdep_hardirqs_on+0x98/0x150 [ 284.722820][ T5796] ? hci_send_to_monitor+0xd7/0x4f0 [ 284.728085][ T5796] hci_rx_work+0x43a/0xd60 [ 284.732571][ T5796] ? process_scheduled_works+0x975/0x1600 [ 284.738366][ T5796] process_scheduled_works+0xa60/0x1600 [ 284.743979][ T5796] ? worker_attach_to_pool+0x370/0x370 [ 284.749573][ T5796] ? assign_work+0x3cc/0x5d0 [ 284.754217][ T5796] worker_thread+0xa5e/0xfe0 [ 284.758967][ T5796] kthread+0x2fa/0x390 [ 284.763130][ T5796] ? pr_cont_work+0x550/0x550 [ 284.768012][ T5796] ? kthread_blkcg+0xd0/0xd0 [ 284.772709][ T5796] ret_from_fork+0x48/0x80 [ 284.777652][ T5796] ? kthread_blkcg+0xd0/0xd0 [ 284.782298][ T5796] ret_from_fork_asm+0x11/0x20 [ 284.787125][ T5796] [ 284.793770][ T5796] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 284.808555][ T5796] Bluetooth: hci0: failed to register connection device [ 284.837153][ T9061] loop4: detected capacity change from 0 to 36864 [ 284.871678][ T9061] EXT4-fs: Ignoring removed mblk_io_submit option [ 284.926298][ T9061] EXT4-fs (loop4): Test dummy encryption mode enabled [ 284.980781][ T9061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.061243][ T9061] syz_tun: entered allmulticast mode [ 285.114191][ T5887] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 285.177710][ T5999] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.309088][ T5887] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 285.334856][ T5887] usb 7-1: config 0 interface 0 has no altsetting 0 [ 285.366484][ T5887] usb 7-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 285.395438][ T5887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.432119][ T5887] usb 7-1: config 0 descriptor?? [ 285.461234][ T9067] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 285.880857][ T9093] loop5: detected capacity change from 0 to 2048 [ 285.893792][ T9092] loop4: detected capacity change from 0 to 33792 [ 285.906934][ T9089] rxe_eth0 speed is unknown, defaulting to 1000 [ 285.923962][ T9092] EXT4-fs: inline encryption not supported [ 285.940493][ T9092] EXT4-fs: Ignoring removed bh option [ 285.947877][ T9093] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 286.001421][ T9092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.009656][ T5887] hid_parser_main: 27 callbacks suppressed [ 286.009730][ T5887] lenovo 0003:17EF:6062.0002: unknown main item tag 0x2 [ 286.048528][ T9093] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 286.112703][ T5887] lenovo 0003:17EF:6062.0002: unknown main item tag 0x3 [ 286.120547][ T5887] lenovo 0003:17EF:6062.0002: unknown main item tag 0x1 [ 286.208497][ T5887] lenovo 0003:17EF:6062.0002: unknown main item tag 0x2 [ 286.265102][ T5887] lenovo 0003:17EF:6062.0002: hidraw0: USB HID v0.01 Device [HID 17ef:6062] on usb-dummy_hcd.6-1/input0 [ 286.295132][ T5999] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.322730][ T5887] usb 7-1: USB disconnect, device number 2 [ 286.617372][ T9102] fido_id[9102]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 287.014310][ T9120] syzkaller0: entered promiscuous mode [ 287.020080][ T9120] syzkaller0: entered allmulticast mode [ 287.459687][ T9128] netlink: 'syz.5.834': attribute type 1 has an invalid length. [ 287.541462][ T9128] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.591387][ T9133] bond1: entered promiscuous mode [ 287.829713][ T9128] bond1: (slave dummy0): making interface the new active one [ 287.859709][ T9128] dummy0: entered promiscuous mode [ 287.902819][ T9128] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 287.942642][ T9133] bond1: left promiscuous mode [ 287.964490][ T9133] dummy0: left promiscuous mode [ 288.115521][ T9141] loop4: detected capacity change from 0 to 1024 [ 290.026280][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.845'. [ 290.620982][ T9190] loop4: detected capacity change from 0 to 33792 [ 290.820770][ T9190] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 290.835008][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.915184][ T9190] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 290.973149][ T9190] EXT4-fs error (device loop4): ext4_acquire_dquot:6958: comm syz.4.847: Failed to acquire dquot type 0 [ 291.057401][ T9190] EXT4-fs error (device loop4): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 291.078728][ T9206] loop2: detected capacity change from 0 to 764 [ 291.133930][ T9190] EXT4-fs (loop4): 1 truncate cleaned up [ 291.141324][ T9190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.388565][ T9206] Symlink component flag not implemented [ 291.734881][ T9216] loop2: detected capacity change from 0 to 33280 [ 291.772287][ T9216] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 291.857487][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.899442][ T9216] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 291.958798][ T9216] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 292.000812][ T9216] EXT4-fs error (device loop2): ext4_acquire_dquot:6958: comm syz.2.850: Failed to acquire dquot type 1 [ 292.138201][ T9216] EXT4-fs (loop2): 1 truncate cleaned up [ 292.185901][ T9216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 292.362330][ T9216] EXT4-fs (loop2): shut down requested (0) [ 292.474238][ T9228] EXT4-fs error (device loop2): ext4_lookup:1864: inode #2: comm syz.2.850: deleted inode referenced: 12 [ 292.679651][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 292.893181][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.983278][ T6092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.136709][ T52] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 293.143075][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.430214][ T9244] batadv_slave_1: entered promiscuous mode [ 293.455579][ T9244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.855'. [ 293.483812][ T9244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.603463][ T5999] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.735800][ T9244] batadv_slave_1 (unregistering): left promiscuous mode [ 293.752876][ T9244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.773717][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.959138][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.063341][ T9255] loop4: detected capacity change from 0 to 64 [ 294.197957][ T9255] hfs: inconsistency in B*Tree (-1,0,2,3,0) [ 294.220532][ T9255] hfs: get root inode failed [ 294.468706][ T9263] xt_TCPMSS: Only works on TCP SYN packets [ 294.497267][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.859'. [ 294.947937][ T9275] tipc: Started in network mode [ 294.961110][ T9275] tipc: Node identity 4, cluster identity 4711 [ 294.974707][ T9275] tipc: Node number set to 4 [ 294.989803][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.488343][ T28] audit: type=1326 audit(1803017178.140:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.2.867" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04537a94d9 code=0x7ffc0000 [ 295.571244][ T9293] vlan3: entered allmulticast mode [ 295.584876][ T28] audit: type=1326 audit(1803017178.170:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.2.867" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f04537a94d9 code=0x7ffc0000 [ 295.626004][ T9293] veth0_to_bond: entered allmulticast mode [ 295.664986][ T28] audit: type=1326 audit(1803017178.170:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.2.867" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04537a94d9 code=0x7ffc0000 [ 295.729194][ T28] audit: type=1326 audit(1803017178.170:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.2.867" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04537a94d9 code=0x7ffc0000 [ 295.782089][ T28] audit: type=1326 audit(1803017178.140:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.2.867" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04537a94d9 code=0x7ffc0000 [ 295.847788][ T28] audit: type=1326 audit(1803017178.170:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.2.867" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04537a94d9 code=0x7ffc0000 [ 295.901671][ T28] audit: type=1326 audit(1803017178.170:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.2.867" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04537a94d9 code=0x7ffc0000 [ 295.946621][ T28] audit: type=1326 audit(1803017178.170:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.2.867" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04537a94d9 code=0x7ffc0000 [ 295.977793][ T28] audit: type=1326 audit(1803017178.170:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.2.867" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f04537a94d9 code=0x7ffc0000 [ 296.021235][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.040843][ T28] audit: type=1326 audit(1803017178.170:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.2.867" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04537a94d9 code=0x7ffc0000 [ 296.109352][ T28] audit: type=1326 audit(1803017178.170:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.2.867" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04537a94d9 code=0x7ffc0000 [ 296.142051][ T28] audit: type=1326 audit(1803017178.170:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.2.867" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04537a94d9 code=0x7ffc0000 [ 296.173347][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.192379][ T28] audit: type=1326 audit(1803017178.170:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.2.867" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04537a94d9 code=0x7ffc0000 [ 296.259165][ T28] audit: type=1326 audit(1803017178.170:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.2.867" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f04537a94d9 code=0x7ffc0000 [ 296.311174][ T28] audit: type=1326 audit(1803017178.170:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.2.867" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04537a94d9 code=0x7ffc0000 [ 296.335046][ T6092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.052998][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.093203][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.671784][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.879'. [ 298.772826][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.879'. [ 299.143239][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.213866][ T6092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.477730][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 299.743880][ T27] usb 3-1: config 1 interface 0 has no altsetting 0 [ 299.840808][ T27] usb 3-1: string descriptor 0 read error: -22 [ 300.353622][ T27] usb 3-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.40 [ 300.409041][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.822021][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.056823][ T9367] loop4: detected capacity change from 0 to 33792 [ 301.095595][ T9367] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 301.130309][ T9370] loop5: detected capacity change from 0 to 32896 [ 301.154521][ T9367] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 301.174391][ T9370] EXT4-fs: Ignoring removed mblk_io_submit option [ 301.201565][ T9367] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 301.239465][ T9367] EXT4-fs error (device loop4): ext4_get_journal_inode:5826: inode #5: comm syz.4.883: unexpected bad inode w/o EXT4_IGET_BAD [ 301.285793][ T9367] EXT4-fs (loop4): no journal found [ 301.291095][ T9367] EXT4-fs (loop4): can't get journal size [ 301.313209][ T9367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 301.340281][ T27] elecom 0003:056E:011C.0003: unknown main item tag 0x0 [ 301.378628][ T9370] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 301.398909][ T27] elecom 0003:056E:011C.0003: unknown main item tag 0x0 [ 301.441985][ T27] elecom 0003:056E:011C.0003: unknown main item tag 0x0 [ 301.452157][ T9370] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 301.463486][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.496018][ T27] elecom 0003:056E:011C.0003: unknown main item tag 0x0 [ 301.541135][ T27] elecom 0003:056E:011C.0003: unknown main item tag 0x0 [ 301.567028][ T27] elecom 0003:056E:011C.0003: unknown main item tag 0x0 [ 301.575944][ T5999] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.585310][ T9370] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 301.623049][ T27] elecom 0003:056E:011C.0003: unknown main item tag 0x0 [ 301.632860][ T27] elecom 0003:056E:011C.0003: unknown main item tag 0x0 [ 301.639934][ T27] elecom 0003:056E:011C.0003: unknown main item tag 0x0 [ 301.695182][ T27] elecom 0003:056E:011C.0003: unknown main item tag 0x0 [ 301.720962][ T8056] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 301.854402][ T6268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.940677][ T27] elecom 0003:056E:011C.0003: hidraw0: USB HID v0.04 Device [HID 056e:011c] on usb-dummy_hcd.2-1/input0 [ 301.993639][ T27] usb 3-1: USB disconnect, device number 4 [ 302.073840][ T9382] syzkaller0: entered promiscuous mode [ 302.108478][ T9382] syzkaller0: entered allmulticast mode [ 302.114148][ T6092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.262754][ T6092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.332389][ T9383] fido_id[9383]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 302.447471][ T9394] loop2: detected capacity change from 0 to 2048 [ 302.500151][ T9394] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 302.594416][ T9394] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.718322][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 302.718340][ T28] audit: type=1326 audit(1803017185.370:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.4.888" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baeba94d9 code=0x7ffc0000 [ 302.822092][ T28] audit: type=1326 audit(1803017185.410:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.4.888" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baeba94d9 code=0x7ffc0000 [ 302.892877][ T6268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.941997][ T9398] loop4: detected capacity change from 0 to 2048 [ 302.963631][ T28] audit: type=1326 audit(1803017185.420:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.4.888" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baeba94d9 code=0x7ffc0000 [ 303.063085][ T28] audit: type=1326 audit(1803017185.430:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.4.888" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baeba94d9 code=0x7ffc0000 [ 303.176633][ T28] audit: type=1326 audit(1803017185.430:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.4.888" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baeba94d9 code=0x7ffc0000 [ 303.300116][ T28] audit: type=1326 audit(1803017185.430:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.4.888" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8baeba94d9 code=0x7ffc0000 [ 303.382778][ T6268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.430945][ T28] audit: type=1326 audit(1803017185.430:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.4.888" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baeba94d9 code=0x7ffc0000 [ 303.517462][ T28] audit: type=1326 audit(1803017185.430:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.4.888" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baeba94d9 code=0x7ffc0000 [ 303.642775][ T28] audit: type=1326 audit(1803017185.430:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.4.888" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baeba94d9 code=0x7ffc0000 [ 303.753024][ T28] audit: type=1326 audit(1803017185.450:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.4.888" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baeba94d9 code=0x7ffc0000 [ 303.932812][ T6268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.161801][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 304.183204][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 304.195103][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 304.246821][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 304.261330][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 304.273165][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 304.497782][ T61] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.790109][ T61] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.973313][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.286737][ T9419] rxe_eth0 speed is unknown, defaulting to 1000 [ 305.927429][ T61] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.018862][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.035664][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.5.901'. [ 306.161136][ T9451] netlink: 'syz.2.902': attribute type 4 has an invalid length. [ 306.379850][ T5796] Bluetooth: hci0: command tx timeout [ 306.590464][ T61] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.622389][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.735285][ T9465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.763199][ T9465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.785320][ T9465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.818589][ T9465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.853351][ T9465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.929336][ T9465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.969045][ T9465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.016952][ T9465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.026208][ T9465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.114697][ T9475] loop2: detected capacity change from 0 to 128 [ 307.450041][ T9480] syz.2.907: attempt to access beyond end of device [ 307.450041][ T9480] loop2: rw=2049, sector=353, nr_sectors = 1 limit=128 [ 307.499279][ T9419] chnl_net:caif_netlink_parms(): no params data found [ 307.610753][ T42] kworker/u4:2: attempt to access beyond end of device [ 307.610753][ T42] loop2: rw=1, sector=145, nr_sectors = 200 limit=128 [ 308.160437][ T9502] syzkaller0: entered promiscuous mode [ 308.166530][ T9502] syzkaller0: entered allmulticast mode [ 308.257394][ T9419] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.552861][ T5796] Bluetooth: hci0: command tx timeout [ 308.596293][ T9419] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.674255][ T9419] bridge_slave_0: entered allmulticast mode [ 309.088543][ T9419] bridge_slave_0: entered promiscuous mode [ 310.572713][ T5796] Bluetooth: hci0: command tx timeout [ 311.698793][ T6092] net_ratelimit: 742 callbacks suppressed [ 311.698812][ T6092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.309581][ T9419] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.317313][ T9419] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.332874][ T9419] bridge_slave_1: entered allmulticast mode [ 312.340572][ T9419] bridge_slave_1: entered promiscuous mode [ 312.360111][ T6268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.374127][ T9509] tipc: Started in network mode [ 312.379068][ T9509] tipc: Node identity 2000004, cluster identity 4711 [ 312.392361][ T9509] tipc: Node number set to 33554436 [ 312.402590][ T9518] netlink: 8 bytes leftover after parsing attributes in process `syz.5.913'. [ 312.577732][ T9538] netlink: 'syz.4.915': attribute type 2 has an invalid length. [ 312.622003][ T9419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.653563][ T5796] Bluetooth: hci0: command tx timeout [ 312.729409][ T9419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.738958][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.974217][ T9419] team0: Port device team_slave_0 added [ 312.999840][ T9419] team0: Port device team_slave_1 added [ 313.123686][ T61] [ 313.126117][ T61] ====================================================== [ 313.133175][ T61] WARNING: possible circular locking dependency detected [ 313.140286][ T61] syzkaller #0 Not tainted [ 313.144759][ T61] ------------------------------------------------------ [ 313.151962][ T61] kworker/u4:4/61 is trying to acquire lock: [ 313.157984][ T61] ffff88801f7b0dc0 (team->team_lock_key#7){+.+.}-{3:3}, at: team_device_event+0x295/0xc50 [ 313.168030][ T61] [ 313.168030][ T61] but task is already holding lock: [ 313.175433][ T61] ffff88802e6d8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 313.185876][ T61] [ 313.185876][ T61] which lock already depends on the new lock. [ 313.185876][ T61] [ 313.196299][ T61] [ 313.196299][ T61] the existing dependency chain (in reverse order) is: [ 313.205338][ T61] [ 313.205338][ T61] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 313.213121][ T61] __mutex_lock+0x135/0xce0 [ 313.218219][ T61] ieee80211_open+0x144/0x200 [ 313.223777][ T61] __dev_open+0x2cb/0x430 [ 313.228677][ T61] dev_open+0xab/0x190 [ 313.233295][ T61] team_add_slave+0x703/0x28a0 [ 313.238616][ T61] do_setlink+0xda4/0x3f00 [ 313.243580][ T61] rtnl_newlink+0x1848/0x2170 [ 313.248815][ T61] rtnetlink_rcv_msg+0x843/0xf90 [ 313.254321][ T61] netlink_rcv_skb+0x235/0x4c0 [ 313.259773][ T61] netlink_unicast+0x856/0x9e0 [ 313.265114][ T61] netlink_sendmsg+0x8d0/0xbf0 [ 313.270450][ T61] ____sys_sendmsg+0x61b/0x980 [ 313.275771][ T61] ___sys_sendmsg+0x2a6/0x360 [ 313.281023][ T61] __se_sys_sendmsg+0x1d0/0x2c0 [ 313.286436][ T61] do_syscall_64+0x55/0xb0 [ 313.291417][ T61] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.297864][ T61] [ 313.297864][ T61] -> #0 (team->team_lock_key#7){+.+.}-{3:3}: [ 313.306393][ T61] __lock_acquire+0x3a07/0x7eb0 [ 313.311795][ T61] lock_acquire+0x19e/0x420 [ 313.316852][ T61] __mutex_lock+0x135/0xce0 [ 313.321902][ T61] team_device_event+0x295/0xc50 [ 313.327384][ T61] notifier_call_chain+0x18f/0x380 [ 313.333217][ T61] unregister_netdevice_many_notify+0x1037/0x1910 [ 313.340317][ T61] unregister_netdevice_queue+0x2e9/0x330 [ 313.346606][ T61] _cfg80211_unregister_wdev+0x16c/0x5a0 [ 313.352814][ T61] ieee80211_remove_interfaces+0x4b3/0x690 [ 313.359186][ T61] ieee80211_unregister_hw+0x5d/0x2a0 [ 313.365109][ T61] mac80211_hwsim_del_radio+0x289/0x480 [ 313.371205][ T61] hwsim_exit_net+0x58d/0x650 [ 313.376739][ T61] cleanup_net+0x6f7/0xb00 [ 313.381726][ T61] process_scheduled_works+0xa60/0x1600 [ 313.387824][ T61] worker_thread+0xa5e/0xfe0 [ 313.392971][ T61] kthread+0x2fa/0x390 [ 313.397688][ T61] ret_from_fork+0x48/0x80 [ 313.402663][ T61] ret_from_fork_asm+0x11/0x20 [ 313.407980][ T61] [ 313.407980][ T61] other info that might help us debug this: [ 313.407980][ T61] [ 313.418233][ T61] Possible unsafe locking scenario: [ 313.418233][ T61] [ 313.425788][ T61] CPU0 CPU1 [ 313.431202][ T61] ---- ---- [ 313.436586][ T61] lock(&rdev->wiphy.mtx); [ 313.441207][ T61] lock(team->team_lock_key#7); [ 313.448698][ T61] lock(&rdev->wiphy.mtx); [ 313.455760][ T61] lock(team->team_lock_key#7); [ 313.460730][ T61] [ 313.460730][ T61] *** DEADLOCK *** [ 313.460730][ T61] [ 313.469066][ T61] 5 locks held by kworker/u4:4/61: [ 313.474296][ T61] #0: ffff888140049138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 313.485218][ T61] #1: ffffc900015c7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 313.495787][ T61] #2: ffffffff8f3db1d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x140/0xb00 [ 313.505252][ T61] #3: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 313.515216][ T61] #4: ffff88802e6d8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 313.526049][ T61] [ 313.526049][ T61] stack backtrace: [ 313.532049][ T61] CPU: 1 PID: 61 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 313.539445][ T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 313.549625][ T61] Workqueue: netns cleanup_net [ 313.554486][ T61] Call Trace: [ 313.557804][ T61] [ 313.560763][ T61] dump_stack_lvl+0x18c/0x250 [ 313.565497][ T61] ? load_image+0x420/0x420 [ 313.570042][ T61] ? show_regs_print_info+0x20/0x20 [ 313.575281][ T61] ? print_circular_bug+0x12b/0x1a0 [ 313.580520][ T61] check_noncircular+0x2fc/0x400 [ 313.585604][ T61] ? print_deadlock_bug+0x5d0/0x5d0 [ 313.590836][ T61] ? lockdep_lock+0xf5/0x230 [ 313.595497][ T61] ? _find_first_zero_bit+0xd6/0x100 [ 313.600829][ T61] __lock_acquire+0x3a07/0x7eb0 [ 313.605727][ T61] ? verify_lock_unused+0x140/0x140 [ 313.610960][ T61] ? verify_lock_unused+0x140/0x140 [ 313.616215][ T61] ? __up_read+0x2b8/0x6b0 [ 313.620667][ T61] ? up_read+0x20/0x20 [ 313.624765][ T61] lock_acquire+0x19e/0x420 [ 313.629323][ T61] ? team_device_event+0x295/0xc50 [ 313.634466][ T61] ? __might_sleep+0xe0/0xe0 [ 313.639098][ T61] ? read_lock_is_recursive+0x20/0x20 [ 313.644513][ T61] ? xsk_notifier+0x210/0x220 [ 313.649222][ T61] __mutex_lock+0x135/0xce0 [ 313.653788][ T61] ? team_device_event+0x295/0xc50 [ 313.658941][ T61] ? __mutex_lock+0x30d/0xce0 [ 313.663823][ T61] ? bond_netdev_event+0xeb/0xef0 [ 313.668882][ T61] ? team_device_event+0x295/0xc50 [ 313.674023][ T61] ? mutex_lock_nested+0x20/0x20 [ 313.679018][ T61] team_device_event+0x295/0xc50 [ 313.683991][ T61] notifier_call_chain+0x18f/0x380 [ 313.689169][ T61] unregister_netdevice_many_notify+0x1037/0x1910 [ 313.695627][ T61] ? unregister_netdevice_many+0x20/0x20 [ 313.701302][ T61] ? kernfs_remove_by_name_ns+0x117/0x150 [ 313.707083][ T61] ? __lock_acquire+0x7eb0/0x7eb0 [ 313.712165][ T61] unregister_netdevice_queue+0x2e9/0x330 [ 313.717916][ T61] ? list_netdevice+0x730/0x730 [ 313.722811][ T61] ? kernfs_remove_by_name_ns+0x117/0x150 [ 313.728567][ T61] _cfg80211_unregister_wdev+0x16c/0x5a0 [ 313.734273][ T61] ieee80211_remove_interfaces+0x4b3/0x690 [ 313.740150][ T61] ? ieee80211_do_stop+0x2030/0x2030 [ 313.745479][ T61] ? rcu_is_watching+0x15/0xb0 [ 313.750287][ T61] ieee80211_unregister_hw+0x5d/0x2a0 [ 313.755699][ T61] mac80211_hwsim_del_radio+0x289/0x480 [ 313.761314][ T61] ? rhashtable_remove_fast+0xc00/0xc00 [ 313.766896][ T61] hwsim_exit_net+0x58d/0x650 [ 313.771614][ T61] ? hwsim_init_net+0x90/0x90 [ 313.776419][ T61] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 313.782264][ T61] cleanup_net+0x6f7/0xb00 [ 313.786770][ T61] ? ops_free_list+0x3b0/0x3b0 [ 313.791584][ T61] ? _raw_spin_unlock_irq+0x23/0x50 [ 313.796822][ T61] ? process_scheduled_works+0x975/0x1600 [ 313.802578][ T61] ? process_scheduled_works+0x975/0x1600 [ 313.808338][ T61] process_scheduled_works+0xa60/0x1600 [ 313.814018][ T61] ? worker_attach_to_pool+0x370/0x370 [ 313.819513][ T61] ? assign_work+0x3cc/0x5d0 [ 313.824144][ T61] worker_thread+0xa5e/0xfe0 [ 313.828866][ T61] kthread+0x2fa/0x390 [ 313.832969][ T61] ? pr_cont_work+0x550/0x550 [ 313.837706][ T61] ? kthread_blkcg+0xd0/0xd0 [ 313.842319][ T61] ret_from_fork+0x48/0x80 [ 313.846967][ T61] ? kthread_blkcg+0xd0/0xd0 [ 313.851590][ T61] ret_from_fork_asm+0x11/0x20 [ 313.856409][ T61] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 313.882544][ T6268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.930210][ T61] team0: Port device wlan0 removed [ 314.228387][ T5999] syz_tun (unregistering): left allmulticast mode [ 314.798676][ T61] hsr_slave_0: left promiscuous mode [ 314.818565][ T61] hsr_slave_1: left promiscuous mode [ 314.835242][ T61] bridge_slave_1: left allmulticast mode [ 314.840980][ T61] bridge_slave_1: left promiscuous mode [ 314.857042][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.880699][ T61] bridge_slave_0: left allmulticast mode [ 314.893231][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.899869][ T61] bridge_slave_0: left promiscuous mode [ 314.913373][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.938405][ T61] veth1_vlan: left promiscuous mode [ 314.953199][ T61] veth0_vlan: left promiscuous mode [ 315.070503][ T61] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 315.087581][ T61] bond1 (unregistering): Released all slaves [ 315.279890][ T61] team0 (unregistering): Port device team_slave_1 removed [ 315.314119][ T61] team0 (unregistering): Port device team_slave_0 removed [ 315.350412][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.388533][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.525530][ T61] bond0 (unregistering): Released all slaves [ 315.773535][ T6092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.944446][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.070220][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.081711][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.151973][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.162761][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.220324][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.234506][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.447284][ T61] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.529573][ T61] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.589864][ T61] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.648697][ T61] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.118763][ T61] tipc: Left network mode [ 317.138046][ T61] tipc: Left network mode [ 317.460048][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.472009][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.177873][ T61] dvmrp6 (unregistering): left allmulticast mode [ 319.030162][ T61] bridge_slave_1: left allmulticast mode [ 319.048260][ T61] bridge_slave_1: left promiscuous mode [ 319.062878][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.073907][ T61] bridge_slave_0: left allmulticast mode [ 319.079628][ T61] bridge_slave_0: left promiscuous mode [ 319.102739][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.125665][ T61] hsr_slave_0: left promiscuous mode [ 319.131961][ T61] hsr_slave_1: left promiscuous mode [ 319.144333][ T61] hsr_slave_0: left promiscuous mode [ 319.150654][ T61] hsr_slave_1: left promiscuous mode [ 319.162057][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.176769][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.188794][ T61] bridge_slave_1: left allmulticast mode [ 319.196660][ T61] bridge_slave_1: left promiscuous mode [ 319.202448][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.211564][ T61] bridge_slave_0: left allmulticast mode [ 319.219388][ T61] bridge_slave_0: left promiscuous mode [ 319.226824][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.245779][ T61] hsr_slave_0: left promiscuous mode [ 319.251868][ T61] hsr_slave_1: left promiscuous mode [ 319.268176][ T61] veth1_macvtap: left promiscuous mode [ 319.275799][ T61] veth0_macvtap: left promiscuous mode [ 319.281485][ T61] veth1_vlan: left promiscuous mode [ 319.290517][ T61] veth0_vlan: left promiscuous mode [ 319.301473][ T61] veth1_macvtap: left promiscuous mode [ 319.307461][ T61] veth0_macvtap: left promiscuous mode [ 319.315321][ T61] veth1_vlan: left promiscuous mode [ 319.320720][ T61] veth0_vlan: left promiscuous mode [ 319.547363][ T61] team0 (unregistering): Port device team_slave_1 removed [ 319.560750][ T61] team0 (unregistering): Port device team_slave_0 removed [ 319.576503][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.596215][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.676527][ T61] bond0 (unregistering): Released all slaves [ 319.822607][ T61] bond4 (unregistering): Released all slaves [ 319.838583][ T61] bond3 (unregistering): Released all slaves [ 320.000661][ T61] bond2 (unregistering): Released all slaves [ 320.159642][ T61] bond1 (unregistering): Released all slaves [ 320.603247][ T61] bond0 (unregistering): Released all slaves [ 320.651368][ T61] bond1 (unregistering): (slave dummy0): Releasing active interface [ 320.661703][ T61] bond1 (unregistering): Released all slaves [ 320.840284][ T61] team0 (unregistering): Port device team_slave_1 removed [ 320.874123][ T61] team0 (unregistering): Port device team_slave_0 removed [ 320.912680][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.950406][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.075123][ T61] bond0 (unregistering): Released all slaves [ 321.284179][ T61] bond4 (unregistering): Released all slaves [ 321.456576][ T61] bond3 (unregistering): Released all slaves [ 321.605625][ T61] bond2 (unregistering): Released all slaves [ 321.798304][ T61] bond1 (unregistering): Released all slaves [ 322.786234][ T61] bond0 (unregistering): Released all slaves