last executing test programs:

10m48.426527922s ago: executing program 32 (id=29):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0)
ioctl$TUNGETFEATURES(r0, 0x800454cf, 0x0)
clock_settime(0x0, &(0x7f0000000000)={0x655409fe, 0x389fd980})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x14, 0xa, 0xbc, 0x0, 0x7, 0x10000, 0x2, '\x00', 0xc94})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

9m42.183133903s ago: executing program 33 (id=476):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d010000000000008500000001000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r3, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000500)=ANY=[], 0x0)

9m12.902721463s ago: executing program 3 (id=696):
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x10140, 0x0)

9m12.729272097s ago: executing program 3 (id=697):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000100)=0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9m12.329774687s ago: executing program 3 (id=700):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x22601, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0xfffffffc, "94c47900001023660f0000000000005800000000000400", <r1=>0xffffffffffffffff})
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfd', @ANYRESHEX=r2])

9m10.967209929s ago: executing program 3 (id=706):
mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x800, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f00000002c0)={'wlan0\x00'})
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1b8)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x20681, 0x0)
r1 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x1aff80, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000300)=ANY=[], 0x835, 0x1)
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2)

9m9.492680693s ago: executing program 34 (id=720):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x4e24, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x7, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff, 0xfffffffffffffffc}, {0x1000000004, 0x2000000000000003, 0x2, 0x10}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x20000, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x9}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000140000080000fe8040000000000000000000000000bb0700080010000000ffff1f00000100008fef3673e14899a8c1ff1750b557f729dc761c3ca67d01f38f73e04ad10bad1998442907295282a42c99b4097ccd8023672c0d0f641a9b419771bce08c335f05f843ee650620c565de5df004f74ecf41792b01a25e980621eb05eaa5e109a1c3ca4fe70b1b4fead66f6cb98ca6325cce14c5c5ea34e677c120c3d49419aff822bc500c89d56900000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000006000000000000000000000000000000feffffffffffffff00000000bc6b6e800000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x400, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r1, 0x400, 0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r2, 0x400448ca, 0x0)
bind$bt_hci(r2, &(0x7f0000000180)={0x1f, 0x0, 0x1}, 0x6)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x86, 0x7fff2000}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r7, 0x30925)
close_range(r3, 0xffffffffffffffff, 0x0)
openat2(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={0x40002, 0x0, 0x2a}, 0x18)

9m7.760968824s ago: executing program 3 (id=736):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)

9m7.024376811s ago: executing program 3 (id=748):
r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x2, 0x101100)
openat$procfs(0xffffffffffffff9c, 0x0, 0x41, 0x0)
bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="150000"], 0x15)
ioctl$EVIOCGLED(r0, 0x80284504, &(0x7f0000000000)=""/52)

9m6.885390125s ago: executing program 35 (id=748):
r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x2, 0x101100)
openat$procfs(0xffffffffffffff9c, 0x0, 0x41, 0x0)
bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="150000"], 0x15)
ioctl$EVIOCGLED(r0, 0x80284504, &(0x7f0000000000)=""/52)

9m4.146614989s ago: executing program 6 (id=769):
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0xfffffffe)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f0000000380)=[{&(0x7f0000000300)="c2db48", 0x3}], 0x1)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0)
recvfrom$unix(r2, &(0x7f00000001c0)=""/246, 0xf6, 0x22122, 0x0, 0xff86)

9m3.996238172s ago: executing program 6 (id=771):
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
r0 = openat$random(0xffffffffffffff9c, 0x0, 0x8702, 0x0)
pwritev(r0, 0x0, 0x0, 0x0, 0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
shmget(0x3, 0x1000, 0x1, &(0x7f0000ffd000/0x1000)=nil)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
timer_create(0x3, 0x0, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
write$UHID_INPUT(r2, &(0x7f0000002a80)={0x9, {"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", 0x1000}}, 0x1006)

9m3.522244094s ago: executing program 6 (id=774):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000000)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r3=>0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
kcmp(r3, r3, 0x2, 0xffffffffffffffff, r4)

9m2.522172267s ago: executing program 6 (id=778):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000002800)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@jqfmt_vfsv0}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@noquota}, {@delalloc}, {@noblock_validity}, {@nodioread_nolock}, {@errors_remount}]}, 0x11, 0x5a3, &(0x7f00000002c0)="$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")
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})

9m1.612574819s ago: executing program 6 (id=788):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1a1080, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x40140, 0x1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f00000001c0)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

8m59.87400401s ago: executing program 6 (id=803):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000001300)={'syz0\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x1a, 0x2, 0x2, 0x10000, 0x7ffffffe, 0x0, 0x8, 0x0, 0x6, 0x1, 0xdffffffe, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x4665, 0x1, 0xf250, 0x80, 0x4800, 0x300000, 0x9, 0xe, 0x5, 0x0, 0x10005, 0x6, 0x8000, 0x0, 0x3, 0x1, 0x3, 0xba55, 0x4fc5, 0x2, 0x8, 0x2, 0x100004, 0xd, 0x4, 0x5, 0x6f, 0x8, 0x9, 0x1, 0x19a0, 0x6, 0x2, 0x7, 0xffffffff, 0x4, 0x6, 0x1, 0x5, 0x3c, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x400, 0x8000, 0xfffffffd, 0x7f, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x2287, 0x1c35, 0xbd7f, 0x5, 0xfff9, 0x3, 0x7ffd, 0x3, 0x8, 0x297, 0xbb2f, 0x0, 0x981, 0x4, 0x9, 0x10000, 0x4, 0xfffffffe, 0x8, 0x1000001, 0x2a9, 0xfffffff9, 0xfffffffe, 0xeb, 0x4, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x92, 0xfffffff9, 0x2, 0x0, 0x9, 0x9, 0x0, 0x3, 0xfffffff0, 0x9, 0xe, 0x5, 0x7, 0x4, 0x2, 0x1, 0x5, 0x8, 0x7, 0x200, 0x3], [0xfffffeef, 0x8000c584, 0xffff, 0xf8000000, 0x7, 0x9, 0x402, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe88, 0x200005, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x4, 0x2, 0x5, 0x7e, 0x9, 0x8001, 0x10001, 0x80000000, 0x3, 0x400004, 0x1, 0x6d7e, 0x3, 0x8, 0x5, 0x100, 0x5, 0xa, 0x956, 0x0, 0x3ff, 0xe, 0x8, 0xffffffff, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x5, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0xfffffc03, 0x2, 0x4000000, 0x3, 0x50, 0x2, 0x9, 0xb, 0x402, 0x2, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0xfffffffe, 0x5, 0x3, 0x4, 0x8, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x1, 0x885, 0x86, 0x20044, 0x409, 0x6, 0x0, 0x4, 0x11, 0x4, 0xffffffff, 0x7ffe, 0xfeff8a33, 0xfffffff8, 0x401, 0xffffffff, 0xe, 0x7, 0x4, 0xfffffffd, 0xfffffffb, 0xe, 0xfd, 0xf, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_DEV_CREATE(r0, 0x5501)

8m58.830606114s ago: executing program 36 (id=803):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000001300)={'syz0\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x1a, 0x2, 0x2, 0x10000, 0x7ffffffe, 0x0, 0x8, 0x0, 0x6, 0x1, 0xdffffffe, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x4665, 0x1, 0xf250, 0x80, 0x4800, 0x300000, 0x9, 0xe, 0x5, 0x0, 0x10005, 0x6, 0x8000, 0x0, 0x3, 0x1, 0x3, 0xba55, 0x4fc5, 0x2, 0x8, 0x2, 0x100004, 0xd, 0x4, 0x5, 0x6f, 0x8, 0x9, 0x1, 0x19a0, 0x6, 0x2, 0x7, 0xffffffff, 0x4, 0x6, 0x1, 0x5, 0x3c, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x400, 0x8000, 0xfffffffd, 0x7f, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x2287, 0x1c35, 0xbd7f, 0x5, 0xfff9, 0x3, 0x7ffd, 0x3, 0x8, 0x297, 0xbb2f, 0x0, 0x981, 0x4, 0x9, 0x10000, 0x4, 0xfffffffe, 0x8, 0x1000001, 0x2a9, 0xfffffff9, 0xfffffffe, 0xeb, 0x4, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x92, 0xfffffff9, 0x2, 0x0, 0x9, 0x9, 0x0, 0x3, 0xfffffff0, 0x9, 0xe, 0x5, 0x7, 0x4, 0x2, 0x1, 0x5, 0x8, 0x7, 0x200, 0x3], [0xfffffeef, 0x8000c584, 0xffff, 0xf8000000, 0x7, 0x9, 0x402, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe88, 0x200005, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x4, 0x2, 0x5, 0x7e, 0x9, 0x8001, 0x10001, 0x80000000, 0x3, 0x400004, 0x1, 0x6d7e, 0x3, 0x8, 0x5, 0x100, 0x5, 0xa, 0x956, 0x0, 0x3ff, 0xe, 0x8, 0xffffffff, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x5, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0xfffffc03, 0x2, 0x4000000, 0x3, 0x50, 0x2, 0x9, 0xb, 0x402, 0x2, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0xfffffffe, 0x5, 0x3, 0x4, 0x8, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x1, 0x885, 0x86, 0x20044, 0x409, 0x6, 0x0, 0x4, 0x11, 0x4, 0xffffffff, 0x7ffe, 0xfeff8a33, 0xfffffff8, 0x401, 0xffffffff, 0xe, 0x7, 0x4, 0xfffffffd, 0xfffffffb, 0xe, 0xfd, 0xf, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_DEV_CREATE(r0, 0x5501)

8m40.459949447s ago: executing program 8 (id=928):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3)
ioctl$TCGETA(r0, 0x5405, &(0x7f00000007c0))

8m40.127626325s ago: executing program 8 (id=932):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000300)={0xc0, 0x0, 0x4000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800001, 0x31, r2, 0x4754c000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

8m39.725679965s ago: executing program 8 (id=936):
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r1, 0x0, 0x6e12, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0)
write$binfmt_script(r3, &(0x7f0000000100)={'#! ', './file1'}, 0xb)
mount_setattr(0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

8m39.318621604s ago: executing program 8 (id=942):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x44)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x190)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, 0x0, 0x24000044)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, 0x0)
getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0xbb)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
semget$private(0x0, 0x207, 0x70d)
rename(&(0x7f0000000500)='./file1\x00', 0x0)

8m38.384333216s ago: executing program 8 (id=945):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
getpriority(0x2, 0x0)

8m37.77758575s ago: executing program 8 (id=949):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000850000000500000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x7, 0x0, &(0x7f0000000900)="e02742e8680d85", 0x0, 0x6f12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

8m37.37845116s ago: executing program 37 (id=949):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000850000000500000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x7, 0x0, &(0x7f0000000900)="e02742e8680d85", 0x0, 0x6f12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

7m51.310756866s ago: executing program 4 (id=1289):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e25, 0x10, @mcast2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000014c0)='\x00', 0x1}], 0x1}}], 0x1, 0x400c405)
sendmmsg$inet6(r0, &(0x7f0000006580)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="42fcf30ac68361d905ae8af413cf148c87c0107e4954f1660ab6", 0x1a}], 0x1}}, {{&(0x7f0000000ac0)={0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c, &(0x7f00000035c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000003500)}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003880)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40)

7m51.077175431s ago: executing program 4 (id=1291):
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x12)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r5, <r6=>0xffffffffffffffff}, 0x0, 0x0}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4)
setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000})
setpriority(0x1, 0x0, 0x80080000)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00')
r8 = memfd_create(0x0, 0x0)
r9 = fanotify_init(0x200, 0x1000)
r10 = dup(r8)
fanotify_mark(r9, 0x1, 0x48001028, r10, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
read$FUSE(r7, &(0x7f0000003680)={0x2020}, 0x2020)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

7m49.277515964s ago: executing program 4 (id=1292):
syz_emit_ethernet(0x143, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x70bd2c, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x3c, 0xfffffffffff7fffd, 0x50}, {0x5, 0x0, 0x100000001, 0x3}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6})
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)

7m47.787730208s ago: executing program 4 (id=1313):
syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000280)='./file0\x00', 0x200010, &(0x7f0000000040)=ANY=[], 0x0, 0x670, &(0x7f0000000540)="$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")
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x44000001)
socket$netlink(0x10, 0x3, 0x9)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
lseek(r0, 0x10001, 0x0)

7m47.522083395s ago: executing program 4 (id=1315):
creat(0x0, 0x17c)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = dup(r0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x401)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0)

7m46.379400681s ago: executing program 4 (id=1323):
syz_emit_ethernet(0x143, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x70bd2c, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x3c, 0xfffffffffff7fffd, 0x50}, {0x5, 0x0, 0x100000001, 0x3}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6})
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)

7m46.0513575s ago: executing program 38 (id=1323):
syz_emit_ethernet(0x143, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x70bd2c, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x3c, 0xfffffffffff7fffd, 0x50}, {0x5, 0x0, 0x100000001, 0x3}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6})
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)

5m41.148331183s ago: executing program 9 (id=1949):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
syz_open_dev$sndpcmc(&(0x7f00000002c0), 0xb, 0x0)

5m40.132821937s ago: executing program 9 (id=1954):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0xfffffffe)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
write(r1, &(0x7f0000000080)="a48c3fe8e4eb033e", 0x8)

5m39.036177532s ago: executing program 9 (id=1959):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000009480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006b00)=ANY=[@ANYBLOB="500000000000000000000000010000000100000000000000070000000000fdff0200000096060000"], 0x0, 0x0, 0x0, 0x0})
getdents64(r2, &(0x7f00000063c0)=""/1024, 0x400)

5m38.607516503s ago: executing program 9 (id=1964):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x1, 0x2c6, &(0x7f00000008c0)="$eJzs3c9qY1UYAPDvpkl6tUi7cCWCdzELN5bpbF3YQSqIXSlZ+Ad0cGZgaMNAC4FRMczKJ3Dhwvdw58qN4sY3EHwAdxYZPHJy7ySxzSTpjGmH8vttejjf9+Wcc88JWVzu7Wev9g9u3z+++/Cr36Msi2jtxm6cFLEVrXgsNQIAuBJOUoo/n+r3vd1a1ZwAgNWa+v3vPCFl/WzXW6ueFgCwQh98+NF7N/f3996vqjKi/82gV0T9t47fvBv34jDuxPXYjEeTewEp1e133t3fi3aVbcW1/nDQy5X9T3+dvm2Q63diM7Zm1+9Utan64aDXiRcjiiLi3m6eyI3YjJfP1Of43o0Z9dHrxutls8g8/nZsxm+fx/04jNujexqT8b/eqaq307d/fflxTs71xXDQWx/lTaS1i94bAAAAAAAAAAAAAAAAAAAAAACuru1qbCuu9XNX8/6dtUej+PZ/4qP367RG8bq+iOiOGqfeDzRM8X1KKcf2rldVlYo6f/J+n3a80o72pS0cAAAAAAAAAAAAAAAAAAAAniPHD744uHV4eOfof2k0D/mPH+t/2s/Znep5LeYnr59rrFhr0vNcT+fs/PxJf9yTF7HknLuRG2W+mCcvDTpVxLw5d870vJDns3isv1NKqSginm2bOsuMtaCxMT8nX+Afv9t44+BWsegalo837ofpUDeOjh+c2tMocuOnX5bb7nSu49edk9NtTsxSn7PxjF+iN/+oB2t6igWrKKcOf6cJxZOOX7nsea6/KQAAAAAAAAAAAAAAAAAAwAWbPPQ7I/hwbmlrZZMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAs2+f//52gMm+LZOSml4binG0fHU8P9k2qXtFoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACuqn8DAAD//11SbkQ=")
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

5m36.790335926s ago: executing program 9 (id=1967):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
lseek(r1, 0x1, 0x1)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xc000)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, 0x0, 0x20004056)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x7056}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x92, &(0x7f0000000300)=""/146}, 0x94)
syz_open_dev$sndctrl(0x0, 0x4, 0x70be42)
recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x141, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r5, 0x541c, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x7, 0x100010, 0xffffffffffffffff, 0x0)

5m35.226394432s ago: executing program 9 (id=1973):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x40}, 0x20008024)
socket$inet(0x2, 0x3, 0x8d)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3ffffffe]}, 0x8, 0x80000)
readv(r0, &(0x7f0000000b80)=[{&(0x7f0000000280)=""/221, 0xdd}], 0x1)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000440)={0x0, 0x6, 0x9, 0x8000, 0xc7b7, 0x4, 0x4, 0x8, 0x7ff, 0x100, 0x3})
syz_emit_ethernet(0x16, &(0x7f0000000500)={@random="e6aa3d26a07a", @random="ed17b3662259", @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@mpls_mc={0x8848, {[], @llc={@llc={0x80, 0x7e, '#X'}}}}}}, &(0x7f00000005c0)={0x0, 0x1, [0x848, 0x1d1, 0x4f, 0x637]})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)

5m34.395384922s ago: executing program 39 (id=1973):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x40}, 0x20008024)
socket$inet(0x2, 0x3, 0x8d)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3ffffffe]}, 0x8, 0x80000)
readv(r0, &(0x7f0000000b80)=[{&(0x7f0000000280)=""/221, 0xdd}], 0x1)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000440)={0x0, 0x6, 0x9, 0x8000, 0xc7b7, 0x4, 0x4, 0x8, 0x7ff, 0x100, 0x3})
syz_emit_ethernet(0x16, &(0x7f0000000500)={@random="e6aa3d26a07a", @random="ed17b3662259", @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@mpls_mc={0x8848, {[], @llc={@llc={0x80, 0x7e, '#X'}}}}}}, &(0x7f00000005c0)={0x0, 0x1, [0x848, 0x1d1, 0x4f, 0x637]})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)

13.550539216s ago: executing program 5 (id=3081):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x8)
connect$inet(r2, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10)
r3 = accept$inet(r1, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r4}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
sendto(r3, &(0x7f0000000700)='ab', 0xfffffcf4, 0x11, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

13.263160283s ago: executing program 5 (id=3082):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)

13.018734069s ago: executing program 5 (id=3084):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0xffffffffffffffff, 0x0, 0x2, 0x0)

12.621086648s ago: executing program 5 (id=3086):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r0 = io_uring_setup(0x6660, &(0x7f0000000340)={0x0, 0xd03a, 0x10, 0x1, 0x1cb})
io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, 0x0, 0x0)
r1 = fanotify_init(0x0, 0x101000)
read$FUSE(r1, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
umount2(0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffff91}, 0x0)
r2 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})

11.627416402s ago: executing program 5 (id=3091):
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x12)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r5, <r6=>0xffffffffffffffff}, 0x0, 0x0}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4)
setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000})
setpriority(0x1, 0x0, 0x80080000)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00')
r8 = memfd_create(0x0, 0x0)
r9 = fanotify_init(0x200, 0x1000)
r10 = dup(r8)
fanotify_mark(r9, 0x1, 0x48001028, r10, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
read$FUSE(r7, &(0x7f0000003680)={0x2020}, 0x2020)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

10.681875765s ago: executing program 2 (id=3093):
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

10.315633503s ago: executing program 2 (id=3095):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
lseek(r1, 0x1, 0x1)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xc000)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x7056}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x92, &(0x7f0000000300)=""/146}, 0x94)
recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x141, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0)

9.558681861s ago: executing program 0 (id=3100):
r0 = inotify_init1(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc)
add_key(0x0, 0x0, 0x0, 0x0, r3)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})
r4 = socket$inet6(0xa, 0x3, 0x83)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0x75, 0x8, 0x0, 0x0}}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0x40001a2)
r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x20103, 0x1, {0x200004, 0x10005c62, 0x203, 0x8000000000000000, 0x8, 0x0, 0x10000006, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1}}, {0x0, 0xa}}}, 0xa0)
sendfile(r5, r5, &(0x7f0000000100)=0x4, 0x8112)

7.956549709s ago: executing program 0 (id=3102):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x26, 0x0, 0x16)

7.638718187s ago: executing program 5 (id=3103):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x9, 0x9, 0x0, 0x7fff, 0x5, 0xffffffffffffffff})
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0x20, 0x0, 0x0)
chroot(0x0)
getcwd(&(0x7f0000001040)=""/55, 0x37)

7.380487973s ago: executing program 7 (id=3105):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00')
setns(r0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000240)={'wlan1\x00', &(0x7f00000002c0)=@ethtool_stats})
socket$igmp6(0xa, 0x3, 0x2)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80)

6.235978641s ago: executing program 7 (id=3107):
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$loop(&(0x7f0000000040), 0xa, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x0, &(0x7f0000004340)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}, 0x0, 0x0, 0x0)
syslog(0x3, &(0x7f0000000300)=""/121, 0x79)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

6.190703901s ago: executing program 0 (id=3108):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_STATION(r0, 0x0, 0x0)

6.006761216s ago: executing program 0 (id=3109):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3004017, &(0x7f0000000c40)={[{@nodiscard}, {@journal_ioprio}]}, 0x46, 0x4e0, &(0x7f0000000300)="$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")
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109442, 0x10c)
fallocate(r0, 0x11, 0x0, 0x6)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@noinit_itable}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0)
fsetxattr(r4, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000002d000100fcffffff0000000008000000", @ANYRES32], 0x2c}], 0x1, 0x0, 0x0, 0x4}, 0x0)
timer_create(0x0, 0x0, &(0x7f00000001c0)=<r6=>0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_settime(r6, 0x1, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)
sendto$inet(r0, &(0x7f0000000e40)="5852d2d0056f007bdfe56288ebd22002c2c3f112a57cba6562f28dfac1c29c0587e649ffcd35813702d93f50bae8b9b0dbd8819f454bff7a5bed567aea5fff29cfdd6bc9983cc61ec8a81b84d19809f08b10bed47153502768e6858d350e909930a1c593b963ca23a55cf1c4cdb846cae7f0afae89ab3366547e1369d8b0cee98f0a9176b92b359fc3af904469e06a", 0x8f, 0xd0, 0x0, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x5)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000659, &(0x7f0000000180)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x19}}, {@auto_da_alloc}, {@user_xattr}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@noblock_validity}, {@minixdf}, {@noauto_da_alloc}]}, 0x0, 0x60d, &(0x7f0000000800)="$eJzs3c9rG9kdAPDvjGzXTtw6KSU0gVJDDwmU+EcaSNtTkktz6CHQHErpISa2g4mcmNiBJg3UuTXQQym9lpJL/4HeS+i1t1Joe9vzQnZZvOxhd4mWGc0kWllyFMX64cznA5LevBnpva+enueNxk8TQGXNZ3dpxOmIuJlEzLWsm43myvliu71PHt/Kbkk0Gr/4OImkyCu3f1k8Hs/ukojpiPj31Yhv1/aXu/3w0Z2VeqPpdxGLO5tbi9sPH53f2Fy5vXZ77e7yhR9fvLT0k+WLy4cSZxnXdPG4/p/6+SQux43J365GWxyHZT7m42URYmv+RERcyhId3pejpgwhGXE96E+t+DxORsSpmItavtQ0Fxt/GGnlgIFq1CIaQEUl+j9UVDkOKI/tB3EcPM5eXGkeAO2Pf6L53UhM58dGx/aSliOj5vHuiUMoPyvjy8dn/pLdosv3EBOHUE43u08i4rud4k/yup0ovjE5tpdG2vK8LL0UEVPFe5H2Wf582/KwP39vE39rO2TxXi4es/yrfZY/6vgBqKbnV4od+W629Hr/l40My/FPdBj/zHbYd/Vj1Pu/7uO/cn8/nX9HnraNw7Ixz/XOLznZnvHB02t/6lZ+6/gvu2Xll2PBYXjxJOJMW/y/zwdzyav2Tzq0f7bJzR7L+Nl/P7rWbV3/8R/OGafGs4izHY9/kq+VtLizuVXmtZ2fXFzfqK8tNe87lvGPf/36b93KH4f2jy7xH9T+Wd5Wj2X8/fqzzW7rZt8Yf/rhVHIjT00VOb9Z2dm5vxwxlfy82KQl/8LBdSm3KV8ji//cDzr3/wPizxt6t8f4t355Z6+Z2v+Z7bn99/1Vyb1s9FiHbrL4V/ts/z/2WMZnv3rwvbasmTJxUPwz+18q6fU9BwAAAAAAgCpK83OwSbrwKp2mCwvNObzfiWNp/d72zg/X7z24uxpxLv9/yMm0PNM911xOsuXl4v9hy+ULbcs/ioiTEfHn2ky+vHDrXn111MEDAAAAAAAAAAAAAAAAAADAmDhezP8vr1P9aa05/78nO6cGXDtg4AZ5gTlgvOn/UF15/+/3Cq7AkWb/D9Wl/0N16f9QXfo/VJf+D9XVU/+fGnw9gOGz/4fq0v8BAAAA4L108vvP/59ExO5PZ/JbtJzpmxxpzYBBe/s+Pj+QegDDVxvq04Bx8urUv+n/UDk9jf8/L34ccPDVAUYg6ZSZDw4aB3f+5x2f2aun7/JkAAAAAAAAAAAAAKias6fN/4eqSuOfo64CMCLvMJHfbwDAEeen/6G6HOMDb5rFP91txbvN/wcAAAAAAAAAAAAA3sJsfkvSheISoLORpgsLEd+MiBMxmaxv1NeWIuJbEfG/2uQ3suXlUVcaAAAAAAAAAAAAAAAAAAAA3jPbDx/dWanX1+63Jr7Yl/N+J8qroI5LfVoTkQy/0JmIGIfYB5OYaMlJInazlh+Lit3fjrGoRppXY8R/mAAAAAAAAAAAAAAAAAAAoIJa5h53duavQ64RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzf6+v/959I3vA6o44RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADiavgoAAP//F1A3Eg==")
timer_getoverrun(r6)
ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000100)={0x1})
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', 0x84406d, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0)

5.904201919s ago: executing program 7 (id=3111):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x474, &(0x7f0000000b80)="$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")
r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x1e, 0x5, "ef359f413bb93852f7d6a4ae5c70f20ff8ee09e737ff0edf1139c2ebcfadc660e677df7019051caafa00afaaf755a314a10400000000220000000000004000", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a323ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000522100000001", [0x8, 0x100]})
write$FUSE_DIRENTPLUS(r0, 0x0, 0x138)

4.890046993s ago: executing program 7 (id=3122):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
r3 = eventfd2(0xc77f, 0x801)
unshare(0x20400)
ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000180)={0x0, r3})
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
r5 = fanotify_init(0x8, 0x80000)
fanotify_mark(r5, 0x105, 0x4800003a, r4, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2)
r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r7, &(0x7f0000000100)='?', 0x1)
sendfile(r7, r6, 0x0, 0x3ffff)

4.798625435s ago: executing program 2 (id=3113):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x11, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd1c80a954e89b09}, @broadcast, @void, {@llc_tr={0x11, {@llc={0x42, 0xff, "fb"}}}}}, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xffea}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0)

4.617292639s ago: executing program 1 (id=3114):
syz_open_dev$mouse(0x0, 0xcd, 0x48200)
syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[], 0x1, 0x1ac, &(0x7f0000000dc0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0)
setsockopt$MRT_TABLE(r0, 0x0, 0xcf, 0x0, 0x0)

3.821806918s ago: executing program 7 (id=3115):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendto(0xffffffffffffffff, &(0x7f0000000740)="12000000", 0x4, 0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e25, 0x10, @mcast2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000014c0)='\x00', 0x1}], 0x1}}], 0x1, 0x400c405)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
exit(0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000006580)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="42fcf30ac68361d905ae8af413cf148c87c0107e4954f1660ab6", 0x1a}], 0x1}}, {{&(0x7f0000000ac0)={0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003880)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

3.658667012s ago: executing program 0 (id=3116):
syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x193, &(0x7f0000000240)="$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")
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000ff020000000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0)

3.603614774s ago: executing program 2 (id=3117):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00')
setns(r0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000240)={'wlan1\x00', &(0x7f00000002c0)=@ethtool_stats})
socket$igmp6(0xa, 0x3, 0x2)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80)

3.541392165s ago: executing program 1 (id=3118):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x2, 0x0, 0x0, 0xf, 0x1, [], 'D'}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28)

2.406813482s ago: executing program 2 (id=3119):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_STATION(r0, 0x0, 0x0)

2.406660012s ago: executing program 1 (id=3120):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x8)
connect$inet(r2, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10)
r3 = accept$inet(r1, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r4}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r4, 0x0, &(0x7f0000000680)=@tcp=r3}, 0x20)
sendto(r3, &(0x7f0000000700)='ab', 0xfffffcf4, 0x11, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.312307134s ago: executing program 7 (id=3121):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x94, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_U32_SEL={0xffffffffffffff96, 0x5, {0x2, 0x7, 0x4, 0x6, 0x9, 0x8000, 0x80, 0x7, [{0xffffff59, 0x9, 0xe, 0x4}, {0x80000000, 0xb92, 0x7ff, 0xe}, {0x7ff, 0x10005, 0x2, 0x350}, {0x1, 0xbe1, 0x4cd72bd8, 0x69ce}]}}]}}]}, 0x94}}, 0x0)

2.026799731s ago: executing program 1 (id=3123):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x3}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
shutdown(r0, 0x2)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e24, 0xf37, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000}}, 0x0, 0x0, 0x1e, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e24740bd4c0b42a21d7214bff16d2ccd00"}, 0xd8)
sendto$inet6(r0, &(0x7f0000000000)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x40, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)

1.913804444s ago: executing program 0 (id=3124):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
lseek(r1, 0x1, 0x1)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xc000)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x7056}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x92, &(0x7f0000000300)=""/146}, 0x94)
recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x141, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0)

1.752475438s ago: executing program 1 (id=3125):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7)
mkdirat(0xffffffffffffff9c, 0x0, 0x181)
unlink(0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1000000000fe, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(r5, 0x1, 0x21, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, 0x0, 0x80)
r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000000)={0x210a, r0}, 0x0)

1.702683419s ago: executing program 2 (id=3126):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
r3 = eventfd2(0xc77f, 0x801)
unshare(0x20400)
ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000180)={0x0, r3})
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
r5 = fanotify_init(0x8, 0x80000)
fanotify_mark(r5, 0x105, 0x4800003a, r4, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2)
r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r7, &(0x7f0000000100)='?', 0x1)
sendfile(r7, r6, 0x0, 0x3ffff)

0s ago: executing program 1 (id=3127):
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES64, @ANYBLOB="779cb0e6422ca02f85011e6992de347df36f1b2573d8e5f54d7e7d9fd16f14f927", @ANYRESOCT, @ANYRESOCT=0x0, @ANYBLOB="a825b86a1c4c5a601b50a1f34b58a5fdea1e7e8dc869be70e016be8736b93d1f3afd5dcbd22172562d1331795dae9c97133f994652198354b66d383880e2bb6b43464054f489ea8df737dd075e4bfabad6c613908d8f95a585b6107d668bd7004395f9f2fb1082f2dc4ab08be824"], 0x47, 0xc11, &(0x7f0000000d00)="$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")
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0)

kernel console output (not intermixed with test programs):

interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  401.092814][T10970] 9pnet_fd: Insufficient options for proto=fd
[  401.192287][T10901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  401.943620][T10901] batman_adv: batadv0: Adding interface: batadv_slave_1
[  401.950606][T10901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  401.982638][T10901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  402.064310][T10979] loop0: detected capacity change from 0 to 256
[  402.141007][T10901] device hsr_slave_0 entered promiscuous mode
[  402.152312][T10979] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  402.173297][T10901] device hsr_slave_1 entered promiscuous mode
[  402.198109][T10979] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  402.215328][T10901] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  402.231441][ T4288] Bluetooth: hci3: command 0x041b tx timeout
[  402.268148][T10901] Cannot create hsr debugfs directory
[  402.309083][T10979] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  402.740791][T10979] exFAT-fs (loop0): failed to load alloc-bitmap
[  402.921400][T10979] exFAT-fs (loop0): failed to recognize exfat type
[  404.144395][T11004] loop0: detected capacity change from 0 to 256
[  404.203543][T11004] exfat: Bad value for 'uid'
[  404.867410][ T4286] Bluetooth: hci3: command 0x040f tx timeout
[  405.170993][T11018] 9pnet_fd: Insufficient options for proto=fd
[  406.931365][ T4286] Bluetooth: hci3: command 0x0419 tx timeout
[  407.199389][T11058] loop0: detected capacity change from 0 to 512
[  407.215957][T11058] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  407.289235][T11058] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  407.333154][T11058] ext4 filesystem being mounted at /107/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  407.501810][T11069] EXT4-fs error (device loop0): __ext4_new_inode:1083: comm syz.0.2025: reserved inode found cleared - inode=1
[  408.379569][ T8672] EXT4-fs (loop0): unmounting filesystem.
[  410.053751][T11101] loop0: detected capacity change from 0 to 2048
[  410.195551][T11101] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  411.653914][T10901] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  411.774948][ T9035] device hsr_slave_0 left promiscuous mode
[  411.794534][ T9035] device hsr_slave_1 left promiscuous mode
[  411.885641][ T9035] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  411.896679][ T9035] batman_adv: batadv0: Removing interface: batadv_slave_0
[  411.931975][ T9035] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  411.941394][ T9035] batman_adv: batadv0: Removing interface: batadv_slave_1
[  411.972192][ T9035] device bridge_slave_1 left promiscuous mode
[  411.978444][ T9035] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.025732][ T9035] device bridge_slave_0 left promiscuous mode
[  412.049441][ T9035] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.249351][ T9035] device veth1_macvtap left promiscuous mode
[  412.255521][ T9035] device veth0_macvtap left promiscuous mode
[  412.262087][ T9035] device veth1_vlan left promiscuous mode
[  412.267920][ T9035] device veth0_vlan left promiscuous mode
[  413.570575][T11157] loop0: detected capacity change from 0 to 512
[  413.621950][T11157] EXT4-fs error (device loop0): ext4_get_journal_inode:5762: comm syz.0.2056: inode #2147418112: comm syz.0.2056: iget: illegal inode #
[  413.723237][T11157] EXT4-fs (loop0): no journal found
[  413.754684][T11157] EXT4-fs (loop0): can't get journal size
[  413.818019][T11157] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  413.881769][T11157] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[  413.891274][T11157] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  413.962297][T11157] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters
[  414.012494][T11160] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.2056: inode has both inline data and extents flags
[  414.031632][T11157] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.2056: Invalid inode bitmap blk 4 in block_group 0
[  414.147176][T11157] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem
[  414.283322][T11170] fuse: Unknown parameter 'fd00000000000000000003'
[  414.714422][ T9035] team0 (unregistering): Port device team_slave_1 removed
[  415.087801][ T9035] team0 (unregistering): Port device team_slave_0 removed
[  415.802667][ T9035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  416.345014][ T9035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  416.920431][ T9035] bond0 (unregistering): Released all slaves
[  417.771249][T10901] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  417.820887][T10901] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  417.887332][T10901] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  418.214546][ T8672] EXT4-fs (loop0): unmounting filesystem.
[  418.397684][T10901] 8021q: adding VLAN 0 to HW filter on device bond0
[  418.644881][ T8101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  419.062758][ T8101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  419.250212][T10901] 8021q: adding VLAN 0 to HW filter on device team0
[  419.284081][T10901] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  419.294620][T10901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  419.324817][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  419.437750][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  419.478839][ T7318] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.486007][ T7318] bridge0: port 1(bridge_slave_0) entered forwarding state
[  421.476709][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  421.732385][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  421.830372][ T7318] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.837575][ T7318] bridge0: port 2(bridge_slave_1) entered forwarding state
[  422.098354][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  422.117520][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  422.152431][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  422.165768][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  422.175004][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  422.218090][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  422.240539][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  422.257836][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  422.268540][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  422.287057][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  422.341313][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  422.361989][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  422.397173][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  422.818964][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  422.838992][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  422.876312][T10901] 8021q: adding VLAN 0 to HW filter on device batadv0
[  423.039013][T11269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2093'.
[  426.712554][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  426.724083][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  426.880195][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  426.895586][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  426.945502][T10901] device veth0_vlan entered promiscuous mode
[  426.972918][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  426.995396][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  427.052837][T10901] device veth1_vlan entered promiscuous mode
[  427.209149][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  427.228051][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  427.885695][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  427.922135][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  427.939443][T10901] device veth0_macvtap entered promiscuous mode
[  427.998491][T10901] device veth1_macvtap entered promiscuous mode
[  428.296559][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  428.548383][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  428.569303][T10901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  428.581981][T10901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.613746][T10901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  428.662544][T10901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.707181][T10901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  428.771813][T10901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.843734][T10901] batman_adv: batadv0: Interface activated: batadv_slave_0
[  428.851405][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  428.880427][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  429.440504][T10901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.453820][T10901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.498973][T10901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.519649][T10901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.544547][T10901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.584882][T10901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.642141][T10901] batman_adv: batadv0: Interface activated: batadv_slave_1
[  429.674089][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  429.695046][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  429.751864][T10901] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  429.775597][T10901] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  430.999796][T10901] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  431.009342][T10901] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  431.756098][ T5140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  431.870630][ T5140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  432.253497][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  432.639877][ T4603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  432.661402][ T4603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  432.712311][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  433.216978][T11398] loop5: detected capacity change from 0 to 16
[  433.254842][T11398] erofs: (device loop5): mounted with root inode @ nid 36.
[  434.298490][T11406] loop0: detected capacity change from 0 to 4096
[  434.343091][T11406] EXT4-fs: Ignoring removed mblk_io_submit option
[  434.422857][T11406] ext4: Unknown parameter 'nouser_xattr'
[  438.934584][T11454] FAULT_INJECTION: forcing a failure.
[  438.934584][T11454] name failslab, interval 1, probability 0, space 0, times 0
[  438.947554][T11454] CPU: 0 PID: 11454 Comm: syz.5.2142 Not tainted syzkaller #0
[  438.955031][T11454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  438.965098][T11454] Call Trace:
[  438.968389][T11454]  <TASK>
[  438.971332][T11454]  dump_stack_lvl+0x188/0x24e
[  438.976042][T11454]  ? show_regs_print_info+0x12/0x12
[  438.981264][T11454]  ? load_image+0x410/0x410
[  438.985789][T11454]  ? __might_sleep+0xd0/0xd0
[  438.990390][T11454]  ? __lock_acquire+0x7c40/0x7c40
[  438.995440][T11454]  should_fail_ex+0x390/0x4c0
[  439.000142][T11454]  should_failslab+0x5/0x20
[  439.004655][T11454]  slab_pre_alloc_hook+0x59/0x300
[  439.009693][T11454]  ? __split_vma+0x4f0/0x4f0
[  439.014303][T11454]  kmem_cache_alloc+0x56/0x2f0
[  439.019076][T11454]  ? vm_area_dup+0x23/0x1a0
[  439.023601][T11454]  vm_area_dup+0x23/0x1a0
[  439.027948][T11454]  __split_vma+0xb9/0x4f0
[  439.032301][T11454]  ? split_vma+0x70/0xf0
[  439.036568][T11454]  mlock_fixup+0x490/0x580
[  439.041012][T11454]  apply_vma_lock_flags+0x257/0x3b0
[  439.046235][T11454]  ? do_mlock+0x640/0x640
[  439.050597][T11454]  ? rwsem_write_trylock+0x135/0x1c0
[  439.055917][T11454]  ? do_mlock+0x194/0x640
[  439.060280][T11454]  do_mlock+0x4d6/0x640
[  439.064474][T11454]  ? lru_gen_add_folio+0xe20/0xe20
[  439.069610][T11454]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  439.075619][T11454]  ? lock_chain_count+0x20/0x20
[  439.080500][T11454]  ? syscall_enter_from_user_mode+0x21/0x80
[  439.086424][T11454]  __x64_sys_mlock+0x5c/0x70
[  439.091034][T11454]  do_syscall_64+0x4c/0xa0
[  439.095478][T11454]  ? clear_bhb_loop+0x60/0xb0
[  439.100181][T11454]  ? clear_bhb_loop+0x60/0xb0
[  439.104878][T11454]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  439.110766][T11454] RIP: 0033:0x7ffa4f19e159
[  439.115262][T11454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  439.134863][T11454] RSP: 002b:00007ffa4ff8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[  439.143262][T11454] RAX: ffffffffffffffda RBX: 00007ffa4f425fa0 RCX: 00007ffa4f19e159
[  439.151231][T11454] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000341000
[  439.159221][T11454] RBP: 00007ffa4f235024 R08: 0000000000000000 R09: 0000000000000000
[  439.167209][T11454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  439.175204][T11454] R13: 00007ffa4f426038 R14: 00007ffa4f425fa0 R15: 00007fff01b1c598
[  439.183211][T11454]  </TASK>
[  439.413731][T11459] netlink: 'syz.2.2144': attribute type 4 has an invalid length.
[  439.485033][T11459] netlink: 'syz.2.2144': attribute type 4 has an invalid length.
[  439.844737][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  439.852874][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  442.717680][T11495] FAULT_INJECTION: forcing a failure.
[  442.717680][T11495] name failslab, interval 1, probability 0, space 0, times 0
[  442.748795][T11495] CPU: 0 PID: 11495 Comm: syz.0.2152 Not tainted syzkaller #0
[  442.756314][T11495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  442.766396][T11495] Call Trace:
[  442.769694][T11495]  <TASK>
[  442.772663][T11495]  dump_stack_lvl+0x188/0x24e
[  442.777377][T11495]  ? show_regs_print_info+0x12/0x12
[  442.782612][T11495]  ? load_image+0x410/0x410
[  442.787153][T11495]  ? __might_sleep+0xd0/0xd0
[  442.791772][T11495]  ? __lock_acquire+0x7c40/0x7c40
[  442.796837][T11495]  should_fail_ex+0x390/0x4c0
[  442.801544][T11495]  should_failslab+0x5/0x20
[  442.806061][T11495]  slab_pre_alloc_hook+0x59/0x300
[  442.811098][T11495]  ? tomoyo_realpath_from_path+0xe2/0x5c0
[  442.816911][T11495]  __kmem_cache_alloc_node+0x4f/0x270
[  442.822286][T11495]  ? tomoyo_realpath_from_path+0xe2/0x5c0
[  442.828004][T11495]  __kmalloc+0xa3/0x240
[  442.832194][T11495]  tomoyo_realpath_from_path+0xe2/0x5c0
[  442.837749][T11495]  tomoyo_check_open_permission+0x212/0x440
[  442.843644][T11495]  ? tomoyo_check_open_permission+0x1bf/0x440
[  442.849710][T11495]  ? tomoyo_check_path_number_acl+0x280/0x280
[  442.855779][T11495]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  442.861763][T11495]  ? __lock_acquire+0x7c40/0x7c40
[  442.866812][T11495]  ? __lock_acquire+0x7c40/0x7c40
[  442.871838][T11495]  ? __rwlock_init+0x140/0x140
[  442.876598][T11495]  ? tomoyo_file_open+0xe9/0x170
[  442.881545][T11495]  security_file_open+0x5e/0xa0
[  442.886510][T11495]  do_dentry_open+0x2fd/0x10b0
[  442.891321][T11495]  ? memcpy+0x3c/0x60
[  442.895333][T11495]  path_openat+0x2674/0x2f10
[  442.899965][T11495]  ? verify_lock_unused+0x140/0x140
[  442.905164][T11495]  ? do_sys_openat2+0xdd/0x4f0
[  442.909939][T11495]  ? do_filp_open+0x420/0x420
[  442.914628][T11495]  do_filp_open+0x1ee/0x420
[  442.919131][T11495]  ? vfs_tmpfile+0x470/0x470
[  442.923735][T11495]  ? _raw_spin_unlock+0x24/0x40
[  442.928584][T11495]  ? alloc_fd+0x590/0x640
[  442.932947][T11495]  do_sys_openat2+0x14b/0x4f0
[  442.937628][T11495]  ? do_sys_open+0xe0/0xe0
[  442.942049][T11495]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  442.948038][T11495]  ? lock_chain_count+0x20/0x20
[  442.952914][T11495]  __x64_sys_openat+0x135/0x160
[  442.957788][T11495]  do_syscall_64+0x4c/0xa0
[  442.962209][T11495]  ? clear_bhb_loop+0x60/0xb0
[  442.966889][T11495]  ? clear_bhb_loop+0x60/0xb0
[  442.971573][T11495]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  442.977474][T11495] RIP: 0033:0x7fef7f35e98e
[  442.981886][T11495] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  443.001487][T11495] RSP: 002b:00007fef801edb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  443.009895][T11495] RAX: ffffffffffffffda RBX: 00007fef801ee6c0 RCX: 00007fef7f35e98e
[  443.017863][T11495] RDX: 0000000000000000 RSI: 00007fef801edc00 RDI: ffffffffffffff9c
[  443.025855][T11495] RBP: 00007fef801edc00 R08: 0000000000000000 R09: 0000000000000000
[  443.033927][T11495] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  443.041901][T11495] R13: 00007fef7f626038 R14: 00007fef7f625fa0 R15: 00007ffc5382dbe8
[  443.049888][T11495]  </TASK>
[  443.059816][T11495] ERROR: Out of memory at tomoyo_realpath_from_path.
[  443.451777][T11506] loop0: detected capacity change from 0 to 128
[  443.480747][T11506] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  446.355292][T11547] netlink: 'syz.5.2168': attribute type 4 has an invalid length.
[  446.415086][T11551] netlink: 'syz.5.2168': attribute type 4 has an invalid length.
[  446.681532][T11557] FAULT_INJECTION: forcing a failure.
[  446.681532][T11557] name failslab, interval 1, probability 0, space 0, times 0
[  446.694246][T11557] CPU: 1 PID: 11557 Comm: syz.5.2171 Not tainted syzkaller #0
[  446.701726][T11557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  446.711794][T11557] Call Trace:
[  446.715075][T11557]  <TASK>
[  446.718002][T11557]  dump_stack_lvl+0x188/0x24e
[  446.722694][T11557]  ? show_regs_print_info+0x12/0x12
[  446.727896][T11557]  ? load_image+0x410/0x410
[  446.732402][T11557]  ? __might_sleep+0xd0/0xd0
[  446.736991][T11557]  ? __lock_acquire+0x7c40/0x7c40
[  446.742027][T11557]  should_fail_ex+0x390/0x4c0
[  446.746709][T11557]  should_failslab+0x5/0x20
[  446.751235][T11557]  slab_pre_alloc_hook+0x59/0x300
[  446.756259][T11557]  ? __split_vma+0x4f0/0x4f0
[  446.760854][T11557]  kmem_cache_alloc+0x56/0x2f0
[  446.765617][T11557]  ? vm_area_dup+0x23/0x1a0
[  446.770122][T11557]  vm_area_dup+0x23/0x1a0
[  446.774455][T11557]  __split_vma+0xb9/0x4f0
[  446.778783][T11557]  ? split_vma+0x70/0xf0
[  446.783036][T11557]  mlock_fixup+0x490/0x580
[  446.787461][T11557]  apply_vma_lock_flags+0x257/0x3b0
[  446.792664][T11557]  ? do_mlock+0x640/0x640
[  446.796991][T11557]  ? rwsem_write_trylock+0x135/0x1c0
[  446.802282][T11557]  ? do_mlock+0x194/0x640
[  446.806616][T11557]  do_mlock+0x4d6/0x640
[  446.810776][T11557]  ? lru_gen_add_folio+0xe20/0xe20
[  446.815916][T11557]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  446.821912][T11557]  ? lock_chain_count+0x20/0x20
[  446.826770][T11557]  ? syscall_enter_from_user_mode+0x21/0x80
[  446.832673][T11557]  __x64_sys_mlock+0x5c/0x70
[  446.837265][T11557]  do_syscall_64+0x4c/0xa0
[  446.841686][T11557]  ? clear_bhb_loop+0x60/0xb0
[  446.846369][T11557]  ? clear_bhb_loop+0x60/0xb0
[  446.851048][T11557]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  446.856946][T11557] RIP: 0033:0x7ffa4f19e159
[  446.861410][T11557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  446.881015][T11557] RSP: 002b:00007ffa4ff8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[  446.889429][T11557] RAX: ffffffffffffffda RBX: 00007ffa4f425fa0 RCX: 00007ffa4f19e159
[  446.897395][T11557] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000341000
[  446.905362][T11557] RBP: 00007ffa4f235024 R08: 0000000000000000 R09: 0000000000000000
[  446.913331][T11557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  446.921298][T11557] R13: 00007ffa4f426038 R14: 00007ffa4f425fa0 R15: 00007fff01b1c598
[  446.929280][T11557]  </TASK>
[  450.062124][T11591] netlink: 'syz.7.2181': attribute type 4 has an invalid length.
[  450.105866][T11591] netlink: 'syz.7.2181': attribute type 4 has an invalid length.
[  453.567240][T11634] loop5: detected capacity change from 0 to 128
[  453.657508][T11634] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  454.846764][T11652] FAULT_INJECTION: forcing a failure.
[  454.846764][T11652] name failslab, interval 1, probability 0, space 0, times 0
[  454.859545][T11652] CPU: 1 PID: 11652 Comm: syz.0.2197 Not tainted syzkaller #0
[  454.867035][T11652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  454.877122][T11652] Call Trace:
[  454.880420][T11652]  <TASK>
[  454.883367][T11652]  dump_stack_lvl+0x188/0x24e
[  454.888083][T11652]  ? show_regs_print_info+0x12/0x12
[  454.893325][T11652]  ? load_image+0x410/0x410
[  454.897863][T11652]  ? __might_sleep+0xd0/0xd0
[  454.902477][T11652]  ? __lock_acquire+0x7c40/0x7c40
[  454.907535][T11652]  should_fail_ex+0x390/0x4c0
[  454.912250][T11652]  should_failslab+0x5/0x20
[  454.916774][T11652]  slab_pre_alloc_hook+0x59/0x300
[  454.921829][T11652]  ? do_signalfd4+0x131/0x320
[  454.926647][T11652]  __kmem_cache_alloc_node+0x4f/0x270
[  454.932046][T11652]  ? bpf_link_show_fdinfo+0x380/0x380
[  454.937531][T11652]  ? do_signalfd4+0x131/0x320
[  454.942240][T11652]  kmalloc_trace+0x26/0xe0
[  454.946690][T11652]  do_signalfd4+0x131/0x320
[  454.951228][T11652]  __x64_sys_signalfd+0x12e/0x170
[  454.956283][T11652]  ? __ia32_sys_signalfd4+0x1a0/0x1a0
[  454.961694][T11652]  ? lockdep_hardirqs_on+0x94/0x140
[  454.966928][T11652]  do_syscall_64+0x4c/0xa0
[  454.971372][T11652]  ? clear_bhb_loop+0x60/0xb0
[  454.976101][T11652]  ? clear_bhb_loop+0x60/0xb0
[  454.980811][T11652]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  454.986735][T11652] RIP: 0033:0x7fef7f39e159
[  454.991174][T11652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  455.010803][T11652] RSP: 002b:00007fef801ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000011a
[  455.019247][T11652] RAX: ffffffffffffffda RBX: 00007fef7f625fa0 RCX: 00007fef7f39e159
[  455.027244][T11652] RDX: 0000000000000008 RSI: 00002000000002c0 RDI: ffffffffffffffff
[  455.035241][T11652] RBP: 00007fef7f435024 R08: 0000000000000000 R09: 0000000000000000
[  455.043231][T11652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  455.051223][T11652] R13: 00007fef7f626038 R14: 00007fef7f625fa0 R15: 00007ffc5382dbe8
[  455.059236][T11652]  </TASK>
[  455.092607][T11662] loop5: detected capacity change from 0 to 512
[  455.112183][T11662] EXT4-fs: inline encryption not supported
[  455.161252][T11662] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  455.255989][T11662] EXT4-fs (loop5): 1 truncate cleaned up
[  455.271226][T11662] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  455.359451][T11668] loop0: detected capacity change from 0 to 1024
[  455.454930][T11668] snd_dummy snd_dummy.0: control 2:254:0:syz0:0 is already present
[  455.552824][T10901] EXT4-fs (loop5): unmounting filesystem.
[  458.567610][T11703] loop0: detected capacity change from 0 to 256
[  458.610995][T11703] exfat: Bad value for 'uid'
[  459.671357][   T26] audit: type=1326 audit(2000000299.529:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11704 comm="syz.2.2214" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423679e159 code=0x7fc00000
[  459.703620][T11721] loop0: detected capacity change from 0 to 8
[  459.776508][T11721] SQUASHFS error: Unable to read inode 0x11f
[  459.787012][   T26] audit: type=1326 audit(2000000299.529:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11704 comm="syz.2.2214" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f423679e159 code=0x7fc00000
[  459.854137][   T26] audit: type=1326 audit(2000000299.529:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11704 comm="syz.2.2214" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423679e159 code=0x7fc00000
[  459.934905][   T26] audit: type=1326 audit(2000000299.529:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11704 comm="syz.2.2214" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423679e159 code=0x7fc00000
[  459.991405][   T26] audit: type=1326 audit(2000000299.529:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11704 comm="syz.2.2214" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423679e159 code=0x7fc00000
[  460.019102][T11727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2220'.
[  460.081188][   T26] audit: type=1326 audit(2000000299.529:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11704 comm="syz.2.2214" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423679e159 code=0x7fc00000
[  460.113152][T11721] loop0: detected capacity change from 0 to 16
[  460.149097][T11721] erofs: (device loop0): mounted with root inode @ nid 36.
[  460.167009][   T26] audit: type=1326 audit(2000000299.529:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11704 comm="syz.2.2214" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423679e159 code=0x7fc00000
[  460.245888][   T26] audit: type=1326 audit(2000000299.529:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11704 comm="syz.2.2214" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423679e159 code=0x7fc00000
[  460.331280][   T26] audit: type=1326 audit(2000000299.529:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11704 comm="syz.2.2214" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423679e159 code=0x7fc00000
[  460.410885][   T26] audit: type=1326 audit(2000000299.529:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11704 comm="syz.2.2214" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423679e159 code=0x7fc00000
[  462.322999][T11762] loop5: detected capacity change from 0 to 256
[  462.341980][T11762] exfat: Bad value for 'uid'
[  465.818321][    T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  466.025324][    T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  466.045879][    T7] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  466.092546][    T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  466.111308][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  466.137703][    T7] usb 1-1: SerialNumber: syz
[  466.163637][    T7] usb 1-1: bad CDC descriptors
[  466.260825][    T7] usb 1-1: USB disconnect, device number 8
[  468.635395][   T26] kauditd_printk_skb: 57 callbacks suppressed
[  468.635410][   T26] audit: type=1326 audit(2000000308.489:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11816 comm="syz.5.2242" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4f19e159 code=0x7ffc0000
[  468.747445][   T26] audit: type=1326 audit(2000000308.549:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11816 comm="syz.5.2242" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4f19e159 code=0x7ffc0000
[  468.891804][   T26] audit: type=1326 audit(2000000308.549:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11816 comm="syz.5.2242" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4f19e159 code=0x7ffc0000
[  469.120542][T11829] loop5: detected capacity change from 0 to 256
[  469.192139][   T26] audit: type=1326 audit(2000000308.559:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11816 comm="syz.5.2242" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa4f15e98e code=0x7ffc0000
[  469.245993][T11829] exfat: Bad value for 'uid'
[  469.402113][   T26] audit: type=1326 audit(2000000308.559:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11816 comm="syz.5.2242" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa4f15e98e code=0x7ffc0000
[  469.631149][   T26] audit: type=1326 audit(2000000308.559:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11816 comm="syz.5.2242" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4f19e159 code=0x7ffc0000
[  469.726044][T11639] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  470.397787][   T26] audit: type=1326 audit(2000000308.559:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11816 comm="syz.5.2242" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4f19e159 code=0x7ffc0000
[  472.026066][   T26] audit: type=1326 audit(2000000308.559:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11816 comm="syz.5.2242" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4f19e159 code=0x7ffc0000
[  472.067167][   T26] audit: type=1326 audit(2000000308.559:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11816 comm="syz.5.2242" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4f19e159 code=0x7ffc0000
[  472.150185][   T26] audit: type=1326 audit(2000000308.559:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11816 comm="syz.5.2242" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7ffa4f19e159 code=0x7ffc0000
[  473.557646][T11865] loop5: detected capacity change from 0 to 256
[  473.623432][T11865] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  474.108943][   T26] kauditd_printk_skb: 12 callbacks suppressed
[  474.108956][   T26] audit: type=1800 audit(2000000313.959:105): pid=11878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2255" name="file1" dev="loop5" ino=1048720 res=0 errno=0
[  474.142203][T11878] FAULT_INJECTION: forcing a failure.
[  474.142203][T11878] name failslab, interval 1, probability 0, space 0, times 0
[  474.155823][T11878] CPU: 0 PID: 11878 Comm: syz.5.2255 Not tainted syzkaller #0
[  474.163311][T11878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  474.173382][T11878] Call Trace:
[  474.176669][T11878]  <TASK>
[  474.179614][T11878]  dump_stack_lvl+0x188/0x24e
[  474.184325][T11878]  ? show_regs_print_info+0x12/0x12
[  474.189556][T11878]  ? load_image+0x410/0x410
[  474.194091][T11878]  ? __might_sleep+0xd0/0xd0
[  474.198703][T11878]  ? __lock_acquire+0x7c40/0x7c40
[  474.203760][T11878]  should_fail_ex+0x390/0x4c0
[  474.208468][T11878]  should_failslab+0x5/0x20
[  474.212993][T11878]  slab_pre_alloc_hook+0x59/0x300
[  474.218049][T11878]  ? vfs_write+0x777/0x9a0
[  474.222494][T11878]  kmem_cache_alloc+0x56/0x2f0
[  474.227259][T11878]  ? getname_flags+0xb7/0x500
[  474.231939][T11878]  getname_flags+0xb7/0x500
[  474.236444][T11878]  user_path_at_empty+0x28/0x60
[  474.241296][T11878]  path_setxattr+0xb3/0x290
[  474.245924][T11878]  ? simple_xattr_list_add+0xf0/0xf0
[  474.251253][T11878]  ? lock_chain_count+0x20/0x20
[  474.256116][T11878]  __x64_sys_setxattr+0xb7/0xd0
[  474.260975][T11878]  do_syscall_64+0x4c/0xa0
[  474.265401][T11878]  ? clear_bhb_loop+0x60/0xb0
[  474.270080][T11878]  ? clear_bhb_loop+0x60/0xb0
[  474.274763][T11878]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  474.280660][T11878] RIP: 0033:0x7ffa4f19e159
[  474.285090][T11878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  474.304695][T11878] RSP: 002b:00007ffa4d3f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  474.313110][T11878] RAX: ffffffffffffffda RBX: 00007ffa4f426090 RCX: 00007ffa4f19e159
[  474.321080][T11878] RDX: 00002000000001c0 RSI: 0000200000000140 RDI: 0000200000000100
[  474.329048][T11878] RBP: 00007ffa4f235024 R08: 0000000000000002 R09: 0000000000000000
[  474.337022][T11878] R10: 000000000000000d R11: 0000000000000246 R12: 0000000000000000
[  474.344996][T11878] R13: 00007ffa4f426128 R14: 00007ffa4f426090 R15: 00007fff01b1c598
[  474.352983][T11878]  </TASK>
[  475.101933][T11891] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[6749] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[11891]
[  478.924361][T11930] loop5: detected capacity change from 0 to 8
[  478.959476][T11930] SQUASHFS error: lzo decompression failed, data probably corrupt
[  478.999443][T11930] SQUASHFS error: Failed to read block 0x91: -5
[  479.016706][T11930] SQUASHFS error: Unable to read metadata cache entry [8f]
[  479.066383][T11930] SQUASHFS error: Unable to read inode 0x11f
[  479.696819][T11940] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[10901] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[11940]
[  488.079935][T12036] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2302'.
[  488.113220][T12036] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2302'.
[  489.193490][T12049] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2309'.
[  489.283568][T12051] loop0: detected capacity change from 0 to 1024
[  490.048937][T12070] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  490.058360][T12070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  490.065914][T12070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  490.198712][T12078] loop0: detected capacity change from 0 to 512
[  490.383202][T12078] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  490.431471][T12078] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  490.578680][   T26] audit: type=1804 audit(2000000330.429:106): pid=12078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2318" name="/newroot/148/bus/bus" dev="loop0" ino=18 res=1 errno=0
[  490.612159][T12089] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2321'.
[  490.680686][   T26] audit: type=1800 audit(2000000330.479:107): pid=12078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2318" name="bus" dev="loop0" ino=18 res=0 errno=0
[  490.973997][ T8672] EXT4-fs (loop0): unmounting filesystem.
[  495.232243][T12156] loop5: detected capacity change from 0 to 8
[  495.313028][T12156] SQUASHFS error: lzo decompression failed, data probably corrupt
[  495.320977][T12156] SQUASHFS error: Failed to read block 0x91: -5
[  495.441856][T12156] SQUASHFS error: Unable to read metadata cache entry [8f]
[  495.488337][T12156] SQUASHFS error: Unable to read inode 0x11f
[  495.687936][T11639] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  501.406830][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  501.420878][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  501.924777][T12218] loop0: detected capacity change from 0 to 8
[  502.179192][T12218] SQUASHFS error: lzo decompression failed, data probably corrupt
[  502.218225][T12218] SQUASHFS error: Failed to read block 0x91: -5
[  502.229261][T12218] SQUASHFS error: Unable to read metadata cache entry [8f]
[  502.236641][T12218] SQUASHFS error: Unable to read inode 0x11f
[  503.626477][T12251] FAULT_INJECTION: forcing a failure.
[  503.626477][T12251] name failslab, interval 1, probability 0, space 0, times 0
[  503.639476][T12251] CPU: 1 PID: 12251 Comm: syz.0.2361 Not tainted syzkaller #0
[  503.646969][T12251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  503.657048][T12251] Call Trace:
[  503.660337][T12251]  <TASK>
[  503.663279][T12251]  dump_stack_lvl+0x188/0x24e
[  503.667991][T12251]  ? show_regs_print_info+0x12/0x12
[  503.673221][T12251]  ? load_image+0x410/0x410
[  503.677752][T12251]  ? __might_sleep+0xd0/0xd0
[  503.682360][T12251]  ? __lock_acquire+0x7c40/0x7c40
[  503.687415][T12251]  should_fail_ex+0x390/0x4c0
[  503.692133][T12251]  should_failslab+0x5/0x20
[  503.696656][T12251]  slab_pre_alloc_hook+0x59/0x300
[  503.701705][T12251]  kmem_cache_alloc+0x56/0x2f0
[  503.706490][T12251]  ? sk_prot_alloc+0x57/0x210
[  503.711291][T12251]  sk_prot_alloc+0x57/0x210
[  503.715816][T12251]  ? sk_alloc+0x20/0x330
[  503.720082][T12251]  sk_alloc+0x36/0x330
[  503.724177][T12251]  unix_create1+0xb3/0x710
[  503.728645][T12251]  unix_create+0x139/0x1f0
[  503.733091][T12251]  __sock_create+0x49a/0x940
[  503.737782][T12251]  __sys_socketpair+0x1bd/0x540
[  503.742667][T12251]  __x64_sys_socketpair+0x97/0xb0
[  503.747724][T12251]  do_syscall_64+0x4c/0xa0
[  503.752172][T12251]  ? clear_bhb_loop+0x60/0xb0
[  503.756875][T12251]  ? clear_bhb_loop+0x60/0xb0
[  503.761582][T12251]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  503.767499][T12251] RIP: 0033:0x7fef7f39e159
[  503.771930][T12251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  503.791560][T12251] RSP: 002b:00007fef801ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  503.799999][T12251] RAX: ffffffffffffffda RBX: 00007fef7f626180 RCX: 00007fef7f39e159
[  503.807987][T12251] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001
[  503.815978][T12251] RBP: 00007fef7f435024 R08: 0000000000000000 R09: 0000000000000000
[  503.823964][T12251] R10: 00002000000010c0 R11: 0000000000000246 R12: 0000000000000000
[  503.831954][T12251] R13: 00007fef7f626218 R14: 00007fef7f626180 R15: 00007ffc5382dbe8
[  503.839961][T12251]  </TASK>
[  508.494821][T12301] loop0: detected capacity change from 0 to 164
[  511.816678][T12340] loop0: detected capacity change from 0 to 512
[  511.851540][T12340] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  511.871360][T12340] UDF-fs: Scanning with blocksize 512 failed
[  511.908149][T12340] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  511.968324][T12340] UDF-fs: Scanning with blocksize 1024 failed
[  512.019697][T12340] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  512.076754][T12340] UDF-fs: Scanning with blocksize 2048 failed
[  512.109824][T12340] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  512.161156][T12340] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  512.364917][T12340] syz.0.2392: attempt to access beyond end of device
[  512.364917][T12340] loop0: rw=2049, sector=600, nr_sectors = 128 limit=512
[  513.793429][T12369] loop0: detected capacity change from 0 to 1024
[  519.936919][T12458] FAULT_INJECTION: forcing a failure.
[  519.936919][T12458] name failslab, interval 1, probability 0, space 0, times 0
[  519.987109][T12458] CPU: 0 PID: 12458 Comm: syz.5.2423 Not tainted syzkaller #0
[  519.994615][T12458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  520.004686][T12458] Call Trace:
[  520.007988][T12458]  <TASK>
[  520.010940][T12458]  dump_stack_lvl+0x188/0x24e
[  520.015677][T12458]  ? show_regs_print_info+0x12/0x12
[  520.020911][T12458]  ? load_image+0x410/0x410
[  520.025463][T12458]  ? __might_sleep+0xd0/0xd0
[  520.030073][T12458]  ? __lock_acquire+0x7c40/0x7c40
[  520.035133][T12458]  should_fail_ex+0x390/0x4c0
[  520.039840][T12458]  should_failslab+0x5/0x20
[  520.044361][T12458]  slab_pre_alloc_hook+0x59/0x300
[  520.049411][T12458]  ? __split_vma+0x4f0/0x4f0
[  520.054034][T12458]  kmem_cache_alloc+0x56/0x2f0
[  520.058821][T12458]  ? vm_area_dup+0x23/0x1a0
[  520.063354][T12458]  vm_area_dup+0x23/0x1a0
[  520.067705][T12458]  __split_vma+0xb9/0x4f0
[  520.072056][T12458]  ? split_vma+0x70/0xf0
[  520.076329][T12458]  mlock_fixup+0x490/0x580
[  520.080775][T12458]  apply_vma_lock_flags+0x257/0x3b0
[  520.085996][T12458]  ? do_mlock+0x640/0x640
[  520.090341][T12458]  ? rwsem_write_trylock+0x135/0x1c0
[  520.095662][T12458]  ? do_mlock+0x194/0x640
[  520.100009][T12458]  do_mlock+0x4d6/0x640
[  520.104173][T12458]  ? lru_gen_add_folio+0xe20/0xe20
[  520.109287][T12458]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  520.115276][T12458]  ? lock_chain_count+0x20/0x20
[  520.120137][T12458]  ? syscall_enter_from_user_mode+0x21/0x80
[  520.126076][T12458]  __x64_sys_mlock+0x5c/0x70
[  520.130669][T12458]  do_syscall_64+0x4c/0xa0
[  520.135093][T12458]  ? clear_bhb_loop+0x60/0xb0
[  520.139774][T12458]  ? clear_bhb_loop+0x60/0xb0
[  520.144456][T12458]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  520.150352][T12458] RIP: 0033:0x7ffa4f19e159
[  520.154765][T12458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  520.174370][T12458] RSP: 002b:00007ffa4ff8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[  520.182784][T12458] RAX: ffffffffffffffda RBX: 00007ffa4f425fa0 RCX: 00007ffa4f19e159
[  520.190750][T12458] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000341000
[  520.198714][T12458] RBP: 00007ffa4f235024 R08: 0000000000000000 R09: 0000000000000000
[  520.206681][T12458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  520.214647][T12458] R13: 00007ffa4f426038 R14: 00007ffa4f425fa0 R15: 00007fff01b1c598
[  520.222625][T12458]  </TASK>
[  521.094708][T12480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2431'.
[  521.553232][T12490] loop0: detected capacity change from 0 to 8
[  521.600066][T12490] SQUASHFS error: lzo decompression failed, data probably corrupt
[  521.656531][T12490] SQUASHFS error: Failed to read block 0x91: -5
[  521.705990][T12490] SQUASHFS error: Unable to read metadata cache entry [8f]
[  521.721217][T12490] SQUASHFS error: Unable to read inode 0x11f
[  522.347458][T12503] loop0: detected capacity change from 0 to 512
[  522.400919][T12503] EXT4-fs: Ignoring removed bh option
[  522.489781][T12503] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  522.570784][T12503] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it
[  522.661303][T12503] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.2438: Corrupt directory, running e2fsck is recommended
[  522.749693][T12503] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  522.801626][T12503] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.2438: corrupted in-inode xattr
[  522.873763][T12503] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.2438: couldn't read orphan inode 15 (err -117)
[  522.896156][T12503] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  522.948431][T12503] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  522.996576][T12503] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it
[  523.010760][   T26] audit: type=1326 audit(2000000362.859:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.7.2439" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261b99e159 code=0x7fc00000
[  523.089265][T12503] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.2438: Corrupt directory, running e2fsck is recommended
[  523.150000][T12514] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  523.202068][T12514] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it
[  523.237628][T12514] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.2438: Corrupt directory, running e2fsck is recommended
[  523.288164][T12520] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  523.289411][T12517] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  523.327028][T12503] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  523.411917][T12520] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it
[  523.459153][T12503] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.2438: path /166/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  523.532769][T12503] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 22: comm syz.0.2438: path /166/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=65535, size=1024 fake=0
[  523.558128][T12503] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 8: comm syz.0.2438: path /166/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[  523.708313][   T26] audit: type=1326 audit(2000000363.559:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.7.2439" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f261b99e159 code=0x7fc00000
[  523.757469][ T8672] EXT4-fs (loop0): unmounting filesystem.
[  523.804081][   T26] audit: type=1326 audit(2000000363.559:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.7.2439" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261b99e159 code=0x7fc00000
[  523.811212][ T4286] Bluetooth: hci3: command 0x0406 tx timeout
[  523.925220][   T26] audit: type=1326 audit(2000000363.559:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.7.2439" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261b99e159 code=0x7fc00000
[  524.049461][   T26] audit: type=1326 audit(2000000363.559:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.7.2439" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261b99e159 code=0x7fc00000
[  525.842825][   T26] audit: type=1326 audit(2000000363.559:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.7.2439" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261b99e159 code=0x7fc00000
[  525.875528][   T26] audit: type=1326 audit(2000000363.559:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.7.2439" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261b99e159 code=0x7fc00000
[  525.953741][   T26] audit: type=1326 audit(2000000363.559:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.7.2439" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261b99e159 code=0x7fc00000
[  525.978546][   T26] audit: type=1326 audit(2000000363.559:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.7.2439" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261b99e159 code=0x7fc00000
[  526.055554][   T26] audit: type=1326 audit(2000000363.559:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.7.2439" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261b99e159 code=0x7fc00000
[  527.247850][T12565] unsupported nlmsg_type 40
[  527.397832][T12572] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2456'.
[  528.758118][T12593] loop0: detected capacity change from 0 to 8
[  528.902435][T12593] SQUASHFS error: lzo decompression failed, data probably corrupt
[  528.973824][T12593] SQUASHFS error: Failed to read block 0x91: -5
[  528.980113][T12593] SQUASHFS error: Unable to read metadata cache entry [8f]
[  529.031209][T12593] SQUASHFS error: Unable to read inode 0x11f
[  529.667464][ T4288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  529.678149][ T4288] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  529.689755][ T4288] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  529.707815][ T4288] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  529.716176][ T4288] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  529.724574][ T4288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  530.461196][T12600] chnl_net:caif_netlink_parms(): no params data found
[  530.690915][ T4603] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  530.864631][ T4603] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  530.912697][T12629] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2468'.
[  530.946602][T12600] bridge0: port 1(bridge_slave_0) entered blocking state
[  530.974652][T12600] bridge0: port 1(bridge_slave_0) entered disabled state
[  531.025265][T12600] device bridge_slave_0 entered promiscuous mode
[  531.162056][ T4603] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.226998][T12600] bridge0: port 2(bridge_slave_1) entered blocking state
[  531.244706][T12600] bridge0: port 2(bridge_slave_1) entered disabled state
[  531.709600][T12600] device bridge_slave_1 entered promiscuous mode
[  531.811320][ T4286] Bluetooth: hci5: command 0x0409 tx timeout
[  531.925325][T12600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  532.033115][T12600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  532.262160][ T4603] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.305953][T12655] loop0: detected capacity change from 0 to 1024
[  532.359903][T12600] team0: Port device team_slave_0 added
[  532.430015][T12600] team0: Port device team_slave_1 added
[  532.538351][T12600] batman_adv: batadv0: Adding interface: batadv_slave_0
[  532.555011][T12600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  532.667744][T12600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  532.731721][T12600] batman_adv: batadv0: Adding interface: batadv_slave_1
[  532.738709][T12600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  532.772840][T12600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  532.999088][T12600] device hsr_slave_0 entered promiscuous mode
[  533.072167][T12600] device hsr_slave_1 entered promiscuous mode
[  533.100708][T12600] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  533.129526][T12600] Cannot create hsr debugfs directory
[  533.171718][T12681] FAULT_INJECTION: forcing a failure.
[  533.171718][T12681] name failslab, interval 1, probability 0, space 0, times 0
[  533.184426][T12681] CPU: 0 PID: 12681 Comm: syz.5.2483 Not tainted syzkaller #0
[  533.191914][T12681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  533.201994][T12681] Call Trace:
[  533.205289][T12681]  <TASK>
[  533.208236][T12681]  dump_stack_lvl+0x188/0x24e
[  533.212952][T12681]  ? show_regs_print_info+0x12/0x12
[  533.218187][T12681]  ? load_image+0x410/0x410
[  533.222716][T12681]  ? __might_sleep+0xd0/0xd0
[  533.227331][T12681]  ? __lock_acquire+0x7c40/0x7c40
[  533.232385][T12681]  should_fail_ex+0x390/0x4c0
[  533.237085][T12681]  should_failslab+0x5/0x20
[  533.241596][T12681]  slab_pre_alloc_hook+0x59/0x300
[  533.246630][T12681]  ? __split_vma+0x4f0/0x4f0
[  533.251235][T12681]  kmem_cache_alloc+0x56/0x2f0
[  533.256011][T12681]  ? vm_area_dup+0x23/0x1a0
[  533.260526][T12681]  vm_area_dup+0x23/0x1a0
[  533.264869][T12681]  __split_vma+0xb9/0x4f0
[  533.269209][T12681]  ? split_vma+0x70/0xf0
[  533.273465][T12681]  mlock_fixup+0x490/0x580
[  533.277901][T12681]  apply_vma_lock_flags+0x257/0x3b0
[  533.283111][T12681]  ? do_mlock+0x640/0x640
[  533.287450][T12681]  ? rwsem_write_trylock+0x135/0x1c0
[  533.292760][T12681]  ? do_mlock+0x194/0x640
[  533.297111][T12681]  do_mlock+0x4d6/0x640
[  533.301286][T12681]  ? lru_gen_add_folio+0xe20/0xe20
[  533.306406][T12681]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  533.312401][T12681]  ? lock_chain_count+0x20/0x20
[  533.317273][T12681]  ? syscall_enter_from_user_mode+0x21/0x80
[  533.323177][T12681]  __x64_sys_mlock+0x5c/0x70
[  533.327775][T12681]  do_syscall_64+0x4c/0xa0
[  533.332206][T12681]  ? clear_bhb_loop+0x60/0xb0
[  533.336899][T12681]  ? clear_bhb_loop+0x60/0xb0
[  533.341597][T12681]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  533.347498][T12681] RIP: 0033:0x7ffa4f19e159
[  533.351915][T12681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  533.371526][T12681] RSP: 002b:00007ffa4ff8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[  533.379950][T12681] RAX: ffffffffffffffda RBX: 00007ffa4f425fa0 RCX: 00007ffa4f19e159
[  533.387925][T12681] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000341000
[  533.395902][T12681] RBP: 00007ffa4f235024 R08: 0000000000000000 R09: 0000000000000000
[  533.403875][T12681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  533.411844][T12681] R13: 00007ffa4f426038 R14: 00007ffa4f425fa0 R15: 00007fff01b1c598
[  533.419835][T12681]  </TASK>
[  533.941439][ T4286] Bluetooth: hci5: command 0x041b tx timeout
[  534.415711][T12701] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2485'.
[  535.986843][ T4288] Bluetooth: hci5: command 0x040f tx timeout
[  536.362059][T12736] FAULT_INJECTION: forcing a failure.
[  536.362059][T12736] name failslab, interval 1, probability 0, space 0, times 0
[  536.375204][T12736] CPU: 0 PID: 12736 Comm: syz.5.2494 Not tainted syzkaller #0
[  536.382690][T12736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  536.392775][T12736] Call Trace:
[  536.396074][T12736]  <TASK>
[  536.399013][T12736]  dump_stack_lvl+0x188/0x24e
[  536.403726][T12736]  ? show_regs_print_info+0x12/0x12
[  536.408960][T12736]  ? load_image+0x410/0x410
[  536.413490][T12736]  ? __might_sleep+0xd0/0xd0
[  536.418086][T12736]  ? __lock_acquire+0x7c40/0x7c40
[  536.423126][T12736]  should_fail_ex+0x390/0x4c0
[  536.427821][T12736]  should_failslab+0x5/0x20
[  536.432332][T12736]  slab_pre_alloc_hook+0x59/0x300
[  536.437364][T12736]  ? __split_vma+0x4f0/0x4f0
[  536.441967][T12736]  kmem_cache_alloc+0x56/0x2f0
[  536.446737][T12736]  ? vm_area_dup+0x23/0x1a0
[  536.451256][T12736]  vm_area_dup+0x23/0x1a0
[  536.455593][T12736]  __split_vma+0xb9/0x4f0
[  536.459937][T12736]  ? split_vma+0x70/0xf0
[  536.464461][T12736]  mlock_fixup+0x490/0x580
[  536.468892][T12736]  apply_vma_lock_flags+0x257/0x3b0
[  536.474106][T12736]  ? do_mlock+0x640/0x640
[  536.478445][T12736]  ? rwsem_write_trylock+0x135/0x1c0
[  536.483750][T12736]  ? do_mlock+0x194/0x640
[  536.488098][T12736]  do_mlock+0x4d6/0x640
[  536.492266][T12736]  ? lru_gen_add_folio+0xe20/0xe20
[  536.497388][T12736]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  536.503388][T12736]  ? lock_chain_count+0x20/0x20
[  536.508260][T12736]  ? syscall_enter_from_user_mode+0x21/0x80
[  536.514170][T12736]  __x64_sys_mlock+0x5c/0x70
[  536.518779][T12736]  do_syscall_64+0x4c/0xa0
[  536.523207][T12736]  ? clear_bhb_loop+0x60/0xb0
[  536.527910][T12736]  ? clear_bhb_loop+0x60/0xb0
[  536.532607][T12736]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  536.538511][T12736] RIP: 0033:0x7ffa4f19e159
[  536.542937][T12736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  536.562552][T12736] RSP: 002b:00007ffa4ff8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[  536.571323][T12736] RAX: ffffffffffffffda RBX: 00007ffa4f425fa0 RCX: 00007ffa4f19e159
[  536.579306][T12736] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000341000
[  536.587288][T12736] RBP: 00007ffa4f235024 R08: 0000000000000000 R09: 0000000000000000
[  536.595264][T12736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  536.603237][T12736] R13: 00007ffa4f426038 R14: 00007ffa4f425fa0 R15: 00007fff01b1c598
[  536.611231][T12736]  </TASK>
[  538.052492][ T4288] Bluetooth: hci5: command 0x0419 tx timeout
[  538.250382][T12600] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  538.345284][T12600] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  538.403454][T12600] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  538.826750][T12600] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  538.888880][T12769] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2498'.
[  538.930901][ T4603] device hsr_slave_0 left promiscuous mode
[  538.952781][ T4603] device hsr_slave_1 left promiscuous mode
[  538.960744][ T4603] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  538.979067][ T4603] batman_adv: batadv0: Removing interface: batadv_slave_0
[  538.992161][ T4603] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  539.009874][ T4603] batman_adv: batadv0: Removing interface: batadv_slave_1
[  539.031026][ T4603] device bridge_slave_0 left promiscuous mode
[  539.037392][ T4603] bridge0: port 1(bridge_slave_0) entered disabled state
[  539.098147][ T4603] device veth1_macvtap left promiscuous mode
[  539.111346][ T4603] device veth0_macvtap left promiscuous mode
[  539.121420][ T4603] device veth1_vlan left promiscuous mode
[  539.127333][ T4603] device veth0_vlan left promiscuous mode
[  540.129466][T12780] FAULT_INJECTION: forcing a failure.
[  540.129466][T12780] name failslab, interval 1, probability 0, space 0, times 0
[  540.142289][T12780] CPU: 0 PID: 12780 Comm: syz.5.2504 Not tainted syzkaller #0
[  540.149773][T12780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  540.159848][T12780] Call Trace:
[  540.163139][T12780]  <TASK>
[  540.166085][T12780]  dump_stack_lvl+0x188/0x24e
[  540.170796][T12780]  ? show_regs_print_info+0x12/0x12
[  540.176025][T12780]  ? load_image+0x410/0x410
[  540.180553][T12780]  ? __might_sleep+0xd0/0xd0
[  540.185151][T12780]  ? __lock_acquire+0x7c40/0x7c40
[  540.190195][T12780]  should_fail_ex+0x390/0x4c0
[  540.194892][T12780]  should_failslab+0x5/0x20
[  540.199407][T12780]  slab_pre_alloc_hook+0x59/0x300
[  540.204438][T12780]  ? __split_vma+0x4f0/0x4f0
[  540.209042][T12780]  kmem_cache_alloc+0x56/0x2f0
[  540.213812][T12780]  ? vm_area_dup+0x23/0x1a0
[  540.218326][T12780]  vm_area_dup+0x23/0x1a0
[  540.222703][T12780]  __split_vma+0xb9/0x4f0
[  540.227065][T12780]  ? split_vma+0x70/0xf0
[  540.231319][T12780]  mlock_fixup+0x490/0x580
[  540.235751][T12780]  apply_vma_lock_flags+0x257/0x3b0
[  540.240958][T12780]  ? do_mlock+0x640/0x640
[  540.245295][T12780]  ? rwsem_write_trylock+0x135/0x1c0
[  540.250603][T12780]  ? do_mlock+0x194/0x640
[  540.254946][T12780]  do_mlock+0x4d6/0x640
[  540.259119][T12780]  ? lru_gen_add_folio+0xe20/0xe20
[  540.264235][T12780]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  540.270231][T12780]  ? lock_chain_count+0x20/0x20
[  540.275098][T12780]  ? syscall_enter_from_user_mode+0x21/0x80
[  540.281001][T12780]  __x64_sys_mlock+0x5c/0x70
[  540.285600][T12780]  do_syscall_64+0x4c/0xa0
[  540.290043][T12780]  ? clear_bhb_loop+0x60/0xb0
[  540.294755][T12780]  ? clear_bhb_loop+0x60/0xb0
[  540.299468][T12780]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  540.305391][T12780] RIP: 0033:0x7ffa4f19e159
[  540.309826][T12780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  540.329452][T12780] RSP: 002b:00007ffa4ff8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[  540.337888][T12780] RAX: ffffffffffffffda RBX: 00007ffa4f425fa0 RCX: 00007ffa4f19e159
[  540.345898][T12780] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000341000
[  540.353892][T12780] RBP: 00007ffa4f235024 R08: 0000000000000000 R09: 0000000000000000
[  540.361907][T12780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  540.369897][T12780] R13: 00007ffa4f426038 R14: 00007ffa4f425fa0 R15: 00007fff01b1c598
[  540.377911][T12780]  </TASK>
[  541.270005][T12788] loop5: detected capacity change from 0 to 512
[  541.287058][T12788] EXT4-fs: Ignoring removed i_version option
[  541.328202][T12788] EXT4-fs: Ignoring removed oldalloc option
[  541.445418][T12788] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  541.470013][   T26] kauditd_printk_skb: 58 callbacks suppressed
[  541.470027][   T26] audit: type=1800 audit(2000000381.319:176): pid=12788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2505" name="file2" dev="loop5" ino=16 res=0 errno=0
[  541.655027][T10901] EXT4-fs (loop5): unmounting filesystem.
[  541.805040][ T4603] team0 (unregistering): Port device team_slave_1 removed
[  541.967131][ T4603] team0 (unregistering): Port device team_slave_0 removed
[  542.109891][ T4603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  542.293705][ T4603] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  543.393671][ T4603] bond0 (unregistering): Released all slaves
[  543.866551][T12600] 8021q: adding VLAN 0 to HW filter on device bond0
[  543.900200][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  543.921926][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  543.978003][T12600] 8021q: adding VLAN 0 to HW filter on device team0
[  544.020495][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  544.081658][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  544.104277][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state
[  544.111468][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state
[  544.159819][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  544.178248][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  544.190844][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  544.193313][T12814] loop0: detected capacity change from 0 to 1024
[  544.229723][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state
[  544.236917][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state
[  544.253085][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  544.418116][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  546.112407][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  546.138639][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  546.156597][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  546.212617][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  546.235565][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  546.273579][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  546.315572][T12600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  546.334624][T12600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  546.381292][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  546.403979][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  546.441976][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  547.729727][T12851] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2522'.
[  548.192899][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  548.200412][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  548.278098][T12600] 8021q: adding VLAN 0 to HW filter on device batadv0
[  548.402400][T11245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  548.470227][T11245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  548.597397][T11245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  548.635031][T11245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  548.656550][T11245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  548.664557][T11245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  548.675961][T12600] device veth0_vlan entered promiscuous mode
[  548.742627][T12600] device veth1_vlan entered promiscuous mode
[  548.818236][T11245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  548.838714][T11245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  548.858225][T11245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  548.879347][T11245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  548.910250][T12600] device veth0_macvtap entered promiscuous mode
[  549.070306][T12600] device veth1_macvtap entered promiscuous mode
[  549.144752][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  549.178770][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  549.209134][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  549.261128][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  549.288525][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  549.331253][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  549.381996][T12600] batman_adv: batadv0: Interface activated: batadv_slave_0
[  549.416173][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  549.440477][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  549.491758][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  549.521991][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  549.553942][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  549.585050][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  549.605048][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  549.640019][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  549.670517][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  549.714042][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  549.762273][T12600] batman_adv: batadv0: Interface activated: batadv_slave_1
[  549.769616][T11245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  549.808053][T11245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  549.882879][T12600] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  549.906690][T12600] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  549.937139][T12600] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  549.965895][T12600] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  550.140888][ T5140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  550.177007][ T5140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  550.209482][T11245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  550.235552][ T4708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  550.251296][ T4708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  551.061183][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  551.332565][T12903] loop1: detected capacity change from 0 to 1024
[  551.476478][T12906] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2534'.
[  552.305320][T12920] loop0: detected capacity change from 0 to 2048
[  552.438586][T12920]  loop0: p1 < > p4
[  552.438586][T12920]  p4: <netbsd: >
[  552.542049][T12920] loop0: p4 size 722688 extends beyond EOD, truncated
[  553.416378][T12941] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2545'.
[  553.440392][T12940] loop1: detected capacity change from 0 to 512
[  553.521837][T12940] EXT4-fs: Ignoring removed i_version option
[  553.527880][T12940] EXT4-fs: Ignoring removed oldalloc option
[  553.573209][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  553.584181][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  553.592638][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  553.600652][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  553.609571][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  553.618333][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  553.662932][T12940] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  553.770349][   T26] audit: type=1800 audit(2000000393.619:177): pid=12940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2544" name="file2" dev="loop1" ino=16 res=0 errno=0
[  553.966129][ T4708] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  554.146534][ T4708] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  554.168251][T12600] EXT4-fs (loop1): unmounting filesystem.
[  554.322491][T12959] loop1: detected capacity change from 0 to 8
[  554.329777][ T4708] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  554.359972][T12959] SQUASHFS error: lzo decompression failed, data probably corrupt
[  554.447204][T12959] SQUASHFS error: Failed to read block 0x91: -5
[  554.516449][T12959] SQUASHFS error: Unable to read metadata cache entry [8f]
[  554.576049][ T4708] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  554.596977][T12959] SQUASHFS error: Unable to read inode 0x11f
[  555.047854][T12942] chnl_net:caif_netlink_parms(): no params data found
[  555.128689][T12980] FAULT_INJECTION: forcing a failure.
[  555.128689][T12980] name failslab, interval 1, probability 0, space 0, times 0
[  555.222008][T12980] CPU: 1 PID: 12980 Comm: syz.1.2554 Not tainted syzkaller #0
[  555.229521][T12980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  555.239596][T12980] Call Trace:
[  555.242888][T12980]  <TASK>
[  555.245841][T12980]  dump_stack_lvl+0x188/0x24e
[  555.250550][T12980]  ? show_regs_print_info+0x12/0x12
[  555.255779][T12980]  ? load_image+0x410/0x410
[  555.260307][T12980]  ? __might_sleep+0xd0/0xd0
[  555.264919][T12980]  ? __lock_acquire+0x7c40/0x7c40
[  555.269974][T12980]  should_fail_ex+0x390/0x4c0
[  555.274722][T12980]  should_failslab+0x5/0x20
[  555.279239][T12980]  slab_pre_alloc_hook+0x59/0x300
[  555.284289][T12980]  kmem_cache_alloc+0x56/0x2f0
[  555.289069][T12980]  ? security_file_alloc+0x30/0x110
[  555.294300][T12980]  security_file_alloc+0x30/0x110
[  555.299355][T12980]  __alloc_file+0xc2/0x230
[  555.303794][T12980]  alloc_empty_file+0x90/0x180
[  555.308563][T12980]  alloc_file+0x5b/0x5f0
[  555.312808][T12980]  alloc_file_pseudo+0x180/0x200
[  555.317744][T12980]  ? alloc_empty_file_noaccount+0x80/0x80
[  555.323460][T12980]  ? alloc_fd+0x590/0x640
[  555.327800][T12980]  anon_inode_getfd+0xc6/0x1b0
[  555.332568][T12980]  do_signalfd4+0x183/0x320
[  555.337075][T12980]  __x64_sys_signalfd+0x12e/0x170
[  555.342102][T12980]  ? __ia32_sys_signalfd4+0x1a0/0x1a0
[  555.347477][T12980]  ? lockdep_hardirqs_on+0x94/0x140
[  555.352677][T12980]  do_syscall_64+0x4c/0xa0
[  555.357097][T12980]  ? clear_bhb_loop+0x60/0xb0
[  555.361780][T12980]  ? clear_bhb_loop+0x60/0xb0
[  555.366460][T12980]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  555.372353][T12980] RIP: 0033:0x7f8d2119e159
[  555.376771][T12980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  555.396380][T12980] RSP: 002b:00007f8d2200d028 EFLAGS: 00000246 ORIG_RAX: 000000000000011a
[  555.404812][T12980] RAX: ffffffffffffffda RBX: 00007f8d21425fa0 RCX: 00007f8d2119e159
[  555.412786][T12980] RDX: 0000000000000008 RSI: 00002000000002c0 RDI: ffffffffffffffff
[  555.420756][T12980] RBP: 00007f8d21235024 R08: 0000000000000000 R09: 0000000000000000
[  555.428721][T12980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  555.436688][T12980] R13: 00007f8d21426038 R14: 00007f8d21425fa0 R15: 00007ffde11c4a18
[  555.444667][T12980]  </TASK>
[  555.661494][ T4286] Bluetooth: hci0: command 0x0409 tx timeout
[  555.765207][T12989] loop0: detected capacity change from 0 to 1024
[  555.796872][T12987] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2556'.
[  556.781412][T12942] bridge0: port 1(bridge_slave_0) entered blocking state
[  556.788553][T12942] bridge0: port 1(bridge_slave_0) entered disabled state
[  556.812440][T12942] device bridge_slave_0 entered promiscuous mode
[  556.995204][T12942] bridge0: port 2(bridge_slave_1) entered blocking state
[  557.007442][T12942] bridge0: port 2(bridge_slave_1) entered disabled state
[  557.107991][T12942] device bridge_slave_1 entered promiscuous mode
[  557.271448][T13012] loop5: detected capacity change from 0 to 8
[  557.320503][T13012] SQUASHFS error: lzo decompression failed, data probably corrupt
[  557.321373][    T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  557.379071][T13012] SQUASHFS error: Failed to read block 0x91: -5
[  557.432642][T13012] SQUASHFS error: Unable to read metadata cache entry [8f]
[  557.433539][T12942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  557.454368][T12942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  557.521172][T13012] SQUASHFS error: Unable to read inode 0x11f
[  557.574469][    T7] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  557.606296][T12942] team0: Port device team_slave_0 added
[  557.621419][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  557.671271][    T7] usb 1-1: config 0 descriptor??
[  557.731410][ T4286] Bluetooth: hci0: command 0x041b tx timeout
[  557.839945][    T7] cp210x 1-1:0.0: cp210x converter detected
[  557.868200][T12942] team0: Port device team_slave_1 added
[  557.895078][T13027] loop5: detected capacity change from 0 to 128
[  558.540698][T12942] batman_adv: batadv0: Adding interface: batadv_slave_0
[  558.581252][T12942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  558.611625][T12942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  558.646368][T13027] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  558.669778][T13024] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2568'.
[  558.671328][T13027] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  558.737324][T13006] loop0: detected capacity change from 0 to 4096
[  558.794945][T12942] batman_adv: batadv0: Adding interface: batadv_slave_1
[  558.812361][T12942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  558.850947][T12942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  558.881244][T11631] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  558.903951][    T7] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  558.958184][    T7] usb 1-1: cp210x converter now attached to ttyUSB0
[  559.069566][T12942] device hsr_slave_0 entered promiscuous mode
[  559.145710][T12942] device hsr_slave_1 entered promiscuous mode
[  559.148584][ T4261] usb 1-1: USB disconnect, device number 9
[  559.166789][ T4261] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  559.183848][T12942] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  559.189113][ T4261] cp210x 1-1:0.0: device disconnected
[  559.201294][T12942] Cannot create hsr debugfs directory
[  559.298097][T10901] EXT4-fs (loop5): unmounting filesystem.
[  559.829505][ T4286] Bluetooth: hci0: command 0x040f tx timeout
[  561.312700][T13064] loop0: detected capacity change from 0 to 8
[  561.437215][T13064] SQUASHFS error: lzo decompression failed, data probably corrupt
[  561.485420][T13064] SQUASHFS error: Failed to read block 0x91: -5
[  561.518745][T13064] SQUASHFS error: Unable to read metadata cache entry [8f]
[  561.542142][T13064] SQUASHFS error: Unable to read inode 0x11f
[  561.637377][T13070] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2580'.
[  562.263038][ T4288] Bluetooth: hci0: command 0x0419 tx timeout
[  562.305041][ T4708] device hsr_slave_0 left promiscuous mode
[  562.411354][ T4708] device hsr_slave_1 left promiscuous mode
[  562.431452][ T4708] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  562.439111][ T4708] batman_adv: batadv0: Removing interface: batadv_slave_0
[  562.492127][ T4708] device bridge_slave_1 left promiscuous mode
[  562.498375][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state
[  562.529997][ T4708] device bridge_slave_0 left promiscuous mode
[  562.557692][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state
[  562.660611][ T4708] device veth1_macvtap left promiscuous mode
[  563.365552][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  563.371899][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  565.023387][ T4708] device veth0_macvtap left promiscuous mode
[  565.076709][ T4708] device veth1_vlan left promiscuous mode
[  565.111202][ T4708] device veth0_vlan left promiscuous mode
[  566.286907][   T26] audit: type=1326 audit(2000000406.129:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13107 comm="syz.5.2591" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4f19e159 code=0x7ffc0000
[  567.060007][   T26] audit: type=1326 audit(2000000406.139:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13107 comm="syz.5.2591" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7ffa4f19e159 code=0x7ffc0000
[  567.130269][   T26] audit: type=1326 audit(2000000406.139:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13107 comm="syz.5.2591" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4f19e159 code=0x7ffc0000
[  567.166570][   T26] audit: type=1326 audit(2000000406.139:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13107 comm="syz.5.2591" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4f19e159 code=0x7ffc0000
[  567.182256][T13116] loop1: detected capacity change from 0 to 16
[  567.207145][   T26] audit: type=1326 audit(2000000406.139:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13107 comm="syz.5.2591" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffa4f19e159 code=0x7ffc0000
[  567.247520][   T26] audit: type=1326 audit(2000000406.139:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13107 comm="syz.5.2591" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4f19e159 code=0x7ffc0000
[  567.252021][T13116] erofs: (device loop1): mounted with root inode @ nid 36.
[  567.287239][   T26] audit: type=1326 audit(2000000406.139:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13107 comm="syz.5.2591" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4f19e159 code=0x7ffc0000
[  567.660684][ T4708] team0 (unregistering): Port device team_slave_1 removed
[  567.751570][ T4708] team0 (unregistering): Port device team_slave_0 removed
[  567.835238][T13130] loop1: detected capacity change from 0 to 128
[  567.911809][ T4708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  567.912230][T13130] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  567.975281][T13130] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  567.986245][ T4708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  568.393791][T12600] EXT4-fs (loop1): unmounting filesystem.
[  568.765109][ T4708] bond0 (unregistering): Released all slaves
[  568.973130][T13112] netlink: 'syz.0.2595': attribute type 6 has an invalid length.
[  568.981514][T13112] netlink: 'syz.0.2595': attribute type 7 has an invalid length.
[  568.991304][T13112] netlink: 'syz.0.2595': attribute type 8 has an invalid length.
[  569.011373][T13135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2602'.
[  569.896574][T13152] input: syz1 as /devices/virtual/input/input10
[  570.833266][T12942] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  571.116080][T12942] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  571.585055][T12942] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  571.640470][T12942] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  571.897552][T12942] 8021q: adding VLAN 0 to HW filter on device bond0
[  571.947068][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  571.957568][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  571.997886][T12942] 8021q: adding VLAN 0 to HW filter on device team0
[  572.041800][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  572.065174][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  572.078934][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state
[  572.086190][ T4333] bridge0: port 1(bridge_slave_0) entered forwarding state
[  572.125135][T13177] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2615'.
[  572.144892][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  572.156052][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  572.166564][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  572.175486][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state
[  572.182659][ T4333] bridge0: port 2(bridge_slave_1) entered forwarding state
[  572.192583][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  572.205847][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  572.240928][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  572.256124][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  572.266708][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  572.276851][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  572.303579][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  572.337649][T12942] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  572.416369][T12942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  572.480374][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  572.489569][T13179] loop0: detected capacity change from 0 to 1024
[  572.504439][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  572.579510][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  572.622031][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  572.657516][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  576.117366][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  576.141859][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  576.197301][T12942] 8021q: adding VLAN 0 to HW filter on device batadv0
[  576.302967][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  576.319758][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  576.371498][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  576.379857][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  576.457047][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  576.465825][T13220] loop0: detected capacity change from 0 to 1024
[  576.478847][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  576.515846][T12942] device veth0_vlan entered promiscuous mode
[  576.546566][T12942] device veth1_vlan entered promiscuous mode
[  576.656531][T12942] device veth0_macvtap entered promiscuous mode
[  576.690040][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  576.706266][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  576.725240][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  576.773053][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  576.827417][T12942] device veth1_macvtap entered promiscuous mode
[  576.847985][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  576.880817][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  577.822338][T12942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  577.892113][T12942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  577.920349][T12942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  577.951243][T12942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  577.996895][T12942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  578.029984][T12942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  578.061857][T12942] batman_adv: batadv0: Interface activated: batadv_slave_0
[  578.069903][T10551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  578.106899][T10551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  578.133871][T12942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  578.156631][T12942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  578.180895][T12942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  579.901128][T12942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  579.916929][T12942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  579.937968][T12942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  579.975600][T12942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  580.019000][T12942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.046035][T12942] batman_adv: batadv0: Interface activated: batadv_slave_1
[  580.064898][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  580.102584][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  580.175118][T12942] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  580.204622][T12942] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  580.238251][T12942] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  580.286800][T12942] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  580.625744][ T4603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  580.651075][ T4603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  580.688665][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  580.717837][ T5022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  580.733330][ T5022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  580.767731][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  580.999616][T13267] loop2: detected capacity change from 0 to 1024
[  581.059219][T13267] EXT4-fs: Ignoring removed orlov option
[  581.199530][T13267] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  581.250539][T13277] loop5: detected capacity change from 0 to 2048
[  581.430947][T12942] EXT4-fs (loop2): unmounting filesystem.
[  581.449065][T13277]  loop5: p1 < > p4
[  581.449065][T13277]  p4: <netbsd: >
[  581.546276][T13277] loop5: p4 size 722688 extends beyond EOD, truncated
[  583.590386][T13321] loop2: detected capacity change from 0 to 1024
[  587.003627][T13370] loop1: detected capacity change from 0 to 1024
[  587.078511][T13372] loop5: detected capacity change from 0 to 1024
[  587.093236][T13370] snd_dummy snd_dummy.0: control 2:254:0:syz0:0 is already present
[  592.139344][T13454] loop0: detected capacity change from 0 to 2048
[  592.181325][ T1182] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  592.313440][T13459] loop5: detected capacity change from 0 to 128
[  592.329197][T13459] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  592.347230][T13454] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  592.381801][T13454] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  592.394170][ T1182] usb 3-1: Using ep0 maxpacket: 8
[  592.405735][ T1182] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[  592.450756][ T1182] usb 3-1: config 0 has no interface number 0
[  592.490265][ T1182] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  592.535421][ T1182] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.577936][ T1182] usb 3-1: Product: syz
[  592.594531][ T1182] usb 3-1: Manufacturer: syz
[  592.610870][ T1182] usb 3-1: SerialNumber: syz
[  592.644303][ T1182] usb 3-1: config 0 descriptor??
[  592.914237][ T1182] usb 3-1: Found UVC 0.04 device syz (046d:08c3)
[  592.931179][ T1182] usb 3-1: No valid video chain found.
[  592.968897][ T1182] usb 3-1: USB disconnect, device number 5
[  593.057190][ T8101] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm kworker/u4:18: bg 0: block 345: padding at end of block bitmap is not set
[  593.121992][ T8101] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1084 with error 28
[  593.222161][ T8101] EXT4-fs (loop0): This should not happen!! Data will be lost
[  593.222161][ T8101] 
[  593.505077][ T8101] EXT4-fs (loop0): Total free blocks count 0
[  593.598794][ T8101] EXT4-fs (loop0): Free/Dirty block details
[  593.611925][ T8101] EXT4-fs (loop0): free_blocks=0
[  593.684344][ T8101] EXT4-fs (loop0): dirty_blocks=1088
[  593.739533][ T8101] EXT4-fs (loop0): Block reservation details
[  593.791355][ T8101] EXT4-fs (loop0): i_reserved_data_blocks=68
[  594.653502][   T30] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  594.786674][   T30] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  594.818612][ T8672] EXT4-fs (loop0): unmounting filesystem.
[  605.831274][ T4380] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  606.036050][ T4380] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4
[  606.057462][ T4380] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 4
[  606.112112][ T4380] usb 2-1: New USB device found, idVendor=046d, idProduct=08f5, bcdDevice= 0.40
[  606.141136][ T4380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  606.149425][ T4380] usb 2-1: Product: syz
[  606.205703][ T4380] usb 2-1: Manufacturer: syz
[  606.210352][ T4380] usb 2-1: SerialNumber: syz
[  606.620578][ T4380] gspca_main: STV06xx-2.14.0 probing 046d:08f5
[  606.637736][ T4380] gspca_stv06xx: st6422 sensor detected
[  606.916588][ T4380] STV06xx: probe of 2-1:1.0 failed with error -71
[  606.949564][ T4380] usb 2-1: unit 5 not found!
[  607.077542][ T4380] usb 2-1: USB disconnect, device number 5
[  609.405407][T13631] loop0: detected capacity change from 0 to 16
[  609.433713][T13634] loop1: detected capacity change from 0 to 8
[  609.529287][T13631] erofs: (device loop0): erofs_init_device: empty device tag @ pos 0
[  609.724181][T13632] SQUASHFS error: Failed to read block 0x4de: -5
[  609.808439][T13632] SQUASHFS error: Failed to read block 0x4de: -5
[  610.132742][T13646] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2729'.
[  610.184149][   T26] audit: type=1800 audit(2000000450.039:185): pid=13632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2720" name="file1" dev="loop1" ino=5 res=0 errno=0
[  610.431419][ T4319] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  612.092735][ T4319] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  612.139514][ T4319] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  612.165262][ T4319] usb 1-1: Product: syz
[  612.179758][ T4319] usb 1-1: Manufacturer: syz
[  612.189814][ T4319] usb 1-1: SerialNumber: syz
[  612.236878][ T4319] usb 1-1: config 0 descriptor??
[  612.282993][ T4319] ch341 1-1:0.0: ch341-uart converter detected
[  613.734326][ T4319] usb 1-1: failed to send control message: -71
[  613.745817][ T4319] ch341-uart: probe of ttyUSB0 failed with error -71
[  613.816387][ T4319] usb 1-1: USB disconnect, device number 10
[  613.871577][ T4319] ch341 1-1:0.0: device disconnected
[  614.351960][T13687] syz.5.2742 uses obsolete (PF_INET,SOCK_PACKET)
[  618.780258][   T14] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  619.551241][   T14] usb 1-1: Using ep0 maxpacket: 16
[  619.558073][   T14] usb 1-1: config 0 has an invalid interface number: 34 but max is 0
[  619.594268][   T14] usb 1-1: config 0 has no interface number 0
[  619.621089][   T14] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  619.647116][T13758] netlink: 236 bytes leftover after parsing attributes in process `syz.7.2759'.
[  619.651387][   T14] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  619.721299][   T14] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  619.730387][   T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  619.815417][   T14] usb 1-1: Product: syz
[  619.821224][   T14] usb 1-1: Manufacturer: syz
[  619.831235][   T14] usb 1-1: SerialNumber: syz
[  620.015330][   T14] usb 1-1: config 0 descriptor??
[  620.022296][T13739] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  620.067754][T13739] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  620.329366][T13739] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  620.371622][T13739] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  620.613067][   T14] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  622.562174][   T14] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  622.616727][   T14] asix: probe of 1-1:0.34 failed with error -71
[  622.650160][T13803] loop1: detected capacity change from 0 to 2048
[  622.699615][   T14] usb 1-1: USB disconnect, device number 11
[  622.743814][T13803] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  622.844874][T13803] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  623.489371][T13823] loop1: detected capacity change from 0 to 512
[  623.697890][T13823] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2775: invalid indirect mapped block 256 (level 2)
[  624.409089][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  624.415424][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  624.431094][T13823] EXT4-fs (loop1): Remounting filesystem read-only
[  624.509974][T13823] EXT4-fs (loop1): 2 truncates cleaned up
[  624.515860][T13823] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  624.803220][T12600] EXT4-fs (loop1): unmounting filesystem.
[  625.345032][T13845] input: syz0 as /devices/virtual/input/input11
[  626.988584][T13848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  627.126919][ T4288] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  629.339880][T13881] loop5: detected capacity change from 0 to 4096
[  629.422109][T13881] EXT4-fs: Ignoring removed mblk_io_submit option
[  629.428718][T13881] EXT4-fs: Ignoring removed orlov option
[  629.541288][T13881] EXT4-fs (loop5): Test dummy encryption mode enabled
[  629.619532][T13881] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  629.647182][T13899] 9pnet_fd: Insufficient options for proto=fd
[  630.881747][T13911] EXT4-fs (loop5): unmounting filesystem.
[  631.227550][ T4288] Bluetooth: hci0: unknown advertising packet type: 0x2f
[  631.227605][ T4288] Bluetooth: hci0: unknown advertising packet type: 0x61
[  631.235306][ T4288] Bluetooth: hci0: unknown advertising packet type: 0x73
[  632.557804][T13942] loop1: detected capacity change from 0 to 256
[  632.619074][T13942] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  632.751107][T13942] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  633.346993][T13942] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  633.518158][T13942] exFAT-fs (loop1): failed to load alloc-bitmap
[  633.563143][T13942] exFAT-fs (loop1): failed to recognize exfat type
[  633.615978][T11639] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  633.639598][T13942] loop1: detected capacity change from 0 to 512
[  633.650220][T11639] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  633.688977][T13942] EXT4-fs: Ignoring removed nobh option
[  633.703380][T11639] Buffer I/O error on dev loop1, logical block 0, async page read
[  633.712303][T13953] fuse: Bad value for 'fd'
[  633.716924][T13942] ext4: Unknown parameter 'grpquota..'
[  638.014920][T14009] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  638.551785][T14009] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  639.764840][T14027] loop2: detected capacity change from 0 to 4096
[  639.802199][T14027] EXT4-fs: Ignoring removed mblk_io_submit option
[  639.808806][T14027] EXT4-fs: Ignoring removed orlov option
[  639.862404][T14027] EXT4-fs (loop2): Test dummy encryption mode enabled
[  640.064551][T14027] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  641.035271][T14046] loop1: detected capacity change from 0 to 256
[  641.113644][T14049] EXT4-fs (loop2): unmounting filesystem.
[  641.192021][T14046] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  641.307454][T14046] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  641.534310][T14046] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd916ed68, utbl_chksum : 0xe619d30d)
[  641.581829][T14046] exFAT-fs (loop1): failed to load alloc-bitmap
[  641.613579][T14046] exFAT-fs (loop1): failed to recognize exfat type
[  642.124340][T14065] loop0: detected capacity change from 0 to 16
[  642.175959][T14065] erofs: (device loop0): mounted with root inode @ nid 36.
[  642.316602][T14067] loop1: detected capacity change from 0 to 512
[  643.264297][T14067] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  643.331942][T14067] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  644.628323][T14094] xt_policy: output policy not valid in PREROUTING and INPUT
[  645.114170][T12600] EXT4-fs (loop1): unmounting filesystem.
[  648.407710][T14121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2853'.
[  654.614358][T14193] loop1: detected capacity change from 0 to 256
[  654.773035][T14193] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  654.944248][T14200] IPVS: set_ctl: invalid protocol: 59 172.20.20.39:20000
[  657.382958][ T4286] Bluetooth: hci5: command 0x0406 tx timeout
[  657.389993][   T26] audit: type=1800 audit(2000000504.297:186): pid=14223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2874" name="file1" dev="loop1" ino=1048754 res=0 errno=0
[  658.883268][ T4322] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  659.202636][ T4322] usb 1-1: Using ep0 maxpacket: 8
[  659.233219][ T4322] usb 1-1: unable to get BOS descriptor or descriptor too short
[  659.394023][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  659.484787][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  659.531144][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[  659.603102][ T4322] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[  659.654977][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  659.720141][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 26996, setting to 1024
[  659.821384][ T4322] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024
[  659.933834][ T4322] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  659.974648][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  660.050662][ T4322] usb 1-1: Product: syz
[  660.060845][ T4322] usb 1-1: Manufacturer: syz
[  660.081475][ T4322] usb 1-1: SerialNumber: syz
[  660.129005][ T4322] usb 1-1: config 0 descriptor??
[  660.153229][T14249] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  660.174297][T14249] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  660.471582][ T4316] usb 1-1: USB disconnect, device number 12
[  660.589637][T14263] udevd[14263]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  663.086663][T14293] loop0: detected capacity change from 0 to 128
[  664.141214][   T26] audit: type=1326 audit(2000000511.987:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14303 comm="syz.0.2906" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7f39e159 code=0x7ffc0000
[  664.251984][   T26] audit: type=1326 audit(2000000511.987:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14303 comm="syz.0.2906" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7f39e159 code=0x7ffc0000
[  664.345060][   T26] audit: type=1326 audit(2000000511.987:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14303 comm="syz.0.2906" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7f39e159 code=0x7ffc0000
[  666.021320][   T26] audit: type=1326 audit(2000000512.027:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14303 comm="syz.0.2906" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fef7f39e159 code=0x7ffc0000
[  666.157719][   T26] audit: type=1326 audit(2000000512.037:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14303 comm="syz.0.2906" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7f39e159 code=0x7ffc0000
[  666.343283][   T26] audit: type=1326 audit(2000000512.037:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14303 comm="syz.0.2906" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7f39e159 code=0x7ffc0000
[  666.542583][   T26] audit: type=1326 audit(2000000512.037:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14303 comm="syz.0.2906" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fef7f39e159 code=0x7ffc0000
[  666.570795][T14323] loop1: detected capacity change from 0 to 512
[  666.650701][   T26] audit: type=1326 audit(2000000512.037:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14303 comm="syz.0.2906" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fef7f39e159 code=0x7ffc0000
[  666.751151][T14323] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  666.961577][T14323] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  667.019869][T14323] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  667.254703][T12600] EXT4-fs (loop1): unmounting filesystem.
[  671.021723][ T4316] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  671.046030][T14382] loop1: detected capacity change from 0 to 1024
[  671.132363][T14382] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  671.151219][T14382] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  671.212996][ T4316] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  671.254564][ T4316] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  671.301272][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  671.341215][ T4316] usb 1-1: Product: syz
[  671.345415][ T4316] usb 1-1: Manufacturer: syz
[  671.350022][ T4316] usb 1-1: SerialNumber: syz
[  671.379612][T12600] EXT4-fs (loop1): unmounting filesystem.
[  671.521682][T14394] FAULT_INJECTION: forcing a failure.
[  671.521682][T14394] name failslab, interval 1, probability 0, space 0, times 0
[  671.702692][T14394] CPU: 0 PID: 14394 Comm: syz.1.2931 Not tainted syzkaller #0
[  671.710214][T14394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  671.720286][T14394] Call Trace:
[  671.723583][T14394]  <TASK>
[  671.726532][T14394]  dump_stack_lvl+0x188/0x24e
[  671.731247][T14394]  ? show_regs_print_info+0x12/0x12
[  671.736479][T14394]  ? load_image+0x410/0x410
[  671.741017][T14394]  ? __might_sleep+0xd0/0xd0
[  671.745628][T14394]  ? __lock_acquire+0x7c40/0x7c40
[  671.750683][T14394]  ? lockdep_init_map_type+0x98/0x8d0
[  671.756087][T14394]  should_fail_ex+0x390/0x4c0
[  671.760799][T14394]  should_failslab+0x5/0x20
[  671.765320][T14394]  slab_pre_alloc_hook+0x59/0x300
[  671.770370][T14394]  ? __kasan_kmalloc_large+0x8b/0xd0
[  671.775686][T14394]  ? io_ring_ctx_alloc+0x279/0xc85
[  671.780854][T14394]  __kmem_cache_alloc_node+0x4f/0x270
[  671.786249][T14394]  ? io_ring_ctx_alloc+0x279/0xc85
[  671.791383][T14394]  kmalloc_trace+0x26/0xe0
[  671.795835][T14394]  io_ring_ctx_alloc+0x279/0xc85
[  671.800798][T14394]  io_uring_create+0x29f/0xd6c
[  671.805584][T14394]  ? __might_fault+0xc2/0x120
[  671.810277][T14394]  ? __might_fault+0xa6/0x120
[  671.814986][T14394]  __x64_sys_io_uring_setup+0x21b/0x230
[  671.820664][T14394]  ? __ia32_sys_io_uring_enter+0xf0/0xf0
[  671.826326][T14394]  ? lockdep_hardirqs_on+0x94/0x140
[  671.831533][T14394]  do_syscall_64+0x4c/0xa0
[  671.835953][T14394]  ? clear_bhb_loop+0x60/0xb0
[  671.840636][T14394]  ? clear_bhb_loop+0x60/0xb0
[  671.845324][T14394]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  671.851221][T14394] RIP: 0033:0x7f8d2119e159
[  671.855630][T14394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  671.875234][T14394] RSP: 002b:00007f8d2200cfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  671.883643][T14394] RAX: ffffffffffffffda RBX: 0000200000000080 RCX: 00007f8d2119e159
[  671.891608][T14394] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000530f
[  671.899570][T14394] RBP: 00007f8d21235024 R08: 0000000000000000 R09: 0000000000000000
[  671.907535][T14394] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  671.915496][T14394] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffde11c4a18
[  671.923473][T14394]  </TASK>
[  673.537566][ T4288] Bluetooth: hci0: failed to read key size for handle 200
[  673.574331][ T4316] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[  673.584588][ T4316] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[  673.592611][ T4316] cdc_ncm 1-1:1.0: setting rx_max = 2048
[  673.786740][ T4316] cdc_ncm 1-1:1.0: setting tx_max = 88
[  673.838741][ T4316] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  673.900408][T14438] fuse: Bad value for 'fd'
[  673.906012][ T4316] usb 1-1: USB disconnect, device number 13
[  673.926757][ T4316] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP)
[  675.246753][T14473] loop0: detected capacity change from 0 to 4096
[  675.320830][T14473] EXT4-fs: inline encryption not supported
[  675.398755][T14473] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  675.451222][T14473] EXT4-fs (loop0): Test dummy encryption mode enabled
[  675.522529][T14473] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003]
[  675.582126][T14473] System zones: 0-5
[  675.653085][T14473] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  676.031096][ T4322] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  676.221108][ T4322] usb 2-1: Using ep0 maxpacket: 32
[  676.228598][ T4322] usb 2-1: config 9 has an invalid interface number: 215 but max is 0
[  676.251037][ T4322] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  676.290790][ T4322] usb 2-1: config 9 has no interface number 0
[  676.310069][ T4322] usb 2-1: config 9 interface 215 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  676.358518][ T4322] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice=df.53
[  676.378189][ T8672] EXT4-fs (loop0): unmounting filesystem.
[  676.380665][ T4322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  676.417466][ T4322] usb 2-1: Product: syz
[  676.426479][ T4322] usb 2-1: Manufacturer: syz
[  676.442747][ T4322] usb 2-1: SerialNumber: syz
[  676.725349][ T4322] usb 2-1: USB disconnect, device number 6
[  676.902477][T14512] fuse: Bad value for 'fd'
[  677.502890][ T4286] Bluetooth: hci0: command 0x0406 tx timeout
[  678.134095][T14518] loop0: detected capacity change from 0 to 128
[  678.308317][T14518] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  678.375404][T14518] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  679.790910][ T8672] EXT4-fs (loop0): unmounting filesystem.
[  680.391316][T14545] loop1: detected capacity change from 0 to 1024
[  680.497038][T14545] EXT4-fs: Ignoring removed bh option
[  680.815634][T14545] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  680.914091][T14545] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  682.104622][T12600] EXT4-fs (loop1): unmounting filesystem.
[  683.113687][T14580] loop1: detected capacity change from 0 to 512
[  683.237414][T14580] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2979: invalid indirect mapped block 256 (level 2)
[  683.367840][T14580] EXT4-fs (loop1): Remounting filesystem read-only
[  683.381672][T14580] EXT4-fs (loop1): 2 truncates cleaned up
[  683.401178][T14580] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  683.540169][T14593] loop0: detected capacity change from 0 to 1024
[  683.617937][T12600] EXT4-fs (loop1): unmounting filesystem.
[  683.806720][T14593] hfsplus: unable to parse mount options
[  686.095088][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  686.101393][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  687.668022][T14616] fuse: Bad value for 'fd'
[  687.921354][T14625] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2992'.
[  687.935239][T14622] loop1: detected capacity change from 0 to 2048
[  687.986288][T14622] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  688.415854][T14632] loop0: detected capacity change from 0 to 512
[  688.488841][T14632] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e826c018, mo2=0002]
[  688.527574][T14632] System zones: 1-12
[  688.658114][T14632] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #15: comm syz.0.2994: corrupted inode contents
[  688.723581][   T26] audit: type=1800 audit(2000000536.577:195): pid=14622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2993" name="file1" dev="loop1" ino=1415 res=0 errno=0
[  688.760479][T14632] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  688.801333][T14632] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #15: comm syz.0.2994: corrupted inode contents
[  688.848867][T14632] EXT4-fs error (device loop0): ext4_evict_inode:329: inode #15: comm syz.0.2994: mark_inode_dirty error
[  688.865925][T14632] EXT4-fs (loop0): 1 orphan inode deleted
[  688.875200][T14632] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  689.385550][ T8672] EXT4-fs (loop0): unmounting filesystem.
[  690.020045][T11279] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  690.182264][T11279] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  690.509855][T14666] fido_id[14666]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  690.700016][T14672] loop1: detected capacity change from 0 to 512
[  690.788057][T14672] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.3006: Invalid block bitmap block 0 in block_group 0
[  690.838286][T14672] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  690.855019][T14672] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.3006: attempt to clear invalid blocks 983261 len 1
[  690.881373][T14672] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3006: invalid indirect mapped block 2683928664 (level 0)
[  690.905882][T14672] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.3006: Invalid inode table block 0 in block_group 0
[  690.939765][T14672] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  690.976859][T14672] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  690.988711][T14672] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.3006: Invalid inode table block 0 in block_group 0
[  691.041828][T14672] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  691.091497][T14672] EXT4-fs error (device loop1): ext4_truncate:4325: inode #13: comm syz.1.3006: mark_inode_dirty error
[  691.831710][T14672] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  691.841892][T14672] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.3006: Invalid inode table block 0 in block_group 0
[  691.893044][T14672] EXT4-fs (loop1): 1 truncate cleaned up
[  691.898741][T14672] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  692.166498][T12600] EXT4-fs (loop1): unmounting filesystem.
[  692.591111][ T4322] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  692.813617][ T4322] usb 2-1: not running at top speed; connect to a high speed hub
[  692.827118][ T4322] usb 2-1: config 0 has too many interfaces: 223, using maximum allowed: 32
[  692.867888][ T4322] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  694.591249][ T4322] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 223
[  694.600413][ T4322] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  694.611513][ T4322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  694.623115][ T4322] usb 2-1: config 0 descriptor??
[  695.270448][T14707] loop1: detected capacity change from 0 to 512
[  695.606970][ T4322] usb 2-1: Found UVC 9.00 device <unnamed> (046d:0825)
[  696.712356][T14707] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  696.813025][T14707] EXT4-fs: failed to create workqueue
[  696.861679][T14707] EXT4-fs (loop1): mount failed
[  697.060255][ T4322] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  697.086953][ T4322] uvcvideo 2-1:0.1: Failed to query (129) UVC probe control : -71 (exp. 48).
[  697.139181][ T4322] uvcvideo 2-1:0.1: Failed to initialize the device (-5).
[  697.177858][ T4322] usb 2-1: USB disconnect, device number 7
[  705.412617][T14822] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3040'.
[  705.457339][T14822] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3040'.
[  705.481503][T14822] netlink: 'syz.1.3040': attribute type 5 has an invalid length.
[  705.499584][T14822] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3040'.
[  706.289690][T14835] loop1: detected capacity change from 0 to 128
[  706.342526][T14835] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  708.753081][T14872] loop0: detected capacity change from 0 to 256
[  708.860076][T14872] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  710.453996][T14895] loop1: detected capacity change from 0 to 512
[  710.496173][T14895] EXT4-fs: Ignoring removed i_version option
[  710.561322][T14895] EXT4-fs: Ignoring removed oldalloc option
[  710.602949][T14895] ext4: Unknown parameter 'smackfsdef'
[  712.974141][T14924] fuse: Bad value for 'fd'
[  717.411284][ T4322] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  717.556505][T14986] loop1: detected capacity change from 0 to 512
[  717.689334][ T4322] usb 1-1: unable to get BOS descriptor or descriptor too short
[  717.726924][ T4322] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  717.771663][ T4322] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  717.781823][T14986] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  717.799628][T14986] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  717.816461][ T4322] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  717.852611][T14986] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.3080: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[  717.878075][T14986] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 12: comm syz.1.3080: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[  717.930686][T15001] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #2: block 18: comm syz.1.3080: lblock 23 mapped to illegal pblock 18 (length 1)
[  717.945839][T14986] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz.1.3080: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[  717.968583][T14986] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 14: comm syz.1.3080: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  718.007937][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  718.056750][T14986] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 15: comm syz.1.3080: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  718.082463][ T4322] usb 1-1: Product: syz
[  718.089745][ T4322] usb 1-1: Manufacturer: syz
[  718.099388][ T4322] usb 1-1: SerialNumber: syz
[  718.128854][ T4322] usb 1-1: selecting invalid altsetting 1
[  718.139102][ T4322] usb 1-1: unit 6 not found!
[  718.229987][T14986] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 16: comm syz.1.3080: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[  718.366410][T14986] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 17: comm syz.1.3080: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  719.401310][T12600] EXT4-fs (loop1): unmounting filesystem.
[  719.596906][ T4322] usb 1-1: 2:0: failed to get current value for ch 0 (-71)
[  719.676964][ T4322] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[  719.738188][ T4322] usb 1-1: USB disconnect, device number 14
[  719.992206][T11639] udevd[11639]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  722.470613][T15064] loop1: detected capacity change from 0 to 164
[  722.593008][T15064] Unable to read rock-ridge attributes
[  722.622960][T15064] Unable to read rock-ridge attributes
[  722.671232][T15064] iso9660: Corrupted directory entry in block 1 of inode 1792
[  723.944224][T15081] fuse: Bad value for 'fd'
[  724.097899][T15089] loop0: detected capacity change from 0 to 512
[  724.177421][T15089] EXT4-fs (loop0): orphan cleanup on readonly fs
[  724.189158][T15089] EXT4-fs error (device loop0): ext4_find_extent:936: inode #4: comm syz.0.3109: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0)
[  724.211636][T15089] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117
[  724.221559][T15089] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  724.236795][T15089] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  724.243756][T15089] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  724.282167][T15089] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.3109: iget: bad i_size value: 360287970189639690
[  724.933705][T15089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3109'.
[  724.958449][T15089] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[  726.300872][T15115] loop1: detected capacity change from 0 to 8
[  726.431842][ T8672] EXT4-fs (loop0): unmounting filesystem.
[  726.670861][T15124] loop0: detected capacity change from 0 to 8
[  726.720416][T15124] SQUASHFS error: lzo decompression failed, data probably corrupt
[  727.659193][T15124] SQUASHFS error: Failed to read block 0x91: -5
[  727.713966][T15124] SQUASHFS error: Unable to read metadata cache entry [8f]
[  727.791211][T15124] SQUASHFS error: Unable to read inode 0x11f
[  747.014943][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  747.021301][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  808.454132][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  808.460428][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  869.892555][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  869.898867][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  887.811147][   T27] INFO: task jbd2/sda1-8:3600 blocked for more than 143 seconds.
[  887.818903][   T27]       Not tainted syzkaller #0
[  887.823891][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  887.832597][   T27] task:jbd2/sda1-8     state:D stack:24120 pid:3600  ppid:2      flags:0x00004000
[  887.841887][   T27] Call Trace:
[  887.845175][   T27]  <TASK>
[  887.848107][   T27]  __schedule+0x107f/0x4030
[  887.852724][   T27]  ? __lock_acquire+0x7c40/0x7c40
[  887.857776][   T27]  ? release_firmware_map_entry+0x187/0x187
[  887.863840][   T27]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  887.869752][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  887.875098][   T27]  schedule+0xb9/0x180
[  887.879194][   T27]  io_schedule+0x7c/0xd0
[  887.883537][   T27]  bit_wait_io+0xd/0xc0
[  887.887706][   T27]  __wait_on_bit+0x9b/0x2c0
[  887.892377][   T27]  ? bit_wait+0xc0/0xc0
[  887.897473][   T27]  out_of_line_wait_on_bit+0x138/0x190
[  887.903213][   T27]  ? bit_wait+0xc0/0xc0
[  887.907389][   T27]  ? __wait_on_bit+0x2c0/0x2c0
[  887.912197][   T27]  ? do_raw_write_lock+0x11a/0x260
[  887.917326][   T27]  ? bit_waitqueue+0x30/0x30
[  887.921968][   T27]  ? do_raw_read_unlock+0x39/0x70
[  887.927012][   T27]  jbd2_journal_commit_transaction+0x2f0f/0x5f30
[  887.933524][   T27]  ? jbd2_journal_finish_inode_data_buffers+0xa0/0xa0
[  887.940332][   T27]  ? lock_chain_count+0x20/0x20
[  887.945301][   T27]  ? _raw_spin_unlock+0x40/0x40
[  887.950184][   T27]  ? __timer_delete_sync+0x239/0x2e0
[  887.955510][   T27]  ? __lock_acquire+0x7c40/0x7c40
[  887.960552][   T27]  ? timer_delete_sync+0x20/0x20
[  887.965549][   T27]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  887.971513][   T27]  ? _raw_spin_unlock+0x40/0x40
[  887.976385][   T27]  ? finish_wait+0xc6/0x1c0
[  887.980946][   T27]  kjournald2+0x40b/0x800
[  887.985386][   T27]  ? jbd2_seq_info_show+0x5c0/0x5c0
[  887.990580][   T27]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  887.996535][   T27]  ? wake_bit_function+0x200/0x200
[  888.002682][   T27]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  888.008613][   T27]  ? __kthread_parkme+0x71/0x1c0
[  888.013906][   T27]  ? __kthread_parkme+0x15b/0x1c0
[  888.018964][   T27]  kthread+0x29d/0x330
[  888.023114][   T27]  ? jbd2_seq_info_show+0x5c0/0x5c0
[  888.028308][   T27]  ? kthread_blkcg+0xd0/0xd0
[  888.032945][   T27]  ret_from_fork+0x1f/0x30
[  888.037408][   T27]  </TASK>
[  888.040419][   T27] INFO: task syz-executor:4259 blocked for more than 143 seconds.
[  888.048246][   T27]       Not tainted syzkaller #0
[  888.053218][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  888.061941][   T27] task:syz-executor    state:D stack:21856 pid:4259  ppid:4258   flags:0x00004002
[  888.071226][   T27] Call Trace:
[  888.074504][   T27]  <TASK>
[  888.077420][   T27]  __schedule+0x107f/0x4030
[  888.081985][   T27]  ? __lock_acquire+0x7c40/0x7c40
[  888.087022][   T27]  ? release_firmware_map_entry+0x187/0x187
[  888.092981][   T27]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  888.098880][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  888.104860][   T27]  schedule+0xb9/0x180
[  888.108949][   T27]  io_schedule+0x7c/0xd0
[  888.113253][   T27]  bit_wait_io+0xd/0xc0
[  888.117414][   T27]  __wait_on_bit+0x9b/0x2c0
[  888.122183][   T27]  ? bit_wait+0xc0/0xc0
[  888.126350][   T27]  out_of_line_wait_on_bit+0x138/0x190
[  888.132211][   T27]  ? bit_wait+0xc0/0xc0
[  888.136955][   T27]  ? __wait_on_bit+0x2c0/0x2c0
[  888.142005][   T27]  ? do_raw_spin_lock+0x128/0x2f0
[  888.147047][   T27]  ? bit_waitqueue+0x30/0x30
[  888.151986][   T27]  ? do_raw_spin_unlock+0x11d/0x230
[  888.157195][   T27]  do_get_write_access+0x605/0xf20
[  888.162476][   T27]  jbd2_journal_get_write_access+0x108/0x140
[  888.168474][   T27]  __ext4_journal_get_write_access+0x24b/0x6e0
[  888.174780][   T27]  ? __ext4_journal_ensure_credits+0x450/0x450
[  888.180980][   T27]  ? rcu_is_watching+0x11/0xa0
[  888.185850][   T27]  ext4_reserve_inode_write+0x201/0x290
[  888.191490][   T27]  __ext4_mark_inode_dirty+0x161/0x760
[  888.196958][   T27]  ext4_dirty_inode+0xbf/0x100
[  888.202590][   T27]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  888.208624][   T27]  __mark_inode_dirty+0x2e7/0xe80
[  888.213764][   T27]  __file_update_time+0x21d/0x240
[  888.218799][   T27]  file_update_time+0x2f3/0x370
[  888.223720][   T27]  ? rcu_read_lock_bh_held+0xf0/0xf0
[  888.229014][   T27]  ? __file_remove_privs+0x5f0/0x5f0
[  888.234615][   T27]  ext4_page_mkwrite+0x1a9/0x10d0
[  888.239652][   T27]  ? ext4_change_inode_journal_flag+0x710/0x710
[  888.245960][   T27]  ? count_memcg_event_mm+0x8a/0x3c0
[  888.251354][   T27]  ? do_raw_spin_lock+0x128/0x2f0
[  888.256385][   T27]  do_page_mkwrite+0x16b/0x5c0
[  888.261192][   T27]  wp_page_shared+0x167/0x370
[  888.265889][   T27]  handle_mm_fault+0x1b1b/0x3d40
[  888.270831][   T27]  ? mt_find+0x157/0x830
[  888.275170][   T27]  ? numa_migrate_prep+0x250/0x250
[  888.280292][   T27]  ? lock_chain_count+0x20/0x20
[  888.285175][   T27]  ? lock_mm_and_find_vma+0xae/0x2f0
[  888.290470][   T27]  do_user_addr_fault+0x58e/0xb20
[  888.295570][   T27]  exc_page_fault+0x60/0x100
[  888.300165][   T27]  ? clear_bhb_loop+0x60/0xb0
[  888.305916][   T27]  asm_exc_page_fault+0x22/0x30
[  888.310796][   T27] RIP: 0033:0x7f89ccc701e3
[  888.315311][   T27] RSP: 002b:00007ffd47ef74b0 EFLAGS: 00010202
[  888.321432][   T27] RAX: 00007f89c3fff1ac RBX: 00007ffd47ef75e0 RCX: 0000000000000000
[  888.329413][   T27] RDX: 00007f89c3fff1a8 RSI: 0000000000000008 RDI: 00007ffd47ef75e0
[  888.337429][   T27] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000
[  888.345589][   T27] R10: 00007ffd47ef75c0 R11: 0000000000000000 R12: 0000000000000000
[  888.353632][   T27] R13: 0000000000000e54 R14: fffffffffffff1ac R15: 0000000000000000
[  888.361669][   T27]  </TASK>
[  888.364701][   T27] INFO: task syz.0.3124:15160 blocked for more than 143 seconds.
[  888.372638][   T27]       Not tainted syzkaller #0
[  888.377579][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  888.386318][   T27] task:syz.0.3124      state:D stack:26288 pid:15160 ppid:8672   flags:0x00004004
[  888.395617][   T27] Call Trace:
[  888.398905][   T27]  <TASK>
[  888.402820][   T27]  __schedule+0x107f/0x4030
[  888.408044][   T27]  ? release_firmware_map_entry+0x187/0x187
[  888.414070][   T27]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  888.419980][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  888.425274][   T27]  schedule+0xb9/0x180
[  888.429354][   T27]  io_schedule+0x7c/0xd0
[  888.433662][   T27]  bit_wait_io+0xd/0xc0
[  888.437822][   T27]  __wait_on_bit+0x9b/0x2c0
[  888.442375][   T27]  ? bit_wait+0xc0/0xc0
[  888.446537][   T27]  out_of_line_wait_on_bit+0x138/0x190
[  888.452520][   T27]  ? bit_wait+0xc0/0xc0
[  888.456687][   T27]  ? __wait_on_bit+0x2c0/0x2c0
[  888.461490][   T27]  ? do_raw_spin_lock+0x128/0x2f0
[  888.466526][   T27]  ? bit_waitqueue+0x30/0x30
[  888.471181][   T27]  ? do_raw_spin_unlock+0x11d/0x230
[  888.476387][   T27]  do_get_write_access+0x605/0xf20
[  888.481588][   T27]  jbd2_journal_get_write_access+0x108/0x140
[  888.487579][   T27]  __ext4_journal_get_write_access+0x24b/0x6e0
[  888.493767][   T27]  ? __ext4_journal_ensure_credits+0x450/0x450
[  888.499930][   T27]  ? rcu_is_watching+0x11/0xa0
[  888.504768][   T27]  ext4_reserve_inode_write+0x201/0x290
[  888.511088][   T27]  __ext4_mark_inode_dirty+0x161/0x760
[  888.516586][   T27]  ext4_dirty_inode+0xbf/0x100
[  888.521427][   T27]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  888.527243][   T27]  __mark_inode_dirty+0x2e7/0xe80
[  888.532347][   T27]  __file_update_time+0x21d/0x240
[  888.537393][   T27]  file_update_time+0x2f3/0x370
[  888.542321][   T27]  ? rcu_read_lock_bh_held+0xf0/0xf0
[  888.547617][   T27]  ? __file_remove_privs+0x5f0/0x5f0
[  888.552954][   T27]  ext4_page_mkwrite+0x1a9/0x10d0
[  888.558017][   T27]  ? ext4_change_inode_journal_flag+0x710/0x710
[  888.564532][   T27]  ? count_memcg_event_mm+0x8a/0x3c0
[  888.569820][   T27]  ? do_raw_spin_lock+0x128/0x2f0
[  888.574892][   T27]  do_page_mkwrite+0x16b/0x5c0
[  888.579664][   T27]  wp_page_shared+0x167/0x370
[  888.584422][   T27]  handle_mm_fault+0x1b1b/0x3d40
[  888.589369][   T27]  ? mt_find+0x157/0x830
[  888.593693][   T27]  ? numa_migrate_prep+0x250/0x250
[  888.598813][   T27]  ? lock_chain_count+0x20/0x20
[  888.603715][   T27]  ? ktime_get+0x247/0x270
[  888.608138][   T27]  ? lock_mm_and_find_vma+0xae/0x2f0
[  888.614458][   T27]  do_user_addr_fault+0x58e/0xb20
[  888.619514][   T27]  exc_page_fault+0x60/0x100
[  888.624164][   T27]  asm_exc_page_fault+0x22/0x30
[  888.629022][   T27] RIP: 0033:0x7fef7f272809
[  888.633488][   T27] RSP: 002b:00007ffc5382dc30 EFLAGS: 00010216
[  888.639563][   T27] RAX: 0000001b31823fa4 RBX: ffffffffffffffa4 RCX: 0000000000000002
[  888.647578][   T27] RDX: 0000001b31823fa0 RSI: 0000000000000004 RDI: 00007fef80155720
[  888.655607][   T27] RBP: 0000000000000000 R08: 00007fef7f610000 R09: 00007fef7f612000
[  888.663908][   T27] R10: 00000000812f8215 R11: 0000000000000005 R12: 0000000000000000
[  888.672485][   T27] R13: 000000000000029c R14: ffffffff812f8c6c R15: 00007fef80155720
[  888.680467][   T27]  ? fpregs_assert_state_consistent+0xac/0xe0
[  888.686659][   T27]  </TASK>
[  888.689695][   T27] INFO: task syz.2.3126:15168 blocked for more than 144 seconds.
[  888.697712][   T27]       Not tainted syzkaller #0
[  888.705723][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  888.714637][   T27] task:syz.2.3126      state:D stack:27696 pid:15168 ppid:12942  flags:0x00004004
[  888.724015][   T27] Call Trace:
[  888.727303][   T27]  <TASK>
[  888.730233][   T27]  __schedule+0x107f/0x4030
[  888.734887][   T27]  ? release_firmware_map_entry+0x187/0x187
[  888.740797][   T27]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  888.746803][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  888.752057][   T27]  schedule+0xb9/0x180
[  888.756134][   T27]  io_schedule+0x7c/0xd0
[  888.760356][   T27]  bit_wait_io+0xd/0xc0
[  888.764557][   T27]  __wait_on_bit+0x9b/0x2c0
[  888.769066][   T27]  ? bit_wait+0xc0/0xc0
[  888.773310][   T27]  out_of_line_wait_on_bit+0x138/0x190
[  888.778787][   T27]  ? bit_wait+0xc0/0xc0
[  888.783062][   T27]  ? __wait_on_bit+0x2c0/0x2c0
[  888.787839][   T27]  ? do_raw_spin_lock+0x128/0x2f0
[  888.793804][   T27]  ? bit_waitqueue+0x30/0x30
[  888.798428][   T27]  ? do_raw_spin_unlock+0x11d/0x230
[  888.803698][   T27]  do_get_write_access+0x605/0xf20
[  888.808826][   T27]  jbd2_journal_get_write_access+0x108/0x140
[  888.814977][   T27]  __ext4_journal_get_write_access+0x24b/0x6e0
[  888.821397][   T27]  ? __ext4_journal_ensure_credits+0x450/0x450
[  888.827565][   T27]  ? rcu_is_watching+0x11/0xa0
[  888.832375][   T27]  ext4_reserve_inode_write+0x201/0x290
[  888.837937][   T27]  __ext4_mark_inode_dirty+0x161/0x760
[  888.843447][   T27]  ext4_dirty_inode+0xbf/0x100
[  888.848224][   T27]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  888.854082][   T27]  __mark_inode_dirty+0x2e7/0xe80
[  888.859118][   T27]  __file_update_time+0x21d/0x240
[  888.864194][   T27]  file_update_time+0x2f3/0x370
[  888.869063][   T27]  ? rcu_read_lock_bh_held+0xf0/0xf0
[  888.874398][   T27]  ? __file_remove_privs+0x5f0/0x5f0
[  888.879707][   T27]  ext4_page_mkwrite+0x1a9/0x10d0
[  888.884793][   T27]  ? pte_alloc_one+0x287/0x310
[  888.889566][   T27]  ? ext4_change_inode_journal_flag+0x710/0x710
[  888.895876][   T27]  do_page_mkwrite+0x16b/0x5c0
[  888.900649][   T27]  handle_mm_fault+0x199c/0x3d40
[  888.905812][   T27]  ? mt_find+0x157/0x830
[  888.910074][   T27]  ? numa_migrate_prep+0x250/0x250
[  888.915257][   T27]  ? lock_chain_count+0x20/0x20
[  888.920250][   T27]  ? lock_mm_and_find_vma+0xae/0x2f0
[  888.925722][   T27]  do_user_addr_fault+0x58e/0xb20
[  888.930783][   T27]  exc_page_fault+0x60/0x100
[  888.935455][   T27]  ? clear_bhb_loop+0x60/0xb0
[  888.940142][   T27]  asm_exc_page_fault+0x22/0x30
[  888.945049][   T27] RIP: 0033:0x7f287366baa3
[  888.949466][   T27] RSP: 002b:00007fff60c9bc60 EFLAGS: 00010246
[  888.955593][   T27] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b33464000
[  888.963600][   T27] RDX: 0000001b33424000 RSI: 0000000000400000 RDI: 00007f28739e0708
[  888.971615][   T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  888.979589][   T27] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  888.987601][   T27] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff60c9bef0
[  888.995605][   T27]  </TASK>
[  888.998633][   T27] INFO: task syz.1.3127:15181 blocked for more than 144 seconds.
[  889.006425][   T27]       Not tainted syzkaller #0
[  889.011687][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  889.020344][   T27] task:syz.1.3127      state:D stack:27632 pid:15181 ppid:12600  flags:0x00004004
[  889.029810][   T27] Call Trace:
[  889.033262][   T27]  <TASK>
[  889.036208][   T27]  __schedule+0x107f/0x4030
[  889.040733][   T27]  ? release_firmware_map_entry+0x187/0x187
[  889.046709][   T27]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  889.052666][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  889.057891][   T27]  schedule+0xb9/0x180
[  889.062053][   T27]  io_schedule+0x7c/0xd0
[  889.066303][   T27]  bit_wait_io+0xd/0xc0
[  889.070444][   T27]  __wait_on_bit+0x9b/0x2c0
[  889.074991][   T27]  ? bit_wait+0xc0/0xc0
[  889.079154][   T27]  out_of_line_wait_on_bit+0x138/0x190
[  889.084682][   T27]  ? bit_wait+0xc0/0xc0
[  889.088842][   T27]  ? __wait_on_bit+0x2c0/0x2c0
[  889.093895][   T27]  ? do_raw_spin_lock+0x128/0x2f0
[  889.098939][   T27]  ? bit_waitqueue+0x30/0x30
[  889.103581][   T27]  ? do_raw_spin_unlock+0x11d/0x230
[  889.108786][   T27]  do_get_write_access+0x605/0xf20
[  889.113985][   T27]  jbd2_journal_get_write_access+0x108/0x140
[  889.119975][   T27]  __ext4_journal_get_write_access+0x24b/0x6e0
[  889.126630][   T27]  ? __ext4_journal_ensure_credits+0x450/0x450
[  889.132900][   T27]  ? rcu_is_watching+0x11/0xa0
[  889.137682][   T27]  ext4_reserve_inode_write+0x201/0x290
[  889.143411][   T27]  __ext4_mark_inode_dirty+0x161/0x760
[  889.148881][   T27]  ext4_dirty_inode+0xbf/0x100
[  889.153672][   T27]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  889.159483][   T27]  __mark_inode_dirty+0x2e7/0xe80
[  889.164561][   T27]  __file_update_time+0x21d/0x240
[  889.169593][   T27]  file_update_time+0x2f3/0x370
[  889.179636][   T27]  ? rcu_read_lock_bh_held+0xf0/0xf0
[  889.187073][   T27]  ? __file_remove_privs+0x5f0/0x5f0
[  889.194174][   T27]  ext4_page_mkwrite+0x1a9/0x10d0
[  889.199222][   T27]  ? pte_alloc_one+0x287/0x310
[  889.204092][   T27]  ? ext4_change_inode_journal_flag+0x710/0x710
[  889.210344][   T27]  do_page_mkwrite+0x16b/0x5c0
[  889.215143][   T27]  handle_mm_fault+0x199c/0x3d40
[  889.220107][   T27]  ? mt_find+0x157/0x830
[  889.224495][   T27]  ? numa_migrate_prep+0x250/0x250
[  889.229733][   T27]  ? lock_chain_count+0x20/0x20
[  889.234837][   T27]  ? lock_mm_and_find_vma+0xae/0x2f0
[  889.240134][   T27]  do_user_addr_fault+0x58e/0xb20
[  889.245429][   T27]  exc_page_fault+0x60/0x100
[  889.250026][   T27]  ? clear_bhb_loop+0x60/0xb0
[  889.255068][   T27]  asm_exc_page_fault+0x22/0x30
[  889.259937][   T27] RIP: 0033:0x7f8d2106baa3
[  889.264392][   T27] RSP: 002b:00007ffde11c4b80 EFLAGS: 00010246
[  889.270467][   T27] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2ed64000
[  889.278643][   T27] RDX: 0000001b2ed24000 RSI: 0000000000400000 RDI: 00007f8d213e0708
[  889.286671][   T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  889.294715][   T27] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  889.302787][   T27] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffde11c4e10
[  889.310789][   T27]  </TASK>
[  889.313864][   T27] 
[  889.313864][   T27] Showing all locks held in the system:
[  889.321609][   T27] 1 lock held by rcu_tasks_kthre/12:
[  889.326870][   T27]  #0: ffffffff8cb2e5b0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0
[  889.337821][   T27] 1 lock held by rcu_tasks_trace/13:
[  889.343350][   T27]  #0: ffffffff8cb2edd0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0
[  889.354384][   T27] 1 lock held by khungtaskd/27:
[  889.359227][   T27]  #0: ffffffff8cb2dc20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  889.369257][   T27] 1 lock held by syslogd/3620:
[  889.374094][   T27]  #0: ffff8880b8e3acd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x98/0x130
[  889.384074][   T27] 2 locks held by getty/4029:
[  889.388730][   T27]  #0: ffff88814e091098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  889.398567][   T27]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360
[  889.408722][   T27] 3 locks held by syz-executor/4259:
[  889.414043][   T27]  #0: ffff88807e132e58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  889.424048][   T27]  #1: ffff88814e1e6558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  889.433991][   T27]  #2: ffff88814e1f2990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  889.444614][   T27] 2 locks held by kworker/u4:17/7318:
[  889.449993][   T27]  #0: ffff8880b8e3acd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x98/0x130
[  889.460298][   T27]  #1: ffffc900047b7d00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  889.473007][   T27] 3 locks held by syz.0.3124/15160:
[  889.478204][   T27]  #0: ffff88807e1317d8 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  889.488157][   T27]  #1: ffff88814e1e6558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  889.497960][   T27]  #2: ffff88814e1f2990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  889.507648][   T27] 3 locks held by syz.2.3126/15168:
[  889.512925][   T27]  #0: ffff88807e136a58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  889.523006][   T27]  #1: ffff88814e1e6558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  889.533670][   T27]  #2: ffff88814e1f2990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  889.543566][   T27] 3 locks held by syz.1.3127/15181:
[  889.548762][   T27]  #0: ffff88807e2aae58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  889.558777][   T27]  #1: ffff88814e1e6558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  889.568828][   T27]  #2: ffff88814e1f2990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  889.578612][   T27] 
[  889.580962][   T27] =============================================
[  889.580962][   T27] 
[  889.589443][   T27] NMI backtrace for cpu 1
[  889.593765][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  889.600951][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  889.611016][   T27] Call Trace:
[  889.614289][   T27]  <TASK>
[  889.617206][   T27]  dump_stack_lvl+0x188/0x24e
[  889.621884][   T27]  ? irq_work_queue+0xbf/0x140
[  889.626747][   T27]  ? show_regs_print_info+0x12/0x12
[  889.631949][   T27]  ? load_image+0x410/0x410
[  889.636458][   T27]  ? vprintk_emit+0x59f/0x6a0
[  889.641144][   T27]  ? printk_sprint+0x460/0x460
[  889.645935][   T27]  nmi_cpu_backtrace+0x3e6/0x460
[  889.650865][   T27]  ? nmi_trigger_cpumask_backtrace+0x450/0x450
[  889.657022][   T27]  ? _printk+0xda/0x130
[  889.661171][   T27]  ? load_image+0x410/0x410
[  889.665702][   T27]  ? load_image+0x410/0x410
[  889.670191][   T27]  ? nmi_trigger_cpumask_backtrace+0xf3/0x450
[  889.676243][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  889.682371][   T27]  nmi_trigger_cpumask_backtrace+0x1d4/0x450
[  889.688369][   T27]  watchdog+0xf0e/0xf50
[  889.692523][   T27]  ? watchdog+0x1ed/0xf50
[  889.696856][   T27]  kthread+0x29d/0x330
[  889.700923][   T27]  ? hungtask_pm_notify+0x40/0x40
[  889.705948][   T27]  ? kthread_blkcg+0xd0/0xd0
[  889.710537][   T27]  ret_from_fork+0x1f/0x30
[  889.714961][   T27]  </TASK>
[  889.718884][   T27] Sending NMI from CPU 1 to CPUs 0:
[  889.724384][    C0] NMI backtrace for cpu 0
[  889.724394][    C0] CPU: 0 PID: 5140 Comm: kworker/u4:16 Not tainted syzkaller #0
[  889.724409][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  889.724418][    C0] Workqueue: events_unbound cfg80211_wiphy_work
[  889.724529][    C0] RIP: 0010:kasan_check_range+0x10/0x290
[  889.724552][    C0] Code: b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc cc 00 00 cc cc b0 01 48 85 f6 0f 84 ac 01 00 00 55 41 57 41 56 <41> 54 53 49 89 f8 49 01 f0 0f 82 0e 02 00 00 49 89 f8 49 c1 e8 2f
[  889.724563][    C0] RSP: 0018:ffffc900063d7120 EFLAGS: 00000002
[  889.724575][    C0] RAX: 0000000000000001 RBX: 0000000000000002 RCX: ffffffff8164182e
[  889.724585][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90b132a8
[  889.724594][    C0] RBP: ffffc900063d7370 R08: dffffc0000000000 R09: 1ffffffff2162667
[  889.724605][    C0] R10: dffffc0000000000 R11: fffffbfff2162668 R12: ffff88807d0046d8
[  889.724615][    C0] R13: ffff88807d004750 R14: 0000000000000345 R15: ffff88807d004750
[  889.724625][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  889.724637][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  889.724647][    C0] CR2: 000056240bacc660 CR3: 000000000c88e000 CR4: 00000000003506f0
[  889.724659][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  889.724667][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  889.724676][    C0] Call Trace:
[  889.724681][    C0]  <TASK>
[  889.724687][    C0]  __lock_acquire+0x92e/0x7c40
[  889.724713][    C0]  ? verify_lock_unused+0x140/0x140
[  889.724738][    C0]  lock_acquire+0x1bb/0x4a0
[  889.724754][    C0]  ? debug_check_no_obj_freed+0x9a/0x520
[  889.724805][    C0]  ? read_lock_is_recursive+0x10/0x10
[  889.724821][    C0]  ? cfg80211_find_elem_match+0x1b8/0x1f0
[  889.724862][    C0]  ? ieee802_11_parse_elems_full+0xb4/0x1240
[  889.724934][    C0]  _raw_spin_lock_irqsave+0xb0/0x100
[  889.724950][    C0]  ? debug_check_no_obj_freed+0x9a/0x520
[  889.724964][    C0]  ? _raw_spin_lock+0x40/0x40
[  889.724981][    C0]  debug_check_no_obj_freed+0x9a/0x520
[  889.724998][    C0]  slab_free_freelist_hook+0xd2/0x1b0
[  889.725015][    C0]  ? ieee80211_bss_info_update+0x889/0xbf0
[  889.725056][    C0]  __kmem_cache_free+0xb6/0x200
[  889.725071][    C0]  ieee80211_bss_info_update+0x889/0xbf0
[  889.725090][    C0]  ? ieee80211_rx_bss_put+0x60/0x60
[  889.725110][    C0]  ? ieee80211_vif_get_shift+0x22b/0x290
[  889.725130][    C0]  ? ieee80211_mandatory_rates+0x1c8/0x230
[  889.725144][    C0]  ieee80211_ibss_rx_queued_mgmt+0x1931/0x2eb0
[  889.725189][    C0]  ? verify_lock_unused+0x140/0x140
[  889.725211][    C0]  ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0
[  889.725230][    C0]  ? ieee80211_ibss_rx_no_sta+0x780/0x780
[  889.725251][    C0]  ? mark_lock+0x94/0x320
[  889.725268][    C0]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  889.725285][    C0]  ? __lock_acquire+0x7c40/0x7c40
[  889.725302][    C0]  ? lock_chain_count+0x20/0x20
[  889.725317][    C0]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  889.725335][    C0]  ? kcov_remote_start+0x87/0x810
[  889.725350][    C0]  ? skb_dequeue+0x120/0x150
[  889.725374][    C0]  ieee80211_iface_work+0x72c/0xc70
[  889.725390][    C0]  cfg80211_wiphy_work+0x224/0x260
[  889.725408][    C0]  ? process_one_work+0x7b4/0x1160
[  889.725424][    C0]  process_one_work+0x8ab/0x1160
[  889.725443][    C0]  ? worker_detach_from_pool+0x240/0x240
[  889.725459][    C0]  ? _raw_spin_lock_irq+0xb7/0xf0
[  889.725474][    C0]  ? _raw_spin_lock_irqsave+0x100/0x100
[  889.725490][    C0]  ? wq_worker_running+0x97/0x190
[  889.725538][    C0]  worker_thread+0xaf5/0x12a0
[  889.725558][    C0]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  889.725578][    C0]  kthread+0x29d/0x330
[  889.725589][    C0]  ? worker_clr_flags+0x1a0/0x1a0
[  889.725603][    C0]  ? kthread_blkcg+0xd0/0xd0
[  889.725615][    C0]  ret_from_fork+0x1f/0x30
[  889.725637][    C0]  </TASK>
[  889.729174][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  890.108192][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  890.115383][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  890.125425][   T27] Call Trace:
[  890.128696][   T27]  <TASK>
[  890.131620][   T27]  dump_stack_lvl+0x188/0x24e
[  890.136301][   T27]  ? memcpy+0x3c/0x60
[  890.140273][   T27]  ? show_regs_print_info+0x12/0x12
[  890.145466][   T27]  ? load_image+0x410/0x410
[  890.149971][   T27]  panic+0x2d3/0x710
[  890.153861][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  890.159492][   T27]  ? bpf_jit_dump+0xd0/0xd0
[  890.163987][   T27]  ? load_image+0x410/0x410
[  890.168487][   T27]  ? nmi_trigger_cpumask_backtrace+0x35b/0x450
[  890.174636][   T27]  ? nmi_trigger_cpumask_backtrace+0x360/0x450
[  890.180787][   T27]  watchdog+0xf4d/0xf50
[  890.184937][   T27]  ? watchdog+0x1ed/0xf50
[  890.189262][   T27]  kthread+0x29d/0x330
[  890.193320][   T27]  ? hungtask_pm_notify+0x40/0x40
[  890.198339][   T27]  ? kthread_blkcg+0xd0/0xd0
[  890.202923][   T27]  ret_from_fork+0x1f/0x30
[  890.207339][   T27]  </TASK>
[  890.210612][   T27] Kernel Offset: disabled
[  890.214925][   T27] Rebooting in 86400 seconds..