last executing test programs:

2m45.365967677s ago: executing program 0 (id=74):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x3, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000e700000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

2m44.739769672s ago: executing program 0 (id=83):
r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r2, r1, 0xe}, 0x14)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)

2m44.302046555s ago: executing program 0 (id=88):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0)
umount2(&(0x7f0000000180)='./file0/file0/../file0\x00', 0x8)

2m44.237438816s ago: executing program 0 (id=91):
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x20440a, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x1527, &(0x7f0000002780)="$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")
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf5, 0x20000}, 0x20)

2m43.909391261s ago: executing program 0 (id=98):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@errors_remount}, {@barrier_val}]}, 0xfa, 0x4cd, &(0x7f00000000c0)="$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")
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001d00010027bd7000fcdbdf2502000000", @ANYRES32, @ANYBLOB="0200d0070a0001"], 0x28}, 0x1, 0x0, 0x0, 0x20040100}, 0x800)
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xd000, 0xf, 0x6f, 0xfb, 0xe4, 0x40, 0xd0, 0x0, 0x2e, 0xc}, {0x5000, 0x3000, 0xa, 0x0, 0x40, 0x5, 0x7, 0x7f, 0x5, 0x3, 0x3, 0xf9}, {0xb000, 0xdddd0000, 0xe, 0x5, 0x6, 0x9, 0x0, 0x88, 0x1, 0xa7, 0x2}, {0x6000, 0xe000, 0xc, 0x7, 0x4, 0x41, 0x28, 0x3, 0x8, 0x2, 0xe, 0x8}, {0x2000, 0x4, 0x9, 0x0, 0x4, 0x1, 0xab, 0x7b, 0x7, 0x89, 0xf7, 0x83}, {0x8000000, 0x40000, 0xe, 0xa0, 0xb1, 0x7, 0x8, 0xa0, 0x84, 0xf, 0x5, 0xfd}, {0xffff1000, 0xffffffff, 0xa, 0x5, 0x7, 0x4, 0x4, 0x14, 0x7, 0x81, 0x1, 0x1}, {0xeeee0000, 0xa000, 0x9, 0x5, 0xf, 0x7, 0x4, 0x9, 0x4, 0xc, 0x7, 0x46}, {0x10000, 0x30}, {0xeeee0000, 0x9}, 0x40010031, 0x0, 0x40000, 0x12025, 0x400008, 0x19500, 0xeeee8000, [0x6800000000000000, 0x4, 0x7, 0x3]})
r1 = socket$inet6(0xa, 0x3, 0x100)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

2m43.685181368s ago: executing program 0 (id=103):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0)
pipe(0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
read(r0, 0x0, 0x0)
syz_io_uring_setup(0x111, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})

2m43.559113589s ago: executing program 32 (id=103):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140))
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0)
pipe(0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
read(r0, 0x0, 0x0)
syz_io_uring_setup(0x111, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})

2m17.694088258s ago: executing program 2 (id=503):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x0, 0x1a}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/236, 0xec, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xc8}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0})

2m17.600749583s ago: executing program 2 (id=504):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21060, 0x0)

2m17.290866105s ago: executing program 2 (id=512):
unshare(0x22020400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000004280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x1)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r0, r2, 0x12, 0x0, @void}, 0x10)
r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x4)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r4, 0x12, 0x0, 0x9, &(0x7f0000000080)=[0x0], 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x40)

2m17.247469352s ago: executing program 2 (id=513):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000480)={[{@stripe={'stripe', 0x3d, 0x5}}]}, 0x5, 0x7eb, &(0x7f00000004c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='freezer.self_freezing\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, r0, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x708a, &(0x7f00000000c0)=ANY=[], 0x0, 0x356, &(0x7f0000000140)="$eJzs3b1vW1UUAPDjPsd2K5VkQKoYkB5sSBC1QQwwJapSqcILIAvBgLBoCigOlWJhkQ5xw4LYWZBggokBBobOCAnEyj9AkVCBCbpVouIh+z1/1c7H4pSov99gnZx7j++9eVfxy4dv3lyNzSsLcfXOndtRq5WivHpxNe6WYimSyCURN2JKZToFAJwQd7Ms/s5yRywpzXlKAMCc9V//3z47lvnwh4P6Z179AeDEK77/P71/j+r+TdfmMiUAYM6mfv7/5ERzZfJX/eXhXwUAACfXK6+9/uJaPeLlNK1FbH3UaXQa8cKofe1qvBut2IjzsRj3IvIbhd5Dqf946XJ9/Xyapt34fSkavYpOI2Kr22nkdwprSb++GhdiMZaK+uJuI8uy5NK39fULaV9E3Oj2x4+tUqexEGeK8X85ExuxEmk8OlUfcbm+vpIWT9DYGtR3I/aiNlhEb/7LsRg/vxXXohVXolc7uK2pr+9eSNOLWX2ivtOo9vvlasd3QQAAAAAAAAAAAAAAAAAAAAAAeCgsp0NLw/NvstH5PcvLM9r75+Pk9cX5QHv5+UBZNYss++uDZxofJzFxPtD95/N0GuU49WCXDgAAAAAAAAAAAAAAAAAAAP8b7Z1KNFutje32zvXN8aC73d45FRG9zHs/ff396ZjuMyv48tMYPGG5GGOsT1qkrm82s2RQlSUTfYog6Q0+yHx1czjj8T7V4SpmzWdp/6Zmq3X2id8+G2UeTwbP/O+oTxKzV5r0pzGYUN5UK8q3Hsmzh36iZgUrh/S5lWXZfuW7b0xXRSmifMQLd+Qg6wU/3n7nsWfb557rZ77Lck89vfjqrU+++HOz2eqNHP0rWNlu38s2m8XHszfb/kEytn9KkQel8Z1QPqh8bzLTXBttv8NHz8Yz78/ok+TL+eb+pkoelIZ7Y9h0etZYCzM2/xyCc5+vNm/u/vrHUavGvkg4qAMAAAAAAAAAAAAAAAAAAI7F2HvFC8WbfRcOqnr+pfnPDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACOz+j//48Fe1OZowT/dGO6qbqx3Y6oPOhlAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwkPsvAAD//6BBZYY=")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x200a017, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121142, 0x20)

2m16.877540994s ago: executing program 2 (id=516):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, <r0=>0x0}, 0x6)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x38})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2})
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff)
mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r2, 0x20, &(0x7f0000000280)={&(0x7f0000000300)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x4b)

2m14.496265182s ago: executing program 2 (id=534):
r0 = socket(0x400000000010, 0x3, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000480)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0xc, 0x9, 0x3, 0x0, [{@empty}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xe, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x400, 0x0, 0xfffffffd, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0xa5dfdbfd, {0x0, 0x0, 0x0, r2, {0xe, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0xb, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x0, 0xc0, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

2m14.358499606s ago: executing program 33 (id=534):
r0 = socket(0x400000000010, 0x3, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000480)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0xc, 0x9, 0x3, 0x0, [{@empty}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xe, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x400, 0x0, 0xfffffffd, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0xa5dfdbfd, {0x0, 0x0, 0x0, r2, {0xe, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0xb, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x0, 0xc0, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

1m32.736653921s ago: executing program 6 (id=985):
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101240, 0x10a)

1m31.886429773s ago: executing program 6 (id=991):
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r1, 0x0, 0x4000000000000009, 0x0)
write$binfmt_script(r3, &(0x7f0000011140)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x10009)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000007a80)={&(0x7f0000000280)={0x50, 0x0, 0x4, {0x7, 0x29, 0x100001, 0x0, 0x1, 0x41, 0xd, 0x8, 0x0, 0x0, 0x2, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x1f00000000000000)
unshare(0x20060400)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1m30.636410662s ago: executing program 6 (id=1001):
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpgrp(0xffffffffffffffff)
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x8)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x11, 0x5})
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

1m29.282723429s ago: executing program 6 (id=1003):
r0 = getpgrp(0x0)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x4045)
r1 = syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10081, &(0x7f0000000140)={[{@nodioread_nolock}, {@nobh}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000680), &(0x7f0000000240)='./file1\x00', 0x20440a, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRESDEC=r1, @ANYRESHEX, @ANYRES32], 0x1, 0x1527, &(0x7f0000002780)="$eJzs3Am4TlXbOPD7Xmvt4ziJp5MMh7XWvXmSYTlJkiFJhiRJkiQhIekkryQkDpmSDklIhkMyh2Q4cZJ5njKHJOkkSaZMyfpfJ/zVW+9X7/f1fb7rO/fvuvZlrb33vfa99/1se3h4vus4qHrDGlXqExH8l+DFP5IBIBYA+gFALgAIAKBMfJn4zOXZJSb/1zbC/l4PT7naGbCrieuftXH9szauf9bG9c/auP5ZG9c/a+P6Z21cf8aysk1T81/HU9ad+P1/VsbX//8bLp188NWakjd0Aoj5q3Fc/6yN6/9/VvBXVuL6Z21c/6wq9monwP4X4PM/K8j2L5dw/bM2rj9jWdnVfv98tSeIZO1jcLU/f4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGsoYz/goFAJfbVzsvxhhjjDHGGGOM/X18tqudAWOMMcYYY4wxxv77IQiQoCCAGMgGsZAd4kAAwLWQE3JBBK6DeLgecsMNkAfyQj7IDwlQAAqCBgMxQL+MURiicCMUgZugKBSD4lACHJSERLgZSsEtUBpuhTJwG5SF26EclIcKUBHugEpwJ1SGu6AK3A1VoRpUhxpwD9SEe6EW3Ae14X6oAw9AXXgQ6sFDUB8ehgbwCDSER6ERPAaN4XFoAk2h2X8q/iXoCi9DN+gOydADesIr0At6Qx/oC/3gVegPr8EAeB1SYCAMgjdgMLwJQ+AtGArDYDi8DSPgHRgJo2A0jIFUGAvj4F0YD+/BBJgIk2AyTIGpMA3eh+kwA2bCBzALPoTZMAfmwjxIg49gPiyAdPgYFsInsAgWwxJYCstgOayAlbAKVsMaWAvrYD1sgI2wCT6FzbAFtsI22A47YCd8BrtgN+yBz2EvfPFvxp/+p/hOCAgoUKBChTEYg7EYi3EYhzkwB+bEnBjBCMZjPObG3JgH82A+zIcJmIAFsSAaNEhIWAgLYRSjWASLYFEsisWxODp0mIiJWApvwdJYGstgGSyLZbEclsfyWBErYiWshJWxMlbBKlgVq2J1rI734D3YA2thLayNtbEO1rn8egrrY31sgA2wITbERtgIG2NjbIJNsBk2w+bYHFtgC2yFrbA1tsY22AaTMAnbYltsh+2wPbbHDtgBO2JH7ISdsXPGS9kAX8aXsTtWFT2wJ/bEXpiSrQ/2xb74KvbH1/A1fB1TcCAOwjfwDXwTh+ApHIrDcDgOx0riHRyJo5DEGEzFVByH43A8jscJOBEn4mScglNxGk7D6TgDZ+AHOAs/xA9xDs7BeZiGaTgfF2A6puNCPI2LcDEuwaW4DJfjMlyJq3AlrsG1uAbXY8ylM/RT3IJbcBtuwx2oAPAz3I27MQX34l7ch/twP+7HA3gAMzADD+JBPISH8DAexiN4BI/iMTyOx/AknsRTeBrP4Bk8h+fwPL6Q8E2DHcVWp4DIpIQSMSJGxIpYESfiRA6RQ+QUOUVERES8iBe5RW6RR+QR+UQ+kSASREFRUBhhBIkwM00RFVFRRBQRRUVRUVwUF044kSgSRSlRSpQWpUUZcZsoK24X5UR50dJVFBVFJdHKVRZ3iSqiiqgqqonqooaoIWqKmqKWqCVqi9qijqgj6ooHRT3RA/vgwyKzMg3FQGwkBmFj8biQl45PczEEW4iWopV4SgzDodhGNHdJ4lnRVozEduIfYhQ+LzqIMdhRvCg6ic6ii3hJdBUtXDfRXUzAHqKnmIy9RG/RR/QV07Ga+ABnZa8uXhcpYqAYJN4Q8/BNMUS8JYaKYWK4eFuMEO+IkWKUGC3GiFQxVowT74rx4j0xQUwUk8RkMUVMFdPE+2K6mCFmig/ELPGhmC3miLlinkgTH4n5YoFIFx+LheITsUgsFkvEUrFMLBcrxEqxSqwWa8RasU6sFxvERrFJfCo2iy1iq9gmtosdYqf4TOwSu8Ue8bnYK74Q+8SXYr/4ShwQX4sM8Y04KL4Vh8R34rD4XhwRP4ij4pg4Lk6Ik+JHcUqcFmfEWXFO/CTOi5/FBeEFSJRCSqlkIGNkNhkrs8s4eY3MIYNLR/c6GS+vl7nlDTKPzCvzyfwyQRaQBaWWRlpJMpSFZGEZlTfKIvImWVQWk8VlCelkSZkob5al5C2ytLxVlpG3ybLydllOlpcVZEV5h6wk75QQubiNqrKarC5ryHtkMtwra8n7ZG15v6wjH5B15YOynnxI1pcPywbyEdlQPiobycdkY/m4bCKbymbyCdlcPilbyJaylXxKtpZPyzbyGZkkn5Vtpb/0EXledpAvyI7yRdlJdpZd5M/ygvSym+wuoQfInvIV2Uv2ln1kX9lPvir7y9fkAPm6TJED5SD5hhws35RD5FtyqBwmh8u35Qj5jhwpR8nRcoxMlWPlOPmuHC/fkxPkRDlJTpZT5FTZR/aTgewvZ0r5p/Hv/kH8gF+2vlFukp/KzXipFHKH3Cl3yl1yl9wj98i9cq/cJ/fJ/XK/PCAPyAyZIQ/Kg/KQPCQPy8PyiDwij8pj8qw8IU/KH+UpeVqelmflOXlOnr90DEChEkoqpQIVo7KpWJVdxalrVA51rcqpcqmIuk7Fq+tVbnWDyqPyqnwqv0pQBVRBpZVRVpEKVSFVWEXVjZezVMVVCeVUSZWobv534lURdZMqqor9Jv5yfsn/Ir9mqplqrpqrFqqFaqVaqdaqtWqj2qgklaTaqraqnWqn2qv2qoPqoDqqjqqT6qS6qC6qq+qquqluKlklq57qFdVL9VZ9VF/VT72q+qv+aoAaoFJUihqkBqnBarAaooaooWqoGq6GqxFqhBqpRqrRarRKValqnBqnxqvxaoKaoCapSWqKmqKmqWlqupquZqqZapaapWar2WqumqvSVJqar+ardJWuFqqFapFarBarpWqpWq6Wq5VqpVqtVqu1aq1ar9arRWqT2qQ2q81qq9qqtqvtaqfaqXapXWqP2qP2qr1qn9qn9qv96oA6oDJUhjqoDqpD6pA6rA6rI+qIOqqOquPquDp54Wt1Sp1SZ9QZdU6dU+fVeXVBXci87QtEIAIVZF5pY4LYIDaIC+KCHEGOIGeQM4gEkSA+iA9yBzcEeYK8Qb4gf5AQFAgKBjowgQ3EpaJHgxuDIsFNQdGgWFA8KBG4oGSQGNwclApuCUoHtwZlgtuCssHtQbmgfFAhqBjcEVQK7gwqB3cFVYK7g6pBtaB6UCO4J6gZ3BvUCu4Lagf3B3WCB4K6wYNBveChoH7wcNAgeCRoGDwaNAoeCxoHjwdNgqZBs791fO9P5X3SbdTddbLuoXvqV3Qv3Vv30X11P/2q7q9f0wP06zpFD9SD9Bt6sH5TD9Fv6aF6mB6u39Yj9Dt6pB6lR+sxOlWP1eP0u3q8fk9P0BP1JD1ZT9FT9TT9vp6uZ+iZ+gM9S3+oZ+s5eq6ep9P0R3q+XqDT9cd6of5EL9KL9RK9VC/Ty/UKvVKv0qv1Gr1Wr9Pr9Qa9UW/Sn+rNeoveqrfp7XqH3qk/07v0br1Hf6736i/0Pv2l3q+/0gf01zpDf6MP6m/1If2dPqy/10f0D/qoPqaP6xP6pP5Rn9Kn9Rl9Vp/TP+nz+md9QfvMm/vMy7tRRpkYE2NiTayJM3Emh8lhcpqcJmIiJt7Em9wmt8lj8ph8Jp9JMAmmoCloMpEhU8gUMlETNUVMEVPUFDXFTXHjjDOJJtGUMqVMaVPalDFlTFlT1pQz5UwFU8HcYe4wd5o7zV3mLnO3udtUM9VMDVPD1DQ1TS1Ty9Q2tU0dU8fUNXVNPVPP1Df1TQPTwDQ0DU0j08g0No1NE9PENDPNTHPT3LQwLUwr08q0Nq1NG9PGJJkk09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDPJJtn0ND1NL9PL9DF9TD/Tz/Q3/c0AM8CkmBQzyAwyg81gM8QMMUPNMDM88/Qx75iRZpQZbcaYVJNqxplxZrwZbyaYCWaSmWSmmClmmplmppvpZqaZaWaZWWa2mW3mmrkmzaSZ+Wa+STfpZqFZaBaZRWaJWWKWmWVmhVlhVplVZo1ZY9bBOrPBbDCbzCaz2Ww2W81Ws91sNzvNTrPL7DJ7zB6z1+w1+8w+s9/sNwfMAZNhMsxBc9AcMofMYXPYHDFHzFFz1Bw3x81Jc9KcMqfMGXPGnDN5L10vvYm12W2cvcbmsNfanDaX/ed+PpvfJtgCtqDVNo/N+5u+sdYWtcVscVvCOlvSJtqbf9cvZ8vbCraivcNWsnfayr/r17T32lr2Plvb3m9r2Ht+069jH7B17aO2HiKAfdw2sE1tQ/uobWQfs4195rymtrV92raxz9gk+6xta5/7XX++XWBX2dV2jV1rd9nd9ow9aw/Z7+w5+5PtZrvbfvZV29++ZgfY122KHfi7/nD7th1h37Ej7Sg72o75XX+SnWyn2Kl2mn3fTrczftdPsx/ZWTbdzrZz7Fw775d+Zk7p9mO70H5iF9kAltildpldblfYlf8/16V2vd1gN9qd9jO72W6xW+02u/3yjbDdbffYz+1e+4U9aL+1++1X9oA9bDPsN7/0M/fvsP3eHrE/2KP2mD1uT9iT9kd1OTpz30/Yn+0F6y0QEpAkRQHFUDaKpewUR9dQDrqWclIuitB1FE/XU266gfJQXspH+SmBClBB0mTIElFIhagwRelGupxecSpBjkpSIt1MpegWKk23Uhm6jcrS7VSOymMFqkh3UCW6kyrTXVSF7qaqVI2qUw26h2rSvVSL7qPacD/VoQeoLj1I9eghqk8PUwN6hBrSo9SIHqPG9Dg1oabUjJ6g5vQktaCW1Iqeotb0NLWhZyiJnqW29By1o39Qe3qeOtAL1JFepE7UmbrQS9SVXqZu1J2SqQf1pFeoF/WmPtSX+tGr1J9eowH0OqXQQBpEb9BgepOG0Fs0lIbRcHqbRtA7NJJG0WgaQ6k0lsbRuzSe3qMJNJEm0WSaQlNpGr1P02kGzaQPaBZ9SLNpDs2leZRGH9F8WkDp9DEtpE9oES2mJbSUltFyWkEraRWtpjW0ltbRetpAG2kTfUqbaQttpW20nXbQTvqMdtFu2kOf0176gvbRl7SfvqID9DVl0Dd0kL6lQ/QdHabvfXf6gY7SMTpOJ+gk/Uin6DSdobN0jn6i8/QzXSBPEGIoQhmqMAhjwmxhbJg9jAuvCXOE14Y5w1xhJLwujA+vD3OHN4R5wrxhvjB/mBAWCAuGOjShDSkMw0Jh4TAa3hgWCW8Ki4bFwuJhidCFJcPE8OawVHhLWDq8NSwT3haWDW8Py4Xlw0fvrxjeEVYK7wwrh3eFVcK7w6phtbB6WCO8J6wZ3hvWCu8La4f3h6XDB8K64YNhvfChsH74cNggfCRsGD4aNgofCxuHj4dNwqZhs/CJsHn4ZNgibBm2Cp8KW4dPh23CZ8Kk8NmwbfjcL8sfWPCvlyeHPcKe4SvhK6H398m50XnRtOhH0fnRBdH06MfRhdFPoouii6NLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohuj3tfIBg6dcNIpF7gYl83Fuuwuzl3jcrhrXU6Xy0XcdS7eXe9yuxtcHpfX5XP5XYIr4Ao67YyzjlzoCrnCLupudEXcTa6oK+aKuxLOuZIu0TV1zVwz19w96Vq4lq6Ve8o95Z52T7tn3DPuWdfWPefauX+49u55APeCe8G96Dq5zq6Le8l1dWNzXjwnk11P19P1cr1cH9fH9XP9XH/X3w1wA1yKS3GD3CA32A12Q9wQN9QNdcPdcDfCjXAj3Ug32o12qS7VjXPj3Hg33k1wE9wkN8lNcVPcNDfNTXfTXaUZF7cy2812c91cl+bS3HyXec+Y7ha6hW6RW+SWuCVumVvmVrgVbpVb5da4NW6dW+c2uA1uk9vkNrvNbqvb6ra77W6n2+l2+VwXB3V73T63z+13+90B97XLcN+4g+5bd8h95w67790R94M76o654+6EO+l+dKfcaXfGnXXn3E/uvPvZXXDepUbGRsZF3o2Mj7wXmRCZGJmU+cAYmRqZFnk/Mj0yIzIz8kFkVuTDyOzInMjcyLxIWuSjyPzIgkh65OPIwsgnkeXHAZZElkaWRZZHvC+wOfSFfGEf9Tf6Iv4mX9QX88V9Ce98SZ/ob/al/C2+tL/Vl/G3+bL+dl/Ol/cV/GO+sX/cN/FNfTP/hG/un/QtfEvfyj/lW/unfRv/jE/yz/q2/jnfzv/Dt/fP+w7+Bd/Rv+g7+c6+i3/Jd/Uv+26+u0/2PXxP/4rv5Xv7Pr6v7+df9f39a36Af92n+IF+kH/DD/Zv+iH+LT/UD/PDY972Iy4/IsMYn+rH+nH+XT/evwd3+Yl+kp/sp/ipfpp/30/3M/xM/4Gf5T/0s/0cP9fP82n+Iz/fL/Dp/mO/0H/iF/nFl18q+xV+pV/lV/s1fq1f59f7DX6j3+Q/9Zv9Fr/Vb/Pb/Q6/03/md/ndfo//3O/1X/h9/ku/33/lD/ivfYb/xh/03/pD/jt/2H/vj/gf/FF/zB/3J/xJ/6M/5U/7M/6sP+d/8uf9z/4C/581xhhjjLG/ZOyVpvjtkouv83v8QYz41co9AeDaLfkzfr08845yXZ6L7d4ioXUEAJ7t3vHhy1PVqsnJyZfWXSQhKDwH4PI3QZl++d7zUn8xtIKnIQlaQqk/zL+36HyO/mT86G2Av46JBYA4+OfxvwTA5D8Y/4mnhs8vG56J/w/GnwNQtPCVmOxwpb8YWv3yfqUllP4X+edt/if5Z/8qFaDFr2JywJX+lfwT4Ul4DpJ+syZjjDHGGGOMMXZRb1Gh/eXnz8v/4vOPns8T1JWYbHCl/2fP54wxxhhjjDHGGLv6nu/c5ZknkpJatv/3G5X/U1F/udEI/rtG5sYfNrwHuDxHAcAfrpPryjp/MiBAZkP+T+7Fp/8j20q5dOr886JlZ30A/ztK+Xc0rvJfTIwxxhhjjLG/3ZWb/t/OV1crIcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjLAv69Y9+xV6a93f/nNhV3kXGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGPsqvt/AQAA//+5Q/SC")
r2 = syz_pidfd_open(r0, 0x0)
setns(r2, 0x24020000)
r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r5, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf5, 0x20000}, 0x20)

1m26.357330568s ago: executing program 6 (id=1013):
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

1m25.961050975s ago: executing program 6 (id=1020):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x24, r1, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1c}]}, 0x24}, 0x1, 0x0, 0x0, 0x4811}, 0x4008047)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000240)='F', 0x5dc, 0x0, &(0x7f0000000200)={0x11, 0x8100, r5, 0x1, 0xe0}, 0x14)

1m25.74708109s ago: executing program 34 (id=1020):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x24, r1, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1c}]}, 0x24}, 0x1, 0x0, 0x0, 0x4811}, 0x4008047)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000240)='F', 0x5dc, 0x0, &(0x7f0000000200)={0x11, 0x8100, r5, 0x1, 0xe0}, 0x14)

11.644399981s ago: executing program 4 (id=1463):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000100001000000", @ANYBLOB], 0x2c}], 0x1}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
splice(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000008bc0)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x2}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4020114}, 0x0)
r2 = epoll_create1(0x0)
r3 = dup(r2)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x10001000}}]}})

10.789510984s ago: executing program 4 (id=1475):
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000002580)=[{0x0}, {&(0x7f0000000280)=""/23, 0x17}, {&(0x7f00000014c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000480)=""/80, 0x50}], 0x5)
syz_pidfd_open(0x0, 0x0)
creat(0x0, 0x6a)
r3 = socket(0x1e, 0x1, 0x0)
connect$tipc(r3, &(0x7f0000000040)=@id, 0x10)

8.518834244s ago: executing program 1 (id=1480):
futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000180)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x47f, &(0x7f0000000f00)="$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")
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, 0x0, 0x0)

8.494011608s ago: executing program 4 (id=1481):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x24}}, 0x20008080)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000680)={&(0x7f0000000300)="5cd27cc9ff0e9b937ac724cfd14f3e6620af227fb4d59ceb62748339571c91549c4889aea5c3a9b81b5ca961db52eedd445ebbf32502799d5862d111a7a29e0d0d7a104bc235fe9e7e276fc95a9217041bd82dcec52ee1ac4d5934c3e5b7d29be059cd4e87d2", &(0x7f00000003c0)=""/104, &(0x7f0000000440)="35c20c2be6ed70ca42cb94418d8c097b69d9b05b3efcbdf98c94cf9aa366bb4f71102ce38d919a32cfa3efb0ac727bb3eddd7332482c19d718631394a014e306ef45768d5cd1acbe639541da93d0a105514db22e08572d7f5ca035484f1b355a5aeb19d792934c07ed703a7584f5417e321cec36b7fd6789e8c299d1ca14b5019acecbc4fdb81784c9a147648624da718b1295a54060e626798cf381da7daa303a90e3be748864d46b804bfadde9df9779c36ccd72411f57ac9ae81605a2060f301a0c06eda267654420333d2d753aca4c844dd3b312dd0b0663e84adb412902987f", &(0x7f0000000540)="2d6df694fb06a53342f4c5b88e00b196e70c840b97babd338f85d57e2f514ed1f1a097aea8c106a0c2b8d7362dcec9842faa084d51354d49ba18c479180a32eebabf32bc4611f461f54d1cfefaad3db9864d41a7d51a73948aac4e7c116bf0eac5405853965621408dec39488e6d2429ae31498ae43e415dadfe7370e3aa4a346b172dc8d9fa69030bd94f551e3926c29e8df6c2a9dce1c46bbad94518dd2b52d1569c32a39570701a4e803586470623a13b1094fe58837b713d2eeed39cc6d5", 0x9, 0xffffffffffffffff, 0x4}, 0x38)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6.130599384s ago: executing program 1 (id=1486):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000100001000000", @ANYBLOB], 0x2c}], 0x1}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
splice(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000008bc0)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x2}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4020114}, 0x0)
r2 = epoll_create1(0x0)
r3 = dup(r2)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x10001000}}]}})

5.97637858s ago: executing program 4 (id=1487):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x8, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0x7, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3})
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x392000, 0x800, 0x0, 0x5}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x40050)
ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.507442088s ago: executing program 5 (id=1493):
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f00000034c0)={0x2020}, 0xcac)

4.991365105s ago: executing program 1 (id=1494):
syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x10d242, 0x15)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5412, 0x0, 0x0)
sendfile(r0, r0, &(0x7f00000000c0)=0x7, 0x6fecb1)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, 0x0, 0x24060804)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
recvfrom(r1, 0x0, 0x0, 0x100, 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x46, r3})
recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

4.069052599s ago: executing program 4 (id=1496):
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000600))
timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0xb})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
syz_usb_connect$uac1(0x0, 0x9e, 0x0, 0x0)

3.973624905s ago: executing program 5 (id=1507):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@rand_addr, @initdev}, &(0x7f00000001c0)=0xc)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYBLOB="020025bd7000fbdbdf"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xc0100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010000}, 0x804)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.571107212s ago: executing program 1 (id=1500):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x24}}, 0x20008080)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000680)={&(0x7f0000000300)="5cd27cc9ff0e9b937ac724cfd14f3e6620af227fb4d59ceb62748339571c91549c4889aea5c3a9b81b5ca961db52eedd445ebbf32502799d5862d111a7a29e0d0d7a104bc235fe9e7e276fc95a9217041bd82dcec52ee1ac4d5934c3e5b7d29be059cd4e87d2", &(0x7f00000003c0)=""/104, &(0x7f0000000440)="35c20c2be6ed70ca42cb94418d8c097b69d9b05b3efcbdf98c94cf9aa366bb4f71102ce38d919a32cfa3efb0ac727bb3eddd7332482c19d718631394a014e306ef45768d5cd1acbe639541da93d0a105514db22e08572d7f5ca035484f1b355a5aeb19d792934c07ed703a7584f5417e321cec36b7fd6789e8c299d1ca14b5019acecbc4fdb81784c9a147648624da718b1295a54060e626798cf381da7daa303a90e3be748864d46b804bfadde9df9779c36ccd72411f57ac9ae81605a2060f301a0c06eda267654420333d2d753aca4c844dd3b312dd0b0663e84adb412902987f", &(0x7f0000000540)="2d6df694fb06a53342f4c5b88e00b196e70c840b97babd338f85d57e2f514ed1f1a097aea8c106a0c2b8d7362dcec9842faa084d51354d49ba18c479180a32eebabf32bc4611f461f54d1cfefaad3db9864d41a7d51a73948aac4e7c116bf0eac5405853965621408dec39488e6d2429ae31498ae43e415dadfe7370e3aa4a346b172dc8d9fa69030bd94f551e3926c29e8df6c2a9dce1c46bbad94518dd2b52d1569c32a39570701a4e803586470623a13b1094fe58837b713d2eeed39cc6d5", 0x9, 0xffffffffffffffff, 0x4}, 0x38)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.468508949s ago: executing program 5 (id=1503):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007911b800"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @sock_ops}, 0x94)
ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)=0x2)
ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x804, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x296, &(0x7f0000000340)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000080)=0x2)

3.34406267s ago: executing program 3 (id=1504):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x3, 0x799, &(0x7f00000001c0)="$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")
userfaultfd(0x801)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f8ffffff00000000000000008500000036000000850000000500000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x3000)
r3 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000000380)={0x0, 0xea60}, 0x10)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000020b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x5}, 0x94)

3.296964298s ago: executing program 5 (id=1505):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2b, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0xd5}, 0x44004)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3400000010003904000000000067f89b437af5cea4fefcca809aecb34600000000000000", @ANYRES32=0x0, @ANYBLOB="0010000014000300140012800b0001006272696467650000c02d028000000500", @ANYRES32=0x0, @ANYBLOB="00001f00d80e0000"], 0x34}}, 0x20000000)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.055961619s ago: executing program 5 (id=1508):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket(0x28, 0x5, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r4 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r4, 0x4)
connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r3, 0x0, 0x0, 0x0)
r5 = accept4$unix(r4, 0x0, 0x0, 0x0)
recvfrom$unix(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

2.995809338s ago: executing program 7 (id=1509):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)=0x2)
ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1)
connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs, 0x6e)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0)
ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000080)=0x2)

2.853847012s ago: executing program 7 (id=1510):
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800)

2.367637814s ago: executing program 1 (id=1511):
r0 = epoll_create1(0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000300)={'ip6gre0\x00', 0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000980)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x0)
epoll_wait(r4, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff)
r5 = socket$packet(0x11, 0x3, 0x300)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140)={0x4})

2.285863557s ago: executing program 3 (id=1512):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002)
r6 = socket(0x1, 0x803, 0x0)
r7 = socket(0x10, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001400010f00000000ffdbdf250a000400", @ANYRES32=r8, @ANYBLOB="140006000700000000010400000000000400000014000200fe"], 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0)

2.201010932s ago: executing program 3 (id=1513):
sched_setscheduler(0x0, 0x5, &(0x7f0000000480))
sync()
socket$netlink(0x10, 0x3, 0xf)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1b)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)

2.023584501s ago: executing program 7 (id=1514):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
r1 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8)
add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000400)="5311d338a8fc973a23bbde014c898bac32b71f4b4332ddbca6f9c39aacc5c1e346f76579b456ff233855678e24000d934541f8d16d5d48d7e2fc13ef8fd1f73751b28d6635466670ae6d6714df0fade32399c8b4cd0177fe3a99", 0x5a, r1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setpriority(0x2, 0x0, 0x80000001)

1.870480757s ago: executing program 3 (id=1515):
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x82)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r1, 0x2, 0x0, @void}, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r3, 0x6, 0x1c, 0x0, 0x0)
pipe(0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3)
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

1.707950314s ago: executing program 4 (id=1516):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x2000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.703994135s ago: executing program 3 (id=1526):
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x804d)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

988.993784ms ago: executing program 7 (id=1517):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
listen(r1, 0x2)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x2}}, 0x26)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x1}}, 0x2e)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getsockopt(r5, 0x111, 0x1, 0x0, &(0x7f0000000080))
socket$inet(0x2, 0x1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

536.76388ms ago: executing program 1 (id=1518):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r3)
keyctl$KEYCTL_MOVE(0x1e, r4, r4, r3, 0x0)

536.45349ms ago: executing program 7 (id=1519):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@rand_addr, @initdev}, &(0x7f00000001c0)=0xc)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYBLOB="020025bd7000fbdbdf253e000000080003"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xc0100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010000}, 0x804)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

534.90628ms ago: executing program 5 (id=1529):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
unshare(0x62000000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f00001de000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="b8af05d10000000000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d90100000020207f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b877000f00d0", 0x4a}], 0x1, 0x10, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c801}, 0x2400c800)
close_range(r0, 0xffffffffffffffff, 0x0)

534.75155ms ago: executing program 3 (id=1530):
timer_create(0x3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$cont(0x7, r3, 0x2, 0x7)

0s ago: executing program 7 (id=1520):
r0 = socket(0x1, 0x2, 0x0)
ioctl$SIOCGETLINKNAME(r0, 0x89e0, 0x0)
setsockopt$inet_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "fdfc92699f597c39", "732e824ada5946b6998512aff6e78900", "51b6ab20", "ecdab61413c15d3c"}, 0x28)
newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1000)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000200)={[{@errors_remount}, {@noload}, {@resuid={'resuid', 0x3d, r1}}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000800)="$eJzs3c1vFOUfAPDvbLfvv58txKh4kCbGQKK0tIIhxkS4G4IvN71UWgihUEJrYpHEkuhN48WDiScP4l9hJPHqP+DBiydDQozhIIbImpmdbaftbunb7pT280mGzsvuPN8Bvn2effZ5ZgLYt0bSPyoRhyLiWhIxVDhWjfzgSP119/+6eT5dkqjV3v0ziZufJovFcyX5zwP5m/8diiR9+8GJH9eUO7dw4/LkzMz09WyrN9+7cOPYpSuTF6cvTl+deG3i1MkTJ0+NH9/+9RUvJ+L97799mIz/8NvZJE7Ho676zvS6Vr+3d1slp2WPRK3uQXF/GsipbZ57t/h7aPkvtq4/kmpp4bBJF/L/j90R8WwMRVfhX3MoPn+71OCAtqol0aijgH0n2VL+9+18IECHNdoBjc/2zT4Hr1Vpc6sE6IR7Z+odAPXc746IRv5X876zvqxvYOB+sqKfJ4mI7fXM1aVl/PLz2c/SJVr0wwHtsXirN++3X13/J1luDkdftjVwv7Ii/yuFJd3/zhbLH1m1Lf+hcxZvRcRzef3fE5vK/5FC/n+4xfLlPwAAAAAAAOycO2ci4pVm4/8qS+N/epqM/xmMiNM7UP7jv/+r3M1Xkh0oDii4dybijabjf5fG+A535Vv/z8YDdCcXLs1MH4+IpyLiaHT3ptvjq85bHCF87MuD37Qqvzj+L13S8htjAfMz3a2umog7NTk/ud3rBiLu3Yp4Phv/ezjfs3L8T1r/J03q/zS/r22wjIMv3T7X6tjj8x9ol9p3EUea1v/Lze10bWz+yrWxuab35xjL2gNjjVZBw3IL4IVPvhpsVf46+e8uEtBmaf0/sH7+9ybF+/XMbe78PRHx6kK11ur4Vtv/Pcl7XY3zpz6enJ+/Ph7Rk7y1dv/E5mKGvaqRD418SfP/6Ivr9/8ttf8LedgfEYurT96ih+6ZR4O/t4pH+x/Kk+b/1Pr1//DK+n/zKxO3h39qVf65DdX/J7I6/Wi+R/8fFK29H8eaLByIpglaSrgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8ISrRMT/IqmMLq1XKqOjEYMR8XQMVGZm5+ZfvjD70dWp9Fj2/P9K40m/Q/XtpPH8/+HC9sTK7f60rAMR8XVXf3Z89PzszFTZFw8AAAAAAAAAAAAAAAAAAAC7xGA257/Wu3r+f+qPrrKjA9qumv9czvee0mIBOivP/y8+2PQ7a707Hw3QSdWyAwBKs/H8725rHEDntc7/Bw9rmY6GA3SQ9j/sX1vMf18Pwh6g/of9aoN9en3tjgMog/ofAAAAAAD2lAOH7/yaRMTi6/3ZEoXJvwb7w95WKTsAoDTG8ML+VZ0tOwKgLD7jA8nS2j9NJ/u3Hv2ftCcgAAAAAAAAAAAAAGCNI4fM/4f9av35/8b2w162zvz/LPmzRwM8rG3g5cCTpvWjP9T9sNet8xnfA79gn3hcbW/+PwAAAAAAAAAAAADsAn03Lk/OzExfn1t48lbe3B1hbG5lcXJXhLHdlf6IWNrzqD1ldUdE+Ve6cyvViMrGXty4BUeJMZf8ewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFjyXwAAAP//CHogwg==")
r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x1)
fchdir(r3)
r4 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
syz_clone(0x200011, 0x0, 0x0, 0x0, 0x0, 0x0)
pause()
getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8)

kernel console output (not intermixed with test programs):

  62.833980][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   62.842197][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   62.861201][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   62.881385][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   62.892928][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   62.918493][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   62.952269][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   62.970278][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   62.987916][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   63.003805][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   63.020197][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   63.028856][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   63.037379][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   63.046544][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   63.055387][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   63.063991][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   63.072422][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   63.076106][   T28] kauditd_printk_skb: 3 callbacks suppressed
[   63.076152][   T28] audit: type=1400 audit(63.089:1200): avc:  denied  { create } for  pid=1695 comm="syz.5.519" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   63.081795][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   63.135905][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   63.136616][  T581] EXT4-fs (loop5): unmounting filesystem.
[   63.145853][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   63.159108][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   63.168015][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   63.177859][ T1715] netlink: 52 bytes leftover after parsing attributes in process `syz.1.525'.
[   63.191821][ T1715] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.199101][ T1715] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.215689][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0.257: link becomes ready
[   63.227319][ T1716] netlink: 76 bytes leftover after parsing attributes in process `syz.1.525'.
[   63.245636][ T1716] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.252768][ T1716] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.260170][ T1716] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.267360][ T1716] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.278397][ T1716] device bridge0 entered promiscuous mode
[   63.293745][ T1716] netlink: 52 bytes leftover after parsing attributes in process `syz.1.525'.
[   63.302937][ T1716] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.310136][ T1716] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.904835][  T284] EXT4-fs (loop2): unmounting filesystem.
[   64.363299][ T1748] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.386148][ T1748] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.415204][ T1748] device bridge_slave_0 entered promiscuous mode
[   64.443099][ T1748] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.459123][ T1760] VFS: Mount too revealing
[   64.464497][ T1748] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.498555][ T1748] device bridge_slave_1 entered promiscuous mode
[   64.740976][ T1748] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.748571][ T1748] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.756059][ T1748] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.763238][ T1748] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.884931][ T1770] binder: 1769:1770 unknown command 0
[   64.891574][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.903958][ T1770] binder: 1769:1770 ioctl c0306201 200000000080 returned -22
[   64.914653][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.933669][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.984919][ T1768] netlink: 24 bytes leftover after parsing attributes in process `syz.4.543'.
[   65.016410][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.034790][  T304] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.042020][  T304] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.070167][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.099196][  T304] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.106421][  T304] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.144411][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.163471][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.209500][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.229874][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.253335][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.289670][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   65.325651][ T1748] device veth0_vlan entered promiscuous mode
[   65.355370][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   65.368433][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   65.388955][ T1748] device veth1_macvtap entered promiscuous mode
[   65.418109][ T1783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.549'.
[   65.455720][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   65.477321][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   65.504285][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   65.536892][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   65.564810][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   65.672594][ T1788] binder: 1787:1788 ioctl c0306201 200000000640 returned -22
[   65.968405][ T1792] loop6: detected capacity change from 0 to 256
[   65.990213][ T1792] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   66.025791][ T1792] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[   66.060183][ T1792] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d)
[   66.112509][   T28] audit: type=1400 audit(66.129:1201): avc:  denied  { read open } for  pid=1791 comm="syz.6.552" path="/1/file0/bus" dev="loop6" ino=1048643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   66.213551][   T28] audit: type=1400 audit(66.169:1202): avc:  denied  { write } for  pid=1791 comm="syz.6.552" name="bus" dev="loop6" ino=1048643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   66.723455][ T1819] netlink: 'syz.5.560': attribute type 1 has an invalid length.
[   66.772066][ T1819] netlink: 'syz.5.560': attribute type 22 has an invalid length.
[   66.832297][ T1819] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.839600][ T1819] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.903858][ T1822] loop5: detected capacity change from 0 to 256
[   66.918779][ T1822] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   66.955132][ T1822] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[   67.045170][ T1822] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   67.202573][   T28] audit: type=1400 audit(67.219:1203): avc:  denied  { append } for  pid=1821 comm="syz.5.561" path="/68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/devices.list" dev="loop5" ino=1048645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   67.654856][   T28] audit: type=1400 audit(67.679:1204): avc:  denied  { execute_no_trans } for  pid=1845 comm="syz.6.571" path="/6/file1" dev="tmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   67.723664][   T28] audit: type=1400 audit(67.709:1205): avc:  denied  { create } for  pid=1846 comm="syz.5.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   67.914061][ T1870] netlink: 24 bytes leftover after parsing attributes in process `syz.1.580'.
[   68.013669][ T1878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.583'.
[   68.424786][ T1839] loop4: detected capacity change from 0 to 131072
[   68.454483][ T1839] F2FS-fs (loop4): invalid crc value
[   68.512333][ T1839] F2FS-fs (loop4): Found nat_bits in checkpoint
[   68.537089][ T1918] loop6: detected capacity change from 0 to 1024
[   68.562967][ T1918] EXT4-fs: Ignoring removed i_version option
[   68.587649][ T1918] EXT4-fs (loop6): Test dummy encryption mode enabled
[   68.615854][ T1918] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[   68.635214][ T1839] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   68.681377][   T28] audit: type=1400 audit(68.699:1206): avc:  denied  { mounton } for  pid=1837 comm="syz.4.562" path="/99/file1" dev="loop4" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   68.949123][ T1903] loop5: detected capacity change from 0 to 40427
[   68.969151][ T1903] F2FS-fs (loop5): invalid crc value
[   68.984884][ T1903] F2FS-fs (loop5): Found nat_bits in checkpoint
[   69.041211][ T1903] F2FS-fs (loop5): Start checkpoint disabled!
[   69.054154][ T1903] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[   69.071868][ T1903] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[   69.252332][ T1945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.607'.
[   69.292772][ T1945] bridge3: port 1(veth0_to_bond) entered blocking state
[   69.312496][ T1945] bridge3: port 1(veth0_to_bond) entered disabled state
[   69.322859][ T1945] device veth0_to_bond entered promiscuous mode
[   69.333630][ T1948] netlink: 'syz.4.601': attribute type 4 has an invalid length.
[   69.361760][ T1948] netlink: 'syz.4.601': attribute type 4 has an invalid length.
[   69.421833][ T1954] loop4: detected capacity change from 0 to 256
[   69.435967][ T1748] EXT4-fs (loop6): unmounting filesystem.
[   69.462316][ T1954] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   69.526251][   T28] audit: type=1400 audit(69.549:1207): avc:  denied  { mounton } for  pid=1953 comm="syz.4.609" path="/101/file2/bus/bus" dev="loop4" ino=1048647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   69.526694][ T1954] overlayfs: failed to resolve './file0': -2
[   69.567303][ T1958] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.581994][ T1958] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.593899][   T28] audit: type=1400 audit(69.609:1208): avc:  denied  { create } for  pid=1953 comm="syz.4.609" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   69.625042][ T1960] netlink: 'syz.6.610': attribute type 16 has an invalid length.
[   69.637242][ T1960] netlink: 'syz.6.610': attribute type 17 has an invalid length.
[   69.662202][ T1960] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   69.690921][ T1960] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   69.714102][ T1960] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.721236][ T1960] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.731550][ T1960] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.738757][ T1960] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.759667][ T1960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0.257: link becomes ready
[   69.769556][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   69.791278][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   69.809674][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   69.829141][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   69.847624][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   69.870730][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   69.885847][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   69.894409][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   70.099179][ T1969] loop4: detected capacity change from 0 to 40427
[   70.117118][ T1969] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   70.133690][ T1969] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   70.144607][ T1969] F2FS-fs (loop4): invalid crc value
[   70.152948][ T1991] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   70.169594][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   70.178726][    T8] bridge3: port 1(veth0_to_bond) entered blocking state
[   70.185761][    T8] bridge3: port 1(veth0_to_bond) entered forwarding state
[   70.195140][ T1969] F2FS-fs (loop4): Found nat_bits in checkpoint
[   70.247462][ T1998] loop5: detected capacity change from 0 to 512
[   70.256040][ T1998] EXT4-fs: Ignoring removed mblk_io_submit option
[   70.266898][ T1969] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   70.274586][ T1969] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   70.304730][ T1998] EXT4-fs (loop5): orphan cleanup on readonly fs
[   70.312712][ T1998] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13
[   70.324331][ T1998] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.622: attempt to clear invalid blocks 2 len 1
[   70.337478][ T1998] EXT4-fs (loop5): Remounting filesystem read-only
[   70.344251][ T1998] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1111: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   70.353966][ T1969] support for the xor transformation has been removed.
[   70.359471][ T1998] EXT4-fs (loop5): Remounting filesystem read-only
[   70.372819][ T1998] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.622: invalid indirect mapped block 1819239214 (level 0)
[   70.387494][ T1998] EXT4-fs (loop5): Remounting filesystem read-only
[   70.394530][ T1998] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.622: invalid indirect mapped block 1819239214 (level 1)
[   70.410628][ T1998] EXT4-fs (loop5): Remounting filesystem read-only
[   70.418494][ T1998] EXT4-fs (loop5): 1 truncate cleaned up
[   70.424401][ T1998] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   70.454465][   T28] audit: type=1400 audit(70.479:1209): avc:  denied  { accept } for  pid=1997 comm="syz.5.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   70.482718][  T581] EXT4-fs (loop5): unmounting filesystem.
[   70.521103][   T28] audit: type=1400 audit(70.539:1210): avc:  denied  { getattr } for  pid=2006 comm="syz.5.625" name="/" dev="incremental-fs" ino=427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   70.567380][   T28] audit: type=1400 audit(70.539:1211): avc:  denied  { write } for  pid=2006 comm="syz.5.625" name="file0" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   70.590911][   T28] audit: type=1400 audit(70.539:1212): avc:  denied  { add_name } for  pid=2006 comm="syz.5.625" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   70.613823][   T28] audit: type=1400 audit(70.539:1213): avc:  denied  { create } for  pid=2006 comm="syz.5.625" name="#d" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   70.635163][   T28] audit: type=1400 audit(70.539:1214): avc:  denied  { associate } for  pid=2006 comm="syz.5.625" name="#d" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   70.695700][   T28] audit: type=1400 audit(70.539:1215): avc:  denied  { setattr } for  pid=2006 comm="syz.5.625" name="#d" dev="tmpfs" ino=437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   70.903910][ T2032] netlink: 4 bytes leftover after parsing attributes in process `syz.5.635'.
[   70.931109][ T2032] device bridge_slave_1 left promiscuous mode
[   70.948340][ T2032] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.999763][ T2040] xt_hashlimit: size too large, truncated to 1048576
[   71.034257][ T2044] device ip6gre1 entered promiscuous mode
[   71.776355][ T2082] netlink: 'syz.5.654': attribute type 4 has an invalid length.
[   71.938142][ T2084] loop5: detected capacity change from 0 to 40427
[   71.946473][ T2084] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[   71.954745][ T2084] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   71.971863][ T2084] F2FS-fs (loop5): invalid crc value
[   71.981813][ T2084] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597)
[   72.017329][ T2084] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[   72.024599][ T2084] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   72.047562][ T2084] fscrypt (loop5, inode 3): Error -61 getting encryption context
[   72.154250][ T2108] netlink: 'syz.3.663': attribute type 27 has an invalid length.
[   72.183741][ T2108] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.191044][ T2108] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.211409][ T2108] bridge3: port 1(veth0_to_bond) entered disabled state
[   72.271296][ T2111] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   72.314016][ T2120] syz.4.664 uses obsolete (PF_INET,SOCK_PACKET)
[   72.420331][ T2111] device veth0_vlan left promiscuous mode
[   72.426470][ T2111] device veth0_vlan entered promiscuous mode
[   72.433971][ T2111] device veth1_macvtap left promiscuous mode
[   72.440956][ T2111] device veth1_macvtap entered promiscuous mode
[   72.456953][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   72.485135][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.493896][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.512520][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.519818][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.534769][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.544970][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.553267][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.560375][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.568480][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   72.590562][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   72.603188][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.613246][   T10] bridge3: port 1(veth0_to_bond) entered blocking state
[   72.620299][   T10] bridge3: port 1(veth0_to_bond) entered forwarding state
[   72.631171][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.641350][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.657491][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.667234][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   72.677650][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   72.687696][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.697722][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   72.707865][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.718429][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.728571][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   72.740197][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.749934][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   72.766125][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.775936][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   72.786043][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   72.795979][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   72.805972][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   72.815408][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   72.825000][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.836239][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.854569][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   72.900747][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.911903][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge3: link becomes ready
[   72.920972][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0.257: link becomes ready
[   73.174326][ T2148] netlink: 'syz.1.675': attribute type 16 has an invalid length.
[   73.187810][ T2148] netlink: 'syz.1.675': attribute type 17 has an invalid length.
[   73.197415][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   73.206426][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   73.220690][ T2148] device bridge0 left promiscuous mode
[   73.228335][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   73.235751][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   73.247488][ T2148] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.254645][ T2148] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.264732][ T2148] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.272023][ T2148] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.297966][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   73.310202][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   73.326266][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   73.342873][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   73.359201][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   73.368729][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   73.378988][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   73.388073][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready
[   73.397855][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready
[   73.410641][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0.257: link becomes ready
[   73.788585][ T2168] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   73.798838][ T2168] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   73.911945][ T2173] device batadv_slave_1 entered promiscuous mode
[   73.919748][ T2173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.685'.
[   74.267685][ T2189] netlink: 24 bytes leftover after parsing attributes in process `syz.6.692'.
[   74.694081][ T2171] device batadv_slave_1 left promiscuous mode
[   75.218745][ T2206] netlink: 8 bytes leftover after parsing attributes in process `syz.6.694'.
[   75.298748][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   75.430737][   T28] kauditd_printk_skb: 55 callbacks suppressed
[   75.430752][   T28] audit: type=1326 audit(75.449:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2219 comm="syz.5.699" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1df039c819 code=0x0
[   76.009247][   T28] audit: type=1400 audit(76.029:1272): avc:  denied  { write } for  pid=2226 comm="syz.4.700" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   76.052766][   T28] audit: type=1400 audit(76.029:1273): avc:  denied  { open } for  pid=2226 comm="syz.4.700" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   76.076535][   T28] audit: type=1400 audit(76.049:1274): avc:  denied  { ioctl } for  pid=2226 comm="syz.4.700" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   76.207924][ T2244] loop6: detected capacity change from 0 to 8192
[   76.234715][ T2244] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   76.259067][ T2244] FAT-fs (loop6): error, clusters badly computed (1 != 0)
[   76.266640][ T2244] FAT-fs (loop6): Filesystem has been set read-only
[   76.275649][ T2244] FAT-fs (loop6): error, clusters badly computed (2 != 1)
[   76.283546][ T2244] FAT-fs (loop6): error, clusters badly computed (3 != 2)
[   76.291364][ T2244] FAT-fs (loop6): error, clusters badly computed (4 != 3)
[   76.304771][ T2244] FAT-fs (loop6): error, clusters badly computed (5 != 4)
[   76.313985][ T2244] FAT-fs (loop6): error, clusters badly computed (6 != 5)
[   76.322072][ T2244] FAT-fs (loop6): error, clusters badly computed (7 != 6)
[   76.329736][ T2244] FAT-fs (loop6): error, clusters badly computed (8 != 7)
[   76.338941][ T2244] FAT-fs (loop6): error, clusters badly computed (9 != 8)
[   76.353556][ T2244] FAT-fs (loop6): error, clusters badly computed (10 != 9)
[   76.361043][ T2244] FAT-fs (loop6): error, clusters badly computed (11 != 10)
[   76.368874][ T2244] FAT-fs (loop6): error, clusters badly computed (12 != 11)
[   76.376624][ T2244] FAT-fs (loop6): error, clusters badly computed (13 != 12)
[   76.384136][ T2244] FAT-fs (loop6): error, clusters badly computed (14 != 13)
[   76.391995][ T2244] FAT-fs (loop6): error, clusters badly computed (15 != 14)
[   76.400810][ T2244] FAT-fs (loop6): error, clusters badly computed (16 != 15)
[   76.408668][ T2244] FAT-fs (loop6): error, clusters badly computed (17 != 16)
[   76.421256][ T2244] FAT-fs (loop6): error, clusters badly computed (18 != 17)
[   76.426537][ T2256] loop5: detected capacity change from 0 to 256
[   76.428857][ T2244] FAT-fs (loop6): error, clusters badly computed (19 != 18)
[   76.443950][ T2244] FAT-fs (loop6): error, clusters badly computed (20 != 19)
[   76.451760][ T2256] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[   76.452183][ T2244] FAT-fs (loop6): error, clusters badly computed (21 != 20)
[   76.472220][ T2244] FAT-fs (loop6): error, clusters badly computed (22 != 21)
[   76.480316][ T2244] FAT-fs (loop6): error, clusters badly computed (23 != 22)
[   76.481929][   T28] audit: type=1400 audit(76.499:1275): avc:  denied  { map } for  pid=2255 comm="syz.5.712" path="/94/file1/blkio.bfq.io_wait_time_recursive" dev="loop5" ino=1048650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   76.489609][ T2244] FAT-fs (loop6): error, clusters badly computed (24 != 23)
[   76.528003][ T2244] FAT-fs (loop6): error, clusters badly computed (25 != 24)
[   76.535823][ T2244] FAT-fs (loop6): error, clusters badly computed (26 != 25)
[   76.543424][ T2244] FAT-fs (loop6): error, clusters badly computed (27 != 26)
[   76.551429][ T2244] FAT-fs (loop6): error, clusters badly computed (28 != 27)
[   76.559737][ T2244] FAT-fs (loop6): error, clusters badly computed (29 != 28)
[   76.570004][ T2244] FAT-fs (loop6): error, clusters badly computed (30 != 29)
[   76.579788][ T2244] FAT-fs (loop6): error, clusters badly computed (31 != 30)
[   76.590489][ T2244] FAT-fs (loop6): error, clusters badly computed (32 != 31)
[   76.598112][ T2244] FAT-fs (loop6): error, clusters badly computed (33 != 32)
[   76.605825][ T2244] FAT-fs (loop6): error, clusters badly computed (34 != 33)
[   76.613359][ T2244] FAT-fs (loop6): error, clusters badly computed (35 != 34)
[   76.620825][ T2244] FAT-fs (loop6): error, clusters badly computed (36 != 35)
[   76.628346][ T2244] FAT-fs (loop6): error, clusters badly computed (37 != 36)
[   76.635934][ T2244] FAT-fs (loop6): error, clusters badly computed (38 != 37)
[   76.643413][ T2244] FAT-fs (loop6): error, clusters badly computed (39 != 38)
[   76.650869][ T2244] FAT-fs (loop6): error, clusters badly computed (40 != 39)
[   76.658384][ T2244] FAT-fs (loop6): error, clusters badly computed (41 != 40)
[   76.665894][ T2244] FAT-fs (loop6): error, clusters badly computed (42 != 41)
[   76.674748][ T2244] FAT-fs (loop6): error, clusters badly computed (43 != 42)
[   76.683860][ T2244] FAT-fs (loop6): error, clusters badly computed (44 != 43)
[   76.691284][ T2244] FAT-fs (loop6): error, clusters badly computed (45 != 44)
[   76.698839][ T2244] FAT-fs (loop6): error, clusters badly computed (46 != 45)
[   76.706380][ T2244] FAT-fs (loop6): error, clusters badly computed (47 != 46)
[   76.714036][ T2244] FAT-fs (loop6): error, clusters badly computed (48 != 47)
[   76.721478][ T2244] FAT-fs (loop6): error, clusters badly computed (49 != 48)
[   76.728875][ T2244] FAT-fs (loop6): error, clusters badly computed (50 != 49)
[   76.736312][ T2244] FAT-fs (loop6): error, clusters badly computed (51 != 50)
[   76.744082][ T2244] FAT-fs (loop6): error, clusters badly computed (52 != 51)
[   76.751633][ T2244] FAT-fs (loop6): error, clusters badly computed (53 != 52)
[   76.759236][ T2244] FAT-fs (loop6): error, clusters badly computed (54 != 53)
[   76.766688][ T2244] FAT-fs (loop6): error, clusters badly computed (55 != 54)
[   76.774419][ T2244] FAT-fs (loop6): error, clusters badly computed (56 != 55)
[   76.781959][ T2244] FAT-fs (loop6): error, clusters badly computed (57 != 56)
[   76.789592][ T2244] FAT-fs (loop6): error, clusters badly computed (58 != 57)
[   76.797080][ T2244] FAT-fs (loop6): error, clusters badly computed (59 != 58)
[   76.805249][ T2244] FAT-fs (loop6): error, clusters badly computed (60 != 59)
[   76.812829][ T2244] FAT-fs (loop6): error, clusters badly computed (61 != 60)
[   76.824045][ T2244] FAT-fs (loop6): error, clusters badly computed (62 != 61)
[   76.838485][ T2244] FAT-fs (loop6): error, clusters badly computed (63 != 62)
[   76.846829][ T2244] FAT-fs (loop6): error, clusters badly computed (64 != 63)
[   76.856876][ T2244] FAT-fs (loop6): error, clusters badly computed (65 != 64)
[   76.864772][ T2244] FAT-fs (loop6): error, clusters badly computed (66 != 65)
[   76.872495][ T2244] FAT-fs (loop6): error, clusters badly computed (67 != 66)
[   76.883169][ T2244] FAT-fs (loop6): error, clusters badly computed (68 != 67)
[   76.891149][ T2244] FAT-fs (loop6): error, clusters badly computed (69 != 68)
[   76.898885][ T2244] FAT-fs (loop6): error, clusters badly computed (70 != 69)
[   76.906692][ T2244] FAT-fs (loop6): error, clusters badly computed (71 != 70)
[   76.914787][ T2244] FAT-fs (loop6): error, clusters badly computed (72 != 71)
[   76.922732][ T2244] FAT-fs (loop6): error, clusters badly computed (73 != 72)
[   76.930520][ T2244] FAT-fs (loop6): error, clusters badly computed (74 != 73)
[   76.938345][ T2244] FAT-fs (loop6): error, clusters badly computed (75 != 74)
[   76.946304][ T2244] FAT-fs (loop6): error, clusters badly computed (76 != 75)
[   76.954081][ T2244] FAT-fs (loop6): error, clusters badly computed (77 != 76)
[   76.962325][ T2244] FAT-fs (loop6): error, clusters badly computed (78 != 77)
[   76.970865][ T2244] FAT-fs (loop6): error, clusters badly computed (79 != 78)
[   76.978973][ T2244] FAT-fs (loop6): error, clusters badly computed (80 != 79)
[   76.987095][ T2244] FAT-fs (loop6): error, clusters badly computed (81 != 80)
[   76.995044][ T2244] FAT-fs (loop6): error, clusters badly computed (82 != 81)
[   77.015971][ T2244] FAT-fs (loop6): error, clusters badly computed (83 != 82)
[   77.023958][ T2244] FAT-fs (loop6): error, clusters badly computed (84 != 83)
[   77.046869][ T2244] FAT-fs (loop6): error, clusters badly computed (85 != 84)
[   77.066464][ T2244] FAT-fs (loop6): error, clusters badly computed (86 != 85)
[   77.080975][ T2244] FAT-fs (loop6): error, clusters badly computed (87 != 86)
[   77.089486][ T2244] FAT-fs (loop6): error, clusters badly computed (88 != 87)
[   77.097629][ T2244] FAT-fs (loop6): error, clusters badly computed (89 != 88)
[   77.105789][ T2244] FAT-fs (loop6): error, clusters badly computed (90 != 89)
[   77.113917][ T2244] FAT-fs (loop6): error, clusters badly computed (91 != 90)
[   77.121430][ T2244] FAT-fs (loop6): error, clusters badly computed (92 != 91)
[   77.129407][ T2244] FAT-fs (loop6): error, clusters badly computed (93 != 92)
[   77.137506][ T2244] FAT-fs (loop6): error, clusters badly computed (94 != 93)
[   77.145226][ T2244] FAT-fs (loop6): error, clusters badly computed (95 != 94)
[   77.152980][ T2244] FAT-fs (loop6): error, clusters badly computed (96 != 95)
[   77.212087][ T2290] binder_alloc: 2289: binder_alloc_buf, no vma
[   77.543566][   T39] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[   77.724783][   T39] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   77.735275][   T39] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   77.749709][   T39] usb 7-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf
[   77.759492][   T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.767908][   T39] usb 7-1: Product: syz
[   77.772199][   T39] usb 7-1: Manufacturer: syz
[   77.777027][   T39] usb 7-1: SerialNumber: syz
[   77.782253][   T39] usb 7-1: config 0 descriptor??
[   78.236344][ T2324] device ip6gretap0 entered promiscuous mode
[   78.263042][ T2324] device macsec1 entered promiscuous mode
[   78.289733][ T2324] device ip6gretap0 left promiscuous mode
[   78.497274][   T39] usb 7-1: Found UVC 0.00 device syz (18ec:3288)
[   78.527772][   T39] usb 7-1: No valid video chain found.
[   78.534590][   T39] usb 7-1: USB disconnect, device number 2
[   78.603579][ T2113] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   78.783569][ T2113] usb 6-1: Using ep0 maxpacket: 16
[   78.790281][ T2113] usb 6-1: config index 0 descriptor too short (expected 243, got 18)
[   78.809557][ T2113] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   78.839214][ T2113] usb 6-1: config 0 has no interfaces?
[   78.857344][ T2113] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   78.875644][ T2113] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.885846][ T2113] usb 6-1: Product: syz
[   78.890115][ T2113] usb 6-1: Manufacturer: syz
[   78.895164][ T2113] usb 6-1: SerialNumber: syz
[   78.902185][ T2339] overlayfs: './file0' not a directory
[   78.915877][ T2113] r8152-cfgselector 6-1: config 0 descriptor??
[   79.008838][ T2345] loop4: detected capacity change from 0 to 40427
[   79.021372][ T2345] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   79.039710][ T2345] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   79.071472][ T2345] F2FS-fs (loop4): invalid crc value
[   79.098712][ T2345] F2FS-fs (loop4): Found nat_bits in checkpoint
[   79.146339][ T2345] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   79.153661][ T2345] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   79.202401][   T28] audit: type=1400 audit(79.219:1276): avc:  denied  { rename } for  pid=2344 comm="syz.4.746" name="file4" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   79.226969][   T28] audit: type=1400 audit(79.219:1277): avc:  denied  { reparent } for  pid=2344 comm="syz.4.746" name="file4" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   79.335748][ T2113] usb 6-1: USB disconnect, device number 3
[   79.388029][ T2355] loop6: detected capacity change from 0 to 40427
[   79.412369][ T2355] F2FS-fs (loop6): fault_injection options not supported
[   79.431950][ T2355] F2FS-fs (loop6): fault_type options not supported
[   79.439055][ T2355] F2FS-fs (loop6): Image doesn't support compression
[   79.449607][ T2355] F2FS-fs (loop6): invalid crc value
[   79.458440][ T2355] F2FS-fs (loop6): Found nat_bits in checkpoint
[   79.528929][ T2355] F2FS-fs (loop6): Start checkpoint disabled!
[   79.536876][ T2355] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0
[   79.545614][ T2369] Disabled LAPIC found during irq injection
[   79.552881][ T2355] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[   79.872045][   T28] audit: type=1400 audit(79.889:1278): avc:  denied  { rename } for  pid=2374 comm="syz.4.755" name="file7" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[   79.950202][ T2380] netlink: 24 bytes leftover after parsing attributes in process `syz.5.756'.
[   80.356567][ T2388] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.363902][ T2388] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.587468][ T2386] device ip6gretap0 entered promiscuous mode
[   80.593693][ T2386] device macsec1 entered promiscuous mode
[   80.600304][ T2386] device ip6gretap0 left promiscuous mode
[   80.713338][ T2394] binder: 2393:2394 ioctl c0306201 200000000080 returned -14
[   80.743344][ T2394] binder: 2393:2394 ioctl c0306201 2000000003c0 returned -14
[   80.790288][ T2397] netlink: 24 bytes leftover after parsing attributes in process `syz.5.763'.
[   80.812733][ T2397] selinux_netlink_send: 43 callbacks suppressed
[   80.812755][ T2397] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2397 comm=syz.5.763
[   80.891487][ T2404] syz.3.766 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   80.904838][ T2405] loop6: detected capacity change from 0 to 512
[   80.924369][ T2405] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[   80.961646][ T2405] EXT4-fs (loop6): 1 truncate cleaned up
[   80.971665][ T2405] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   81.263595][ T2113] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   81.475601][ T2113] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   81.496832][ T2113] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[   81.539143][ T2113] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   81.589970][ T2113] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   81.709747][ T2113] usb 7-1: SerialNumber: syz
[   82.596232][ T2113] usb 7-1: 0:2 : does not exist
[   82.601403][ T2113] usb 7-1: unit 5: unexpected type 0x09
[   82.634047][ T2113] usb 7-1: USB disconnect, device number 3
[   82.648519][ T2392] loop4: detected capacity change from 0 to 131072
[   82.679701][ T2392] F2FS-fs (loop4): Test dummy encryption mode enabled
[   82.709896][ T2392] F2FS-fs (loop4): invalid crc value
[   82.729460][ T2392] F2FS-fs (loop4): Found nat_bits in checkpoint
[   82.785768][ T2392] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   82.880429][   T28] audit: type=1400 audit(82.849:1279): avc:  denied  { read write open } for  pid=2391 comm="syz.4.761" path="/129/file0/file1" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   82.954952][  T684] udevd[684]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   83.120036][ T1748] EXT4-fs (loop6): unmounting filesystem.
[   83.348810][ T2472] loop4: detected capacity change from 0 to 1024
[   83.364191][ T2472] ext4: Unknown parameter 'nouser_xattr'
[   83.618912][ T2480] netlink: 'syz.5.795': attribute type 11 has an invalid length.
[   83.813199][ T2486] netlink: 20 bytes leftover after parsing attributes in process `syz.3.797'.
[   83.823879][ T2486] device ip6gre1 entered promiscuous mode
[   83.834219][ T2486] netlink: 'syz.3.797': attribute type 6 has an invalid length.
[   83.842084][ T2486] netlink: 72 bytes leftover after parsing attributes in process `syz.3.797'.
[   83.862546][   T28] audit: type=1326 audit(83.879:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2487 comm="syz.3.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139fb9c819 code=0x7ffc0000
[   83.885312][   T28] audit: type=1326 audit(83.879:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2487 comm="syz.3.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139fb9c819 code=0x7ffc0000
[   83.908156][   T28] audit: type=1326 audit(83.879:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2487 comm="syz.3.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f139fb9c819 code=0x7ffc0000
[   83.931388][ T2113] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[   83.931782][   T28] audit: type=1326 audit(83.879:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2487 comm="syz.3.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139fb9c819 code=0x7ffc0000
[   83.961792][   T28] audit: type=1326 audit(83.879:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2487 comm="syz.3.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139fb9c819 code=0x7ffc0000
[   83.985305][   T28] audit: type=1326 audit(83.879:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2487 comm="syz.3.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f139fb9c819 code=0x7ffc0000
[   84.008892][   T28] audit: type=1326 audit(83.879:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2487 comm="syz.3.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139fb9c819 code=0x7ffc0000
[   84.032215][   T28] audit: type=1326 audit(83.879:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2487 comm="syz.3.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139fb9c819 code=0x7ffc0000
[   84.055876][   T28] audit: type=1326 audit(83.879:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2487 comm="syz.3.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f139fb9c819 code=0x7ffc0000
[   84.125052][ T2113] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[   84.133257][ T2113] usb 6-1: config 0 has no interface number 0
[   84.139603][ T2113] usb 6-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[   84.150496][ T2113] usb 6-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[   84.163349][ T2113] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   84.172480][ T2113] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.180546][ T2113] usb 6-1: Product: syz
[   84.184795][ T2113] usb 6-1: Manufacturer: syz
[   84.189400][ T2113] usb 6-1: SerialNumber: syz
[   84.194688][ T2113] usb 6-1: config 0 descriptor??
[   84.200000][ T2484] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   84.207647][ T2484] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   84.215566][ T2113] smsc95xx v2.0.0
[   84.353553][ T1003] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   84.417363][ T2484] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   84.430729][ T2484] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   84.543762][ T1003] usb 7-1: Using ep0 maxpacket: 16
[   84.551370][ T1003] usb 7-1: config 0 has an invalid interface descriptor of length 8, skipping
[   84.561304][ T1003] usb 7-1: config 0 descriptor has 1 excess byte, ignoring
[   84.569669][ T1003] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   84.594937][ T1003] usb 7-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice=51.90
[   84.604858][ T1003] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.612990][ T1003] usb 7-1: Product: syz
[   84.617580][ T1003] usb 7-1: Manufacturer: syz
[   84.622261][ T1003] usb 7-1: SerialNumber: syz
[   84.638364][ T1003] r8152-cfgselector 7-1: config 0 descriptor??
[   84.646850][ T2113] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   84.658901][ T2113] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   84.863286][ T2491] loop6: detected capacity change from 0 to 256
[   84.920446][ T1003] r8152-cfgselector 7-1: Unknown version 0x0000
[   84.932244][ T1003] r8152-cfgselector 7-1: USB disconnect, device number 4
[   85.850481][ T2527] loop6: detected capacity change from 0 to 128
[   85.873812][ T2524] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼¼
[   85.987487][ T2532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2532 comm=syz.6.817
[   86.001089][ T2532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2532 comm=syz.6.817
[   86.014036][ T2532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2532 comm=syz.6.817
[   86.027033][ T2532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2532 comm=syz.6.817
[   86.039984][ T2532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2532 comm=syz.6.817
[   86.052860][ T2532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2532 comm=syz.6.817
[   86.066107][ T2532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2532 comm=syz.6.817
[   86.079499][ T2532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2532 comm=syz.6.817
[   86.092375][ T2532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2532 comm=syz.6.817
[   86.105145][ T2532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2532 comm=syz.6.817
[   86.190595][ T2113] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71
[   86.208273][ T2113] smsc95xx: probe of 6-1:0.67 failed with error -71
[   86.222939][ T2113] usb 6-1: USB disconnect, device number 4
[   86.267081][ T2546] overlayfs: failed to clone upperpath
[   86.899359][ T2575] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   87.459090][ T2588] loop4: detected capacity change from 0 to 128
[   87.480291][ T2588] EXT4-fs (loop4): Test dummy encryption mode enabled
[   87.507726][ T2588] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   87.763694][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187
[   87.854756][  T285] EXT4-fs (loop4): unmounting filesystem.
[   89.003507][    C1] sched: RT throttling activated
[   89.128693][   T28] kauditd_printk_skb: 445 callbacks suppressed
[   89.128709][   T28] audit: type=1400 audit(89.149:1734): avc:  denied  { mount } for  pid=2613 comm="syz.6.845" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   89.203910][   T28] audit: type=1400 audit(89.189:1735): avc:  denied  { unmount } for  pid=1748 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   89.228153][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   89.237158][ T2618] device bridge_slave_0 left promiscuous mode
[   89.243798][ T2618] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.274258][ T2618] device bridge_slave_1 left promiscuous mode
[   89.280612][ T2618] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.363579][    C1] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.0
[   89.373130][    C1] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.0
[   89.382669][    C1] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.0
[   89.392250][    C1] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.0
[   89.401847][    C1] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.0
[   89.411701][    C1] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.0
[   89.421441][    C1] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.0
[   89.431074][    C1] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.0
[   89.440865][    C1] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.0
[   91.040783][ T2618] device veth0_to_bond left promiscuous mode
[   91.058320][ T2618] bridge3: port 1(veth0_to_bond) entered disabled state
[   91.087413][ T2621] netlink: 12 bytes leftover after parsing attributes in process `syz.5.849'.
[   91.128122][ T2624] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   91.135953][ T2624] IPv6: NLM_F_CREATE should be set when creating new route
[   91.147400][ T2630] loop5: detected capacity change from 0 to 512
[   91.214186][ T2629] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.221737][ T2629] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.247302][ T2629] device batadv_slave_0 left promiscuous mode
[   91.269460][ T2629] device ip6gre1 left promiscuous mode
[   91.276826][ T2634] netlink: 24 bytes leftover after parsing attributes in process `syz.1.853'.
[   91.349323][ T2636] device syzkaller0 entered promiscuous mode
[   92.017202][   T28] audit: type=1326 audit(92.039:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2664 comm="syz.3.864" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f139fb9c819 code=0x0
[   92.065242][   T28] audit: type=1400 audit(92.089:1737): avc:  denied  { setopt } for  pid=2662 comm="syz.1.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   92.161892][ T2672] overlayfs: failed to resolve './file0': -2
[   92.231102][ T2677] lo: Caught tx_queue_len zero misconfig
[   92.236931][ T2677] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   92.283718][ T2678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.867'.
[   92.701674][ T2683] x_tables: duplicate underflow at hook 2
[   92.988945][ T2697] loop4: detected capacity change from 0 to 512
[   93.016885][ T2697] EXT4-fs: Ignoring removed i_version option
[   93.024227][   T28] audit: type=1400 audit(93.049:1738): avc:  denied  { connect } for  pid=2698 comm="syz.3.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   93.041389][ T2697] EXT4-fs (loop4): Test dummy encryption mode enabled
[   93.097246][ T2697] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.877: invalid indirect mapped block 2185560079 (level 0)
[   93.113895][   T28] audit: type=1400 audit(93.069:1739): avc:  denied  { write } for  pid=2698 comm="syz.3.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   93.200739][ T2697] EXT4-fs (loop4): Remounting filesystem read-only
[   93.218014][ T2697] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.877: invalid indirect mapped block 2683928664 (level 1)
[   93.263043][ T2697] EXT4-fs (loop4): Remounting filesystem read-only
[   93.278010][ T2697] EXT4-fs (loop4): 1 truncate cleaned up
[   93.293692][ T2697] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   93.345804][ T2697] EXT4-fs error (device loop4): __ext4_get_inode_loc:4515: comm syz.4.877: Invalid inode table block 1 in block_group 0
[   93.394130][ T2697] EXT4-fs (loop4): Remounting filesystem read-only
[   93.413957][ T2697] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5935: Corrupt filesystem
[   93.459545][ T2697] EXT4-fs (loop4): Remounting filesystem read-only
[   93.478148][ T2697] EXT4-fs error (device loop4): __ext4_new_inode:1349: inode #18: comm syz.4.877: mark_inode_dirty error
[   93.515718][ T2697] EXT4-fs (loop4): Remounting filesystem read-only
[   93.533711][ T2697] EXT4-fs error (device loop4) in __ext4_new_inode:1351: Corrupt filesystem
[   93.565215][ T2697] EXT4-fs (loop4): Remounting filesystem read-only
[   93.572577][ T2697] EXT4-fs error (device loop4): __ext4_get_inode_loc:4515: comm syz.4.877: Invalid inode table block 1 in block_group 0
[   93.619496][ T2697] EXT4-fs (loop4): Remounting filesystem read-only
[   93.628483][ T2697] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5935: Corrupt filesystem
[   93.638745][ T2697] EXT4-fs (loop4): Remounting filesystem read-only
[   93.646206][ T2697] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #18: comm syz.4.877: mark_inode_dirty error
[   93.658906][ T2697] EXT4-fs (loop4): Remounting filesystem read-only
[   93.693588][ T2697] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[   93.723727][ T2717] EXT4-fs error (device loop4): __ext4_get_inode_loc:4515: comm syz.4.877: Invalid inode table block 1 in block_group 0
[   93.762521][ T2717] EXT4-fs (loop4): Remounting filesystem read-only
[   93.779391][ T2719] EXT4-fs error (device loop4): __ext4_get_inode_loc:4515: comm syz.4.877: Invalid inode table block 1 in block_group 0
[   93.807970][ T2719] EXT4-fs (loop4): Remounting filesystem read-only
[   93.815273][ T2722] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.877: Invalid inode bitmap blk 1 in block_group 0
[   94.189150][ T2734] tipc: Started in network mode
[   94.199640][ T2734] tipc: Node identity 4, cluster identity 4711
[   94.216534][ T2734] tipc: Node number set to 4
[   94.243707][    C1] net_ratelimit: 5 callbacks suppressed
[   94.243728][    C1] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.0
[   94.259585][    C1] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.0
[   94.540844][ T2752] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   95.232241][ T2783] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.239785][ T2783] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.315175][ T2785] netlink: 'syz.4.907': attribute type 4 has an invalid length.
[   95.362351][ T2793] loop4: detected capacity change from 0 to 256
[   95.369696][ T2793] exfat: Unknown parameter 'ÿÿÿÿ'
[   95.456580][ T2795] loop6: detected capacity change from 0 to 256
[   95.475207][ T2795] exfat: Deprecated parameter 'namecase'
[   95.504990][ T2795] exfat: Deprecated parameter 'namecase'
[   95.510720][ T2795] exfat: Deprecated parameter 'namecase'
[   95.526267][ T2795] exfat: Deprecated parameter 'utf8'
[   95.600314][ T2795] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d)
[   95.669044][   T28] audit: type=1326 audit(95.689:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2801 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9da99c819 code=0x7ffc0000
[   95.730281][   T28] audit: type=1326 audit(95.689:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2801 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fe9da99c819 code=0x7ffc0000
[   95.773875][   T28] audit: type=1326 audit(95.689:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2801 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9da99c819 code=0x7ffc0000
[   95.802056][   T28] audit: type=1326 audit(95.689:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2801 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe9da99c819 code=0x7ffc0000
[   95.882941][   T28] audit: type=1326 audit(95.689:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2801 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9da99c819 code=0x7ffc0000
[   95.968355][   T28] audit: type=1326 audit(95.689:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2801 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe9da99c819 code=0x7ffc0000
[   96.046027][   T28] audit: type=1326 audit(95.689:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2801 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9da99c819 code=0x7ffc0000
[   96.105549][   T28] audit: type=1326 audit(95.689:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2801 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe9da99c819 code=0x7ffc0000
[   96.161930][   T28] audit: type=1326 audit(95.689:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2801 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9da99c819 code=0x7ffc0000
[   97.451657][   T28] audit: type=1400 audit(97.469:1749): avc:  denied  { write } for  pid=2832 comm="syz.1.934" path="socket:[26771]" dev="sockfs" ino=26771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   97.481941][ T2839] netlink: 60 bytes leftover after parsing attributes in process `syz.6.926'.
[   97.572741][ T2843] loop6: detected capacity change from 0 to 256
[   97.597215][ T2843] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   97.623572][ T2843] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   99.219529][ T2875] loop6: detected capacity change from 0 to 512
[   99.298613][ T2875] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 1024: comm syz.6.937: invalid block
[   99.318499][ T2875] EXT4-fs (loop6): Remounting filesystem read-only
[   99.330432][ T2875] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.937: invalid indirect mapped block 1024 (level 0)
[   99.351161][ T2875] EXT4-fs (loop6): Remounting filesystem read-only
[   99.363088][ T2875] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.937: bg 0: block 35: padding at end of block bitmap is not set
[   99.380798][ T2875] EXT4-fs (loop6): Remounting filesystem read-only
[   99.389628][ T2875] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6179: Corrupt filesystem
[   99.399797][ T2875] EXT4-fs (loop6): Remounting filesystem read-only
[   99.406528][ T2875] EXT4-fs (loop6): 1 truncate cleaned up
[   99.412390][ T2875] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   99.452755][ T2881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.940'.
[   99.612869][ T2889] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967286. macoff=82
[   99.747358][ T1748] EXT4-fs (loop6): unmounting filesystem.
[  101.328243][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  101.328260][   T28] audit: type=1400 audit(101.349:1754): avc:  denied  { remount } for  pid=2916 comm="syz.5.952" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  102.502839][ T2932] loop6: detected capacity change from 0 to 256
[  102.525687][ T2932] FAT-fs (loop6): Directory bread(block 64) failed
[  102.532448][ T2932] FAT-fs (loop6): Directory bread(block 65) failed
[  102.540144][ T2932] FAT-fs (loop6): Directory bread(block 66) failed
[  102.554381][ T2928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.955'.
[  102.564061][ T2932] FAT-fs (loop6): Directory bread(block 67) failed
[  102.586059][ T2932] FAT-fs (loop6): Directory bread(block 68) failed
[  102.592713][ T2932] FAT-fs (loop6): Directory bread(block 69) failed
[  102.602521][ T2933] bridge4: port 1(veth3) entered blocking state
[  102.609441][ T2932] FAT-fs (loop6): Directory bread(block 70) failed
[  102.616626][ T2933] bridge4: port 1(veth3) entered disabled state
[  102.631763][ T2932] FAT-fs (loop6): Directory bread(block 71) failed
[  102.643775][ T2932] FAT-fs (loop6): Directory bread(block 72) failed
[  102.650512][ T2932] FAT-fs (loop6): Directory bread(block 73) failed
[  102.661800][ T2933] device veth3 entered promiscuous mode
[  102.703213][ T2928] bridge4: port 2(veth0_to_bond) entered blocking state
[  102.741466][ T2928] bridge4: port 2(veth0_to_bond) entered disabled state
[  102.753672][ T2928] device veth0_to_bond entered promiscuous mode
[  102.767859][ T2943] netlink: 12 bytes leftover after parsing attributes in process `syz.5.961'.
[  102.809312][ T2943] selinux_netlink_send: 73 callbacks suppressed
[  102.809332][ T2943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2943 comm=syz.5.961
[  102.883970][ T2941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.959'.
[  103.082929][ T2956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2956 comm=syz.1.965
[  103.353551][ T2110] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  103.496153][ T2968] netlink: 8 bytes leftover after parsing attributes in process `syz.5.968'.
[  103.506079][ T2968] netlink: 8 bytes leftover after parsing attributes in process `syz.5.968'.
[  103.515164][ T2968] netlink: 8 bytes leftover after parsing attributes in process `syz.5.968'.
[  103.524215][ T2968] netlink: 8 bytes leftover after parsing attributes in process `syz.5.968'.
[  103.563571][ T2110] usb 7-1: Using ep0 maxpacket: 16
[  103.571051][ T2110] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  103.600810][ T2110] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  103.714122][ T2110] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  103.751230][ T2110] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.780634][ T2110] usb 7-1: Product: syz
[  103.798342][ T2110] usb 7-1: Manufacturer: syz
[  103.817094][ T2110] usb 7-1: SerialNumber: syz
[  104.053326][ T2939] loop6: detected capacity change from 0 to 256
[  104.113004][ T2110] usb 7-1: 0:2 : does not exist
[  104.130876][ T2110] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  104.182483][ T2110] usb 7-1: USB disconnect, device number 5
[  104.430458][   T28] audit: type=1400 audit(104.449:1755): avc:  denied  { getopt } for  pid=2979 comm="syz.1.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  104.594512][  T684] udevd[684]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  104.670489][   T28] audit: type=1400 audit(104.689:1756): avc:  denied  { ioctl } for  pid=2989 comm="syz.1.978" path="socket:[27729]" dev="sockfs" ino=27729 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  104.735665][   T28] audit: type=1400 audit(104.719:1757): avc:  denied  { lock } for  pid=2989 comm="syz.1.978" path="socket:[27729]" dev="sockfs" ino=27729 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  104.925163][   T28] audit: type=1400 audit(104.949:1758): avc:  denied  { execute } for  pid=2983 comm="syz.4.977" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  105.319409][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.327057][ T3007] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.335433][ T3007] device bridge_slave_0 entered promiscuous mode
[  105.345046][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.352827][ T3007] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.361449][ T3007] device bridge_slave_1 entered promiscuous mode
[  105.774476][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.781810][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.789399][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.796643][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.805050][  T304] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.812718][  T304] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.843806][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  105.852265][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  105.864274][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  105.873172][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  105.882507][  T304] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.889829][  T304] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.903721][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  105.912401][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  105.920979][  T304] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.928421][  T304] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.944423][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  105.953194][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  105.961677][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  105.970613][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  105.991977][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  106.000981][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  106.016133][ T3007] device veth0_vlan entered promiscuous mode
[  106.022540][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  106.031594][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  106.048752][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  106.056609][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  106.064953][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  106.073386][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  106.084144][ T3007] device veth1_macvtap entered promiscuous mode
[  106.101787][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  106.155272][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  106.164866][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  106.194661][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  106.218819][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  106.443162][ T3025] netlink: 24 bytes leftover after parsing attributes in process `syz.3.989'.
[  106.485513][ T3025] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3025 comm=syz.3.989
[  106.544709][ T3027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.990'.
[  106.577080][ T3027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.990'.
[  106.734396][ T3038] tipc: Failed to remove unknown binding: 66,0,0/4:274943126/274943128
[  106.749713][ T3038] tipc: Failed to remove unknown binding: 66,0,0/4:274943126/274943127
[  106.758884][ T3038] tipc: Failed to remove unknown binding: 66,0,0/4:274943126/274943128
[  106.767912][ T3038] tipc: Failed to remove unknown binding: 66,0,0/4:274943126/274943127
[  109.222961][ T3065] loop6: detected capacity change from 0 to 512
[  109.250654][ T3065] EXT4-fs: Ignoring removed nobh option
[  109.307358][ T3065] EXT4-fs: Ignoring removed mblk_io_submit option
[  109.365418][ T3065] EXT4-fs (loop6): orphan cleanup on readonly fs
[  109.371984][ T3065] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13
[  109.401244][ T3065] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.1003: attempt to clear invalid blocks 2 len 1
[  109.439426][ T3065] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1111: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  109.491879][ T3065] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1003: invalid indirect mapped block 1819239214 (level 0)
[  109.533752][ T3065] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1003: invalid indirect mapped block 1819239214 (level 1)
[  109.579022][ T3065] EXT4-fs (loop6): 1 truncate cleaned up
[  109.597853][ T3065] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  112.066683][ T1748] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  112.124011][ T1748] EXT4-fs error (device loop6): ext4_iget_extra_inode:4758: inode #15: comm syz-executor: corrupted in-inode xattr
[  112.137362][ T3093] __nla_validate_parse: 1 callbacks suppressed
[  112.137378][ T3093] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1014'.
[  112.170918][ T1748] EXT4-fs error (device loop6): ext4_iget_extra_inode:4758: inode #15: comm syz-executor: corrupted in-inode xattr
[  112.424077][ T3082] EXT4-fs (loop6): unmounting filesystem.
[  112.936828][   T10] device bridge_slave_1 left promiscuous mode
[  112.950274][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.998825][   T10] device bridge_slave_0 left promiscuous mode
[  113.029630][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.357294][   T28] audit: type=1400 audit(113.369:1759): avc:  denied  { rename } for  pid=3118 comm="syz.4.1025" name="#1c" dev="tmpfs" ino=979 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  113.439937][ T3122] loop4: detected capacity change from 0 to 512
[  113.508376][ T3122] EXT4-fs error (device loop4): __ext4_iget:5097: inode #11: block 1: comm syz.4.1026: invalid block
[  113.526936][ T3122] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1026: couldn't read orphan inode 11 (err -117)
[  113.564269][ T3122] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  113.573692][ T3114] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.580852][ T3114] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.588260][ T3122] EXT4-fs (loop4): unmounting filesystem.
[  113.605482][ T3114] device bridge_slave_0 entered promiscuous mode
[  113.632920][ T3132] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1028'.
[  113.879732][ T3114] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.889404][ T3114] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.906303][ T3114] device bridge_slave_1 entered promiscuous mode
[  114.026702][ T3114] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.033840][ T3114] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.041545][ T3114] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.048747][ T3114] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.095826][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  114.106687][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.140650][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.189301][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  114.248035][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.255492][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.466488][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  114.476016][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  114.486209][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.493504][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.363710][  T604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  115.364025][  T604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  115.364298][  T604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  115.364554][  T604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  115.415446][  T604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  115.415714][  T604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  115.437181][  T604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  115.437483][  T604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  115.437943][  T604] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  115.438205][  T604] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  115.439566][ T3114] device veth0_vlan entered promiscuous mode
[  115.475167][ T3152] capability: warning: `syz.3.1034' uses 32-bit capabilities (legacy support in use)
[  115.480943][ T3114] device veth1_macvtap entered promiscuous mode
[  115.497641][ T3156] futex_wake_op: syz.1.1037 tries to shift op by 36; fix this program
[  115.523127][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  115.528641][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  115.529007][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  115.529287][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  115.529564][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  115.529857][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  115.530438][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  115.540174][ T3148] loop4: detected capacity change from 0 to 1024
[  115.552874][ T3148] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  115.552914][ T3148] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  115.553457][ T3148] EXT4-fs error (device loop4): ext4_get_journal_inode:5743: inode #5: comm syz.4.1033: unexpected bad inode w/o EXT4_IGET_BAD
[  115.562248][ T3148] EXT4-fs (loop4): no journal found
[  115.562271][ T3148] EXT4-fs (loop4): can't get journal size
[  115.585083][ T3148] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  115.747471][ T3162] device batadv_slave_0 entered promiscuous mode
[  115.833696][  T285] EXT4-fs (loop4): unmounting filesystem.
[  115.953362][ T3174] loop4: detected capacity change from 0 to 512
[  116.321134][ T3174] EXT4-fs error (device loop4): ext4_do_update_inode:5274: inode #16: comm syz.4.1041: corrupted inode contents
[  116.360858][ T3174] EXT4-fs error (device loop4): ext4_dirty_inode:6139: inode #16: comm syz.4.1041: mark_inode_dirty error
[  116.406730][ T3174] EXT4-fs error (device loop4): ext4_do_update_inode:5274: inode #16: comm syz.4.1041: corrupted inode contents
[  116.453120][ T3174] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.1041: mark_inode_dirty error
[  116.493864][ T3174] EXT4-fs error (device loop4): ext4_do_update_inode:5274: inode #16: comm syz.4.1041: corrupted inode contents
[  116.521436][ T3174] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  116.542038][ T3174] EXT4-fs error (device loop4): ext4_do_update_inode:5274: inode #16: comm syz.4.1041: corrupted inode contents
[  116.569538][ T3174] EXT4-fs error (device loop4): ext4_truncate:4320: inode #16: comm syz.4.1041: mark_inode_dirty error
[  116.594304][ T3174] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  116.614705][ T3174] EXT4-fs (loop4): 1 truncate cleaned up
[  116.624571][ T3174] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  116.633972][  T304] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  116.653569][  T304] EXT4-fs error (device loop4): ext4_release_dquot:6858: comm kworker/u4:3: Failed to release dquot type 1
[  116.755043][   T28] audit: type=1400 audit(116.779:1760): avc:  denied  { bind } for  pid=3173 comm="syz.4.1041" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  116.783926][  T285] EXT4-fs (loop4): unmounting filesystem.
[  116.793781][   T10] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  116.810246][   T10] EXT4-fs error (device loop4): ext4_release_dquot:6858: comm kworker/u4:1: Failed to release dquot type 1
[  116.833563][   T28] audit: type=1400 audit(116.779:1761): avc:  denied  { node_bind } for  pid=3173 comm="syz.4.1041" src=52768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  117.505411][ T3201] loop7: detected capacity change from 0 to 40427
[  117.529039][ T3201] F2FS-fs (loop7): invalid crc value
[  117.547641][ T3201] F2FS-fs (loop7): Found nat_bits in checkpoint
[  117.602147][ T3201] F2FS-fs (loop7): Start checkpoint disabled!
[  117.614013][ T3201] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0
[  117.633574][ T3201] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  118.039197][ T3222] loop7: detected capacity change from 0 to 128
[  118.863836][ T3226] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  119.645131][ T3222] syz.7.1055: attempt to access beyond end of device
[  119.645131][ T3222] loop7: rw=2049, sector=138, nr_sectors = 112 limit=128
[  119.723710][ T3222] syz.7.1055: attempt to access beyond end of device
[  119.723710][ T3222] loop7: rw=2049, sector=138, nr_sectors = 8 limit=128
[  120.253127][   T28] audit: type=1400 audit(120.269:1762): avc:  denied  { ioctl } for  pid=3259 comm="syz.5.1068" path="/dev/input/event2" dev="devtmpfs" ino=275 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  120.439701][ T3262] loop5: detected capacity change from 0 to 8192
[  120.466459][ T3262] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  121.109723][ T3271] loop4: detected capacity change from 0 to 512
[  121.256149][ T3271] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  121.267775][ T3271] EXT4-fs (loop4): orphan cleanup on readonly fs
[  121.283564][ T3271] Quota error (device loop4): v2_read_file_info: Can't read info structure
[  121.292274][ T3271] EXT4-fs warning (device loop4): ext4_enable_quotas:7074: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix.
[  121.313612][ T3271] EXT4-fs (loop4): Cannot turn on quotas: error -5
[  121.329665][ T3271] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1072: bg 0: block 64: padding at end of block bitmap is not set
[  121.353865][ T3271] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6179: Corrupt filesystem
[  121.367548][ T3271] EXT4-fs (loop4): 1 truncate cleaned up
[  121.373796][ T3271] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  121.639785][  T285] EXT4-fs (loop4): unmounting filesystem.
[  121.758171][   T28] audit: type=1400 audit(121.779:1763): avc:  denied  { write } for  pid=3300 comm="syz.5.1081" name="ptype" dev="proc" ino=4026533106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  122.004960][   T28] audit: type=1326 audit(378.012:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3276 comm="syz.7.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729439c819 code=0x7fc00000
[  122.034231][ T3317] device syzkaller0 entered promiscuous mode
[  122.048654][ T3317] tipc: Started in network mode
[  122.055500][ T3317] tipc: Node identity ca06a233d641, cluster identity 4711
[  122.063048][ T3317] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.074342][ T3316] tipc: Resetting bearer <eth:syzkaller0>
[  122.094084][ T3316] tipc: Disabling bearer <eth:syzkaller0>
[  122.121203][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.129161][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.750145][ T3349] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  124.900531][ T3356] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  126.833573][ T3373] netlink: 'syz.7.1100': attribute type 13 has an invalid length.
[  126.841764][ T3373] gretap0: refused to change device tx_queue_len
[  126.848468][ T3373] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  128.058376][ T3380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1107'.
[  128.090769][ T3380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1107'.
[  128.110688][ T3378] loop5: detected capacity change from 0 to 512
[  128.146020][ T3378] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  128.182891][ T3378] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1105: iget: bad i_size value: 38620345925642
[  128.204185][ T3378] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1105: couldn't read orphan inode 15 (err -117)
[  128.223554][ T3378] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  128.225125][ T3390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1109'.
[  128.453615][ T3393] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  128.522640][ T3405] loop4: detected capacity change from 0 to 256
[  128.713842][ T3405] FAT-fs (loop4): Directory bread(block 64) failed
[  128.727301][ T3405] FAT-fs (loop4): Directory bread(block 65) failed
[  128.734317][ T3405] FAT-fs (loop4): Directory bread(block 66) failed
[  128.741218][ T3405] FAT-fs (loop4): Directory bread(block 67) failed
[  128.749399][ T3405] FAT-fs (loop4): Directory bread(block 68) failed
[  128.756275][ T3405] FAT-fs (loop4): Directory bread(block 69) failed
[  128.763015][ T3405] FAT-fs (loop4): Directory bread(block 70) failed
[  128.770029][ T3405] FAT-fs (loop4): Directory bread(block 71) failed
[  128.777412][ T3405] FAT-fs (loop4): Directory bread(block 72) failed
[  128.786193][ T3007] EXT4-fs (loop5): unmounting filesystem.
[  128.792266][ T3405] FAT-fs (loop4): Directory bread(block 73) failed
[  130.066547][ T3439] loop7: detected capacity change from 0 to 512
[  130.101532][ T3439] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  130.126157][   T28] audit: type=1400 audit(386.142:1765): avc:  denied  { append } for  pid=3438 comm="syz.7.1123" path="/17/file0/blkio.bfq.group_wait_time" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  130.235395][ T3114] EXT4-fs (loop7): unmounting filesystem.
[  130.300572][   T28] audit: type=1400 audit(386.172:1766): avc:  denied  { ioctl } for  pid=3438 comm="syz.7.1123" path="/17/file0/blkio.bfq.group_wait_time" dev="loop7" ino=18 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  130.869248][   T28] audit: type=1400 audit(386.882:1767): avc:  denied  { getopt } for  pid=3457 comm="syz.1.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  131.283441][ T3465] netlink: 'syz.4.1131': attribute type 4 has an invalid length.
[  131.312219][ T3465] netlink: 'syz.4.1131': attribute type 4 has an invalid length.
[  131.493685][    T6] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  131.673566][    T6] usb 8-1: Using ep0 maxpacket: 16
[  131.858067][ T3478] loop4: detected capacity change from 0 to 256
[  131.945096][ T3478] FAT-fs (loop4): Directory bread(block 64) failed
[  131.990505][ T3478] FAT-fs (loop4): Directory bread(block 65) failed
[  132.013588][ T3478] FAT-fs (loop4): Directory bread(block 66) failed
[  132.020727][ T3478] FAT-fs (loop4): Directory bread(block 67) failed
[  132.043620][ T3478] FAT-fs (loop4): Directory bread(block 68) failed
[  132.050548][ T3478] FAT-fs (loop4): Directory bread(block 69) failed
[  132.063596][ T3478] FAT-fs (loop4): Directory bread(block 70) failed
[  132.070214][ T3478] FAT-fs (loop4): Directory bread(block 71) failed
[  132.086877][ T3478] FAT-fs (loop4): Directory bread(block 72) failed
[  132.101176][ T3478] FAT-fs (loop4): Directory bread(block 73) failed
[  132.141929][    T6] usb 8-1: unable to get BOS descriptor or descriptor too short
[  132.157150][    T6] usb 8-1: unable to read config index 0 descriptor/start: -71
[  132.178910][    T6] usb 8-1: can't read configurations, error -71
[  132.404987][   T28] audit: type=1400 audit(388.422:1768): avc:  denied  { sys_module } for  pid=3483 comm="syz.4.1138" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  132.426599][ T3484] kernel read not supported for file /policy (pid: 3484 comm: syz.4.1138)
[  132.435550][   T28] audit: type=1400 audit(388.442:1769): avc:  denied  { module_load } for  pid=3483 comm="syz.4.1138" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1
[  133.160180][   T28] audit: type=1400 audit(389.172:1770): avc:  denied  { name_bind } for  pid=3497 comm="syz.7.1143" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[  133.542745][ T3507] overlayfs: missing 'workdir'
[  133.570617][ T3507] loop7: detected capacity change from 0 to 128
[  136.734535][   T28] audit: type=1400 audit(392.752:1771): avc:  denied  { listen } for  pid=3555 comm="syz.3.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  136.833885][ T3553] loop4: detected capacity change from 0 to 4096
[  136.862857][ T3553] EXT4-fs (loop4): Test dummy encryption mode enabled
[  136.886780][ T3553] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  136.915385][ T3553] System zones: 0-5
[  136.922618][ T3553] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  136.996991][  T285] EXT4-fs (loop4): unmounting filesystem.
[  137.059398][ T3569] loop4: detected capacity change from 0 to 512
[  137.119146][ T3569] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  137.266996][   T28] audit: type=1400 audit(393.282:1772): avc:  denied  { read } for  pid=3549 comm="syz.5.1162" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  137.288122][ T3569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1166'.
[  137.336836][  T285] EXT4-fs (loop4): unmounting filesystem.
[  138.392052][ T3595] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1174'.
[  138.533512][   T39] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  138.787910][   T39] usb 5-1: Using ep0 maxpacket: 16
[  138.794646][   T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.815956][   T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.826793][   T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  138.840189][   T39] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  138.849796][   T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.863754][   T39] usb 5-1: config 0 descriptor??
[  139.281985][   T39] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max
[  139.300057][   T39] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  139.377305][   T39] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  139.384850][   T39] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  139.392569][   T39] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  139.400202][   T39] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  139.407759][   T39] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  139.441915][   T39] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  139.458564][   T39] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  139.475352][   T39] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  139.505782][   T39] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  139.858271][   T39] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  139.865852][   T39] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  139.873152][   T39] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  139.888588][   T39] microsoft 0003:045E:07DA.0002: No inputs registered, leaving
[  139.907054][   T39] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  139.919290][   T39] microsoft 0003:045E:07DA.0002: no inputs found
[  139.926762][   T39] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway
[  139.942381][   T39] usb 5-1: USB disconnect, device number 8
[  139.964215][ T3628] fido_id[3628]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  140.033844][   T28] audit: type=1400 audit(396.052:1773): avc:  denied  { unmount } for  pid=3114 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  140.057078][ T3630] loop5: detected capacity change from 0 to 512
[  140.063879][ T3630] EXT4-fs: Ignoring removed bh option
[  140.071040][ T3630] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  140.282937][ T3630] EXT4-fs error (device loop5): ext4_iget_extra_inode:4758: inode #15: comm syz.5.1186: corrupted in-inode xattr
[  140.296652][ T3630] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1186: couldn't read orphan inode 15 (err -117)
[  140.310277][ T3630] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  140.612767][ T3637] netlink: 'syz.1.1188': attribute type 13 has an invalid length.
[  141.670613][ T3643] netlink: 'syz.3.1191': attribute type 3 has an invalid length.
[  141.709043][ T3643] netlink: 'syz.3.1191': attribute type 3 has an invalid length.
[  141.728088][ T3645] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1192'.
[  142.568891][ T3007] EXT4-fs (loop5): unmounting filesystem.
[  143.162335][   T28] audit: type=1400 audit(399.172:1774): avc:  denied  { ioctl } for  pid=3671 comm="syz.5.1200" path="socket:[30001]" dev="sockfs" ino=30001 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  143.581837][   T28] audit: type=1400 audit(399.592:1775): avc:  denied  { create } for  pid=3653 comm="syz.1.1195" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  143.643530][   T28] audit: type=1400 audit(399.592:1776): avc:  denied  { mounton } for  pid=3653 comm="syz.1.1195" path="/270/file0" dev="tmpfs" ino=1459 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  144.137395][   T28] audit: type=1400 audit(400.142:1777): avc:  denied  { unlink } for  pid=282 comm="syz-executor" name="file0" dev="tmpfs" ino=1459 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  144.191105][ T3680] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1203'.
[  144.225618][ T3680] device ip6gre1 entered promiscuous mode
[  144.241372][ T3682] loop4: detected capacity change from 0 to 2048
[  144.263718][ T3680] netlink: 'syz.1.1203': attribute type 6 has an invalid length.
[  144.283515][ T3680] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1203'.
[  144.314277][ T3682]  loop4: p1 < > p3 p4 < >
[  144.322194][ T3682] loop4: p3 start 4284289 is beyond EOD, truncated
[  144.547953][ T3672] loop5: detected capacity change from 0 to 131072
[  144.571755][ T3672] F2FS-fs (loop5): Wrong NAT boundary, start(2560) end(3584) blocks(0)
[  144.588764][ T3672] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  144.613571][ T3672] F2FS-fs (loop5): invalid crc value
[  144.642192][ T3672] F2FS-fs (loop5): Found nat_bits in checkpoint
[  144.742718][ T3672] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  144.766501][ T3672] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  145.188645][ T3714] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1208'.
[  145.266350][ T3718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1212'.
[  145.286817][ T3718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1212'.
[  145.312707][ T3718] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1212'.
[  145.327962][ T3718] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1212'.
[  145.492808][ T3734] loop5: detected capacity change from 0 to 1024
[  145.503950][ T3734] EXT4-fs: Ignoring removed oldalloc option
[  145.511321][ T3734] EXT4-fs: Ignoring removed bh option
[  145.529664][ T3734] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  145.671550][ T3734] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  146.568387][ T3734] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3850: comm syz.5.1218: Allocating blocks 497-513 which overlap fs metadata
[  146.602389][ T3743] loop4: detected capacity change from 0 to 8192
[  146.609328][ T3734] EXT4-fs (loop5): pa ffff8881179fb348: logic 256, phys. 385, len 8
[  146.617555][ T3734] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4890: group 0, free 0, pa_free 1
[  146.657505][ T3754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1223'.
[  146.687724][   T28] audit: type=1400 audit(402.702:1778): avc:  denied  { append } for  pid=3733 comm="syz.5.1218" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  146.738213][ T3757] EXT4-fs error (device loop5): mb_free_blocks:1824: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt.
[  146.790905][   T28] audit: type=1400 audit(402.802:1779): avc:  denied  { map } for  pid=3733 comm="syz.5.1218" path="/45/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  146.817889][   T28] audit: type=1400 audit(402.832:1780): avc:  denied  { execute } for  pid=3733 comm="syz.5.1218" path="/45/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  146.895987][ T3007] EXT4-fs (loop5): unmounting filesystem.
[  148.066097][   T28] audit: type=1400 audit(404.082:1781): avc:  denied  { mount } for  pid=3803 comm="syz.3.1239" name="/" dev="configfs" ino=14474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  148.093072][   T28] audit: type=1400 audit(404.092:1782): avc:  denied  { search } for  pid=3803 comm="syz.3.1239" name="/" dev="configfs" ino=14474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  148.177748][   T28] audit: type=1400 audit(404.132:1783): avc:  denied  { read } for  pid=3803 comm="syz.3.1239" name="/" dev="configfs" ino=14474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  148.202625][   T28] audit: type=1400 audit(404.132:1784): avc:  denied  { open } for  pid=3803 comm="syz.3.1239" path="/" dev="configfs" ino=14474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  148.237470][   T28] audit: type=1400 audit(404.192:1785): avc:  denied  { setattr } for  pid=3809 comm="syz.1.1241" name="/" dev="configfs" ino=14474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  148.933514][ T2113] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  149.113526][ T2113] usb 5-1: Using ep0 maxpacket: 16
[  149.120281][ T2113] usb 5-1: unable to get BOS descriptor or descriptor too short
[  149.173295][ T2113] usb 5-1: config 7 has an invalid interface number: 17 but max is 0
[  149.193066][ T2113] usb 5-1: config 7 has no interface number 0
[  149.223259][ T2113] usb 5-1: config 7 interface 17 has no altsetting 0
[  149.231913][ T2113] usb 5-1: New USB device found, idVendor=046d, idProduct=c11f, bcdDevice=57.ca
[  149.261642][ T2113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.321705][ T2113] usb 5-1: Product: syz
[  149.348089][ T2113] usb 5-1: Manufacturer: syz
[  149.353964][ T2113] usb 5-1: SerialNumber: syz
[  149.886390][ T3840] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1250'.
[  151.086512][  T319] syzkaller0: tun_net_xmit 76
[  151.091706][  T319] syzkaller0: tun_net_xmit 48
[  151.113782][  T319] syzkaller0: tun_net_xmit 76
[  151.243913][   T28] audit: type=1400 audit(407.262:1786): avc:  denied  { relabelfrom } for  pid=3862 comm="syz.7.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  151.251361][ T3863] syzkaller0: create flow: hash 1837588617 index 1
[  151.274112][  T319] syzkaller0: tun_net_xmit 76
[  151.295553][   T28] audit: type=1400 audit(407.262:1787): avc:  denied  { relabelto } for  pid=3862 comm="syz.7.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  151.335697][ T3863] syzkaller0: delete flow: hash 1837588617 index 1
[  151.417580][ T2113] usb 5-1: unsupported MDLM descriptors
[  151.448053][ T2113] usb 5-1: USB disconnect, device number 9
[  152.188539][   T28] audit: type=1326 audit(408.202:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3881 comm="syz.5.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b16d9c819 code=0x7ffc0000
[  152.292113][   T28] audit: type=1326 audit(408.212:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3881 comm="syz.5.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f5b16d9c819 code=0x7ffc0000
[  152.315212][   T28] audit: type=1326 audit(408.212:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3881 comm="syz.5.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b16d9c819 code=0x7ffc0000
[  152.338406][   T28] audit: type=1326 audit(408.212:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3881 comm="syz.5.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5b16d9c819 code=0x7ffc0000
[  152.393649][   T28] audit: type=1326 audit(408.212:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3881 comm="syz.5.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b16d9c819 code=0x7ffc0000
[  153.857784][   T28] kauditd_printk_skb: 5344 callbacks suppressed
[  153.857800][   T28] audit: type=1400 audit(409.872:7137): avc:  denied  { write } for  pid=3914 comm="syz.7.1272" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  154.471615][ T3913] tipc: Enabled bearer <eth:xfrm0>, priority 10
[  155.078968][ T3948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1282'.
[  155.240056][ T3948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1282'.
[  155.335287][ T3948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1282'.
[  155.405067][ T3948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1282'.
[  155.431874][ T3948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1282'.
[  155.446429][ T3948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1282'.
[  155.462681][ T3948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1282'.
[  155.472316][ T3948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1282'.
[  155.482340][ T3948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1282'.
[  155.516281][ T3948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1282'.
[  155.963869][ T3971] xt_CT: No such helper "pptp"
[  156.253550][    T6] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  156.448325][    T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.472647][    T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.490106][    T6] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  156.513018][    T6] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.531807][    T6] usb 8-1: config 0 descriptor??
[  156.978478][    T6] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  156.998843][    T6] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0
[  157.183307][ T3967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.255034][ T3967] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.463260][    T6] cp2112 0003:10C4:EA90.0003: error requesting version
[  157.488200][    T6] cp2112: probe of 0003:10C4:EA90.0003 failed with error -32
[  157.776556][   T28] audit: type=1400 audit(413.792:7138): avc:  denied  { nlmsg_read } for  pid=4017 comm="syz.5.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  158.482337][   T28] audit: type=1400 audit(414.492:7139): avc:  denied  { read } for  pid=4023 comm="syz.4.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  158.523264][ T4029] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  158.759483][ T2114] usb 8-1: USB disconnect, device number 4
[  158.856180][  T999] kernel read not supported for file /ppp (pid: 999 comm: kworker/1:4)
[  158.950602][   T28] audit: type=1400 audit(414.962:7140): avc:  denied  { read write } for  pid=4047 comm="syz.5.1315" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  159.030867][   T28] audit: type=1400 audit(414.962:7141): avc:  denied  { open } for  pid=4047 comm="syz.5.1315" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  160.230840][ T4068] loop7: detected capacity change from 0 to 40427
[  160.338156][ T4068] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504)
[  160.350986][ T4068] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  160.388976][ T4068] F2FS-fs (loop7): invalid crc value
[  160.398980][ T4068] F2FS-fs (loop7): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node
[  160.439737][ T4068] F2FS-fs (loop7): Found nat_bits in checkpoint
[  160.498784][ T4068] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  160.505977][ T4068] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  160.684092][   T28] audit: type=1400 audit(416.702:7142): avc:  denied  { map } for  pid=4067 comm="syz.7.1322" path="/54/file2/cgroup.controllers" dev="loop7" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  160.746635][ T4083] device veth1_macvtap left promiscuous mode
[  160.765572][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  160.784148][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  160.801937][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  160.830649][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  160.849868][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  160.868959][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  160.887770][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  160.907926][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  160.933840][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  160.947328][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  160.963884][   T28] audit: type=1400 audit(416.982:7143): avc:  denied  { execute } for  pid=4067 comm="syz.7.1322" path="/54/file2/cgroup.controllers" dev="loop7" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  160.977209][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  161.013324][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  161.031860][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  161.048827][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  161.067204][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  161.084407][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  161.101794][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  161.120170][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  161.137413][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  161.149611][ T3114] syz-executor: attempt to access beyond end of device
[  161.149611][ T3114] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  161.164217][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  161.172506][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  161.180831][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  161.189208][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  161.204015][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  161.222065][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  161.253848][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  161.325180][   T28] audit: type=1400 audit(417.342:7144): avc:  denied  { mounton } for  pid=4098 comm="syz.5.1331" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  161.364753][   T28] audit: type=1400 audit(417.342:7145): avc:  denied  { mount } for  pid=4098 comm="syz.5.1331" name="/" dev="pstore" ino=11738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[  161.583629][  T999] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  161.785902][  T999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.837571][  T999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.858470][  T999] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  161.877361][  T999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.897984][  T999] usb 5-1: config 0 descriptor??
[  162.346748][  T999] usbhid 5-1:0.0: can't add hid device: -71
[  162.380698][  T999] usbhid: probe of 5-1:0.0 failed with error -71
[  162.392519][ T4108] loop7: detected capacity change from 0 to 1024
[  162.547269][  T999] usb 5-1: USB disconnect, device number 10
[  162.601945][ T4108] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  162.611997][ T4108] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  162.622421][ T4108] EXT4-fs error (device loop7): ext4_get_journal_inode:5743: inode #5: comm syz.7.1332: unexpected bad inode w/o EXT4_IGET_BAD
[  162.635884][ T4108] EXT4-fs (loop7): no journal found
[  162.641180][ T4108] EXT4-fs (loop7): can't get journal size
[  162.648347][ T4108] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  162.670201][ T3114] EXT4-fs (loop7): unmounting filesystem.
[  162.751195][ T4120] __nla_validate_parse: 94 callbacks suppressed
[  162.751245][ T4120] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1337'.
[  162.785034][ T4121] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1346'.
[  163.064210][ T4123] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1338'.
[  165.055631][ T4134] loop4: detected capacity change from 0 to 40427
[  165.091309][ T4134] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  165.106401][ T4134] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  165.125522][ T4134] F2FS-fs (loop4): invalid crc value
[  165.131544][ T4134] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node
[  165.185189][ T4134] F2FS-fs (loop4): Found nat_bits in checkpoint
[  165.244345][ T4134] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  165.251671][ T4134] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  165.945887][  T285] syz-executor: attempt to access beyond end of device
[  165.945887][  T285] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  166.303522][   T28] audit: type=1400 audit(422.312:7146): avc:  denied  { append } for  pid=4157 comm="syz.7.1349" name="001" dev="devtmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  167.711883][ T4190] xt_CT: No such helper "pptp"
[  168.020001][ T4195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1357'.
[  168.181442][ T4189] loop7: detected capacity change from 0 to 40427
[  168.189133][ T4189] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  168.197444][ T4189] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  168.207571][ T4189] F2FS-fs (loop7): invalid crc value
[  168.224426][ T4189] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[  168.254000][ T4189] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  168.735029][ T4189] F2FS-fs (loop7): Try to recover 1th superblock, ret: -30
[  168.742553][ T4189] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  169.252978][ T4189] F2FS-fs (loop7): Try to recover all the superblocks, ret: 0
[  169.676782][ T4189] F2FS-fs (loop7): Failed to start F2FS issue_checkpoint_thread (-4)
[  171.407706][ T4261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1377'.
[  171.485701][ T4262] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  173.327665][ T4311] loop7: detected capacity change from 0 to 16
[  173.357324][ T4311] erofs: (device loop7): mounted with root inode @ nid 36.
[  173.386061][ T4311] erofs: (device loop7): z_erofs_readahead: readahead error at page 2 @ nid 89
[  173.417983][ T4311] erofs: (device loop7): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[  173.454717][ T4311] erofs: (device loop7): z_erofs_readahead: readahead error at page 0 @ nid 89
[  173.481179][ T4311] syz.7.1394: attempt to access beyond end of device
[  173.481179][ T4311] loop7: rw=524288, sector=524296, nr_sectors = 8 limit=16
[  173.524116][ T4311] syz.7.1394: attempt to access beyond end of device
[  173.524116][ T4311] loop7: rw=0, sector=524296, nr_sectors = 8 limit=16
[  173.567589][ T4311] syz.7.1394: attempt to access beyond end of device
[  173.567589][ T4311] loop7: rw=0, sector=524296, nr_sectors = 8 limit=16
[  173.612497][ T4311] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3588]
[  173.646876][ T4311] erofs: (device loop7): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[  173.673581][ T4311] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[  173.695349][ T4311] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117]
[  173.706052][ T4317] erofs: (device loop7): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[  173.733539][ T4317] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[  173.763703][ T4317] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117]
[  173.764196][ T4311] erofs: (device loop7): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[  173.803510][ T4311] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[  173.833632][ T4311] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117]
[  173.863615][ T4311] erofs: (device loop7): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[  173.873166][ T4311] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[  173.913566][ T4311] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117]
[  173.922096][ T4311] erofs: (device loop7): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[  173.961818][ T4311] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[  173.983801][ T4311] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117]
[  173.992345][ T4317] erofs: (device loop7): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[  174.005009][ T4317] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[  174.017617][ T4317] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117]
[  174.027670][ T4317] erofs: (device loop7): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[  174.037642][ T4323] syz.7.1394: attempt to access beyond end of device
[  174.037642][ T4323] loop7: rw=0, sector=524296, nr_sectors = 8 limit=16
[  174.051126][ T4317] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3588]
[  174.062322][ T4323] syz.7.1394: attempt to access beyond end of device
[  174.062322][ T4323] loop7: rw=0, sector=524296, nr_sectors = 8 limit=16
[  174.076867][ T4317] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117]
[  174.087876][ T4311] erofs: (device loop7): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[  174.097615][ T4323] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3588]
[  174.108860][ T4311] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117]
[  174.138358][ T4317] erofs: (device loop7): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[  174.196819][ T4327] loop4: detected capacity change from 0 to 2048
[  174.204103][ T4317] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[  174.220367][ T4317] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117]
[  174.220657][ T4311] erofs: (device loop7): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[  174.551670][ T4327] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  174.560139][ T4311] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[  174.560193][ T4311] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117]
[  174.560805][ T4323] syz.7.1394: attempt to access beyond end of device
[  174.560805][ T4323] loop7: rw=0, sector=524296, nr_sectors = 8 limit=16
[  174.592446][ T4311] erofs: (device loop7): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[  174.609421][ T4311] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117]
[  174.667237][   T28] audit: type=1400 audit(430.682:7147): avc:  denied  { ioctl } for  pid=4326 comm="syz.4.1397" path="/245/file0/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  174.708013][ T4323] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3588]
[  174.725137][  T285] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /245/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0
[  174.731856][   T28] audit: type=1400 audit(430.722:7148): avc:  denied  { setattr } for  pid=4326 comm="syz.4.1397" name="11000000000000000000000000000000" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  174.771453][ T4332] erofs: (device loop7): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[  174.781388][ T4317] syz.7.1394: attempt to access beyond end of device
[  174.781388][ T4317] loop7: rw=0, sector=524296, nr_sectors = 8 limit=16
[  174.799213][ T4332] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3588]
[  174.811008][  T285] EXT4-fs (loop4): unmounting filesystem.
[  174.890490][   T28] audit: type=1400 audit(430.802:7149): avc:  denied  { unlink } for  pid=285 comm="syz-executor" name="11000000000000000000000000000000" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  174.948152][ T4311] erofs: (device loop7): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[  174.957853][ T4332] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117]
[  174.966740][ T4311] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[  174.982803][ T4311] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117]
[  174.994241][ T4317] syz.7.1394: attempt to access beyond end of device
[  174.994241][ T4317] loop7: rw=0, sector=524296, nr_sectors = 8 limit=16
[  175.001960][ T4332] erofs: (device loop7): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[  175.139394][ T4317] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3588]
[  175.271072][ T4332] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117]
[  175.342007][ T4323] syz.7.1394: attempt to access beyond end of device
[  175.342007][ T4323] loop7: rw=0, sector=524296, nr_sectors = 8 limit=16
[  175.359646][ T4323] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3588]
[  175.376156][ T4332] erofs: (device loop7): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[  175.393205][ T4332] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[  175.413653][ T4317] syz.7.1394: attempt to access beyond end of device
[  175.413653][ T4317] loop7: rw=0, sector=524296, nr_sectors = 8 limit=16
[  175.417379][ T4332] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117]
[  175.441988][ T4317] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3588]
[  175.470697][ T4332] erofs: (device loop7): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[  175.484684][ T4332] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3588]
[  175.502817][ T4332] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117]
[  175.887544][ T4360] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4360 comm=syz.5.1405
[  175.951756][   T28] audit: type=1400 audit(431.962:7150): avc:  denied  { create } for  pid=4362 comm="syz.3.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  176.002896][ T4365] loop5: detected capacity change from 0 to 256
[  176.025535][ T4365] FAT-fs (loop5): Directory bread(block 64) failed
[  176.039140][ T4365] FAT-fs (loop5): Directory bread(block 65) failed
[  176.046219][ T4365] FAT-fs (loop5): Directory bread(block 66) failed
[  176.053071][ T4365] FAT-fs (loop5): Directory bread(block 67) failed
[  176.060065][ T4365] FAT-fs (loop5): Directory bread(block 68) failed
[  176.066814][ T4365] FAT-fs (loop5): Directory bread(block 69) failed
[  176.118768][ T4365] FAT-fs (loop5): Directory bread(block 70) failed
[  176.127487][ T4365] FAT-fs (loop5): Directory bread(block 71) failed
[  176.215000][ T4365] FAT-fs (loop5): Directory bread(block 72) failed
[  176.237338][ T4365] FAT-fs (loop5): Directory bread(block 73) failed
[  176.680931][   T28] audit: type=1400 audit(432.692:7151): avc:  denied  { watch } for  pid=4374 comm="syz.5.1410" path="/87/file0" dev="tmpfs" ino=479 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  177.155126][ T4386] overlayfs: failed to clone upperpath
[  182.867158][ T4491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1443'.
[  182.887472][ T4491] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  185.983338][ T4538] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1454'.
[  186.024151][   T28] audit: type=1400 audit(442.042:7152): avc:  denied  { ioctl } for  pid=4537 comm="syz.4.1454" path="socket:[32967]" dev="sockfs" ino=32967 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  186.122090][ T4542] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1457'.
[  186.131999][   T28] audit: type=1400 audit(442.042:7153): avc:  denied  { execute } for  pid=4508 comm="syz.3.1448" name="file0" dev="tmpfs" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  186.205465][ T4546] netlink: 'syz.1.1458': attribute type 3 has an invalid length.
[  186.243629][ T4546] netlink: 'syz.1.1458': attribute type 3 has an invalid length.
[  186.818659][ T4569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1463'.
[  186.859742][ T4569] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  186.879475][ T4571] loop5: detected capacity change from 0 to 512
[  186.939934][ T4571] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1464: inode has both inline data and extents flags
[  186.974061][ T4571] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1464: couldn't read orphan inode 15 (err -117)
[  187.013023][ T4571] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  187.107271][ T3007] EXT4-fs (loop5): unmounting filesystem.
[  187.160868][   T28] audit: type=1400 audit(443.172:7154): avc:  denied  { ioctl } for  pid=4576 comm="syz.5.1466" path="socket:[33019]" dev="sockfs" ino=33019 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  187.186160][ T4577] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1466'.
[  187.521481][ T4587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1470'.
[  187.551558][   T28] audit: type=1400 audit(443.562:7155): avc:  denied  { mounton } for  pid=4588 comm="syz.3.1473" path="/371/file0" dev="tmpfs" ino=1999 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  187.573846][   T28] audit: type=1400 audit(443.582:7156): avc:  denied  { ioctl } for  pid=4591 comm="syz.1.1474" path="socket:[32670]" dev="sockfs" ino=32670 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  188.157401][ T4601] xt_hashlimit: size too large, truncated to 1048576
[  192.316229][ T4646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1486'.
[  192.359218][ T4646] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  192.560502][ T4653] kvm [4652]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0xc1) = 0xd105af
[  192.569372][ T4653] kvm [4652]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0xc2) = 0xd105af
[  192.581328][ T4653] kvm [4652]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x11e) = 0xd105af
[  192.593401][ T4653] kvm [4652]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x186) = 0xd105af
[  192.602412][ T4653] kvm [4652]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x187) = 0xd105af
[  192.614538][ T4653] kvm [4652]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x1d9) = 0xd105af
[  194.413237][  T604] Bluetooth: hci0: Frame reassembly failed (-84)
[  195.012810][ T4693] loop5: detected capacity change from 0 to 256
[  196.169611][ T4719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1512'.
[  196.438445][ T4727] loop7: detected capacity change from 0 to 512
[  196.483728][ T4673] Bluetooth: hci0: command 0x1003 tx timeout
[  196.487388][ T1803] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  196.496090][ T4672] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  196.504506][ T4727] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #12: comm syz.7.1514: missing EA_INODE flag
[  196.529916][ T4727] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.1514: error while reading EA inode 12 err=-117
[  196.570237][ T4727] EXT4-fs (loop7): 1 orphan inode deleted
[  196.586742][ T4727] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  197.455709][ T3114] EXT4-fs (loop7): unmounting filesystem.
[  197.830283][   T28] audit: type=1400 audit(453.842:7157): avc:  denied  { getopt } for  pid=4740 comm="syz.7.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  198.561464][ T4760] loop7: detected capacity change from 0 to 1024
[  198.567991][    C1] ==================================================================
[  198.568007][    C1] BUG: KASAN: use-after-free in __run_timers+0x340/0x9f0
[  198.568055][    C1] Write of size 8 at addr ffff8881096a4a00 by task syz.7.1520/4760
[  198.568072][    C1] 
[  198.568089][    C1] CPU: 1 PID: 4760 Comm: syz.7.1520 Not tainted syzkaller #0
[  198.568109][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  198.568124][    C1] Call Trace:
[  198.568132][    C1]  <IRQ>
[  198.568139][    C1]  __dump_stack+0x21/0x24
[  198.568169][    C1]  dump_stack_lvl+0x110/0x170
[  198.568196][    C1]  ? __cfi_dump_stack_lvl+0x8/0x8
[  198.568225][    C1]  ? __run_timers+0x340/0x9f0
[  198.568250][    C1]  print_address_description+0x71/0x200
[  198.568278][    C1]  print_report+0x4a/0x60
[  198.568302][    C1]  kasan_report+0x122/0x150
[  198.568327][    C1]  ? __run_timers+0x340/0x9f0
[  198.568353][    C1]  __asan_report_store8_noabort+0x17/0x20
[  198.568373][    C1]  __run_timers+0x340/0x9f0
[  198.568399][    C1]  ? sched_clock+0x9/0x10
[  198.568424][    C1]  ? sched_clock_cpu+0x6e/0x260
[  198.568445][    C1]  ? calc_index+0x200/0x200
[  198.568477][    C1]  ? kvm_sched_clock_read+0x18/0x40
[  198.568507][    C1]  run_timer_softirq+0x6a/0xf0
[  198.568530][    C1]  handle_softirqs+0x1d7/0x600
[  198.568552][    C1]  ? irqtime_account_irq+0xc4/0x240
[  198.568580][    C1]  __irq_exit_rcu+0x52/0xf0
[  198.568599][    C1]  irq_exit_rcu+0x9/0x10
[  198.568617][    C1]  sysvec_apic_timer_interrupt+0xa9/0xc0
[  198.568641][    C1]  </IRQ>
[  198.568647][    C1]  <TASK>
[  198.568654][    C1]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  198.568679][    C1] RIP: 0010:console_emit_next_record+0x8a1/0xab0
[  198.568709][    C1] Code: de 48 81 e6 00 02 00 00 31 ff e8 aa 87 19 00 48 81 e3 00 02 00 00 75 07 e8 dc 82 19 00 eb 06 e8 d5 82 19 00 fb 0f b6 5c 24 17 <66> 43 c7 44 25 20 f8 f8 43 c6 44 25 22 f8 4f 89 74 25 10 66 43 c7
[  198.568728][    C1] RSP: 0000:ffffc90010346ee0 EFLAGS: 00000287
[  198.568746][    C1] RAX: ffffffff8157ec2b RBX: 0000000000000001 RCX: 0000000000080000
[  198.568761][    C1] RDX: ffffc90000dd9000 RSI: 000000000000de8a RDI: 000000000000de8b
[  198.568775][    C1] RBP: ffffc900103470d0 R08: 0000000000000003 R09: 0000000000000004
[  198.568789][    C1] R10: dffffc0000000000 R11: fffff52002068dcc R12: dffffc0000000000
[  198.568805][    C1] R13: 1ffff92002068de8 R14: f8f8f8f8f8f8f8f8 R15: ffffc9001034711f
[  198.568823][    C1]  ? console_emit_next_record+0x89b/0xab0
[  198.568854][    C1]  ? info_print_prefix+0x360/0x360
[  198.568881][    C1]  ? vprintk_store+0xa73/0xe00
[  198.568905][    C1]  ? _raw_spin_lock_irqsave+0xc2/0x130
[  198.568934][    C1]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[  198.568964][    C1]  ? __cfi_vprintk_store+0x10/0x10
[  198.568987][    C1]  console_unlock+0x246/0x560
[  198.569009][    C1]  ? down_trylock+0x52/0xb0
[  198.569031][    C1]  ? __cfi_console_unlock+0x10/0x10
[  198.569053][    C1]  ? __kasan_check_read+0x11/0x20
[  198.569071][    C1]  ? preempt_schedule_irq+0xca/0x120
[  198.569090][    C1]  ? __cfi_preempt_schedule_irq+0x10/0x10
[  198.569109][    C1]  ? rwsem_write_trylock+0x136/0x300
[  198.569139][    C1]  vprintk_emit+0x14d/0x420
[  198.569162][    C1]  ? __cfi_vprintk_emit+0x10/0x10
[  198.569184][    C1]  ? __kasan_check_write+0x14/0x20
[  198.569203][    C1]  ? _raw_spin_trylock+0xb7/0x150
[  198.569232][    C1]  vprintk_default+0x26/0x30
[  198.569254][    C1]  vprintk+0x7a/0x80
[  198.569277][    C1]  _printk+0xda/0x128
[  198.569301][    C1]  ? __cfi__printk+0x8/0x8
[  198.569324][    C1]  ? memcpy+0x56/0x70
[  198.569341][    C1]  set_capacity_and_notify+0x335/0x360
[  198.569362][    C1]  ? __cfi_set_capacity_and_notify+0x10/0x10
[  198.569385][    C1]  ? __kasan_check_write+0x14/0x20
[  198.569407][    C1]  loop_set_size+0x48/0xa0
[  198.569430][    C1]  loop_configure+0x1033/0x1530
[  198.569464][    C1]  lo_ioctl+0x227/0x1fb0
[  198.569487][    C1]  ? _raw_spin_unlock+0x4c/0x70
[  198.569517][    C1]  ? find_inode_fast+0x3c3/0x3f0
[  198.569543][    C1]  ? __cfi_lo_ioctl+0x10/0x10
[  198.569565][    C1]  ? iget_locked+0x8b0/0x8b0
[  198.569597][    C1]  ? 0xffffffffa00041c0
[  198.569618][    C1]  ? is_bpf_text_address+0x177/0x190
[  198.569648][    C1]  ? kernel_text_address+0xa0/0xd0
[  198.569676][    C1]  ? __kernel_text_address+0xd/0x30
[  198.569702][    C1]  ? unwind_get_return_address+0x4d/0x90
[  198.569727][    C1]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  198.569755][    C1]  ? arch_stack_walk+0xfc/0x150
[  198.569787][    C1]  ? avc_has_extended_perms+0x86b/0xed0
[  198.569818][    C1]  ? memcpy+0x56/0x70
[  198.569839][    C1]  ? avc_has_extended_perms+0x9d7/0xed0
[  198.569871][    C1]  ? __cfi_avc_has_extended_perms+0x10/0x10
[  198.569901][    C1]  ? __perf_event_task_sched_in+0x1a0/0x1f0
[  198.569926][    C1]  ? __asan_set_shadow_00+0xe/0x10
[  198.569956][    C1]  ? do_vfs_ioctl+0x1b6c/0x1cd0
[  198.569978][    C1]  ? __ia32_compat_sys_ioctl+0x860/0x860
[  198.570002][    C1]  ? _raw_spin_unlock+0x4c/0x70
[  198.570031][    C1]  ? finish_task_switch+0x16b/0x7b0
[  198.570062][    C1]  ? blkdev_common_ioctl+0x685/0x2010
[  198.570084][    C1]  ? ioctl_has_perm+0x1b8/0x4f0
[  198.570110][    C1]  ? blkdev_bszset+0x1f0/0x1f0
[  198.570130][    C1]  ? ioctl_has_perm+0x3a6/0x4f0
[  198.570156][    C1]  ? _raw_spin_unlock_irqrestore+0x5a/0x80
[  198.570196][    C1]  ? __cfi_lo_ioctl+0x10/0x10
[  198.570217][    C1]  blkdev_ioctl+0x367/0x720
[  198.570238][    C1]  ? __cfi_blkdev_ioctl+0x10/0x10
[  198.570260][    C1]  ? security_file_ioctl+0x95/0xc0
[  198.570286][    C1]  ? __cfi_blkdev_ioctl+0x10/0x10
[  198.570306][    C1]  __se_sys_ioctl+0x12f/0x1b0
[  198.570329][    C1]  __x64_sys_ioctl+0x7b/0x90
[  198.570350][    C1]  x64_sys_call+0x58b/0x9a0
[  198.570375][    C1]  do_syscall_64+0x4c/0xa0
[  198.570404][    C1]  ? clear_bhb_loop+0x30/0x80
[  198.570428][    C1]  ? clear_bhb_loop+0x30/0x80
[  198.570459][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  198.570482][    C1] RIP: 0033:0x7f729439c4ab
[  198.570499][    C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  198.570518][    C1] RSP: 002b:00007f72951fadb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  198.570541][    C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f729439c4ab
[  198.570558][    C1] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  198.570572][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  198.570585][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  198.570598][    C1] R13: 00007f72951faee0 R14: 00007f72951faea0 R15: 00007f728a9f8000
[  198.570618][    C1]  </TASK>
[  198.570625][    C1] 
[  198.570629][    C1] Allocated by task 4672:
[  198.570640][    C1]  kasan_set_track+0x4b/0x70
[  198.570663][    C1]  kasan_save_alloc_info+0x25/0x30
[  198.570691][    C1]  __kasan_kmalloc+0x95/0xb0
[  198.570714][    C1]  __kmalloc+0xb1/0x1e0
[  198.570730][    C1]  hci_alloc_dev_priv+0x27/0x1bd0
[  198.570749][    C1]  hci_uart_tty_ioctl+0x3c8/0xa20
[  198.570775][    C1]  tty_ioctl+0x8ef/0xc60
[  198.570799][    C1]  __se_sys_ioctl+0x12f/0x1b0
[  198.570818][    C1]  __x64_sys_ioctl+0x7b/0x90
[  198.570837][    C1]  x64_sys_call+0x58b/0x9a0
[  198.570859][    C1]  do_syscall_64+0x4c/0xa0
[  198.570887][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  198.570909][    C1] 
[  198.570913][    C1] Freed by task 4675:
[  198.570922][    C1]  kasan_set_track+0x4b/0x70
[  198.570944][    C1]  kasan_save_free_info+0x31/0x50
[  198.570974][    C1]  ____kasan_slab_free+0x132/0x180
[  198.570998][    C1]  __kasan_slab_free+0x11/0x20
[  198.571022][    C1]  slab_free_freelist_hook+0xc2/0x190
[  198.571052][    C1]  __kmem_cache_free+0xb7/0x1b0
[  198.571077][    C1]  kfree+0x6f/0xf0
[  198.571093][    C1]  hci_release_dev+0x12a3/0x13b0
[  198.571113][    C1]  bt_host_release+0x82/0x90
[  198.571134][    C1]  device_release+0xa4/0x1d0
[  198.571158][    C1]  kobject_put+0x19d/0x280
[  198.571177][    C1]  put_device+0x1f/0x30
[  198.571201][    C1]  hci_free_dev+0x1c/0x20
[  198.571218][    C1]  hci_uart_tty_close+0x1a3/0x230
[  198.571241][    C1]  tty_ldisc_kill+0x10f/0x1f0
[  198.571260][    C1]  tty_ldisc_hangup+0x409/0x520
[  198.571279][    C1]  __tty_hangup+0x58b/0x7c0
[  198.571298][    C1]  tty_ioctl+0x49a/0xc60
[  198.571320][    C1]  __se_sys_ioctl+0x12f/0x1b0
[  198.571338][    C1]  __x64_sys_ioctl+0x7b/0x90
[  198.571355][    C1]  x64_sys_call+0x58b/0x9a0
[  198.571376][    C1]  do_syscall_64+0x4c/0xa0
[  198.571402][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  198.571421][    C1] 
[  198.571425][    C1] Last potentially related work creation:
[  198.571431][    C1]  kasan_save_stack+0x3a/0x60
[  198.571457][    C1]  __kasan_record_aux_stack+0xb6/0xc0
[  198.571484][    C1]  kasan_record_aux_stack_noalloc+0xb/0x10
[  198.571511][    C1]  insert_work+0x51/0x300
[  198.571527][    C1]  __queue_work+0x9b1/0xd30
[  198.571549][    C1]  queue_work_on+0xde/0x150
[  198.571570][    C1]  __hci_cmd_sync_sk+0xa7f/0xd30
[  198.571598][    C1]  hci_cmd_sync_status+0x53/0x120
[  198.571614][    C1]  hci_dev_cmd+0x648/0x740
[  198.571636][    C1]  hci_sock_ioctl+0x41e/0x7f0
[  198.571653][    C1]  sock_do_ioctl+0x114/0x330
[  198.571674][    C1]  sock_ioctl+0x4bd/0x710
[  198.571693][    C1]  __se_sys_ioctl+0x12f/0x1b0
[  198.571710][    C1]  __x64_sys_ioctl+0x7b/0x90
[  198.571728][    C1]  x64_sys_call+0x58b/0x9a0
[  198.571748][    C1]  do_syscall_64+0x4c/0xa0
[  198.571773][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  198.571794][    C1] 
[  198.571797][    C1] Second to last potentially related work creation:
[  198.571803][    C1]  kasan_save_stack+0x3a/0x60
[  198.571823][    C1]  __kasan_record_aux_stack+0xb6/0xc0
[  198.571850][    C1]  kasan_record_aux_stack_noalloc+0xb/0x10
[  198.571877][    C1]  insert_work+0x51/0x300
[  198.571892][    C1]  __queue_work+0x9b1/0xd30
[  198.571914][    C1]  queue_work_on+0xde/0x150
[  198.571935][    C1]  hci_cmd_timeout+0x191/0x200
[  198.571952][    C1]  process_one_work+0x71f/0xc40
[  198.571968][    C1]  worker_thread+0xa29/0x11e0
[  198.571985][    C1]  kthread+0x281/0x320
[  198.572004][    C1]  ret_from_fork+0x1f/0x30
[  198.572024][    C1] 
[  198.572028][    C1] The buggy address belongs to the object at ffff8881096a4000
[  198.572028][    C1]  which belongs to the cache kmalloc-8k of size 8192
[  198.572044][    C1] The buggy address is located 2560 bytes inside of
[  198.572044][    C1]  8192-byte region [ffff8881096a4000, ffff8881096a6000)
[  198.572064][    C1] 
[  198.572067][    C1] The buggy address belongs to the physical page:
[  198.572076][    C1] page:ffffea000425a800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1096a0
[  198.572098][    C1] head:ffffea000425a800 order:3 compound_mapcount:0 compound_pincount:0
[  198.572114][    C1] flags: 0x4000000000010200(slab|head|zone=1)
[  198.572146][    C1] raw: 4000000000010200 ffffea000460f800 dead000000000002 ffff888100043500
[  198.572163][    C1] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000
[  198.572173][    C1] page dumped because: kasan: bad access detected
[  198.572186][    C1] page_owner tracks the page as allocated
[  198.572191][    C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4535, tgid 4531 (syz.7.1452), ts 186149851860, free_ts 185007224460
[  198.572228][    C1]  post_alloc_hook+0x1f5/0x210
[  198.572252][    C1]  prep_new_page+0x1c/0x110
[  198.572276][    C1]  get_page_from_freelist+0x2d12/0x2d80
[  198.572306][    C1]  __alloc_pages+0x1fa/0x610
[  198.572329][    C1]  alloc_slab_page+0x6e/0xf0
[  198.572355][    C1]  new_slab+0x98/0x3d0
[  198.572379][    C1]  ___slab_alloc+0x6bd/0xb20
[  198.572401][    C1]  __slab_alloc+0x5e/0xa0
[  198.572425][    C1]  __kmem_cache_alloc_node+0x203/0x2c0
[  198.572449][    C1]  __kmalloc_node_track_caller+0xa0/0x1e0
[  198.572472][    C1]  pskb_expand_head+0x1b0/0x1210
[  198.572498][    C1]  __pskb_pull_tail+0xb1/0x1570
[  198.572514][    C1]  tipc_msg_reverse+0x78/0x940
[  198.572535][    C1]  tipc_sk_filter_rcv+0xc13/0x2cf0
[  198.572559][    C1]  tipc_sk_rcv+0x7ed/0x2c10
[  198.572581][    C1]  tipc_sk_mcast_rcv+0xe3b/0xf20
[  198.572603][    C1] page last free stack trace:
[  198.572607][    C1]  free_unref_page_prepare+0x742/0x750
[  198.572631][    C1]  free_unref_page+0x95/0x540
[  198.572652][    C1]  __free_pages+0x67/0x100
[  198.572673][    C1]  __free_slab+0xca/0x1a0
[  198.572697][    C1]  __unfreeze_partials+0x160/0x190
[  198.572723][    C1]  put_cpu_partial+0xa9/0x100
[  198.572748][    C1]  __slab_free+0x1c4/0x280
[  198.572772][    C1]  ___cache_free+0xbf/0xd0
[  198.572794][    C1]  qlist_free_all+0xc6/0x140
[  198.572811][    C1]  kasan_quarantine_reduce+0x14a/0x170
[  198.572829][    C1]  __kasan_slab_alloc+0x24/0x80
[  198.572850][    C1]  slab_post_alloc_hook+0x4f/0x2d0
[  198.572873][    C1]  kmem_cache_alloc+0x16e/0x330
[  198.572895][    C1]  vm_area_dup+0x27/0x280
[  198.572916][    C1]  __split_vma+0x1d9/0x980
[  198.572939][    C1]  split_vma+0x7c/0xd0
[  198.572963][    C1] 
[  198.572966][    C1] Memory state around the buggy address:
[  198.572975][    C1]  ffff8881096a4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  198.572988][    C1]  ffff8881096a4980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  198.573000][    C1] >ffff8881096a4a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  198.573009][    C1]                    ^
[  198.573018][    C1]  ffff8881096a4a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  198.573030][    C1]  ffff8881096a4b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  198.573039][    C1] ==================================================================
[  198.573047][    C1] Disabling lock debugging due to kernel taint
[  198.573419][    C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  198.573445][    C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  198.573465][    C1] CPU: 1 PID: 4760 Comm: syz.7.1520 Tainted: G    B              syzkaller #0
[  198.573487][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  198.573498][    C1] RIP: 0010:__queue_work+0x575/0xd30
[  198.573525][    C1] Code: 39 2b 0f 84 b9 00 00 00 e8 18 45 29 00 4c 89 ff e8 30 fd b8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 5c a1 6e 00 49 8b 7d 00 e8 c3 f8
[  198.573542][    C1] RSP: 0000:ffffc900001b0c70 EFLAGS: 00010046
[  198.573559][    C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88812ae1d100
[  198.573574][    C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[  198.573588][    C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: fffffffffffffffb
[  198.573603][    C1] R10: dffffc0000000000 R11: ffffed10212d4939 R12: dffffc0000000000
[  198.573618][    C1] R13: 0000000000000000 R14: ffff8881096a49c8 R15: 0000000000000008
[  198.573631][    C1] FS:  00007f72951fb6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  198.573648][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  198.573663][    C1] CR2: 000020000012d000 CR3: 000000011ea12000 CR4: 00000000003526a0
[  198.573682][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  198.573694][    C1] DR3: fffffffffffffffc DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  198.573708][    C1] Call Trace:
[  198.573713][    C1]  <IRQ>
[  198.573723][    C1]  delayed_work_timer_fn+0x61/0x80
[  198.573748][    C1]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[  198.573773][    C1]  call_timer_fn+0x46/0x2a0
[  198.573796][    C1]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[  198.573821][    C1]  __run_timers+0x689/0x9f0
[  198.573848][    C1]  ? calc_index+0x200/0x200
[  198.573873][    C1]  ? kvm_sched_clock_read+0x18/0x40
[  198.573903][    C1]  run_timer_softirq+0x6a/0xf0
[  198.573926][    C1]  handle_softirqs+0x1d7/0x600
[  198.573948][    C1]  ? irqtime_account_irq+0xc4/0x240
[  198.573976][    C1]  __irq_exit_rcu+0x52/0xf0
[  198.573995][    C1]  irq_exit_rcu+0x9/0x10
[  198.574014][    C1]  sysvec_apic_timer_interrupt+0xa9/0xc0
[  198.574038][    C1]  </IRQ>
[  198.574045][    C1]  <TASK>
[  198.574051][    C1]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  198.574076][    C1] RIP: 0010:console_emit_next_record+0x8a1/0xab0
[  198.574107][    C1] Code: de 48 81 e6 00 02 00 00 31 ff e8 aa 87 19 00 48 81 e3 00 02 00 00 75 07 e8 dc 82 19 00 eb 06 e8 d5 82 19 00 fb 0f b6 5c 24 17 <66> 43 c7 44 25 20 f8 f8 43 c6 44 25 22 f8 4f 89 74 25 10 66 43 c7
[  198.574126][    C1] RSP: 0000:ffffc90010346ee0 EFLAGS: 00000287
[  198.574145][    C1] RAX: ffffffff8157ec2b RBX: 0000000000000001 RCX: 0000000000080000
[  198.574161][    C1] RDX: ffffc90000dd9000 RSI: 000000000000de8a RDI: 000000000000de8b
[  198.574176][    C1] RBP: ffffc900103470d0 R08: 0000000000000003 R09: 0000000000000004
[  198.574190][    C1] R10: dffffc0000000000 R11: fffff52002068dcc R12: dffffc0000000000
[  198.574206][    C1] R13: 1ffff92002068de8 R14: f8f8f8f8f8f8f8f8 R15: ffffc9001034711f
[  198.574225][    C1]  ? console_emit_next_record+0x89b/0xab0
[  198.574258][    C1]  ? info_print_prefix+0x360/0x360
[  198.574286][    C1]  ? vprintk_store+0xa73/0xe00
[  198.574311][    C1]  ? _raw_spin_lock_irqsave+0xc2/0x130
[  198.574343][    C1]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[  198.574375][    C1]  ? __cfi_vprintk_store+0x10/0x10
[  198.574399][    C1]  console_unlock+0x246/0x560
[  198.574422][    C1]  ? down_trylock+0x52/0xb0
[  198.574446][    C1]  ? __cfi_console_unlock+0x10/0x10
[  198.574478][    C1]  ? __kasan_check_read+0x11/0x20
[  198.574499][    C1]  ? preempt_schedule_irq+0xca/0x120
[  198.574519][    C1]  ? __cfi_preempt_schedule_irq+0x10/0x10
[  198.574540][    C1]  ? rwsem_write_trylock+0x136/0x300
[  198.574572][    C1]  vprintk_emit+0x14d/0x420
[  198.574595][    C1]  ? __cfi_vprintk_emit+0x10/0x10
[  198.574618][    C1]  ? __kasan_check_write+0x14/0x20
[  198.574639][    C1]  ? _raw_spin_trylock+0xb7/0x150
[  198.574668][    C1]  vprintk_default+0x26/0x30
[  198.574692][    C1]  vprintk+0x7a/0x80
[  198.574718][    C1]  _printk+0xda/0x128
[  198.574744][    C1]  ? __cfi__printk+0x8/0x8
[  198.574769][    C1]  ? memcpy+0x56/0x70
[  198.574789][    C1]  set_capacity_and_notify+0x335/0x360
[  198.574813][    C1]  ? __cfi_set_capacity_and_notify+0x10/0x10
[  198.574836][    C1]  ? __kasan_check_write+0x14/0x20
[  198.574857][    C1]  loop_set_size+0x48/0xa0
[  198.574880][    C1]  loop_configure+0x1033/0x1530
[  198.574907][    C1]  lo_ioctl+0x227/0x1fb0
[  198.574928][    C1]  ? _raw_spin_unlock+0x4c/0x70
[  198.574958][    C1]  ? find_inode_fast+0x3c3/0x3f0
[  198.574983][    C1]  ? __cfi_lo_ioctl+0x10/0x10
[  198.575005][    C1]  ? iget_locked+0x8b0/0x8b0
[  198.575036][    C1]  ? 0xffffffffa00041c0
[  198.575051][    C1]  ? is_bpf_text_address+0x177/0x190
[  198.575079][    C1]  ? kernel_text_address+0xa0/0xd0
[  198.575106][    C1]  ? __kernel_text_address+0xd/0x30
[  198.575132][    C1]  ? unwind_get_return_address+0x4d/0x90
[  198.575156][    C1]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  198.575184][    C1]  ? arch_stack_walk+0xfc/0x150
[  198.575216][    C1]  ? avc_has_extended_perms+0x86b/0xed0
[  198.575247][    C1]  ? memcpy+0x56/0x70
[  198.575267][    C1]  ? avc_has_extended_perms+0x9d7/0xed0
[  198.575299][    C1]  ? __cfi_avc_has_extended_perms+0x10/0x10
[  198.575330][    C1]  ? __perf_event_task_sched_in+0x1a0/0x1f0
[  198.575354][    C1]  ? __asan_set_shadow_00+0xe/0x10
[  198.575383][    C1]  ? do_vfs_ioctl+0x1b6c/0x1cd0
[  198.575405][    C1]  ? __ia32_compat_sys_ioctl+0x860/0x860
[  198.575428][    C1]  ? _raw_spin_unlock+0x4c/0x70
[  198.575464][    C1]  ? finish_task_switch+0x16b/0x7b0
[  198.575495][    C1]  ? blkdev_common_ioctl+0x685/0x2010
[  198.575516][    C1]  ? ioctl_has_perm+0x1b8/0x4f0
[  198.575542][    C1]  ? blkdev_bszset+0x1f0/0x1f0
[  198.575562][    C1]  ? ioctl_has_perm+0x3a6/0x4f0
[  198.575587][    C1]  ? _raw_spin_unlock_irqrestore+0x5a/0x80
[  198.575627][    C1]  ? __cfi_lo_ioctl+0x10/0x10
[  198.575648][    C1]  blkdev_ioctl+0x367/0x720
[  198.575669][    C1]  ? __cfi_blkdev_ioctl+0x10/0x10
[  198.575691][    C1]  ? security_file_ioctl+0x95/0xc0
[  198.575717][    C1]  ? __cfi_blkdev_ioctl+0x10/0x10
[  198.575736][    C1]  __se_sys_ioctl+0x12f/0x1b0
[  198.575759][    C1]  __x64_sys_ioctl+0x7b/0x90
[  198.575780][    C1]  x64_sys_call+0x58b/0x9a0
[  198.575805][    C1]  do_syscall_64+0x4c/0xa0
[  198.575834][    C1]  ? clear_bhb_loop+0x30/0x80
[  198.575857][    C1]  ? clear_bhb_loop+0x30/0x80
[  198.575881][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  198.575903][    C1] RIP: 0033:0x7f729439c4ab
[  198.575918][    C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  198.575935][    C1] RSP: 002b:00007f72951fadb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  198.575957][    C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f729439c4ab
[  198.575972][    C1] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  198.575985][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  198.575998][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  198.576012][    C1] R13: 00007f72951faee0 R14: 00007f72951faea0 R15: 00007f728a9f8000
[  198.576031][    C1]  </TASK>
[  198.576044][    C1] Modules linked in:
[  198.576061][    C1] ---[ end trace 0000000000000000 ]---
[  198.576070][    C1] RIP: 0010:__queue_work+0x575/0xd30
[  198.576096][    C1] Code: 39 2b 0f 84 b9 00 00 00 e8 18 45 29 00 4c 89 ff e8 30 fd b8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 5c a1 6e 00 49 8b 7d 00 e8 c3 f8
[  198.576114][    C1] RSP: 0000:ffffc900001b0c70 EFLAGS: 00010046
[  198.576132][    C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88812ae1d100
[  198.576146][    C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[  198.576160][    C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: fffffffffffffffb
[  198.576175][    C1] R10: dffffc0000000000 R11: ffffed10212d4939 R12: dffffc0000000000
[  198.576191][    C1] R13: 0000000000000000 R14: ffff8881096a49c8 R15: 0000000000000008
[  198.576204][    C1] FS:  00007f72951fb6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  198.576224][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  198.576239][    C1] CR2: 000020000012d000 CR3: 000000011ea12000 CR4: 00000000003526a0
[  198.576257][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  198.576271][    C1] DR3: fffffffffffffffc DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  198.576287][    C1] Kernel panic - not syncing: Fatal exception in interrupt
[  198.576868][    C1] Kernel Offset: disabled
[  200.782324][    C1] Rebooting in 86400 seconds..